1. Introduction
This Privacy Policy sets out how Grosvenor Casino Reading South collects, processes, retains and protects personal data relating to customers, website visitors and other individuals who interact with the casino. The policy is issued in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using the services of Grosvenor Casino Reading South or by providing personal data, you acknowledge that your information will be handled in accordance with this Privacy Policy. The content of this document may be reviewed and updated periodically to reflect changes in applicable law or in internal procedures. The version published on the official channels of Grosvenor Casino Reading South is the version currently in force.
2. Data Controller
Grosvenor Casino Reading South acts as the data controller for personal data processed under this Privacy Policy. As data controller, Grosvenor Casino Reading South determines the purposes and means of processing your personal data.
Any queries relating to this Privacy Policy or to the exercise of data subject rights should be directed to Grosvenor Casino Reading South using the contact details set out in Section 9.
3. Personal Data Collected
Personal data is collected and processed only where relevant to the services provided and to legal or regulatory obligations. The categories of data that may be collected include:
- Identity and verification data: full name, date of birth, nationality, copies of identity documents (such as passport or driving licence), proof of address and proof of signature.
- Contact data: postal address, email address and telephone number.
- Financial data: information necessary to conduct due diligence and to comply with anti-money laundering requirements, including source of funds documentation where required.
- Account and activity data: records of visits, gaming activity and transaction history maintained for regulatory, legal and operational purposes.
- Responsible gambling data: information collected or observed in connection with obligations to identify and respond to indicators of problem gambling, which may include special category data where processing is permitted under applicable law.
- Special category data: where required by legal or regulatory obligations, data such as ethnicity or nationality may be collected. Such data is not used for any other purpose without explicit consent, where consent is the lawful basis relied upon.
4. Purposes and Legal Bases for Processing
Personal data is processed only where there is a lawful basis under UK GDPR. The main purposes and associated legal bases include:
Verifying identity and conducting due diligence
- Legal obligation (UK GDPR Art. 6(1)(c))
- Money Laundering Regulations 2017
Compliance with gambling licence conditions
- Legal obligation
- Gambling Commission licence requirements
Detection and prevention of fraud and financial crime
- Legal obligation
- Legitimate interests
Responsible gambling monitoring and intervention
- Legal obligation
- Substantial public interest (UK GDPR Art. 9(2)(g))
Delivering services and managing your account
- Performance of a contract (UK GDPR Art. 6(1)(b))
Direct marketing and analytics
- Legitimate interests (UK GDPR Art. 6(1)(f)), subject to your right to object
Responding to regulatory, law-enforcement or court requests
- Legal obligation
- Compliance with statutory authority
Where legitimate interests are relied upon as the legal basis, an assessment is carried out to ensure that those interests do not override your fundamental rights and freedoms. Where consent is relied on as the legal basis for processing, consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn, but may affect the ability of Grosvenor Casino Reading South to provide certain services.
5. Data Sharing and Disclosure
Personal data is not sold to third parties. Data is shared only to the extent necessary for the purposes described in this Privacy Policy and only where there is a lawful basis for such disclosure. Recipients may include:
- Regulatory and law-enforcement authorities: the UK Gambling Commission, the Information Commissioner’s Office (ICO), law-enforcement agencies and crime investigation bodies. Requests from statutory bodies are fulfilled only where accompanied by a valid warrant, court order or other legally recognised proof of authority.
- Sports integrity and fraud-prevention agencies: where permitted or required by law.
- Third-party service providers: organisations that support operational activities, such as IT infrastructure providers, identity verification services and direct marketing companies. These parties act as processors and process data only on documented instructions and subject to appropriate contractual safeguards.
- Other entities within the same corporate group as Grosvenor Casino Reading South: where relevant and consistent with the purposes described in this Privacy Policy.
Personal data is not shared with any other third party for purposes beyond those described in this Privacy Policy without a lawful basis for doing so.
6. Data Retention
Personal data is retained only for as long as is necessary to fulfil the purposes for which it was collected, including the fulfilment of legal, regulatory and accounting obligations. In particular:
- Account and identity records are retained in accordance with the requirements of the Money Laundering Regulations 2017 and applicable Gambling Commission licence conditions. Retention periods for such records are typically a minimum of five years from the end of the business relationship or from the date of the relevant transaction.
- Where a statutory or regulatory obligation requires retention beyond this period, data will be held for the duration of that obligation.
- Where no specific statutory retention period applies, a standard retention period consistent with legitimate operational and compliance needs is applied, after which data is securely deleted or anonymised.
The right to erasure under UK GDPR may be limited where Grosvenor Casino Reading South is required to retain data to meet a legal obligation. Any such limitation will be explained when responding to an erasure request.
7. Your Rights
Under UK GDPR and the Data Protection Act 2018, individuals have the following rights in relation to their personal data:
- Right to be informed: to receive clear information about how personal data is used, as set out in this Privacy Policy.
- Right of access: to request a copy of the personal data held.
- Right to rectification: to request correction of inaccurate or incomplete personal data.
- Right to erasure: to request deletion of personal data, subject to legal retention obligations and other lawful grounds for continued processing.
- Right to restriction of processing: to request that processing of personal data is limited in certain circumstances.
- Right to data portability: to receive personal data in a structured, commonly used and machine-readable format, where processing is based on consent or on a contract and is carried out by automated means.
- Right to object: to object to processing based on legitimate interests, including profiling based on those interests, and to object at any time to processing for direct marketing purposes. Processing for direct marketing purposes will cease upon receipt of a valid objection.
- Right not to be subject to automated decision-making: to request human review of any decision made solely by automated means that produces legal effects or similarly significant effects.
- Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time.
To exercise any of these rights, a written request should be submitted using the contact details in Section 9. A response will normally be provided within one calendar month of receipt. If a request is complex or numerous, this period may be extended by a further two months. In such cases, the individual will be informed of the extension and the reasons for it.
8. Data Security
Appropriate technical and organisational measures are implemented to protect personal data against unauthorised or unlawful access, loss, alteration, disclosure or destruction. Personal data is stored on secure systems, and access is restricted to personnel who require it for legitimate operational purposes. Security measures are reviewed periodically and updated in line with current standards and regulatory expectations.
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, the ICO will be notified without undue delay and, where feasible, within 72 hours of becoming aware of the breach. Where required by law, affected individuals will also be notified without undue delay.
9. Contact and Complaints
For any questions regarding this Privacy Policy, to exercise data subject rights or to raise a concern about the handling of personal data, contact:
Grosvenor Casino Reading South
Reading, United Kingdom
If the response to a query or complaint is not satisfactory, or if there are concerns that personal data is being processed in a manner that does not comply with UK GDPR or the Data Protection Act 2018, a complaint may be lodged with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.
ICO contact details: ico.org.uk | 0303 123 1113