1. Who We Are and How to Reach Us
Double Bubble Casino operates at double-bubble-casino-uk.com and is headquartered at Level 10, 3 Hardman Street, Spinningfields, Manchester, M3 3HF, United Kingdom. For any privacy-related queries, you can contact our team by phone on +44 161 829 3310, by email at contact@double-bubble-casino-uk.com, or by using the contact form on our Contact Us page.
This Privacy Policy sets out how Double Bubble Casino collects, uses, stores, and shares personal information about individuals who visit our website, register an account, or otherwise interact with our services. It applies to all users based in the United Kingdom and reflects our obligations under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and the requirements of the UK Gambling Commission (UKGC).
We act as the data controller for the personal information described in this policy. That means we determine the purposes and means by which your data is processed, and we are accountable for ensuring it is handled lawfully and responsibly.
2. Information We Collect
We collect personal information in several ways: directly from you when you register or use our services, automatically through your use of our website and platform, and on occasion from third-party sources for verification purposes.
2.1 Information You Provide Directly
- Full name, date of birth, and residential address
- Email address and telephone number
- Username and password for your account
- Payment details, including card numbers, bank account information, or details of any e-wallet or cryptocurrency wallet you use to deposit or withdraw funds
- Copies of identity documents such as a passport, driving licence, or utility bill submitted during Know Your Customer (KYC) verification
- Source of funds documentation, where required under anti-money laundering regulations
- Responses to any responsible gambling questionnaires or self-assessment tools
- Communications you send us via email, live chat, or the contact form
2.2 Information Collected Automatically
- IP address and approximate geographic location derived from it
- Device type, operating system, and browser information
- Pages visited, time spent on each page, and clickstream data
- Session identifiers and cookie data
- Details of games played, bet amounts, win and loss records, and session duration
- Login times and frequency of access
2.3 Information from Third Parties
- Identity verification results from KYC and age verification service providers
- Fraud screening and risk assessment data from specialist third-party agencies
- Information from credit reference agencies where relevant to responsible gambling assessments
- Data from the UKGC’s National Self-Exclusion Scheme, GamStop, to confirm whether a player has self-excluded
3. How We Use Your Information
3.1 To Perform Our Contract with You
Processing your personal data is necessary to operate your account and provide you with access to our games and services. This includes:
- Creating and maintaining your account
- Processing deposits and withdrawals
- Verifying your identity and age before you can play with real money
- Handling bonus offers and loyalty rewards you have opted into
- Providing customer support and resolving complaints
3.2 To Comply with Legal Obligations
As a UKGC-licensed operator, we are subject to specific legal and regulatory requirements that require us to process personal data. These include:
- Age verification prior to allowing any gambling activity, in line with the Gambling Act 2005
- Customer due diligence and ongoing monitoring obligations under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017
- Checking against GamStop and our internal self-exclusion database before allowing account registration or gameplay
- Conducting affordability and vulnerability assessments in accordance with UKGC Social Responsibility Code requirements
- Retaining transaction and gaming records for a minimum period as required by applicable law
- Reporting obligations to HMRC and other relevant authorities where required
3.3 For Our Legitimate Interests
We process some data where we have a legitimate business interest, provided that interest is not overridden by your rights. This includes:
- Detecting and preventing fraud, cheating, and abuse of our services
- Monitoring gameplay patterns to identify signs of problem gambling
- Improving our website, games, and overall user experience
- Network and information security
- Internal reporting and business analytics
3.4 With Your Consent
Where we rely on consent, we will ask for it separately and clearly. This applies to:
- Sending you marketing communications by email, SMS, or push notification about promotions, new games, or bonuses
- Placing non-essential cookies on your device (see our Cookie Policy for full details)
You can withdraw your consent at any time. This will not affect the lawfulness of any processing carried out before you withdrew consent. To manage your marketing preferences or cookie settings, visit your account settings page or contact us directly.
4. Age Verification and Responsible Gambling
We are required by law and our UKGC licence to verify that every player is aged 18 or over before they can deposit funds or participate in any form of gambling. We use a combination of automated electronic verification and manual document checks to meet this obligation.
We also take our responsible gambling duties seriously. We retain data on your gaming behaviour, deposit levels, and session patterns so that we can identify signs of potential harm and take appropriate action. This may include reaching out to you, applying temporary cooling-off measures, or referring you to specialist support services such as GamCare or BeGambleAware.
If you have registered a self-exclusion with GamStop, we will check against that register before permitting any new account registration. Once a self-exclusion is in place, we will not send you any marketing material for the duration of that exclusion.
5. Sharing Your Personal Information
We do not sell your personal data to third parties. We share your information only where necessary and in the following circumstances:
- Payment processors and banking partners: to process deposits and withdrawals securely
- KYC and identity verification providers: to confirm your identity, age, and source of funds
- Fraud prevention and risk assessment services: to protect against financial crime and account abuse
- GamStop and self-exclusion schemes: as required under our UKGC licence conditions
- Game software providers: certain providers may receive anonymised or pseudonymised gameplay data for technical integration purposes
- Regulators and law enforcement: where we are legally required to disclose information, for example to the UKGC, HMRC, the Financial Conduct Authority, or the police
- Professional advisers: including solicitors, accountants, and auditors, where required and subject to confidentiality obligations
- IT and hosting service providers: who process data on our behalf under strict data processing agreements
All third parties we work with are contractually required to protect your data, use it only for specified purposes, and comply with applicable data protection law. Where a third party is processing data on our behalf, they do so under a Data Processing Agreement that meets UK GDPR requirements.
6. International Transfers of Personal Data
Some of our service providers and technical partners operate outside the United Kingdom. Where personal data is transferred to a country that does not offer an equivalent level of data protection to the UK, we put appropriate safeguards in place. These include the use of the UK’s International Data Transfer Agreement (IDTA) or reliance on adequacy decisions issued by the UK Government.
You can request further details of the specific safeguards in place for any international transfers by contacting us at contact@double-bubble-casino-uk.com.
7. How Long We Keep Your Data
We keep your personal information for as long as is necessary given the purpose for which it was collected and to meet our legal and regulatory obligations. In practice, this means:
- Account records, identity verification documents, and transaction histories are retained for a minimum of five years from the end of the customer relationship, in line with anti-money laundering regulations
- Responsible gambling records, including self-exclusion requests, affordability checks, and any interactions related to potential harm, are retained for a minimum of three years after the closure of your account
- Marketing consent records are kept for as long as we need to demonstrate that we had valid consent
- Website usage data collected via cookies may be retained for shorter periods as described in our Cookie Policy
- Communications with our support team are retained for up to three years unless a longer period is required by law
After the relevant retention period has passed, data is securely deleted or anonymised so that it can no longer be linked back to you as an individual.
8. Your Rights Under UK Data Protection Law
Under UK GDPR and the Data Protection Act 2018, you have a number of rights in relation to your personal data. These are:
- Right of access: you can request a copy of the personal data we hold about you (this is known as a Subject Access Request)
- Right to rectification: you can ask us to correct inaccurate or incomplete data
- Right to erasure: in certain circumstances, you can ask us to delete your personal data; note that this right is not absolute and may be overridden by our legal obligations to retain records
- Right to restrict processing: in some situations, you can ask us to pause processing of your data while a dispute is resolved
- Right to data portability: where processing is based on consent or contract and is carried out by automated means, you can request a machine-readable copy of your data
- Right to object: you can object to processing based on legitimate interests or direct marketing at any time
- Rights related to automated decision-making: if we make decisions about you solely through automated means that have a significant effect on you, you have the right to request human review
- Right to withdraw consent: where we rely on consent, you can withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us at contact@double-bubble-casino-uk.com or write to us at Level 10, 3 Hardman Street, Spinningfields, Manchester, M3 3HF. We will respond to your request within one calendar month, though we may extend this by a further two months for complex or multiple requests, in which case we will let you know.
We may need to verify your identity before acting on a request. We will not charge a fee for handling requests unless they are manifestly unfounded or excessive.
9. Cookies and Tracking Technologies
We use cookies and similar technologies on our website to ensure it functions correctly, to remember your preferences, and to analyse how visitors use our platform. Some cookies are strictly necessary for the site to operate; others require your consent.
A full breakdown of the categories of cookies we use, their purposes, and how to manage them is set out in our Cookie Policy, which is available on our website. You can update your cookie preferences at any time through the cookie settings tool on our site.
10. Security Measures
We take the security of your personal data seriously. We use industry-standard technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, and destruction. These measures include:
- SSL/TLS encryption for all data transmitted between your device and our servers
- Encryption of sensitive data at rest, including payment information and identity documents
- Access controls and role-based permissions for staff handling personal data
- Regular internal security reviews and staff training on data protection obligations
- Processes for detecting, investigating, and reporting personal data breaches in line with our ICO obligations
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of it, and we will inform you directly where required.
11. Children
Our services are strictly for persons aged 18 and over. We do not knowingly collect personal data from anyone under that age. If we become aware that we have inadvertently collected information from a minor, we will delete it promptly and take steps to close the associated account. If you believe a minor has provided us with their data, please contact us immediately at contact@double-bubble-casino-uk.com.
12. Links to Third-Party Websites
Our website may contain links to external sites that are not operated by Double Bubble Casino. This Privacy Policy does not apply to those websites. We have no control over, and accept no responsibility for, the content or privacy practices of any third-party site. We encourage you to read the privacy policy of any website you visit through a link on our platform.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in law, our business, or our data processing practices. When we make material changes, we will notify you either by email or by posting a prominent notice on our website before the change takes effect. We encourage you to review this policy periodically to stay informed about how we look after your data.
14. How to Make a Complaint
If you are unhappy with how we have handled your personal data, we ask that you contact us first so that we have an opportunity to address your concerns. You can reach our team at contact@double-bubble-casino-uk.com or by calling +44 161 829 3310.
If you remain dissatisfied after contacting us, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), which is the supervisory authority for data protection in the United Kingdom:
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
You also have the right to seek a judicial remedy through the courts if you believe your rights under data protection law have been infringed.