Relevance verified: 28/04/2026
1. Introduction
Goodwin Casino (“we”, “us”, “our”) operates the website https://goodwin-casino-uk.com/ and is committed to safeguarding the personal data of every individual who interacts with our platform. This Privacy Policy explains what information we collect, why we collect it, how we use and store it, and what rights you hold over your data.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the conditions imposed by the United Kingdom Gambling Commission (UKGC) under Licence No. 2927. By registering an account, using our services or browsing our website, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
For the purposes of applicable data protection legislation, the data controller is Goodwin Casino Online, registered at 4 Kingfisher Court, Uckfield, East Sussex, TN22 1QQ, United Kingdom. All enquiries regarding data protection should be directed to our Data Protection Officer at [email protected] or by calling 08000 421 321.
3. Personal Data We Collect
3.1 Information You Provide Directly
When you register for an account, make a deposit or withdrawal, or contact our support team, we may collect your full name, date of birth, residential address, email address, telephone number, government-issued identification documents (such as a passport or driving licence), and financial details including payment card numbers, e-wallet credentials and bank account information.
3.2 Information Collected Automatically
Each time you visit our website, our servers record your IP address, browser type and version, operating system, referring URL, pages viewed, time spent on pages, click patterns and device identifiers. We also collect information through cookies and similar tracking technologies as described in our Cookie Policy (https://goodwin-casino-uk.com/cookie-policy/).
3.3 Information from Third Parties
To comply with our regulatory obligations we may obtain data from identity verification services, credit reference agencies, fraud prevention databases, sanctions and politically exposed persons (PEP) lists, and other gambling operators through industry-shared responsible gambling schemes such as GAMSTOP.
3.4 Gambling Activity Data
We keep detailed records of your gambling transactions, including deposits, withdrawals, wagers placed, game selections, session duration, bonus usage and self-exclusion or cooling-off periods. This data is required by the UKGC Licence Conditions and Codes of Practice (LCCP) and forms part of our regulatory record-keeping duties.
4. Legal Bases for Processing
Under the UK GDPR, we rely on the following legal bases to process your personal data:
Performance of a contract. Processing is necessary to deliver the gambling services you have requested, including account creation, deposit and withdrawal handling, bonus administration and customer support.
Legal obligation. We are required by law to verify your identity and age, carry out anti-money laundering (AML) checks, report suspicious transactions to the National Crime Agency, share data with the UKGC upon request, maintain transaction records for a minimum period, and participate in the national self-exclusion scheme.
Legitimate interests. We process certain data to detect and prevent fraud, improve website functionality, personalise your experience and conduct internal analytics. We carry out a balancing test to ensure our interests do not override your fundamental rights and freedoms.
Consent. Where we send you marketing communications or use non-essential cookies, we do so only with your prior, freely given consent. You can withdraw your consent at any time without affecting the lawfulness of processing that took place before withdrawal.
5. How We Use Your Data
We use the personal data we hold about you for the following purposes: to open, manage and maintain your player account; to process financial transactions and verify the source of funds where necessary; to confirm your identity, age and address in line with UKGC requirements; to detect, investigate and prevent fraud, money laundering and other financial crime; to monitor gambling patterns and implement responsible gambling interventions including reality checks, deposit limits, loss limits and self-exclusion; to respond to your queries and complaints; to send you service-related communications such as account alerts and regulatory notices; to send promotional offers where you have opted in; and to fulfil our reporting obligations to the UKGC and other relevant authorities.
6. Responsible Gambling and Player Protection
Goodwin Casino takes its social responsibility obligations seriously. As part of our commitment to player protection, we monitor gambling behaviour using automated algorithms that identify markers of harm such as significant increases in deposit frequency, extended session times, attempts to reverse withdrawals, and chasing losses. Where our systems flag potential issues, we may contact you to offer support, apply account restrictions or refer you to external organisations such as GamCare and BeGambleAware.
If you choose to self-exclude or set account limits, we will retain the minimum data necessary to enforce those restrictions and prevent you from inadvertently reopening your account. This processing is carried out under our legal obligation to comply with the UKGC Social Responsibility Code. For more information, please visit our Responsible Gambling page (https://goodwin-casino-uk.com/responsible-gambling/).
7. Who We Share Your Data With
We may share your personal data with the following categories of recipients, each of whom is bound by appropriate contractual and regulatory safeguards:
Regulatory bodies. The United Kingdom Gambling Commission, HM Revenue and Customs, and the National Crime Agency, as required by law.
Identity and age verification providers. Third-party services that help us confirm your identity, verify your age and screen against sanctions, PEP and fraud databases.
Payment processors. Banks, card schemes (Visa, Mastercard), digital wallets (Apple Pay, Google Pay) and cryptocurrency processors that facilitate your deposits and withdrawals.
Game providers. Software suppliers whose games appear on our platform, where access to certain account data is needed to deliver the gaming experience.
GAMSTOP. The national online self-exclusion scheme, to honour self-exclusion requests across all UKGC-licensed operators.
Professional advisers. Legal counsel, auditors and consultants engaged under strict confidentiality agreements.
Law enforcement. Where we are legally compelled or reasonably believe disclosure is necessary to prevent crime or protect the rights, property or safety of any person.
We do not sell your personal data to third parties for their own marketing purposes.
8. International Data Transfers
Where we transfer personal data outside the United Kingdom, we ensure that appropriate safeguards are in place. These may include transferring data only to countries that the UK Government has confirmed provide an adequate level of data protection, or relying on Standard Contractual Clauses approved by the Information Commissioner’s Office (ICO). In every case, we take steps to verify that the recipient applies protections consistent with UK data protection standards.
9. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The main retention periods we apply are as follows:
Account and transaction records. For at least five years following account closure, in line with the UK Money Laundering Regulations and UKGC requirements.
Identity verification documents. For at least five years from the date of the last transaction or account closure, whichever is later.
Responsible gambling records. For a minimum of six years from the date the record was created, or longer if needed to enforce a self-exclusion.
Marketing consent records. For as long as your consent remains active, plus a reasonable period to demonstrate compliance.
Website analytics and log data. Typically no longer than 26 months, unless a longer period is justified for security purposes.
When data is no longer required, it is securely deleted or irreversibly anonymised.
10. Data Security
We implement a range of technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include encryption of data in transit and at rest using industry-standard protocols, access controls that limit personal data to authorised personnel on a need-to-know basis, regular vulnerability assessments and penetration testing, staff training on data protection responsibilities, and incident response procedures designed to identify, contain and report any personal data breach to the ICO within 72 hours where required.
While we take every reasonable precaution, no method of electronic transmission or storage is entirely secure. We encourage you to protect your account credentials, use a strong and unique password, and contact us immediately if you suspect any unauthorised use of your account.
11. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
Right of access. You may request a copy of the personal data we hold about you. We will respond within one calendar month.
Right to rectification. If any of your personal data is inaccurate or incomplete, you have the right to ask us to correct or complete it.
Right to erasure. You may request that we delete your personal data where there is no compelling reason for us to continue processing it. Please note that regulatory obligations may require us to retain certain records even after you close your account.
Right to restriction of processing. You may ask us to suspend processing of your data in specific circumstances, for example while we verify its accuracy or consider your objection to processing.
Right to data portability. Where processing is based on your consent or a contract and is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
Right to object. You may object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling grounds that override your interests, rights and freedoms.
Rights related to automated decision-making. You have the right not to be subject to a decision based solely on automated processing if that decision produces legal effects or similarly significant effects concerning you. Where we use automated systems to assess risk or monitor gambling behaviour, you may request human review of any decision.
To exercise any of these rights, please contact us at [email protected] or write to our registered address. We may ask you to verify your identity before processing your request.
12. Marketing Communications
We will only send you promotional emails, SMS messages or push notifications where you have given your explicit opt-in consent. Every marketing message we send includes a clear and easy-to-use unsubscribe mechanism. You can also manage your marketing preferences at any time by logging into your Goodwin Casino account or by contacting our support team. Withdrawing your consent to marketing will not affect your ability to use our gambling services.
13. Cookies and Tracking Technologies
Our website uses cookies and similar technologies for essential site functionality, performance monitoring, personalisation and, where you consent, advertising. Full details of the cookies we use, their purposes and instructions for managing your preferences are set out in our Cookie Policy (https://goodwin-casino-uk.com/cookie-policy/).
14. Children and Minors
Goodwin Casino services are intended solely for individuals aged 18 or over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that information and close the associated account.
15. Links to Third-Party Websites
Our website may contain links to external sites that are not operated by us. We are not responsible for the privacy practices or content of those third-party websites and encourage you to read their own privacy policies before submitting any personal data.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. Where we make material changes, we will notify you by posting a prominent notice on our website or by contacting you directly through your registered email address. We encourage you to review this page periodically.
17. Complaints
If you are dissatisfied with the way we handle your personal data, we encourage you to contact us first so that we can attempt to resolve your concern. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection. The ICO can be contacted at ico.org.uk or by telephone on 0303 123 1113.
18. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please get in touch:
Email: [email protected] Telephone: 08000 421 321 Post: Goodwin Casino Online, 4 Kingfisher Court, Uckfield, East Sussex, TN22 1QQ, United Kingdom