Casino of Dreams Privacy Notice

Your information and our responsibilities

Broadway Gaming Limited owns Casino of Dreams and acts as the controller of customer information. We process personal data when you browse, use an account, play or contact our team.

For privacy questions or requests, use the contact options on our site.

Information we collect

Additional checks may use public information, including company records, insolvency information, news reports and social media. Verification providers help us assess identity, payment risks, financial vulnerability and existing exclusions.

Some details are essential to deliver the service or meet mandatory checks. If you withhold required information, we may be unable to provide services or verify your account. Protect your password and tell support promptly if another person may know your login details.

Why we process information

We use personal information to operate accounts, provide games, handle payments and send account communications. These activities support our contract with you.

Legal obligations require checks and safeguards relating to identity, financial crime and safer gambling. We also process information for legitimate interests such as service improvements, support, analysis, promotion selection and legal claims, subject to your interests and rights.

Where consent is the basis for marketing, we ask for that consent. Health information and information about criminal offences need additional grounds, including safeguarding, preventing unlawful activity or, in some circumstances, protecting vital interests.

Automated processing helps us monitor risks, including gambling harm. We provide human oversight where required. An investigation into account activity may lead to restrictions on offers, wagering or withdrawals.

Sharing data

We may share relevant information within our group and with professional advisers for account administration, marketing, risk management and compliance. External recipients include payment providers, game suppliers, verification businesses and organisations helping to prevent fraud or protect customers.

For certain affordability checks we share identifying details with TransUnion. That particular check may leave a record only you can see and does not alter your credit score.

Information may also go to regulators, law enforcement or other authorities to meet legal duties, enforce our terms or handle legal proceedings. We may share some information with social-media services to engage customers and reach audiences. You can object to that use.

We participate in GamProtect. When its entry criteria apply to a customer, we share information with the scheme, which then shares it with participating gambling businesses where that person holds accounts. This sharing relies on legitimate interests, substantial public interest and safeguarding grounds.

If a completed sale or another business event transfers your information to a new controller, we notify you of that controller's identity and your options.

Marketing choices

Change your marketing preferences in My Account, unsubscribe through a promotional message or contact support. Withdrawing consent affects future processing and does not undo lawful use that has already taken place. Some limited promotional activity can instead rely on legitimate interests.

Our Cookies page covers browser settings and cookie use.

Requests about your data

Subject to the conditions applying to each right, you can ask us to provide a copy of your information, supply it in a portable format or transfer it to another controller. You can also request correction, restriction or erasure.

You may object to direct marketing and its profiling, withdraw consent, challenge qualifying decisions made entirely by automated means, or object to processing based on legitimate interests because of your circumstances. You may complain to a supervisory authority such as the Information Commissioner's Office.

We need proof of identity and details of the information or processing your request concerns. Legal duties, another person's rights or an applicable exemption may limit what we can do. We may continue processing based on legitimate interests if we can demonstrate compelling grounds.

Storage and safeguards

Information may be processed outside the UK and European Economic Area, including in the United States. Standard contractual clauses provide one of our transfer safeguards. Where relevant, transfers also use the EU–US Data Privacy Framework together with the extension covering the UK. Our security measures address unauthorised access, data integrity and availability.

We retain information while you hold an account or receive services and for up to six years after services end or your last contact. We remove it sooner when it is no longer needed. Legal obligations or an actual or potential dispute may require longer retention, so account closure does not necessarily erase every record.