Privacy Policy

Categories of information we hold

Registration details cover your full name, date of birth, residential address, email address, mobile number, and chosen currency. These fields are mandatory because a UK Gambling Commission licensee cannot open an account without them.

Verification records include images of identity documents, proof-of-address paperwork, and where a source-of-funds check applies, bank statements or payslips you choose to submit. Card numbers are tokenised by our payment processors; Kachingo never stores a full card number.

Behavioural and technical records cover wager history, deposit and withdrawal timestamps, device type, browser fingerprint, IP address, and pages viewed. Support conversations, including live chat transcripts and recorded telephone calls, are retained as part of the account file.

Why we process it and under which basis

Contractual necessity covers account operation: settling bets, crediting balances, processing cashouts, and applying the limits you have configured. Without this processing there is no service to deliver.

Legal obligation covers age verification, anti-money-laundering monitoring under the Proceeds of Crime Act 2002, and regulatory reporting to the Gambling Commission. These uses continue regardless of any consent you give or withdraw.

Legitimate interests cover fraud prevention, bonus-abuse detection, platform security, and aggregate reporting used to decide which game categories to expand. We document a balancing assessment for each of these and stop where your interests outweigh ours.

Consent covers marketing only. Promotional email, SMS, and push notifications require an affirmative opt-in and can be switched off in your communication preferences or by using the unsubscribe link in any message.

Who receives your data

Game studios supplying content to Kachingo receive a pseudonymous session identifier and wager data, not your name or contact details. Payment institutions receive the minimum needed to settle a transaction and apply their own regulatory checks.

Identity-verification bureaux, credit-reference agencies used for affordability signals, and GAMSTOP receive defined data sets under written processing agreements. A record of these disclosures sits in your account file.

Kachingo does not sell personal data and does not share it with advertising networks for cross-site profiling. Where a processor operates outside the United Kingdom, transfers rely on UK adequacy regulations or the International Data Transfer Addendum.

Retention periods

Account and transaction records are held for five years after the account closes, matching the retention period set out in UK anti-money-laundering rules. This period cannot be shortened at a customer's request.

Self-exclusion records are retained permanently so a returning registration can be matched and blocked. Marketing preference records are kept for two years after the last interaction, and unverified applications are deleted within ninety days.

Call recordings are erased after twelve months unless they form part of an open complaint or regulatory enquiry, in which case they are preserved until that matter is closed.

Exercising your rights

You may request a copy of your data, ask for inaccurate details to be corrected, object to processing based on legitimate interests, or request a machine-readable export. Kachingo responds within one calendar month and may extend by two further months for complex requests, telling you why.

Erasure and restriction requests are honoured where no statutory retention duty applies. Where a duty does apply, we will say which one and when it expires rather than refuse without explanation.

Requests go to our Data Protection Officer through the contacts below. If you are dissatisfied with the outcome, you have the right to complain to the Information Commissioner's Office, which supervises Kachingo's data processing in the United Kingdom.