Privacy Incognito Casino
Table of contents
Privacy at Incognito Casino covers how personal data is collected, used and protected when playing from the United Kingdom. This page explains the data practices in general terms under the UK GDPR and the Data Protection Act 2018, overseen by the Information Commissioner's Office. It is an informational summary rather than the binding legal policy, which players should consult in full within their account. Incognito Casino operates under a Curaçao eGaming licence, and regulatory reporting obligations form part of how data may be handled.
🔐 What Data Is Collected
The platform collects the information needed to open and run an account. This includes registration details such as name, date of birth, email and address, payment information tied to deposits and withdrawals, and usage data generated during play. Verification documents supplied for KYC checks are collected before the first withdrawal. Cookies and similar technologies record session and preference data. Each category serves a defined operational or legal purpose, and the data minimisation principle under UK GDPR means only what is necessary should be gathered. The verification step is the most data-intensive point of contact, since it requires identity and address documents, but it is also a one-time process tied directly to the anti-money-laundering obligations that the licence imposes.
📋 How Data Is Used
Collected data supports account management, payment processing, fraud prevention and compliance with the operator's legal and licensing obligations. Verification information confirms identity and meets anti-money-laundering requirements, which is also what enables the verified fast-withdrawal path. Usage data helps maintain the service and, where consent is given, supports marketing. Players can withdraw marketing consent at any time without affecting account access, and each processing purpose rests on a lawful basis under the UK GDPR.
🤝 Data Sharing and Third Parties
Personal data may be shared with payment processors, game providers and regulatory authorities where required. Under the Curaçao eGaming licence conditions, certain reporting obligations apply, and data may be disclosed to comply with lawful requests. Third parties receiving data are expected to handle it under their own data protection commitments. The operator does not sell personal data for unrelated commercial purposes, and transfers outside the UK should rely on an appropriate safeguard.
🍪 Cookies and Tracking
The site uses session cookies to keep a player logged in, analytics cookies to understand usage patterns and preference cookies to remember settings. Cookie choices can be managed through the browser or any on-site cookie controls. Disabling certain cookies may affect how parts of the site function, particularly the cashier and live session features.
🛡️ Your Rights Under UK GDPR
Under the UK GDPR and the Data Protection Act 2018, players have the right to access their personal data, request correction, request erasure, restrict or object to processing, and request data portability. These rights are exercised by contacting the support team, and identity verification may be required before a request is actioned. Players also retain the right to lodge a complaint with the Information Commissioner's Office if they believe their data has been mishandled.
🔒 Data Security
The platform protects data with SSL encryption on transfers and access controls limiting who can view personal information. KYC processes add identity assurance, and account access depends on player-set credentials. While no system can guarantee absolute security, these measures align with standard practice for the licence tier.
🎧 Contact and Complaints
Questions about data handling can be raised with the support team through live chat or email. Players in the UK retain the right to lodge a complaint with the Information Commissioner's Office if a concern is not resolved. The support channels are the first point of contact for any data request.
📊 Conclusion
Incognito Casino handles personal data for account, payment and compliance purposes under the UK GDPR framework, with player rights of access, correction and erasure available through support. Data is protected with SSL encryption and shared only where operationally or legally required.