Privacy Policy of Basswin Casino

1. Purpose and Scope

This Privacy Policy informs you about the nature, scope, and purpose of processing your personal data when using the website bass-win.com. Basswin Casino is committed to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all other applicable data protection laws in the United Kingdom.

2. Data Controller

The data controller responsible under UK data protection law is:

• Basswin Gaming Ltd.
• Email: [email protected]

We have appointed a Data Protection Officer (DPO). You may contact the DPO by email at: [email protected]

3. Categories of Personal Data Processed

We may process the following categories of personal data:

• First name, last name, date of birth
• Residential address, email address, phone number
• Identity verification documents (e.g. passport, utility bill)
• Payment and financial data (e.g. deposit methods, bank details)
• Usage and technical data (e.g. IP address, browser, device ID, cookies)

4. Purpose and Legal Basis of Processing

Your personal data is processed for the following purposes and on the following legal bases:

• To provide the website and gambling services (Article 6(1)(b) UK GDPR – performance of contract)
• To comply with legal obligations, including AML and KYC requirements (Article 6(1)(c) UK GDPR)
• Based on your explicit consent for marketing or cookie usage (Article 6(1)(a) UK GDPR)
• For our legitimate interests in service optimisation, fraud prevention, and security (Article 6(1)(f) UK GDPR)

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve and personalise your experience:

• Strictly necessary cookies (essential for service provision)
• Functional cookies (based on your consent)
• Marketing cookies (personalised ads, with consent)
• Performance cookies (analytics, with consent)

You can manage your cookie preferences via your browser or our cookie banner settings.

6. Data Sharing and Third Parties

We only share your personal data in accordance with legal requirements. Data may be shared with:

• Payment service providers (e.g. PayPal, Skrill, Trustly)
• AML/KYC service providers
• IT infrastructure and hosting providers
• Regulatory or law enforcement authorities, if required by law

Data transfers outside the UK or EEA will only occur under appropriate safeguards (e.g. Standard Contractual Clauses or adequacy regulations).

7. Data Retention

We retain your personal data only as long as necessary for the stated purposes or legal requirements:

• AML/KYC data: at least 5 years after account closure (per Gambling Commission requirements)
• Contractual/account data: generally up to 6 years under the Limitation Act 1980
• Cookie data: in accordance with your consent and browser/device settings

8. Your Rights as a Data Subject

You have the following rights under data protection law:

• Right of access to your stored personal data
• Right to rectification of inaccurate or incomplete data
• Right to erasure ("right to be forgotten"), subject to legal exceptions
• Right to restrict processing
• Right to object to processing
• Right to data portability (machine-readable format)

To exercise your rights, please contact us at: [email protected]

9. Data Security

We implement appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, or disclosure. However, we cannot guarantee full security for data transmitted over the internet.

10. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy as necessary. Significant changes will be communicated in advance. Please check this page regularly for updates.

Last updated: 2025/08/25

11. Contact Information

If you have any questions, concerns, or complaints regarding data protection, you may contact us at:

• Email: [email protected]
• Data Protection Officer: [email protected]

You may also file a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk