This Privacy Policy explains how Razor Shark handles personal data collected from players in the United Kingdom. The document details the brand’s data processing procedures, including collection, use, storage, and disclosure of information. Transparency is maintained through lawful processing in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. This policy covers account management, verification of identity, transaction records, and regulatory compliance obligations. Security safeguards are implemented to protect against unauthorised access or loss. By using the services, players acknowledge the practices described herein. Any questions regarding data handling should be directed to the data protection officer.
Data Collection and Types of Information Processed
The brand collects personal data necessary for account registration, identity verification, and ongoing compliance with UK gambling regulations. This data falls into several categories. Registration details include full name, date of birth, residential address, email address, and telephone number. Identification data comprises copies of passports, driving licences, or other government-issued documents, as well as proof of address, such as utility bills or bank statements. Transactional information includes deposit and withdrawal records, bet history, game play logs, and payment method details such as credit or debit card numbers, e-wallet identifiers, or bank account numbers. Technical data is gathered through cookies and similar tracking technologies, including IP address, browser type, operating system, and device identifiers. Compliance-related records encompass self-exclusion flags, affordability assessments, source of funds checks, and any correspondence with regulatory bodies. The brand does not process special category data unless required by law. All data is collected directly from the player or through authorised third-party verification services.
Data Usage and Legal Basis for Processing
Personal data is used for account operation, identity verification, and transaction processing. The legal bases for processing include consent, contractual necessity, legal obligation, and legitimate interest. Consent is obtained for marketing communications and optional data uses. Contractual necessity applies to core account services, such as processing deposits and withdrawals, managing bets, and providing customer support. Legal obligation covers compliance with the UK Gambling Commission’s Licence Conditions and Codes of Practice, anti-money laundering regulations, and tax reporting requirements. Legitimate interest is relied upon for fraud detection, network security, and improving service functionality. Data is not processed for automated decision-making resulting in legal effects without prior consent. The brand may share data with payment processors, identity verification providers, regulators, or law enforcement agencies when required by law. Players who access the brand through platforms like LeoVegas should note that additional data processing terms may apply. For example, the availability of the Razor Shark slot on LeoVegas involves data exchange between the platform and the game provider. Data is not sold to third parties. Any transfer of data outside the UK is governed by standard contractual clauses or adequacy decisions.
Data Storage, Security Measures and Retention Rules
Personal data is stored on encrypted servers located within the European Economic Area or in jurisdictions with equivalent data protection standards. Security measures include server-side encryption, transport layer security protocols, firewalls, and access controls based on role and necessity. Employee access to data is logged and audited. Retention periods are determined by regulatory requirements and operational necessity. Account data is retained for at least five years after account closure, as required by the UK Gambling Commission. Transaction records are kept for six years to satisfy anti-money laundering obligations. Identification documents are archived for five years following the end of the business relationship. Game play data may be retained longer if required by ongoing investigations or legal proceedings. After the retention period, data is permanently deleted or anonymised for analytical purposes. The brand uses secure deletion methods, including overwriting or cryptographic erasure. Players should note that deleted data cannot be recovered. The brand does not store payment card details beyond the transaction processing window unless explicit consent is provided for recurring payments. Access to sensitive data, such as financial records, is restricted to authorised personnel only.
Player Rights and Data Access Procedures
Players have the right to access their personal data held by the brand. This includes receiving a copy of the data and information about processing purposes and storage duration. Correction of inaccurate or incomplete data is available upon request. Erasure, or the right to be forgotten, applies when data is no longer necessary for the original purpose or when consent is withdrawn. Restriction of processing may be requested during a dispute resolution period. Players can object to processing based on legitimate interest, including direct marketing. Data portability allows download of data provided by the player in a structured, machine-readable format. All requests must be submitted in writing via the support system or email. Identity verification is required before processing any request, typically via a copy of a passport or driving licence. The brand will respond within one month, extendable by two months for complex requests. Fees are not charged unless the request is manifestly unfounded or excessive. Right to complain to the Information Commissioner’s Office is retained if the player is dissatisfied with the response. Players may opt for the Razor Shark free demo mode without providing full account details, but such usage still collects minimal technical data. For players using the Razor Shark kostenlos spielen option, data is limited to session identifiers and anonymised game statistics. The brand does not discriminate against players who exercise their rights.