Privacy Policy at Coral Casino
This Privacy Policy explains what personal data we collect when you play at Coral Casino, why we collect it, how long we keep it and the rights you have over it. We operate under licence MGA/B2C/187/2002 and process your data in line with the UK GDPR and the Data Protection Act 2018.
What Data We Collect
We collect only the data we need to run your account, meet our legal obligations and keep you safe while you play. That data falls into six categories.
- Identity data: your name, date of birth, email address, phone number and residential address.
- Verification documents: copies of your ID, proof of address and payment method, required before your first withdrawal.
- Transaction data: deposits, withdrawals, bets placed, winnings and bonus activity across GBP and EUR accounts.
- Technical data: your IP address, device type, operating system, browser and approximate location.
- Gameplay behaviour: the games you open, session duration, bet sizes and win/loss patterns.
- Marketing preferences: which channels you consented to (email, SMS) and which promotions you engage with.
How We Use Your Data
We use your data to create and manage your account, verify your identity and address, and process deposits and withdrawals through Visa Debit, Mastercard Debit, PayPal, Trustly and Bank Transfer. Every payment runs through the method you chose, and we check each one against fraud markers before it settles.
- Account creation and login at coralcasino-online.uk.
- KYC verification: ID, address and payment method checks before your first withdrawal.
- Payment processing and dispute handling.
- Fraud prevention and anti-money-laundering checks.
- Responsible-gambling monitoring, including triggers for deposit limits and session reminders.
- Marketing, only where you have given consent, and only for the channels you selected.
- Legal and regulatory reporting obligations.
Our Legal Bases
Contract
We process your identity, account and transaction data to perform our contract with you. Without this data we cannot open an account, take a deposit from as little as £10 or pay out winnings up to £25,000 per day.
Legal obligation
Gambling law requires us to verify your age, identity and source of funds, and to keep transaction records for at least five years. We cannot offer you a choice about this processing because it keeps us compliant with our licence conditions.
Legitimate interest
We rely on legitimate interest for fraud detection, security monitoring and site analytics. These activities protect you and us, and we balance them against your rights through data minimisation: we only process what the purpose needs.
Consent
Marketing messages and non-essential cookies run on your consent. You can withdraw it at any time, in one click from any email or from your account settings, without affecting your gameplay.
How Long We Keep It
Retention depends on why we hold the data. Where a regulator sets a minimum, we follow it; everything else we delete or anonymise as soon as the purpose ends.
| Data category | Retention period |
|---|---|
| Transaction and betting records | Minimum 5 years after account closure |
| KYC verification documents | 5 years after the relationship ends |
| Identity and account data | For the life of the account, then up to 5 years |
| Device and technical data | Up to 13 months for security and analytics |
| Marketing preferences | Until you withdraw consent or ask us to delete them |
Who We Share Data With
We never sell your data. We share it only with processors and authorities that need it to deliver a specific service or that we must report to by law. Each processor works under a written data-processing agreement with strict confidentiality terms.
- Payment processors handling your deposits and withdrawals.
- KYC and AML verification providers checking your documents.
- Game and platform providers supplying the 3,000 titles in our lobby.
- Regulators and law enforcement, where reporting is required.
- Analytics providers measuring site performance in aggregate.
- Professional advisers such as auditors and lawyers, under duty of confidentiality.
Your Rights Over Data
UK GDPR gives you direct control over your personal data. You can exercise any of the rights below at no cost, and we respond within one month.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct anything inaccurate or incomplete.
- Erasure: ask us to delete data we no longer need to keep by law.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: stop marketing at any time.
- Complaint: raise a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies and Tracking
We use session cookies to keep you logged in, security cookies to block fraud and, with your consent, analytics and marketing cookies. The cookie banner lets you accept or reject each category, and you can change your choices at any time from the cookie settings link in the footer. Full details, including retention times per cookie, sit on our dedicated Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers runs over TLS encryption. Access to your data is role-based: staff can only see what their job requires, and every access is logged. We back up data securely, test our defences regularly and restrict verification documents to a small compliance team.
If a breach happens
If a breach risks your rights, we notify the ICO within 72 hours and tell you directly without undue delay, including what happened and what we are doing about it.
Contact Our Data Officer
Our Data Protection Officer answers questions about this policy and handles rights requests. Write to [email protected] and we will respond within one month. You can also raise a data request through live chat, which is staffed 24/7, or by emailing [email protected]. We last updated this policy in 2026.
Frequently Asked Questions
How do I request a copy of my data?
Email [email protected] or use our 24/7 live chat. We verify your identity and send your data within one month, free of charge.
Can I stop marketing emails from Coral Casino?
Yes. Unsubscribe with one click in any email, or change your preferences in account settings. Marketing stops immediately; your account and gameplay are unaffected.
Why do you need my ID before a withdrawal?
Gambling regulations require us to verify your ID, address and payment method before your first withdrawal. This keeps our licence MGA/B2C/187/2002 and protects your funds.
How long do you keep my betting history?
We keep transaction and betting records for at least 5 years after account closure, as our licence conditions require. After that we delete or anonymise them.