Data Privacy at Gambling Sites

A gambling account holds an unusually sensitive combination of data: government identity documents, proof of address, bank details, source-of-funds evidence, and a complete behavioural record of when and how much you play.

Under data protection regimes such as the UK GDPR and EU GDPR, you have rights over that data: access to a copy, correction of errors, restriction of processing for marketing, and erasure in limited circumstances.

Erasure is limited on purpose. Operators must retain records for anti-money-laundering and licensing obligations, and self-exclusion records specifically must be kept so the exclusion can be enforced.

The practical actions worth taking: opt out of marketing explicitly, use a strong unique password with two-factor authentication where offered, and request a data export before closing an account.