Grosvenor Casino Luton Privacy & Personal Data Protection

Grosvenor Casino Luton Privacy and Personal Data

At Grosvenor Casino Luton, we take the privacy and security of personal information seriously across our land-based casino, membership services and connected online casino, poker and sports betting products. We process personal data to operate customer accounts, provide gaming services, meet legal and regulatory requirements, maintain a safer gambling environment and protect our services against fraud and other unlawful activity. Information collected through our physical casino is covered by our House Privacy Policy, while our online services have additional privacy provisions covering account activity, payments, devices, cookies and digital interactions. We do not sell or rent customer details, and personal information is shared only where there is an appropriate operational, regulatory, security or legal reason to do so. Customers retain rights over their personal data, including access, correction and, in qualifying circumstances, restriction, deletion and data portability.

Personal Data Collected by Grosvenor Casino Luton

The information we collect depends on how a customer interacts with Grosvenor Casino Luton and our connected services. Registration at the casino, Grosvenor One membership, online account use, payments, gaming activity, sports betting, customer support and promotional participation can each generate different categories of personal information. We may also obtain information from verification providers, publicly available sources and safer-gambling systems where this is necessary to meet our legal and regulatory responsibilities.

Identity and Contact Information

• • Name and username: used to identify the customer, maintain membership records and administer online accounts.
• • Date of birth and age: used to confirm that customers meet the minimum age requirement and to support identity checks.
• • Address: used for identity verification, account administration, regulatory checks and relevant communications.
• • Email address and telephone number: used for account messages, customer support, security communications and marketing where permitted.
• • Gender and image: may form part of customer registration, identification and verification records.

Identity and Verification Documents

• • Photographic identification: documents may be requested to verify identity and age, particularly under our Think 25 approach.
• • Proof of address: supporting documents can be requested where further verification is required.
• • Source-of-funds information: financial information and supporting evidence may be collected to meet anti-money laundering and safer-gambling obligations.
• • External verification data: we may receive information from identity, fraud-prevention and credit-reference providers.

Gaming and Account Activity

• • Casino activity: information can be collected from a customer's activity while using our land-based venue and membership services.
• • Online gaming history: wagers, games played, deposits, withdrawals and account interactions can form part of the account record.
• • Sports betting activity: eligible sportsbook transactions and account-based betting interactions may be recorded.
• • Promotion and reward activity: participation in eligible promotions and reward programmes can be recorded to determine qualification and administer rewards.

Payment and Financial Information

• • Payment details: online services may process information relating to payment cards, PayPal accounts and bank accounts.
• • Transaction history: deposits, withdrawals and other eligible financial transactions are recorded for account administration and regulatory purposes.
• • Affordability information: selected external information may be used where an affordability or financial-risk assessment is required.

Technical and Device Information

• • IP and MAC addresses: these can be processed for technical, location, security and verification purposes.
• • Device information: hardware model, operating system, browser, time zone and related technical details can be collected.
• • Website interactions: information can include pages viewed, time spent on pages, clicks, scrolling, wagers, errors and navigation behaviour.
• • Location information: technology may be used to determine whether access takes place from a permitted location.

Casino CCTV and Venue Information

• • CCTV images: cameras operate throughout our land-based casino premises and may record customers during their visit.
• • Registration and visit information: information can be generated when customers register, enter the casino or use membership services.
• • Communications: conversations with our team by telephone, email, online chat or other channels can be recorded or retained where appropriate.

Safer Gambling and Sensitive Information

• • Safer-gambling information: we may record information relating to self-exclusion, customer protection measures and gambling-related concerns.
• • Health-related information: if a customer tells us about physical or mental health circumstances connected with gambling, this information is treated as sensitive personal data.
• • Self-exclusion information: relevant notifications can be received through recognised self-exclusion and customer-protection systems.

Information from Public and External Sources

• • Public records: where necessary, information may be checked through sources such as the electoral roll, Companies House, property information and insolvency registers.
• • Public social media: publicly accessible information can be reviewed in limited circumstances where account activity creates a risk or information supplied requires verification.
• • Verification providers: external organisations can provide information relating to age, identity, source of funds, fraud risk and other regulatory checks.

How Grosvenor Casino Luton Uses Personal Data, Identity Checks and Cookies

We use personal information first to provide and administer the services connected with Grosvenor Casino Luton. This includes creating and maintaining customer and membership records, processing eligible payments, providing casino and online gaming products, responding to enquiries, administering promotions and communicating important account or service information. Personal data also helps us personalise digital services, understand how customers interact with our products and improve the way our casino, online casino, poker and sports betting services operate.

Identity verification is an important part of our regulatory and security framework. We may use information supplied by the customer together with information received from specialist verification providers to confirm age, identity, address and, where required, source of funds or financial circumstances. Relevant checks can also support anti-money laundering controls, fraud prevention, safer-gambling measures and the detection of other unlawful activity. Some checks may involve information from credit-reference agencies or public databases; where a verification search appears on a credit file as a soft search, it does not affect the customer's credit score.

Our online services use cookies and related technologies to operate digital features and understand how our services are used. Technical information can include the website from which a visitor arrives, pages viewed, response times, download errors, time spent on particular pages, clicks, scrolling, wagers and navigation behaviour. We may also process IP and MAC addresses, browser information, operating system, device model, time zone and other technical identifiers. Location technology can be used to verify that access is taking place from a permitted territory and to support identity, security and regulatory controls.

Analytics technologies help us understand traffic and customer interactions, compile statistical information and improve digital services. Cookies and related identifiers may also support personalisation and advertising, including presenting content or promotions that are more relevant to the way an eligible customer uses our services. Marketing preferences can be changed through the relevant account controls, while essential account and service communications may still be sent when they are necessary to operate the service. Where consent is required for a particular form of processing, customers can change or withdraw that consent in accordance with the applicable privacy settings.

Who Grosvenor Casino Luton May Share Personal Data With

We keep customer information confidential but may share relevant data where this is necessary to operate our casino and digital services, meet regulatory requirements, prevent fraud, provide customer protection or comply with the law. The information shared depends on the purpose and should be limited to what is reasonably required. Where we work with suppliers and processors, contractual and organisational safeguards are used to support appropriate protection of personal information.

Rank Group Companies

• • Personal information may be shared between relevant companies within the Rank Group for administration, service delivery and appropriate customer-support purposes.
• • Sensitive safer-gambling information may be shared within the group where this is necessary to provide consistent support and customer protection.

Identity and Verification Providers

• • Specialist providers may receive relevant customer details to verify age, identity, address, source of funds or other required information.
• • Providers used for verification and risk controls can include credit-reference, identity-checking and fraud-prevention organisations.

Payment Providers and Banks

• • Banks, card processors, e-wallet providers and payment-service companies may process the information needed to complete deposits, withdrawals and other eligible transactions.
• • Online payment providers can access the financial information necessary to process the selected payment method.

Game and Technology Providers

• • Selected information can be provided to third-party game suppliers so that online casino games and related gaming services can operate correctly.
• • IT providers may process information where they support our systems, infrastructure, security or customer-facing technology.

Analytics and Data Services

• • Analytics providers can receive relevant technical or interaction information to help us understand how our digital services are used.
• • Data-insight providers may help us keep customer information accurate and up to date.

Marketing and Advertising Partners

• • Where legally permitted, information may be used with selected marketing partners and advertising platforms to deliver relevant communications or advertising.
• • Consent is used where required, and customers can alter relevant marketing preferences.

Regulators and Public Authorities

• • Information may be provided to gambling regulators and other statutory authorities where this is required for regulatory compliance.
• • Police, courts and other law-enforcement bodies may receive information when there is a valid legal basis for disclosure.
• • Sporting bodies may receive relevant information in connection with sporting-integrity matters where appropriate.

Safer-Gambling and Self-Exclusion Systems

• • Relevant information may be processed through recognised self-exclusion systems so that customer restrictions can be applied correctly.
• • Information can also be shared through approved customer-protection systems where high-risk gambling behaviour requires additional safeguards.

Professional Advisers

• • Lawyers and other professional advisers may receive information where this is necessary to obtain advice, protect legal rights or resolve disputes.

Other Casinos and Fraud-Prevention Parties

• • Information relating to suspected cheating, collusion, fraud or other unlawful activity can be shared with other casinos and appropriate third parties where permitted.

Business Transfers

• • If ownership of all or part of a relevant business changes, personal information may form part of the transferred business assets, subject to applicable privacy requirements and customer notification where required.

Grosvenor Casino Luton Data Security, Retention and Customer Rights

At Grosvenor Casino Luton, we use reasonable technical and organisational precautions intended to protect personal information against loss, misuse, unauthorised alteration and other security risks. The same principle extends to our connected digital services, where account information, transactions, gaming activity and verification records can require additional security controls. Suppliers that process information for us are subject to appropriate arrangements intended to maintain suitable data-protection standards. Where personal information must be transferred internationally, additional legal safeguards can be used when the destination does not otherwise provide an adequate level of protection. No technical system can guarantee complete protection against every possible security incident, so security measures are maintained as part of an ongoing process rather than treated as an absolute guarantee.

Retention depends on the type of information and why it is required. Under our current privacy framework, personal data is typically retained for seven years after the customer relationship ends so that we can satisfy legal, accounting, reporting, anti-money laundering and other regulatory obligations. For online services, the relationship can be treated as ended when an account is closed or after an extended period of inactivity based on the last login or interaction. Personal information is normally no longer used for marketing more than two years after the customer's last transaction. Information concerning problem gambling, self-exclusion, suspension or account termination can be retained for longer where we reasonably consider this necessary for customer protection, regulatory or security purposes.

Customers have a number of rights over their personal information. A customer can request a copy of the personal information being processed and ask for inaccurate information to be corrected. Depending on the circumstances and applicable legal requirements, a customer may also ask us to restrict processing, stop certain processing or delete personal information. Where processing is automated and based on consent or required to perform our agreement with the customer, relevant information may be requested in a machine-readable format and, where technically possible, transferred to another provider. Customers can object to particular processing and can withdraw consent where consent is the legal basis for that activity.

These rights are not absolute. We may need to retain or continue processing information where a legal, regulatory, anti-money laundering, fraud-prevention, customer-protection or other valid requirement applies. If a request cannot be fulfilled, we should explain why. Data-rights requests are normally handled without undue delay and the stated target is within one month, although unusually complex requests can require additional time. A customer who remains dissatisfied with the way personal information has been handled can raise the matter with the relevant data-protection supervisory authority.

Grosvenor Casino Luton Privacy and Customer Responsibility

Protecting personal information involves both the controls we apply and responsible handling of account information by the customer. We process customer details for casino operation, verification, payments, safer gambling, security and regulatory compliance, while customers should keep their personal details accurate and protect access to their accounts and membership credentials. Information should only be supplied through appropriate Grosvenor channels, and account passwords or other security credentials should not be shared with another person. Customers can also manage relevant marketing preferences and exercise their privacy rights when they want to understand or change how their information is processed.

Privacy area	Our respon­sibility	Customer respon­sibility
Personal infor­mation	Process data for defined oper­ational, legal and regu­latory purposes.	Provide accurate details and keep them up to date.
Identity veri­fication	Use appro­priate checks to confirm age, identity and other required details.	Provide genuine docu­ments and requested infor­mation when required.
Account secu­rity	Apply tech­nical and organ­isational controls to protect customer data.	Protect pass­words, PINs and member­ship details from other people.
Pay­ments	Use payment pro­viders and security checks for eligible trans­actions.	Use genuine payment methods that belong to the regis­tered customer.
Cookies and track­ing	Process tech­nical data for oper­ation, ana­lytics, security and per­sonali­sation.	Manage avail­able privacy and consent prefer­ences where appli­cable.
Mar­keting	Use customer data only in line with appli­cable mar­keting and consent rules.	Review or change com­muni­cation prefer­ences when required.
Safer gam­bling	Use relevant data to support customer pro­tection and self-exclu­sion measures.	Provide accurate infor­mation and comply with active self-exclu­sion controls.
Data rights	Handle valid access, cor­rection and other privacy requests under appli­cable rules.	Provide enough infor­mation for us to identify and process the request securely.
CCTV and privacy	Use CCTV and venue records for appro­priate oper­ational and security purposes.	Respect other cus­tomers' privacy when using cameras or social media in the casino.