Last updated: 27 October 2026
This privacy policy explains how Elite Casino processes personal data when you visit our demonstration site, open an account or contact support. It follows GDPR-style transparency principles. Elite Casino is a demonstration property; unless explicitly launched, there is no live real-money service. 18+. Read this policy with the terms page. For account steps and withdrawals, see the homepage.
Data controller: Elite Casino Demo Ltd — contact for privacy: [email protected].
We do not publish a registered-office street address on this global English hub. Support for general queries: [email protected].
This demo describes a licensed online casino under a generic remote gaming licence type . We do not publish licence numbers.
We collect only data needed to run the site, your account, legal obligations and — with your consent — marketing.
Account and identity: name, date of birth, email address, hashed password, phone number if provided, username, language preference, IP address at registration and login.
KYC and compliance: copies or scans of ID and proof of address; source-of-funds evidence if required; fraud and PEP screening results; self-exclusion checks where applicable.
Transactions: deposit and withdrawal amounts, payment method metadata without full card numbers, timestamps, payment status, bonus activations and open wagering.
Play and responsible gambling: summary bet history, session duration, deposit and loss limits, reminders and self-exclusion requests.
Communications: chat and email with support, complaints and correspondence about your requests.
Technical: device and browser data, cookies and similar identifiers, log files, security events.
Marketing if you opt in: newsletter preferences and campaign interactions after opt-in where required.
We do not knowingly collect data from anyone under 18. If we learn a minor has an account, we close it and delete data where possible.
We use personal data to operate the site and your account, meet anti-money-laundering and gambling-compliance duties in a live deployment, prevent fraud and support you.
Specifically: account creation and authentication; processing deposits and withdrawals after KYC; applying bonus rules from the terms page; responsible-gambling tools; answering support requests; improving security and performance; aggregated, anonymised analytics.
With separate consent we may send promotional email about Elite Spin campaigns or new features. You may unsubscribe via each message or support. Account and security messages may still be sent.
We do not use fully automated decisions with legal effect except where fraud or exclusion checks are permitted with human review on refusal.
Purpose | Legal basis under GDPR | Notes |
|---|---|---|
Account and play contract | GDPR Art. 6.1 b — contract | Registration, balance, bets, withdrawals |
KYC and AML | GDPR Art. 6.1 c — legal obligation | Identity checks before first cash-out |
Fraud and security | GDPR Art. 6.1 f — legitimate interests | Protect platform and players |
Marketing email | GDPR Art. 6.1 a — consent | Opt-in; withdraw anytime |
Non-essential cookies | GDPR Art. 6.1 a — consent | Via banner or preferences |
Complaints | GDPR Art. 6.1 f — legitimate interests | Evidence and improvement |
| Legal basis under GDPR | GDPR Art. 6.1 b — contract |
|---|---|
| Notes | Registration, balance, bets, withdrawals |
| Legal basis under GDPR | GDPR Art. 6.1 c — legal obligation |
|---|---|
| Notes | Identity checks before first cash-out |
| Legal basis under GDPR | GDPR Art. 6.1 f — legitimate interests |
|---|---|
| Notes | Protect platform and players |
| Legal basis under GDPR | GDPR Art. 6.1 a — consent |
|---|---|
| Notes | Opt-in; withdraw anytime |
| Legal basis under GDPR | GDPR Art. 6.1 a — consent |
|---|---|
| Notes | Via banner or preferences |
| Legal basis under GDPR | GDPR Art. 6.1 f — legitimate interests |
|---|---|
| Notes | Evidence and improvement |
Withdrawal of consent does not affect prior lawful processing.
Cookies are small files on your device. We and partners use them to operate the site, remember preferences and — with consent — measure use.
Cookie / technology | Type | Purpose | Typical retention |
|---|---|---|---|
sess_elite | Strictly necessary | Login session and security | Session |
pref_lang | Functional | Language choice en-GB | 12 months |
sec_token | Strictly necessary | CSRF and fraud signals | Session / 24 hours |
analytics_demo | Analytics with opt-in | Aggregated visit statistics | 13 months |
mkt_camp | Marketing with opt-in | Campaign attribution after opt-in | 6 months |
| Type | Strictly necessary |
|---|---|
| Purpose | Login session and security |
| Typical retention | Session |
| Type | Functional |
|---|---|
| Purpose | Language choice en-GB |
| Typical retention | 12 months |
| Type | Strictly necessary |
|---|---|
| Purpose | CSRF and fraud signals |
| Typical retention | Session / 24 hours |
| Type | Analytics with opt-in |
|---|---|
| Purpose | Aggregated visit statistics |
| Typical retention | 13 months |
| Type | Marketing with opt-in |
|---|---|
| Purpose | Campaign attribution after opt-in |
| Typical retention | 6 months |
You can refuse or delete cookies in browser settings; essential cookies are needed to log in and pay in a live build. A preference centre may appear on first visit where required.
Local storage and pixels follow the same purposes and legal bases as above.
We do not sell your personal data. We share it only when necessary:
Processors act on our instructions and must protect data under agreements.
If data leaves the UK/EEA in a live deployment, we use appropriate safeguards such as standard contractual clauses. This demo describes the concept at a high level only.
We keep data only as long as needed for the purposes above and legal retention periods including AML records. When no longer required, we delete or anonymise data unless litigation requires holding it.
Typically: account data while active plus several years after closure for compliance; marketing preferences until unsubscribe plus a short suppression record.
Where GDPR or UK GDPR applies, you may have rights to:
Contact [email protected] to exercise rights. You may complain to your supervisory authority; we prefer you contact us first.
We use technical and organisational measures appropriate to the risk: encryption in transit, access controls, staff training and incident procedures. No method is 100% secure; report suspected account compromise to support immediately.
Our services are for adults 18+ only. We do not market to minors.
We may update this policy. The “Last updated” date will change; material updates will be highlighted on the site where appropriate.
Privacy: [email protected] General support: [email protected]
terms page — account and promotion rules.
homepage — how to register and withdraw.
