Privacy Policy
Boomerang casino is committed to protecting the privacy and security of all personal information provided by users of our online gaming platform. This privacy policy outlines how we collect, use, store, and safeguard your data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By accessing or using our services, you acknowledge that you have read and understood the terms set out in this Boomerang casino privacy policy.
Information We Collect and Process
We collect various types of personal information necessary to provide our gaming services and maintain a secure platform. The data we gather includes identification details such as your full name, date of birth, residential address, email address, and telephone number during the registration process. Financial information is collected to process deposits and withdrawals, including payment card details, bank account information, and transaction history. We also maintain records of your gaming activity, including game selections, wagers placed, wins and losses, and session duration. Technical data is automatically collected through cookies and similar technologies, encompassing your IP address, browser type, device information, operating system, and access times. Communication records are retained, including correspondence through email, live chat, telephone calls, and any feedback or complaints submitted to our support team.
How We Use Your Personal Data
Your personal information serves multiple legitimate purposes within our operations. We process your data to verify your identity and age, ensuring compliance with regulatory requirements and preventing underage gambling. Account management relies on your information to create and maintain your gaming account, process deposits and withdrawals, and manage your preferences and settings. The provision of gaming services requires us to operate slot games, track gaming activity, calculate winnings, and maintain accurate game histories. We utilise your data to detect and prevent fraudulent activities, money laundering, and other illegal activities whilst maintaining platform security. Customer support functions depend on your information to respond to enquiries, resolve technical issues, and address complaints effectively. Marketing communications, where you have provided consent, allow us to send promotional offers, bonus notifications, and updates about new games and features. Our safe gaming initiatives rely on monitoring patterns that may indicate problem gambling behaviour and implementing appropriate interventions when necessary.
Data Sharing and Third-Party Disclosure
We share your personal information only when necessary and in accordance with strict data protection standards. Regulatory authorities receive information as required by gambling licences and legal obligations, including reports to the UK Gambling Commission and relevant financial authorities. Payment processors and financial institutions handle transaction data to facilitate deposits, withdrawals, and payment verification services. Technical service providers who support our platform operations, including hosting services, software developers, and maintenance contractors, may access certain data under confidentiality agreements. Identity verification services conduct age verification checks, anti-money laundering screenings, and fraud prevention assessments. Marketing partners, where you have consented, may receive limited information to deliver targeted communications. Legal requirements may necessitate disclosure to law enforcement agencies, courts, or other governmental bodies when mandated by law or to protect our rights and interests. We ensure all third parties who process data on our behalf adhere to appropriate security measures and comply with applicable data protection legislation.
Your Rights and Data Retention
Under UK data protection law, you possess several rights concerning your personal information held by Boomerang casino. You have the right to access your personal data and receive a copy of the information we hold about you. The right to rectification allows you to request correction of inaccurate or incomplete personal data in our records. You may exercise the right to erasure, also known as the right to be forgotten, subject to certain legal and regulatory exceptions that require us to retain specific records. The right to restrict processing enables you to limit how we use your data in certain circumstances. You possess the right to data portability, allowing you to receive your personal data in a structured, commonly used format for transfer to another service provider. The right to object permits you to oppose processing of your personal data for direct marketing purposes or where we rely on legitimate interests as our legal basis. Where we process data based on consent, you retain the right to withdraw that consent at any time.
Our data retention practices balance operational needs with privacy principles. Account information and transaction records are retained for a minimum of six years following account closure to comply with anti-money laundering regulations and tax requirements. Gaming history records are maintained for seven years to address potential disputes and regulatory audits. Marketing consent records are kept until you withdraw consent or for three years following your last interaction with our platform. Technical logs and security data are typically retained for periods ranging from 90 days to two years depending on the specific type of information. When personal data is no longer required for the purposes collected, we securely delete or anonymise it in accordance with our data retention schedule.
Security Measures and Contact Information
Boomerang casino implements comprehensive technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. We employ industry-standard SSL encryption technology to secure data transmission between your device and our servers. Access controls ensure that only authorised personnel can access personal data, with different permission levels based on job requirements. Our systems undergo regular security audits and penetration testing to identify and address potential vulnerabilities. Physical security measures protect our servers and data centres from unauthorised access. We maintain incident response procedures to address any data breaches promptly and notify affected individuals and relevant authorities as required by law. Employee training programmes ensure all staff members understand their data protection obligations and follow established security protocols.
For any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, you may contact our Data Protection Officer through the contact channels provided on our website. You have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters, if you believe we have not handled your personal information appropriately. We review and update this privacy policy periodically to reflect changes in our practices, legal requirements, or operational procedures. The effective date of the current version is displayed at the top of this document, and continued use of our services following any modifications constitutes acceptance of the updated terms.