Privacy Policy

This privacy policy explains how GeckoPlay collects, uses, stores, and shares personal data when players register and use the casino. It applies to all UK players and covers every stage of the account relationship, from initial sign-up through to account closure.

What Personal Data GeckoPlay Collects

GeckoPlay collects personal data in several ways. When creating an account, players provide details directly. Additional data may be gathered automatically through platform usage or obtained from third parties during verification checks.

The main categories of data collected include:

Full name, date of birth, and residential address
Email address and telephone number
Username and account credentials
Payment details, including debit card information, PayPal account data, and banking identifiers used through Instant Bank Payment or Open Banking
Device identifiers, IP address, browser type, and session activity
Identity documents, proof of address, source of funds information, and employment or financial status data submitted during KYC reviews
Game history, transaction history, and account preferences
Communications sent to customer support via email at support@geckoplay.co.uk or through live chat

Data collected during gameplay and account activity is used to monitor player behaviour for responsible gambling purposes, including the SafeMate monitoring tool, which tracks spend, winnings, losses, and session time over a rolling six-month window.

Legal Basis for Processing Data

GeckoPlay operates under a UK Gambling Commission licence held by Skill On Net Limited, account number 39326. Processing personal data is necessary to fulfil contractual obligations to players, comply with legal and regulatory requirements, and pursue legitimate interests in operating a safe and compliant casino service.

For UK players, the relevant legal frameworks include the UK General Data Protection Regulation and the Data Protection Act 2018. Processing may be based on contract performance, legal obligation, legitimate interest, or, in specific cases, player consent.

Age verification and identity checks are required by UKGC regulations and cannot be opted out of. Players must be 18 or over to hold an account, and verification of this is a legal obligation rather than a discretionary process.

How Player Data Is Used

Personal data is used to manage accounts, process deposits and withdrawals, run identity and anti-money laundering checks, and provide customer support. It also supports responsible gambling obligations, including deposit limit management, cooling-off periods, self-exclusion, and reality check reminders.

GeckoPlay uses account data to apply promotional offers where eligible, determine bonus qualification through the automatic account registration check, and communicate relevant account updates. Marketing communications are only sent where players have indicated they wish to receive them, and preferences can be updated through the account area.

Transaction data is retained to comply with financial regulations and to support any disputes or queries relating to deposits, withdrawals, and game outcomes.

GeckoPlay does not sell personal data to third parties. Data may be shared with regulated third parties in specific circumstances, including:

Payment processors handling Visa and Mastercard debit transactions, PayPal, Apple Pay, Paysafecard, and Open Banking transfers
Identity verification and KYC service providers conducting document checks
GamStop, the national self-exclusion scheme for UKGC-licensed operators
Regulatory bodies including the UK Gambling Commission where reporting is required
Game providers supplying content to the casino platform, including studios such as Pragmatic Play, Evolution, Play’n GO, and NetEnt, to the extent necessary for game delivery and fairness auditing
IT and cloud service providers supporting platform security and data storage, all subject to appropriate data processing agreements

Any third party receiving data is subject to contractual obligations aligned with UK data protection law.

Cookies and Tracking Technologies

The casino platform uses cookies and similar technologies to support session management, security, and platform performance. Cookies may also be used for analytics and, where consent has been given, for personalisation and marketing purposes.

Players can manage cookie preferences through browser settings or any consent management tool available on the platform. Disabling certain cookies may affect platform functionality, including login sessions and game loading.

Data Retention

Personal data is retained for as long as an account remains active and for a defined period after closure, as required by applicable law and regulation. Financial transaction records, identity verification data, and AML-related documentation are typically retained for at least five years following the end of the account relationship, in line with UK anti-money laundering legislation.

Data held solely for marketing or analytics purposes is reviewed regularly and deleted once it is no longer needed.

Player Rights Under UK Data Protection Law

UK players hold a number of rights regarding personal data held by GeckoPlay. These include the right to access a copy of data held, request correction of inaccurate information, request deletion where data is no longer needed for its original purpose, and object to certain types of processing.

Requests can be submitted via email to the support team. GeckoPlay is required to respond within one calendar month under UK GDPR rules. Where a request is complex or there are multiple requests, an extension of up to two further months may apply, with notification provided.

If the handling of a data request is unsatisfactory, players in Great Britain may raise a complaint with the Information Commissioner’s Office, the UK’s data protection regulator.

Account Security and Data Protection

GeckoPlay uses SSL encryption to protect data in transit between player devices and platform servers. Payment processing routes are handled through secure systems, and account credentials are stored using industry-standard security practices.

Players are responsible for keeping account login details confidential. Any suspected unauthorised access should be reported to customer support immediately. The online casino GeckoPlay maintains security standards consistent with UKGC requirements for remote casino operations.

Changes to This Privacy Policy

This policy may be updated periodically to reflect changes in regulation, platform features, or data processing practices. Material changes will be communicated to players via email or a notice within the account area. Continued use of the casino following notification of changes constitutes acceptance of the revised policy.

For questions about data handling, or to exercise any rights under UK data protection law, players can contact the support team directly. Further information on responsible account management is available through GeckoPlay responsible gambling, which covers self-exclusion, deposit limits, GamStop integration, and SafeMate monitoring tools.