What personal data does Candyland Casino collect?

An online casino collects registration details such as name, date of birth and address, payment information, identity documents for verification, and usage data including cookies. This information is needed to run the account and meet legal obligations.

Is my data shared with third parties?

Data may be shared with payment processors, game providers and regulatory or licensing authorities where required by law or the licence conditions. Reputable operators do not sell personal data to unrelated parties.

How can I delete my account and data?

Under the UK GDPR, a player has the right to erasure and can request deletion by contacting the support team. Some data may be retained where the law or anti-money-laundering rules require it.

How is my data protected?

Personal data and transactions are protected with 128-bit SSL encryption and access controls that limit who can view stored data. These measures operate under the UK GDPR and the operator's licence conditions.

How do I raise a data concern?

Contact the support team, available 24/7 by live chat, email and telephone. A United Kingdom player who is not satisfied with the response has the right to complain to the Information Commissioner's Office.

Candyland Casino Privacy

Prestige Package

Up to £1,200 + 250 Free Spins

Explore the Bonus

Table of contents

This page explains in general terms how an online casino such as Candyland Casino handles personal data for United Kingdom players. It is an informational summary rather than a binding legal document. Data handling at Candyland Casino, as at any UK-facing platform, is shaped by the UK GDPR and the Data Protection Act 2018, overseen by the Information Commissioner's Office, alongside the conditions of the operator's Curaçao eGaming licence.

🔒 What data is collected

An online casino typically collects the information needed to open and run an account. This includes registration details such as name, date of birth, email and address; payment information tied to deposits and withdrawals; and usage data generated as a player navigates the site. Identity documents are collected to satisfy verification and anti-money-laundering obligations. Cookies and similar technologies record session and preference data.

🔒 How data is used

Collected data is used to manage the account, process deposits and withdrawals, verify identity, prevent fraud, and meet legal and licensing obligations. Aggregated usage data helps maintain and improve the service. Marketing communications are sent only where a player has given consent, and that consent can be withdrawn at any time through the account settings. Verification data, in particular, is processed to satisfy anti-money-laundering and age-verification duties, which is why identity documents are requested before a first withdrawal. Each purpose for which data is processed has a legal basis, whether that is the contract to provide the service, the operator's legal obligations, the player's consent, or the operator's legitimate interest in preventing fraud.

Personal data may be shared with payment processors to handle transactions, with game providers where required to deliver the games, and with regulatory or licensing authorities where the law or the Curaçao eGaming licence conditions require it. Reputable operators do not sell personal data. Any third party handling data on the operator's behalf is expected to apply equivalent protection.

🍪 Cookies and tracking

Cookies fall into broad groups: strictly necessary cookies that keep a session active and secure, analytics cookies that measure how the site is used, and preference cookies that remember settings such as language. A player can manage non-essential cookies through the browser or any on-site cookie controls, though disabling some may affect how the site functions.

Under the UK GDPR and the Data Protection Act 2018, a United Kingdom player holds several rights over their personal data:

The right of access to the data held about them.
The right to rectification of inaccurate data.
The right to erasure, subject to legal retention requirements.
The right to restrict or object to certain processing.
The right to data portability.

These rights can be exercised by contacting the operator, and a player may lodge a complaint with the Information Commissioner's Office if a concern is not resolved. A request to exercise a right is normally answered within the statutory time frame, and the operator may need to confirm the requester's identity first to prevent data being released to the wrong person. The right to erasure is not absolute: where data must be kept to meet anti-money-laundering rules or other legal duties under the licence, that data may be retained for the period the law requires, after which it is removed. Withdrawing consent for marketing does not affect the lawfulness of processing carried out before the withdrawal.

🔐 Data security

Personal data and transactions are protected with 128-bit SSL encryption, and access to stored data is restricted to authorised personnel. Technical and organisational measures guard against unauthorised access, loss or disclosure. No system can be guaranteed entirely secure, but encryption and access controls reduce the risk.

🎧 Contact and complaints

A player with a data concern can contact the support team, available 24 hours a day via live chat, email and telephone. For unresolved matters, a United Kingdom player has the right to raise a complaint with the Information Commissioner's Office as the supervisory authority.

📊 Conclusion

This summary outlines how a UK-facing online casino handles personal data under the UK GDPR and the Data Protection Act 2018. For specific questions about a Candyland Casino account, contacting the support team directly is the best route.