Privacy Policy

Version: 1.0  |  Last Updated: 4 November 2026

1. Introduction

Welcome to Pinkriches, accessible at pinkrichesuk.com (the "Website"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal information we collect about you, the purposes for which we use it, the legal bases we rely on, and the rights available to you under applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this document carefully before using our Website or creating an account. By accessing our services, you acknowledge that you have read and understood the practices described here. This policy should be read alongside our Terms & Conditions and our Responsible Gaming page, which together form the complete framework governing your use of Pinkriches.

If you have any questions about this Privacy Policy or the way we handle your data, please contact us using the details provided in Section 13 below.

2. Data We Collect

We collect personal data from you through several channels, including directly from you when you register, when you use our services, and automatically through your interactions with our Website. The categories of personal data we may collect include the following:

2.1 Identity and Contact Data

• Full name — first name, middle name (where applicable), and surname.
• Date of birth — used to verify that you meet the minimum legal age requirement of 18 years.
• Email address — used for account communication, verification, and support.
• Telephone number — used for identity verification and account security alerts.
• Residential address — including postcode and country of residence.

2.2 Account and Financial Data

• Username and password (stored in encrypted form).
• Payment method details — such as debit card details (Visa, Mastercard), e-wallet account references (PayPal, Skrill, Neteller, MuchBetter), bank transfer data (via Trustly or direct bank transfer), Paysafecard voucher codes, Apple Pay or Google Pay tokens, and PaybyPhone references. We do not store full card numbers on our servers.
• Transaction history — deposits, withdrawals, and any reversals or adjustments.
• Account balances and bonus records.

2.3 Technical and Usage Data

• IP address and approximate geolocation derived from it.
• Device information — browser type, operating system, screen resolution, and device identifiers.
• Log data — pages visited, time spent, links clicked, and error reports.
• Cookie and tracking data — as described in Section 6 below.

2.4 Responsible Gaming and Verification Data

• Identity documents — copies of passport, driving licence, or other government-issued ID provided during Know Your Customer (KYC) checks.
• Source of funds documentation — where required for anti-money laundering (AML) compliance.
• Self-exclusion and limit-setting preferences — recorded in accordance with our Responsible Gaming commitments.
• Player interaction records — including communications with our support team and responses to safer gambling prompts.

2.5 Data We Do Not Collect

We do not knowingly collect special category personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless this is strictly necessary and legally required for a specific regulatory obligation. We do not collect data from individuals who are under the age of 18.

3. How We Use Your Data

We use the personal data we collect for the following purposes. Each purpose is tied to a specific legal basis, which is set out in Section 4.

3.1 Account Registration and Management

We use your identity and contact data to create and maintain your account, verify your identity, enforce age restrictions, and provide you with access to our gaming services. Without this data, we cannot legally or technically provide our services to you.

3.2 Payment Processing

Financial data is used to process your deposits and withdrawals securely, detect and prevent fraudulent transactions, reconcile accounts, and issue refunds where applicable. We share only the minimum necessary data with our authorised payment service providers to complete these transactions.

3.3 Legal and Regulatory Compliance

We are obligated to process certain data to comply with anti-money laundering regulations, Know Your Customer requirements, and other applicable laws. This includes verifying your identity, monitoring transactions for suspicious activity, and retaining records for the periods required by law.

3.4 Responsible Gaming

We monitor account activity and use player data to identify signs of problematic gambling behaviour. Where we detect such patterns, we may intervene proactively or provide information about support resources, as described in our Responsible Gaming page. This processing is carried out in the public interest and in compliance with regulatory obligations.

3.5 Customer Support

When you contact us, we process your personal data to respond to your enquiry, resolve disputes, and improve the quality of our support. Communications may be recorded and retained for training and compliance purposes.

3.6 Marketing Communications

Where you have provided your consent, we may use your email address and other contact details to send you promotional offers, news about new games, and other marketing materials. You may withdraw this consent at any time by clicking "unsubscribe" in any marketing email or by contacting us at [email protected]. Withdrawing consent does not affect processing carried out before the withdrawal.

3.7 Website Analytics and Improvement

Technical and usage data is used to monitor the performance and security of the Website, understand how users navigate our platform, and implement improvements. This may involve the use of analytics tools, as detailed in Section 6.

4. Legal Bases for Processing

Under the UK GDPR, we are required to identify a lawful basis for every processing activity. The legal bases we rely on are as follows:

Where we rely on legitimate interests, we have assessed that our interests in operating a secure, efficient, and legally compliant gaming platform are not overridden by your rights and freedoms. You have the right to object to processing based on legitimate interests; see Section 9 for details on how to exercise this right.

5. Data Sharing & Third Parties

We do not sell your personal data to third parties. However, we may share your data with the following categories of recipients where it is lawful and necessary to do so:

5.1 Payment Service Providers

To process financial transactions, we share relevant payment data with authorised processors and gateway providers, including those supporting Visa, Mastercard, PayPal, Skrill, Neteller, Trustly, MuchBetter, Apple Pay, Google Pay, Paysafecard, and PaybyPhone. All such providers are contractually bound to process your data only for the specified purpose and to maintain appropriate security standards.

5.2 Identity Verification and Compliance Partners

We use regulated third-party providers to carry out KYC and AML checks. These providers may access your identity documents, date of birth, and address in order to validate your identity and assess risk. They are bound by strict confidentiality and data protection obligations.

5.3 Technology and Infrastructure Providers

Our Website is hosted and operated with the support of cloud infrastructure, customer relationship management, and analytics platforms. These providers act as data processors on our behalf and are contractually restricted from using your data for their own purposes.

5.4 Regulatory and Law Enforcement Authorities

We may disclose your data to relevant regulatory bodies or law enforcement agencies where required by law, court order, or in response to a lawful request. We will notify you of such disclosures where we are legally permitted to do so.

5.5 Responsible Gaming Organisations

In circumstances where a player has self-excluded or we are required to share data with responsible gambling schemes, we may share limited data with organisations such as GamCare, BeGambleAware, or the National Gambling Support Network to facilitate that process. This is done only to the extent necessary and in accordance with applicable law.

6. Cookies & Tracking Technologies

Our Website uses cookies and similar tracking technologies to function correctly and to enhance your experience. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

6.1 Strictly Necessary Cookies

These cookies are essential for the Website to operate and cannot be switched off. They include session cookies that keep you logged in, security tokens, and load-balancing cookies. No consent is required for these cookies.

6.2 Analytical and Performance Cookies

These cookies allow us to count visits, measure traffic sources, and understand how users interact with our Website. The information collected is aggregated and anonymous. We use this data to improve the performance and usability of the platform. These cookies are only set with your consent.

6.3 Functional Cookies

Functional cookies remember your preferences — such as language selection, preferred game categories, and display settings — so that your experience is consistent across visits. Consent is required before these are placed.

6.4 Marketing and Targeting Cookies

Where you have consented, we may use cookies from advertising networks to deliver relevant promotional content. These cookies track your browsing activity across websites. You may withdraw consent at any time via our cookie preference centre, accessible from the footer of the Website. Withdrawing consent does not affect cookies already placed.

You can also control cookies through your browser settings; however, disabling strictly necessary cookies may impair your ability to use certain features of our Website. For more information, visit allaboutcookies.org.

7. Data Security

We take the security of your personal data seriously and have implemented a range of technical and organisational measures designed to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your browser and our servers is protected using Transport Layer Security (TLS) encryption.
• Encryption at rest: Sensitive data stored on our servers, including passwords and payment references, is encrypted using industry-standard algorithms.
• Access controls: Access to personal data is restricted to authorised personnel who require it to perform their job functions. We operate a principle of least privilege.
• Firewalls and intrusion detection: Our infrastructure is protected by firewalls, real-time monitoring systems, and intrusion detection tools.
• Regular security assessments: We conduct periodic security audits and penetration testing to identify and remediate vulnerabilities.
• Staff training: All staff with access to personal data receive regular training on data protection obligations and security best practices.

Despite these measures, no system is entirely immune to security risks. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach and, where required, will notify affected individuals without undue delay.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following principles guide our retention decisions:

• Active accounts: Personal data is retained for the duration of your account with us, plus any additional period required by law.
• Closed or inactive accounts: Where an account is closed or becomes inactive, we retain core identity, transaction, and compliance records for a minimum of five (5) years from the date of account closure, in line with AML and financial record-keeping requirements under UK law.
• Marketing data: If you withdraw consent to marketing, we will remove your details from marketing lists promptly, while retaining a record of your withdrawal.
• Support communications: Records of customer support interactions are retained for up to three (3) years for quality assurance and dispute resolution purposes.
• Cookie data: Analytical and functional cookie data is retained in accordance with the cookie's individual lifespan, as disclosed in our cookie preference centre.

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

9. Your Rights

Under UK data protection law, you have a number of rights in relation to your personal data. We are committed to honouring these rights promptly and transparently. Your rights are as follows:

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you, together with information about how and why we process it. This is known as a Subject Access Request (SAR). We will respond within one calendar month of receiving your request. Where requests are complex or numerous, this period may be extended by a further two months, and we will notify you accordingly.

9.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Please notify us as soon as possible so that any inaccuracies can be addressed without delay.

9.3 Right to Erasure ("Right to be Forgotten")

You may request that we delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other legal basis applies), or where you have objected to processing based on legitimate interests and there are no overriding grounds. Please note that this right is not absolute: we may be required to retain certain data to comply with legal obligations, particularly in relation to AML and KYC records.

9.4 Right to Restrict Processing

You have the right to ask us to restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, where processing is unlawful but you do not want erasure, or where you have objected to processing and we are assessing whether our legitimate interests override your rights.

9.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another controller where technically feasible.

9.6 Right to Object

You have the right to object at any time to processing carried out on the basis of legitimate interests or for direct marketing purposes. If you object to direct marketing, we will stop processing your data for that purpose immediately. If you object on the grounds of legitimate interests, we will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

9.7 Rights Related to Automated Decision-Making and Profiling

Where we use automated processes to make decisions that have a significant effect on you — such as automated fraud checks or responsible gaming risk assessments — you have the right to request human review, to express your point of view, and to contest the decision. We do not use fully automated decision-making in ways that produce legal or similarly significant effects without appropriate safeguards.

9.8 Right to Withdraw Consent

Where our processing is based on your consent, you may withdraw that consent at any time by contacting us at [email protected] or by using the opt-out mechanisms provided in our communications. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

9.9 Right to Complain to the Supervisory Authority

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority, at ico.org.uk or by calling 0303 123 1113. We encourage you to contact us first so that we can address your concerns directly, but this does not affect your right to contact the ICO at any time.

To exercise any of these rights, please submit a written request to [email protected]. We may ask you to verify your identity before processing your request to ensure your data is not disclosed to an unauthorised person.

10. International Data Transfers

Pinkriches primarily stores and processes your data within the United Kingdom. However, in some instances, your personal data may be transferred to, or processed by, our service providers in countries outside the UK, including countries in the European Economic Area (EEA) or other third countries.

Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements. The mechanisms we rely on include:

• Adequacy decisions: Transfers to countries that the UK Government has recognised as providing an adequate level of data protection, such as EEA member states.
• International Data Transfer Agreements (IDTAs): Where the UK has not issued an adequacy decision for a particular country, we use IDTAs or UK Addenda to Standard Contractual Clauses (SCCs) to contractually bind recipients to equivalent data protection standards.
• Binding Corporate Rules (BCRs): Where applicable, transfers within corporate groups are governed by BCRs approved by the ICO.

You may request details of the specific safeguards in place for any international transfer by contacting us at [email protected].

11. Minors

Our services are strictly intended for individuals who are 18 years of age or older. We do not knowingly collect, process, or retain personal data from anyone under the age of 18. During registration, we require all users to confirm that they meet this minimum age requirement, and we conduct identity verification checks as part of our KYC process to enforce this restriction.

If we become aware that personal data has been collected from a person under 18, we will take immediate steps to delete that data and close the associated account. If you believe that a minor may have registered with us or provided us with their personal data, please contact us immediately at [email protected] so that we can investigate and act without delay. We also signpost age-restriction resources and parental control tools on our Responsible Gaming page.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or in applicable law. When we make material changes, we will notify you by posting the revised policy on this page with an updated version number and effective date. Where the changes are significant, we may also notify you by email to the address associated with your account.

We encourage you to review this page periodically to stay informed about how we protect your data. Your continued use of our Website following the posting of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you disagree with any changes, you should stop using our services and contact us to request account closure.

13. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we process your personal data, please do not hesitate to get in touch with us. We aim to respond to all data-related enquiries within 30 days.

For responsible gaming support, the following UK organisations provide free, confidential assistance:

• GamCare — National Gambling Helpline: 0808 8020 133 | gamcare.org.uk
• BeGambleAware — Free treatment and support: begambleaware.org
• Gamblers Anonymous UK — Peer support group meetings: gamblersanonymous.org.uk
• Gam-Anon — Support for friends and family of problem gamblers: gamanon.org.uk
• Gordon Moody Association — Residential treatment programmes: gordonmoody.org.uk
• NHS National Problem Gambling Clinic — Specialist NHS treatment service: cnwl.nhs.uk

See our Responsible Gaming page for more information about the tools and safeguards we provide, and our Terms & Conditions for the full contractual framework governing your use of Pinkriches.