Welcome to the Golden Panda Casino privacy policy β your complete guide to understanding how we collect, use, and protect your personal information as a UK player in 2026. At Golden Panda Casino, we believe that data protection transparency isn't just a legal obligation; it's a fundamental right that every player deserves. This policy explains exactly what information we gather, why we need it, how long we keep it, and what rights you have under UK GDPR and the Data Protection Act 2018.
Unlike generic privacy boilerplate that leaves players confused, this document has been designed with plain English explanations, practical examples, and a quick-reference data collection table so you can understand your data rights at a glance. Whether you're registering for the first time or want to know how your gaming history is protected, you'll find clear answers here.
π Quick Reference: Golden Panda Casino Data Collection Summary Table
Before diving into the full details, here's what you need to know at a glance:
| Type of Data | Why We Collect It | How Long We Keep It | Who Sees It |
|---|---|---|---|
| Name, Email, Phone | Account creation and verification | For duration of account + 7 years | Golden Panda internal staff, UKGC |
| Address & Date of Birth | Age verification, KYC compliance, AML checks | For duration of account + 7 years | Golden Panda, payment processors, UKGC |
| Payment Details | Processing deposits and withdrawals | Minimum 6 years for regulatory audit | Payment processors only (encrypted) |
| Gaming History & Bets | Fair play monitoring, responsible gambling, dispute resolution | Minimum 5 years post-account closure | Golden Panda compliance team, UKGC on request |
| IP Address & Device Info | Fraud detection, account security, geographical verification | 1-3 years | Golden Panda security team |
| Self-Exclusion Data | Responsible gambling enforcement | For duration of self-exclusion + 3 years | Golden Panda, GAMSTOP (multi-operator scheme) |
π Table of Contents
- π What Personal Data We Collect and Why
- π‘οΈ How We Store and Protect Your Data
- π₯ Who We Share Your Data With
- βοΈ Your Rights Under UK GDPR and Data Protection Act 2018
- πͺ How We Use Cookies and Tracking Technologies
- π€ How to Request, Access, or Delete Your Data
- π§ Contact Information and Data Protection Officer
- β° Policy Updates and Amendments
π What Personal Data We Collect and Why
1. Information You Provide During Registration
When you register for a Golden Panda Casino account, we collect:
- Full name β to verify your identity and prevent account fraud
- Email address β for account notifications, password resets, and promotional communications (only with your consent)
- Phone number β for account verification and customer support contact
- Date of birth β MANDATORY to confirm you are 18+ years old and meet UK gambling age requirements
- Postal address β required for UK player verification, regulatory compliance, and as part of Know Your Customer (KYC) obligations
- Username and password β to secure your account
Why this is necessary: Under UK Gambling Commission (UKGC) regulations applicable in 2026, Golden Panda Casino is legally required to verify player identity and age before allowing real-money gaming. This protects both you and us from fraud, underage gambling, and money laundering.
2. Financial Information
When you deposit or withdraw funds, we collect payment-related data:
- Card details (last 4 digits only are retained; full card numbers are NOT stored by Golden Panda)
- Bank account information (for bank transfers and e-wallets)
- Payment method history β which payment options you've used
- Transaction amounts and dates β complete deposit and withdrawal records
Security note: We use PCI DSS Level 1 encryption standards and tokenisation to ensure your payment details are never stored on our servers in readable form. Payment processing is handled exclusively by certified third-party payment processors.
3. Gaming Activity Data
During gameplay, we collect:
- Games played β which slots, table games, or live dealer sessions you've participated in
- Bet history and amounts β all wagering records for fair play auditing
- Win/loss records β your gaming outcomes and account balance changes
- Session duration β how long you've played in each session
- Bonus usage β which promotions you've claimed and wagering progress
Why we need this: Gaming data is essential for detecting irregular patterns, preventing problem gambling, responding to disputes, and ensuring fair play compliance. It also enables us to personalise bonus offers tailored to your playing preferences.
4. Technical and Device Information
When you access Golden Panda Casino, we automatically collect:
- IP address β your internet location for fraud detection and geographical verification
- Device type and operating system β whether you're playing on desktop, mobile, tablet, and which OS
- Browser type and version β to ensure compatibility and security
- Device identifiers β unique codes that help us detect multiple accounts from the same device
- Timestamps of access β when and how often you access your account
Purpose: This technical data protects your account from unauthorised access, detects account sharing, and helps us identify potential fraud or problem gambling patterns.
5. Communication and Customer Support Data
If you contact our support team, we collect:
- Your messages and inquiries β all communication via live chat, email, or phone
- Support tickets and resolution history β records of complaints, disputes, and how they were resolved
- Chat transcripts β for quality assurance and dispute resolution purposes
Retention: Support data is retained for a minimum of 6 years to comply with UKGC dispute resolution requirements and potential chargeback investigations.
6. Responsible Gambling and Self-Exclusion Data
If you use responsible gambling tools and self-exclusion features, we record:
- Deposit limits you set β daily, weekly, or monthly limits
- Time-out periods β temporary account restrictions you've activated
- Self-exclusion requests β permanent or temporary account closures for problem gambling protection
- Cooling-off period data β 24-hour cool-off periods before account deletion
This data is shared with GAMSTOP (the UK's National Self-Exclusion Scheme) to ensure your self-exclusion is recognised across participating operators.
π‘οΈ How We Store and Protect Your Data
Encryption and Security Protocols
Golden Panda Casino implements military-grade encryption (AES-256) to protect all player data both in transit and at rest:
| Security Measure | Implementation |
|---|---|
| Data Transmission | SSL/TLS 1.3 encryption over HTTPS for all website connections |
| Database Encryption | AES-256 encryption for stored personal and financial data |
| Payment Processing | PCI DSS Level 1 compliance; card tokenisation; no full card storage |
| Access Control | Role-based access; staff can only view data necessary for their role |
| Multi-Factor Authentication | Optional 2FA available for player accounts; mandatory for staff |
| Regular Security Audits | Quarterly penetration testing and vulnerability assessments |
Data Storage Location and Backup
Your personal data is stored on secure UK-based servers that comply with UK GDPR requirements. We maintain regular automated backups to prevent data loss in case of system failure. Backup data is encrypted and stored in geographically separate locations for redundancy.
Important: All backup systems are subject to the same security controls as primary storage. Backups are tested quarterly to ensure data integrity and recovery procedures.
Access Controls and Staff Training
Only authorised Golden Panda Casino employees with legitimate business reasons can access your data. All staff members:
- Undergo mandatory data protection and GDPR training during onboarding
- Sign confidentiality agreements
- Are subject to ongoing security awareness training quarterly in 2026
- Have access restricted based on their role (e.g., customer support staff cannot view payment details)
π₯ Who We Share Your Data With
1. Regulatory Bodies and Licensing Authorities
UK Gambling Commission (UKGC): As a licensed operator regulated by the UKGC in 2026, Golden Panda Casino is required to share certain player data with the Gambling Commission upon request, including:
- Verification that you are 18+ and a legitimate UK resident
- Dispute resolution files
- Self-exclusion records
- Gaming history if investigating problem gambling or fraud
This is a legal obligation under UKGC Operating Licence Condition 2.1.1R (2026 update).
2. Payment Processors and Financial Partners
We share payment data with certified payment processors to facilitate deposits and withdrawals. These processors include:
- Credit card networks (Visa, Mastercard) β for processing card transactions
- E-wallet providers (PayPal, Skrill, Neteller) β for e-wallet deposits
- Bank partners β for direct bank transfer processing
- Cryptocurrency processors (where applicable) β for crypto transactions
All payment partners are contractually bound by strict data protection terms and must comply with PCI DSS standards.
3. Third-Party Software and Game Providers
Our game library includes titles from leading software providers. To deliver our casino games, we share minimal anonymised data with:
- Game developers (Pragmatic Play, NetEnt, Evolution Gaming, etc.) β aggregated gaming statistics and jackpot data only
- Live dealer providers β your session ID and anonymised play data for live streaming
- RNG auditors β random number generation verification data
Important: Game providers do NOT receive your personal name, address, or payment information. Data sharing is limited to what's necessary for game functionality.
4. Fraud Prevention and Compliance Partners
We use third-party fraud detection and AML compliance services. These partners may access:
- Your name, address, and date of birth β for identity verification
- IP address and device data β for fraud scoring
- Transaction patterns β to detect suspicious activity
All fraud prevention partners are GDPR-compliant and contractually restricted from using your data for any purpose other than fraud prevention.
5. GAMSTOP and Self-Exclusion Schemes
When you use self-exclusion or deposit limits, your data is automatically shared with:
- GAMSTOP β the UK's National Self-Exclusion Scheme (mandatory for all UKGC-licensed operators)
- Other participating casinos β through GAMSTOP's multi-operator database, to prevent you from gambling elsewhere during self-exclusion
6. Legal and Law Enforcement
We may disclose your data if:
- We receive a court order or legal demand
- Law enforcement agencies investigate potential criminal activity
- It's necessary to protect the safety or rights of Golden Panda Casino or other users
- We suspect fraud, money laundering, or other illegal activity
In such cases, we will, where legally permitted, notify you of the disclosure.
7. Business Partners and Affiliates
If Golden Panda Casino is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. You will be notified of any such change of control and your rights regarding data transfer.
βοΈ Your Rights Under UK GDPR and Data Protection Act 2018
Under UK GDPR (as amended in 2026) and the Data Protection Act 2018, you have the following absolute rights regarding your personal data:
1. Right of Access (Subject Access Request)
You have the right to request a complete copy of all personal data Golden Panda Casino holds about you, free of charge. Your data will be provided within 30 calendar days (our standard response time is 14 days). The copy will be in a clear, portable format (typically PDF or CSV).
2. Right to Rectification
If you believe any of your personal data is inaccurate or incomplete, you can request we correct it immediately. Examples include:
- Misspelled name or address
- Incorrect phone number or email
- Outdated payment method information
3. Right to Erasure ("Right to be Forgotten")
You can request deletion of your data in specific circumstances, including:
- Data is no longer necessary for the purposes for which it was collected
- You withdraw consent for direct marketing
- You object to processing based on legitimate interest
- Data has been processed illegally
Limitations: We may retain certain data if legally required (e.g., for 6 years due to financial regulations or KYC obligations). After 3 years of account inactivity, you can request data deletion, subject to regulatory retention periods.
4. Right to Data Portability
You can request your data in a machine-readable format (CSV, JSON) so you can transfer it to another service provider. This includes:
- Your personal information (name, address, contact details)
- Gaming history (dates, bets, outcomes)
- Deposit and withdrawal records
5. Right to Object
You can object to processing of your data where it's based on Golden Panda's legitimate interest, including:
- Marketing communications (you can unsubscribe at any time via email or account settings)
- Fraud prevention profiling
- Behavioural analysis for responsible gambling purposes
6. Right to Restrict Processing
You can request we limit how we use your data in specific situations, such as:
- While you dispute the accuracy of your data
- If processing is unlawful but you prefer restriction over deletion
- If we no longer need the data but you require it for legal claims
7. Rights Related to Automated Decision-Making
You have rights regarding automated decisions that significantly affect you, including:
- Right to explanation: If we deny your withdrawal request based on automated fraud detection, you can request a human review and explanation
- Right to challenge: You can dispute automated decisions and request manual reconsideration
πͺ How We Use Cookies and Tracking Technologies
What Are Cookies?
Cookies are small files stored on your device that allow websites to remember information about your visits. Golden Panda Casino uses cookies to enhance your experience, improve security, and analyse how players use our platform.
Types of Cookies We Use
1. Essential/Necessary Cookies (Always Active)
- Session cookies β keep you logged in during your session
- Security cookies β prevent fraud and protect your account
- Preference cookies β remember your language and display settings
These cookies are REQUIRED for the website to function and cannot be disabled.
2. Performance and Analytics Cookies (Opt-In)
- Google Analytics β anonymised data about how players navigate our site
- Heatmaps β identify which areas of the site players interact with most
- Error tracking β detect and fix technical issues
These are optional. You can opt out via your cookie preferences banner on first visit.
3. Marketing and Advertising Cookies (Opt-In)
- Retargeting pixels β show you Golden Panda ads on other websites if you've visited us
- Affiliate tracking β record which affiliate referred you to Golden Panda
Opt-in is always requested before these are set.
Managing Your Cookie Preferences
On your first visit to Golden Panda Casino in 2026, you'll see a cookie consent banner. You can:
- Accept All Cookies β enable all non-essential cookies
- Reject All β disable all optional cookies (essential cookies remain active)
- Manage Preferences β choose exactly which cookie categories to allow
You can change your cookie preferences at any time via your account settings or by visiting our Cookie Policy page.
Third-Party Tracking
We use the following third-party services that may set their own cookies:
- Google Analytics β website traffic analysis
- Facebook Pixel β for targeted advertising (with your consent only)
- LiveChat β customer support functionality
These third parties have their own privacy policies. We recommend reviewing them if you have concerns.
π€ How to Request, Access, or Delete Your Data
Submitting a Data Access Request (Subject Access Request - SAR)
To request a copy of all data Golden Panda Casino holds about you:
- Log into your account and navigate to Account Settings β Privacy & Data
- Click "Request My Data"
- Confirm your request and identity verification
- We'll compile your data and email it to your registered email address within 14 business days (legally we have 30 days)
Alternative method: Email us at [email protected] with the subject line "Data Access Request" and include:
- Your full name
- Account username or player ID
- Email address associated with your account
Requesting Data Rectification
To correct inaccurate personal data:
- Log into your account and update your information directly in Account Settings β Personal Details
- Or contact our support team via live chat to request changes to data you cannot modify yourself (e.g., gaming history corrections)
Requesting Data Deletion
To request erasure of your personal data:
- Email [email protected] with subject line "Data Deletion Request"
- Include your account details and reason for deletion request
- We'll review your request and respond within 14 days
Important: Some data cannot be deleted due to legal obligations. We'll explain which data can and cannot be deleted in our response.
Opting Out of Marketing Communications
To unsubscribe from promotional emails:
- Click the "Unsubscribe" link at the bottom of any promotional email, OR
- Log into your account and disable Marketing Communications in Preferences, OR
- Email [email protected] requesting to unsubscribe
You'll be removed from marketing lists within 48 hours. Note: We'll still send important account notifications (login alerts, withdrawals, etc.)
π§ Contact Information and Data Protection Officer
Data Protection Officer (DPO)
Golden Panda Casino Data Protection Officer
Email: [email protected]
Response time: 14 days (we aim for 5-7 business days)
Mailing Address: Data Protection Officer, Golden Panda Casino Ltd, Unit 245, 1 Wood Street, London, EC2V 7WS, UK
General Support
Customer Support Team
Email: [email protected]
Live Chat: Available on the website 24/7 (click the chat icon in bottom-right corner)
Phone: +44 (0)20 8016 2726 (Mon-Sun, 10am-2am GMT)
Working hours: 24/7 support available
Information Commissioner's Office (ICO)
If you believe Golden Panda Casino has mishandled your data, you have the right to lodge a complaint with the UK's Information Commissioner's Office:
Email: [email protected]
Phone: 0303 123 1113
Website: www.ico.org.uk
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, UK
UKGC Complaint Escalation