What personal data does Candyland Casino collect?

An online casino collects registration details such as name, date of birth and address, payment information, identity documents for verification, and usage data including cookies. This is needed to run the account and meet legal duties.

Is my data shared with third parties?

Data may be shared with payment processors, game providers and regulatory or licensing authorities where required by law or the licence conditions. Reputable operators do not sell personal data to unrelated parties.

How can I delete my account and data?

Under the UK GDPR, a player has the right to erasure and can request deletion by contacting the support team. Some data may be retained where anti-money-laundering rules or other laws require it.

How is my data protected?

Personal data and transactions are protected with 128-bit SSL encryption and access controls that limit who can view stored data, operating under the UK GDPR and the operator's licence conditions.

How do I raise a data concern?

Contact the support team, available 24/7 by live chat, email and telephone. A United Kingdom player not satisfied with the response has the right to complain to the Information Commissioner's Office.

Candyland Casino Privacy UK

Prestige Package

Up to £1,200 + 250 Free Spins

Explore the Bonus

Table of contents

This page explains in general terms how an online casino such as Candyland Casino handles personal data for United Kingdom players. It is an informational summary, not a binding legal document. Data handling at a UK-facing platform is shaped by the UK GDPR and the Data Protection Act 2018, overseen by the Information Commissioner's Office, alongside the conditions of the operator's Curaçao eGaming licence.

🔒 What Data Is Collected

An online casino collects the information needed to open and run an account: registration details such as name, date of birth, email and address; payment information tied to deposits and withdrawals; and usage data generated as a player navigates the site. Identity documents are collected for verification and anti-money-laundering checks, and cookies record session and preference data.

🔒 How Data Is Used

Collected data is used to manage the account, process deposits and withdrawals, verify identity, prevent fraud, and meet legal and licensing obligations. Aggregated usage data helps maintain and improve the service. Marketing is sent only where a player has given consent, which can be withdrawn at any time through the account settings. Each processing purpose has a legal basis, whether the service contract, a legal obligation, consent, or the operator's legitimate interest in preventing fraud.

Personal data may be shared with payment processors to handle transactions, with game providers where required to deliver the games, and with regulatory or licensing authorities where the law or the Curaçao eGaming licence conditions require it. Reputable operators do not sell personal data, and any third party handling data on the operator's behalf is expected to apply equivalent protection.

🍪 Cookies And Tracking

Cookies fall into broad groups: strictly necessary cookies that keep a session active and secure, analytics cookies that measure how the site is used, and preference cookies that remember settings such as language. A player can manage non-essential cookies through the browser or on-site controls, though disabling some may affect how the site functions. Strictly necessary cookies cannot usually be switched off, because the site relies on them to keep a player logged in and to process a transaction safely, whereas analytics and preference cookies are optional and depend on the consent a player gives.

Under the UK GDPR and the Data Protection Act 2018, a United Kingdom player holds several rights over their personal data:

The right of access to the data held about them.
The right to rectification of inaccurate data.
The right to erasure, subject to legal retention requirements.
The right to restrict or object to certain processing.
The right to data portability.

These rights can be exercised by contacting the operator, and the right to erasure is not absolute: data needed for anti-money-laundering or other legal duties may be retained for the period the law requires, after which it is removed. A request is normally answered within the statutory time frame, and the operator may first confirm the requester's identity so that data is not released to the wrong person. Withdrawing consent for marketing does not affect the lawfulness of any processing carried out before the withdrawal. A player may complain to the Information Commissioner's Office if a concern is not resolved.

🔐 Data Security

Personal data and transactions are protected with 128-bit SSL encryption, and access to stored data is restricted to authorised personnel. Technical and organisational measures guard against unauthorised access, loss or disclosure. No system can be guaranteed entirely secure, but encryption and access controls reduce the risk.

🎧 Contact And Complaints

A player with a data concern can contact the support team, available 24 hours a day via live chat, email and telephone. For an unresolved matter, a United Kingdom player has the right to raise a complaint with the Information Commissioner's Office as the supervisory authority.

📊 Conclusion

This summary outlines how a UK-facing online casino handles personal data under the UK GDPR and the Data Protection Act 2018. For specific questions about a Candyland Casino account, contacting the support team directly is the best route.