Loot Casino, operated by Jumpman Gaming Limited, is committed to protecting your personal data. This policy explains what information we collect, why we collect it, how we use it, who we share it with, and your rights under UK data protection law including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For any data-related queries, contact our Data Protection Officer at support@loot-casino.org.uk. This policy was last updated on 13 March 2026.
Data Controller
The data controller is Jumpman Gaming Limited, registered at La Corvee House, La Corvee, Alderney, Channel Islands, GY9 3TQ. UK Gambling Commission licence account number 39175.
Information We Collect
We collect personal data that you provide directly during registration (name, email, date of birth, address, payment details), data generated through your use of the platform (game history, transaction records, session data), and technical data collected automatically (IP address, browser type, device information, cookies).
For KYC verification, we also process copies of identity documents, proof of address, and payment method confirmations.
Legal Basis for Processing
We process your data under several legal bases: contract performance (operating your account), legal obligation (UKGC compliance, anti-money laundering regulations, age verification), legitimate interest (fraud prevention, platform security, service improvement), and consent (marketing communications, where applicable).
How We Use Your Data
Your data is used to operate and maintain your account, process transactions, verify your identity and age, comply with regulatory obligations, detect and prevent fraud, provide customer support, improve our services, and send marketing communications where you have opted in.
Data Sharing
We share data with payment processors (to execute transactions), game providers (for technical integration), regulatory bodies (UKGC, Alderney GCC — as required by law), identity verification providers (for KYC checks), and GAMSTOP (for self-exclusion verification). We do not sell your personal data to third parties.
Data Retention
Account data is retained for the duration of your account plus a minimum of 5 years after closure, as required by anti-money laundering regulations. Transaction records are kept for 7 years. Marketing consent records are retained until withdrawn. You may request deletion of data not subject to legal retention requirements.
Your Rights
Under UK GDPR, you have the right to access your data, rectify inaccurate data, request erasure (where no legal retention obligation applies), restrict processing, data portability, object to processing, and withdraw consent for marketing at any time. To exercise any right, email support@loot-casino.org.uk. We respond within 30 days.
Cookies
We use cookies for essential site functionality, performance monitoring, and optional analytics. For full details, see our Cookie Policy at loot-casino.org.uk/cookies/.
Security Measures
All data transmissions are encrypted using SSL/TLS. Passwords are stored as salted hashes. Access to personal data is restricted to authorised personnel on a need-to-know basis. Regular security audits are conducted to identify and address vulnerabilities.
Complaints
If you believe your data rights have been violated, contact our Data Protection Officer at support@loot-casino.org.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
