Privacy & Security

Information Gathering

This Privacy Policy governs the collection, processing, and storage of personal data by Swifty Global (UK) Ltd, operating the website swiftysports-casino.co.uk, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable regulations issued by the UK Gambling Commission under licence number 58957.

The following categories of personal data are subject to collection and processing by Swifty Global (UK) Ltd in the course of providing its regulated gambling services:

• Identity Data: Full legal name, date of birth, gender, nationality, and copies of government-issued identity documentation, including passports, driving licences, and national identity cards, as required for identity verification and Know Your Customer (KYC) compliance purposes.
• Contact Data: Residential address, electronic mail address, telephone number, and any other correspondence details submitted by the data subject during registration or subsequent account maintenance.
• Financial Data: Bank account details, payment card information, transaction histories, deposit and withdrawal records, and any documentation submitted in connection with source of funds or source of wealth verification obligations.
• Technical Data: Internet Protocol (IP) addresses, browser type and version, device identifiers, operating system information, time zone settings, cookie identifiers, and session data collected through automated means during interaction with the website.
• Usage Data: Information regarding gameplay activity, betting patterns, session duration, frequency of access, pages visited, and interactions with website features and promotional materials.
• Verification and Compliance Data: Records generated through third-party identity verification services, fraud detection screening, politically exposed persons (PEP) checks, sanctions screening, and anti-money laundering (AML) assessments.
• Communications Data: Records of correspondence between the data subject and customer support, including electronic messages, live chat transcripts, and any documentation submitted in support of account queries or complaints.
• Responsible Gambling Data: Information relating to self-exclusion requests, deposit limits, cooling-off periods, and any assessments conducted pursuant to responsible gambling obligations under the UK Gambling Commission's Social Responsibility Code.

Personal data is collected through the following means: direct submission by the data subject during account registration, account verification, or the use of website services; automated collection through cookies, web beacons, and similar tracking technologies; and receipt from authorised third-party verification, fraud prevention, and credit reference agencies.

The processing of personal data by Swifty Global (UK) Ltd is conducted on the basis of one or more of the following lawful grounds as prescribed under UK GDPR Article 6: the performance of a contract to which the data subject is party; compliance with legal obligations to which Swifty Global (UK) Ltd is subject; the legitimate interests of Swifty Global (UK) Ltd or a third party, where such interests are not overridden by the rights and freedoms of the data subject; and, where applicable, the explicit consent of the data subject.

Data Usage

Personal data collected in connection with the operation of swiftysports-casino.co.uk is processed exclusively for defined and lawful purposes. The purposes for which personal data is processed are set out below:

• Account Registration and Management: Personal data is processed to establish, maintain, and administer user accounts, to verify the identity of registered users, and to facilitate access to the services offered by Swifty Global (UK) Ltd. The lawful basis for such processing is the performance of a contract.
• Regulatory Compliance and Legal Obligations: Personal data is processed to fulfil obligations imposed upon Swifty Global (UK) Ltd under applicable legislation and regulatory frameworks, including those arising from the Gambling Act 2005, the Proceeds of Crime Act 2002, the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, and conditions attached to UK Gambling Commission licence number 58957. Such processing encompasses identity verification, age verification, anti-money laundering screening, and fraud prevention measures.
• Financial Transactions: Personal data, including financial data, is processed to facilitate the execution of deposits, withdrawals, and other financial transactions, to prevent fraudulent activity, and to maintain accurate financial records in compliance with applicable accounting and regulatory requirements.
• Responsible Gambling Obligations: Personal data is processed to fulfil the responsible gambling requirements imposed by the UK Gambling Commission, including the identification of indicators of problem gambling, the implementation of player protection measures, the administration of self-exclusion arrangements, and liaison with third-party responsible gambling organisations where appropriate.
• Customer Support and Dispute Resolution: Personal data is processed to respond to enquiries, to investigate and resolve complaints, and to maintain records of communications for the purposes of dispute resolution and quality assurance.
• Security and Fraud Prevention: Personal data and technical data are processed to detect, investigate, and prevent fraudulent, abusive, or unlawful activity, to protect the integrity of the website and its systems, and to safeguard the interests of the business and its registered users.
• Service Improvement and Analytics: Anonymised and aggregated usage data may be processed for the purposes of analysing website performance, identifying technical issues, and improving the quality and functionality of the services provided. Such processing is conducted on the basis of legitimate interests.
• Direct Marketing Communications: Where explicit consent has been obtained from the data subject, personal data comprising contact information and usage preferences may be processed for the purpose of delivering promotional communications relating to products and services offered by Swifty Global (UK) Ltd. The data subject retains the right to withdraw consent at any time without prejudice to the lawfulness of processing conducted prior to such withdrawal.
• Legal Proceedings: Personal data may be processed for the purpose of establishing, exercising, or defending legal claims, and for the purpose of cooperating with regulatory investigations or enforcement proceedings initiated by competent authorities, including the UK Gambling Commission and law enforcement agencies.

Personal data shall not be processed for purposes incompatible with those specified above. Where processing for a new purpose is contemplated, assessment shall be conducted to determine compatibility, and, where required, fresh consent shall be obtained or a new lawful basis identified prior to the commencement of such processing.

Personal data may be disclosed to authorised third parties, including identity verification service providers, payment processing institutions, fraud prevention agencies, credit reference bureaus, regulatory authorities, and law enforcement bodies, where such disclosure is required by law, necessary for the performance of a contract, or otherwise justified on legitimate grounds. All third-party recipients of personal data are required to implement adequate data protection measures and are prohibited from processing such data for purposes beyond those specified by Swifty Global (UK) Ltd.

Data Security

Swifty Global (UK) Ltd implements comprehensive technical and organisational measures designed to ensure a level of security appropriate to the risks presented by the processing of personal data, in accordance with the requirements of UK GDPR Article 32 and applicable guidance issued by the Information Commissioner's Office (ICO).

The technical security measures implemented by Swifty Global (UK) Ltd include, but are not limited to, the following:

• Encryption: All personal data transmitted between the data subject's device and the website is protected through the application of Transport Layer Security (TLS) encryption protocols. Sensitive personal data held within organisational systems is subject to encryption at rest utilising industry-standard cryptographic algorithms.
• Access Controls: Access to systems and databases containing personal data is restricted to authorised personnel on a strictly need-to-know basis. Role-based access control mechanisms are applied, and all access is subject to authentication requirements, including multi-factor authentication where applicable.
• Network Security: Organisational network infrastructure is protected through the deployment of firewalls, intrusion detection and prevention systems, and regular security monitoring. Penetration testing and vulnerability assessments are conducted periodically to identify and remediate potential security weaknesses.
• Pseudonymisation: Where operationally feasible and appropriate, personal data is subject to pseudonymisation to reduce the risks associated with unauthorised access or data breaches.
• System Monitoring: Automated monitoring tools are employed to detect anomalous activity, potential security incidents, and unauthorised access attempts across organisational systems and infrastructure.
• Data Backup and Recovery: Regular backup procedures are maintained to ensure the availability and integrity of personal data. Disaster recovery and business continuity procedures are established and tested at appropriate intervals.

The organisational security measures implemented by Swifty Global (UK) Ltd include the following: