Your data, our responsibility
This Privacy Policy sets out how we, Goldenpanda Casino (goldenpanda1.co.uk, operated by Golden Panda N.V., licence OGL/2024/1567/0923), process your personal data. It applies every time you use our site, open an account, or contact our support team.
What data we collect
We only collect data we need to run your account lawfully. That collection starts at registration and grows as you verify, deposit and play.
- Identity data: name, date of birth, email address, phone number, residential address
- Verification documents: passport or ID copy, proof of address, payment method verification
- Transaction data: deposits, withdrawals, bonus history, wallet balances
- Technical data: IP address, device type, browser language, session logs
- Gameplay behaviour: game history, bet sizes, win and loss records
- Marketing preferences: which channels you opted into and when you consented
How we use your data
Each purpose below maps to a specific processing activity. We never sell your data, and we do not use it for anything outside this list.
- Creating and managing your player account
- KYC identity and age verification before your first withdrawal
- Processing deposits and withdrawals across GBP and crypto
- Fraud prevention, bonus abuse detection and AML screening
- Responsible gambling monitoring, including deposit and loss limits
- Marketing emails and offers, only where you consented
- Meeting legal, tax and regulatory reporting obligations
Our legal bases
Contract
We process identity, account and transaction data because they are necessary to perform our contract with you. Without them we cannot open an account or pay out winnings.
Legal obligation
KYC checks, AML reporting and transaction record keeping rest on our legal obligations as a licensed operator. We must retain gambling transaction records for at least five years.
Legitimate interest
Fraud prevention, security logging and aggregated service analytics rely on our legitimate interest in keeping the platform safe. We balance this against your rights and minimise the data involved.
Consent
Marketing messages and non-essential cookies run only on your consent. You withdraw that consent at any time through your account settings or a support request.
How long we keep it
Retention depends on the data category. Where regulation sets a minimum, we meet it; elsewhere we delete once the purpose expires.
| Data category | Retention period |
|---|---|
| Transaction and AML records | Minimum 5 years after account closure |
| KYC verification documents | 5 years, then deleted or anonymised |
| Account and gameplay data | 5 years after account closure |
| Support correspondence | 24 months |
| Marketing preferences | Until you withdraw consent |
| Technical logs | 12 months |
Who we share it with
We share data only with processors and authorities that need it, under contracts that forbid secondary use.
- Payment processors and crypto exchange partners
- KYC and AML verification providers
- Game and platform suppliers delivering your play sessions
- Regulators and law enforcement where legally required
- Analytics providers, under anonymised or consented data only
Your rights over your data
You control your data. Email [email protected] and we respond within one month; complex requests may take two months and we will tell you.
- Access: get a copy of the data we hold about you
- Rectification: correct anything inaccurate or incomplete
- Erasure: request deletion where no legal retention applies
- Portability: receive your data in a machine-readable format
- Objection: object to processing based on legitimate interest
- Withdraw consent: stop marketing at any time
- Complain: contact your data protection authority
Cookies and tracking
We use session cookies to keep you logged in, plus analytics and optional marketing cookies. You accept or reject the optional categories through the consent banner on your first visit and change your choice any time. Full details, including a list of each cookie and its lifespan, sit in our separate Cookie Policy.
How we protect your data
All traffic between you and goldenpanda1.co.uk runs over TLS encryption. Data at rest is encrypted, and access follows role-based controls: support sees account details, finance sees transactions, and no role reaches everything. We log every internal access to sensitive records and test our controls regularly.
Breach notification
If a personal data breach risks your rights, we notify the relevant supervisory authority within 72 hours and inform affected players without undue delay.
Frequently Asked Questions
Can I play without giving you my ID documents?
You can register and deposit, but we must verify your identity, age and payment method before your first withdrawal. This is a licence requirement, not a choice.
How do I stop marketing emails?
Use the unsubscribe link in any email, change your preferences in account settings, or contact [email protected]. Marketing stops immediately; transactional messages continue because they relate to your account.
Do you keep my data after I close my account?
Gameplay, transaction and KYC records stay for a minimum of 5 years to meet gambling regulations. After that we delete or anonymise them.
Is my payment information stored?
Card numbers pass directly to our payment processors and never sit on our servers in full. We store only the masked reference needed for refunds and disputes.