Grosvenor Casino Stockton
Grosvenor Casino Stockton

This document outlines how personal data is collected, used, and protected under UK GDPR.

Privacy Policy - Grosvenor Casino Stockton

1. Introduction

This Privacy Policy explains how personal data is collected, used, retained and shared by Grosvenor Casino Stockton, operated under the Rank Group. It applies to personal data processed in connection with casino and betting operations in the United Kingdom, and covers customers, website visitors and other individuals who interact with the service.

Grosvenor Casino Stockton acts as a data controller in respect of the personal data held about you. Processing activities are governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. The company is also subject to the requirements of the UK Gambling Commission, which regulates licensed gambling activities in Great Britain.

Questions regarding the handling of personal data can be addressed to the Data Protection Officer at the following postal address:
Data Protection Officer, Rank Interactive (Gibraltar) Limited, TOR, Saint Cloud Way, Maidenhead, Berkshire SL6 8BN.

2. Personal Data Collected

The following categories of personal data are collected and processed:

2.1 Identity and Contact Data

  • Name
  • Date of birth
  • Residential address
  • Email address
  • Telephone number
  • Copies of identity documents submitted during account registration or verification procedures

2.2 Financial and Transaction Data

  • Payment details
  • Deposit and withdrawal records
  • Betting stakes
  • Gaming outcomes
  • Transaction history

This data is processed for operating user accounts, fulfilling contractual obligations and meeting anti-money laundering (AML) and tax reporting requirements.

2.3 Gaming and Betting Activity Data

  • Session durations
  • Game preferences
  • Betting patterns
  • Win and loss history
  • Responsible gambling markers, including deposit limits, time-out periods, reality check settings and self-exclusion status

2.4 Technical and Device Data

  • IP address
  • Browser type
  • Device identifiers
  • Cookie data collected when accessing digital services

This data is used for security monitoring, fraud prevention and service analytics.

2.5 Communications Data

  • Records of correspondence between you and customer support or compliance teams, including emails, chat transcripts and written submissions

Personal data is processed on the following lawful bases under UK GDPR:

  • Legal obligation - Certain data is collected and retained to comply with AML legislation, age verification requirements, UK Gambling Commission licence conditions and tax and accounting obligations.
  • Performance of a contract - Processing is necessary to open and maintain user accounts, process transactions and provide requested gambling services.
  • Legitimate interests - Certain data is processed to prevent fraud, ensure the security of systems and improve the quality of services, where these interests are not overridden by user rights.
  • Consent - Where consent is relied upon, for example for certain marketing communications or non-essential cookies, that consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Retention of Personal Data

Personal data is retained for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum periods:

Category - Retention period

  • Account and identity records - 5 years after account closure (UKGC requirement)
  • Transaction, betting and gaming history - 5 to 7 years after account closure (AML, tax, UKGC)
  • Responsible gambling and self-exclusion records - Retained as required to evidence compliance and manage risk
  • Marketing consent records - Until consent is withdrawn or the account is closed
  • Communications records - Approximately 3 years from the date of correspondence

These periods reflect obligations under AML legislation, UK Gambling Commission licence conditions and applicable tax and accounting rules. Where a legal obligation requires a longer retention period, data will be retained for that extended period.

5. Sharing of Personal Data

Personal data is not sold. It may be shared with third parties only in the following circumstances:

  • Regulatory and law enforcement authorities - Disclosure may be required to the UK Gambling Commission, HM Revenue and Customs, the Financial Conduct Authority, law enforcement agencies and other statutory bodies where required by law or licence condition.
  • Identity verification and KYC providers - Third-party services are used to verify identity and age as required by licence and AML obligations.
  • Payment processors - Transaction data is shared with payment service providers to the extent necessary to process deposits and withdrawals.
  • Responsible gambling schemes - Where a user registers with a self-exclusion scheme such as GAMSTOP, relevant data is shared with that scheme in accordance with UK Gambling Commission requirements.
  • Group companies - Data may be shared within the Rank Group for internal compliance, risk management and operational purposes.

All third parties with whom data is shared are required to process it in accordance with applicable data protection law and contractual instructions.

6. Your Rights Under UK GDPR

Users have the following rights in relation to their personal data:

  • Right to be informed - The right to receive clear information about how personal data is used, which this policy provides.
  • Right of access - The right to submit a subject access request to obtain a copy of personal data held.
  • Right to rectification - The right to request correction of inaccurate or incomplete data.
  • Right to erasure - The right to request deletion of data in certain circumstances. Data that must be retained by law cannot be erased.
  • Right to restriction - The right to request restriction of processing in certain situations.
  • Right to data portability - Where processing is based on consent or contract and carried out by automated means, the right to request a copy of data in a structured, machine-readable format.
  • Right to object - The right to object to processing based on legitimate interests or to direct marketing at any time.

To exercise any of these rights, contact the Data Protection Officer using the postal address provided in Section 1. A response will be provided within one calendar month of receipt of the request.

7. Cookies and Tracking Technologies

Cookies and similar technologies are used on digital platforms for service functionality, security, analytics and, where consent has been given, marketing. Cookie preferences can be managed through the consent mechanism available on the website. Withdrawing consent for non-essential cookies does not affect the ability to use core account functions.

8. Age Restriction

Services are available only to individuals aged 18 or over. Personal data is not knowingly collected from persons under 18. If it becomes apparent that an account has been opened by an underage individual, that account will be closed and the associated personal data will be deleted or anonymised in accordance with UK Gambling Commission licence conditions.

9. Supervisory Authority

If you are not satisfied with the handling of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. The ICO can be contacted via ico.org.uk or by telephone on 0303 123 1113.

Users are encouraged to contact the company in the first instance so that any concerns can be addressed directly.

10. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in processing activities, legal obligations or regulatory guidance. The current version of the policy is always available on the website. Where changes are material, notification will be provided through the registered account or by other appropriate means.