Privacy Policy

Version: 1.0  |  Last Updated: 30 October 2025

This Privacy Policy explains how Holiganbet ("we", "us", or "our"), operating through holiganbet.co.uk, collects, uses, stores, and shares your personal data. It also describes your rights under applicable data protection law and how to exercise them. Please read this document carefully alongside our Terms & Conditions and Responsible Gaming policy, which form part of your relationship with us.

1. Introduction

1.1. Holiganbet is committed to protecting the privacy and personal data of all users who access or use our website and services at holiganbet.co.uk. We operate as a data controller in respect of the personal data we process about you, and we take that responsibility seriously.

1.2. We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), as overseen by the Information Commissioner's Office (ICO), the UK's independent authority for data protection and privacy. Our practices also reflect the requirements of the Gambling Act 2005 and the Licence Conditions and Codes of Practice (LCCP), which impose specific obligations relating to the collection and use of customer data.

1.3. By registering an account or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please discontinue use of our platform. This policy applies to all personal data collected through our website, mobile interfaces, customer support communications, and any related digital channels.

2. Data We Collect

2.1. We collect only the personal data that is necessary and proportionate for the purposes described in this policy. The categories of data we collect include, but are not limited to, the following:

2.1.1. Identity & Contact Data

• Full legal name, date of birth, and gender
• Residential address, including postcode
• Email address and telephone number
• Copies of identity documents submitted for Know Your Customer (KYC) verification purposes (e.g. passport, driving licence, utility bill)

2.1.2. Account & Financial Data

• Username, password (stored in encrypted format), and account preferences
• Payment method details, including partial card numbers, bank account identifiers, and e-wallet references
• Deposit history, withdrawal records, and transaction logs
• Bonus usage, wagering activity, and account balance information

2.1.3. Behavioural & Technical Data

• IP address, browser type, operating system, and device identifiers
• Session duration, pages visited, games played, and betting patterns
• Geolocation data (country and region level, used to verify eligibility)
• Log files and error reports generated during your use of the platform

2.1.4. Responsible Gaming Data

• Self-exclusion requests, deposit limit settings, and cooling-off period instructions
• Customer interaction records related to problem gambling indicators, in line with our Responsible Gaming policy

2.1.5. Communications Data

• Content of emails, live chat transcripts, and support tickets submitted to our team
• Marketing preferences and opt-in or opt-out records
• Survey responses and any voluntary feedback provided

2.2. We do not intentionally collect special category data as defined under Article 9 of the UK GDPR (such as data concerning health, racial or ethnic origin, or political opinions) unless you explicitly provide it in correspondence. Where our Responsible Gaming obligations require us to identify potential gambling-related harm — which may incidentally involve inferences about behaviour — we handle such data with the highest level of care and in strict compliance with the law.

2.3. Where you provide data about another individual (for example, when reporting a concern on behalf of a third party), you confirm you have their authority to do so.

3. How We Use Your Data

3.1. We use your personal data only for specific, legitimate purposes and will not process it in a manner incompatible with those purposes. Our primary uses are as follows:

3.1.1. Account Registration & Service Delivery

We process your identity, contact, and account data to create and manage your Holiganbet account, verify your age (minimum 18 years), authenticate logins, and provide you with access to our gaming services, promotions, and customer support.

3.1.2. Legal & Regulatory Compliance

We are legally required to conduct identity verification and age checks, perform anti-money laundering (AML) screening, carry out source-of-funds checks, and retain transaction records. These obligations arise from the Gambling Act 2005, HM Revenue & Customs requirements, and applicable financial crime legislation. Compliance data is processed regardless of your marketing preferences.

3.1.3. Payment Processing

We use financial data to process deposits and withdrawals through your chosen payment methods, handle chargebacks or disputes, and detect fraudulent transactions. Payment card data is processed in accordance with PCI DSS standards via our certified payment service providers.

3.1.4. Responsible Gaming Monitoring

We analyse behavioural and account data to identify signs of problem gambling and fulfil our obligations under our Responsible Gaming policy. This may include proactive outreach, account restrictions, or referrals to support organisations where appropriate.

3.1.5. Marketing & Communications

Where you have provided explicit consent, we may send you promotional emails, personalised offers, or platform updates. You may withdraw consent at any time by clicking the unsubscribe link in any marketing message or by contacting us at support@holiganbet.co.uk.

3.1.6. Fraud Prevention & Security

Technical and behavioural data is used to monitor for suspicious activity, prevent account takeovers, and protect the integrity of our platform and other users.

3.1.7. Analytics & Platform Improvement

Aggregated and pseudonymised data helps us understand how users interact with our platform, identify technical issues, and improve our products and services.

4. Legal Bases for Processing

4.1. UK GDPR requires that every data processing activity has a valid legal basis. The table below sets out the bases we rely on:

4.2. Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Withdrawal does not affect processing performed under other legal bases.

4.3. Where we rely on legitimate interests, we have conducted a balancing test to ensure our interests do not override your rights, freedoms, or reasonable expectations. You may request information about any such assessment by contacting us.

5. Data Sharing & Third Parties

5.1. We do not sell your personal data. We may share it with carefully selected third parties only where necessary and lawful to do so. Categories of recipients include:

5.1.1. Payment Service Providers

We share financial data with processors and payment gateways to facilitate deposits and withdrawals. Accepted payment methods for UK customers include: Visa, Mastercard, Maestro, PayPal, Skrill, Neteller, Apple Pay, Google Pay, Paysafecard, and Bank Transfer. Each provider operates under its own privacy policy and is bound by applicable data protection law.

5.1.2. Identity Verification & Compliance Providers

Third-party KYC and AML service providers may process your identity documents and screen your details against relevant sanctions, PEP (Politically Exposed Person), and adverse media databases.

5.1.3. Regulatory & Law Enforcement Authorities

We may be required to disclose your data to the UK Gambling Commission, the ICO, HMRC, the police, or other competent authorities where required by law, court order, or regulatory instruction. We will inform you of such disclosure where legally permitted to do so.

5.1.4. Technology & Analytics Partners

Providers of hosting infrastructure, customer relationship management (CRM), email delivery, analytics platforms, and fraud detection tools may process your data on our behalf under data processing agreements that require them to uphold the same data protection standards we apply.

5.1.5. Responsible Gaming Schemes

Where you request self-exclusion or where we identify a safeguarding concern, we may share relevant information with industry-wide self-exclusion schemes and, where applicable, with support organisations referenced in our Responsible Gaming policy.

5.2. All third-party processors are required to process your data only on our documented instructions and are prohibited from using your data for their own independent purposes. We maintain a register of processing activities and third-party agreements as required by Article 30 of the UK GDPR.

6. Cookies & Tracking Technologies

6.1. Our website uses cookies and similar technologies — including pixel tags, web beacons, and local storage — to operate core site functionality, personalise your experience, and analyse traffic patterns.

6.1.1. Types of Cookies We Use

• Strictly necessary cookies: Required for session management, authentication, and security. These cannot be disabled without impairing core functions.
• Functional cookies: Remember your preferences, such as language settings, selected currency (GBP by default for UK users), and login state.
• Analytical/performance cookies: Collect anonymous or pseudonymised data about how users navigate our site, which pages are most visited, and where errors occur. We use this data to improve the platform.
• Marketing/targeting cookies: Used only with your consent to deliver relevant promotional content and track the effectiveness of our advertising campaigns.

6.2. Upon your first visit to holiganbet.co.uk, you will be presented with a cookie consent banner. You may accept all cookies, customise your preferences by category, or reject all non-essential cookies. Strictly necessary cookies will be set regardless of your choice, as they are essential for the platform to function.

6.3. You may also manage or delete cookies at any time through your browser settings. Please note that disabling certain cookies may affect the performance or availability of some features. For further information about cookies and how to control them, visit www.allaboutcookies.org.

6.4. We do not use cookies or tracking technologies to build profiles of users for the purpose of making automated decisions that produce significant legal or similarly significant effects, unless you have been informed of and consented to such processing.

7. Data Security

7.1. The security of your personal data is a priority at Holiganbet. We implement a layered approach to information security that combines technical, organisational, and procedural safeguards appropriate to the sensitivity of the data we hold.

7.1.1. Technical Measures

• Transport Layer Security (TLS/SSL): All data transmitted between your browser and our servers is encrypted in transit using industry-standard TLS protocols.
• Encryption at rest: Sensitive data, including payment details and identity documents, is stored using strong encryption algorithms.
• Access controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Firewalls and intrusion detection: Our infrastructure is protected by firewalls, continuous monitoring systems, and automated intrusion detection tools.

7.1.2. Organisational Measures

• Regular staff training on data protection responsibilities and security awareness
• Internal data protection policies and procedures aligned with UK GDPR requirements
• Contractual data protection obligations imposed on all third-party processors
• Periodic internal reviews and data protection impact assessments (DPIAs) where required

7.2. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware, and we will notify affected individuals without undue delay where the breach is likely to result in a high risk to those individuals. We maintain an internal breach register in accordance with our legal obligations.

7.3. Despite our efforts, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential. If you suspect unauthorised access to your account, please contact us immediately at support@holiganbet.co.uk.

8. Data Retention

8.1. We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. Specific retention periods are governed by the following principles:

• Account and transactional data: Retained for a minimum of five years following account closure or the last transaction, in compliance with AML regulations and the Gambling Act 2005.
• KYC and identity documents: Retained for at least five years from the date of verification or the end of the customer relationship, whichever is later, as required by the Money Laundering Regulations.
• Responsible gaming records: Retained for the duration of any self-exclusion period and for a reasonable period thereafter, to ensure continuity of safeguarding measures.
• Marketing data: Retained until you withdraw consent or request erasure, subject to applicable legal holds.
• Technical and log data: Typically retained for up to 12 months for security monitoring and fraud prevention purposes.

8.2. When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you. Anonymised data may be retained indefinitely for statistical or analytical purposes.

9. Your Rights

9.1. As a data subject under the UK GDPR, you have a number of rights regarding your personal data. We are committed to facilitating the exercise of those rights in a transparent and timely manner. Your rights are as follows:

9.1.1. Right of Access (Subject Access Request)

You have the right to request a copy of the personal data we hold about you, along with information about how it is processed, the categories involved, the recipients to whom it has been disclosed, and the expected retention period. We will respond to verified requests within one calendar month of receipt. If your request is complex or numerous, we may extend this period by a further two months and will notify you accordingly.

9.1.2. Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented. We will act on valid rectification requests promptly and, where appropriate, notify any third parties to whom the data has been disclosed.

9.1.3. Right to Erasure ("Right to Be Forgotten")

You may request the deletion of your personal data where: (a) it is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other legal basis; (c) you object to processing and there are no overriding legitimate grounds; (d) the data has been unlawfully processed; or (e) erasure is required to comply with a legal obligation. This right is not absolute — we may retain data where retention is required by law, such as under AML or gambling regulations.

9.1.4. Right to Restriction of Processing

You may request that we temporarily suspend the processing of your data where: (a) you contest the accuracy of the data; (b) the processing is unlawful but you prefer restriction to deletion; (c) we no longer need the data but you require it for a legal claim; or (d) you have objected to processing and we are assessing whether our legitimate interests override yours.

9.1.5. Right to Data Portability

Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that we transmit it directly to another controller where technically feasible.

9.1.6. Right to Object

You have the right to object at any time to processing based on our legitimate interests (Art. 6(1)(f)), including profiling for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose without further assessment. For other legitimate interest processing, we will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

9.1.7. Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing — including profiling — that produce significant legal or similarly significant effects on you. Where such automated decisions are made (for example, as part of fraud detection processes), you have the right to request human review, to express your point of view, and to contest the decision.

9.1.8. Right to Withdraw Consent

Where we process your data on the basis of consent, you may withdraw that consent at any time by contacting us or updating your account settings. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

9.1.9. Right to Lodge a Complaint

If you are not satisfied with our response to a rights request or believe your data has been processed unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We encourage you to contact us in the first instance so we have the opportunity to address your concern directly before you escalate to the ICO.

9.1.10. How to Exercise Your Rights

To submit any data rights request, please contact our Data Protection Officer (DPO) at privacy@holiganbet.co.uk. We may ask you to verify your identity before processing your request to protect against fraudulent submissions. We will not charge a fee for legitimate requests, although we reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

10. International Data Transfers

10.1. Your personal data is primarily stored and processed within the United Kingdom. However, some of our third-party service providers — including cloud hosting partners, analytics platforms, and KYC solution providers — may be located or operate servers outside the UK.

10.2. Where your data is transferred to a country not deemed to provide an adequate level of protection under UK GDPR, we ensure that appropriate safeguards are in place before any transfer takes place. These safeguards may include:

• UK International Data Transfer Agreements (IDTAs) or their equivalent, entered into with the receiving party
• Standard Contractual Clauses (SCCs) approved or adopted for use under UK data protection law
• Binding Corporate Rules (BCRs) approved by the ICO, where applicable
• Adequacy decisions issued by the UK Secretary of State recognising the destination country as providing equivalent protection

10.3. You may request further information about the specific safeguards applied to any particular international transfer by contacting our DPO at privacy@holiganbet.co.uk. We will not transfer your data internationally unless a lawful transfer mechanism is in place.

11. Minors

11.1. Our services are strictly intended for individuals who are 18 years of age or older. We do not knowingly collect personal data from persons under the age of 18, and we do not permit minors to register accounts or access gambling services on our platform.

11.2. As part of our registration process, all users are required to confirm they are at least 18 years old, and we conduct age verification checks in accordance with our legal obligations. Where we have reason to believe that an account belongs to, or is being accessed by, a person under the age of 18, we will suspend the account pending verification and, if confirmed, permanently close it.

11.3. If you become aware that a minor has provided us with personal data or has accessed our services, please notify us immediately at support@holiganbet.co.uk. We will take prompt steps to investigate, delete any data collected from the minor, and close any associated account.

11.4. We strongly encourage parents and guardians to make use of parental control tools and internet filtering software to prevent underage access to gambling websites. Further guidance is available in our Responsible Gaming policy.

12. Changes to This Policy

12.1. We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The "Last Updated" date at the top of this page will be revised whenever a substantive change is made.

12.2. Where changes are material — meaning they significantly affect your rights or the way we process your data — we will notify you by email (using the address registered to your account) or by displaying a prominent notice on our website prior to the changes taking effect. For minor or administrative updates, publication on this page will be sufficient notice.

12.3. We encourage you to review this Privacy Policy periodically. Your continued use of our services following the publication of any changes constitutes your acknowledgement that you have had the opportunity to review the updated policy. If you disagree with the changes, you may close your account by contacting our support team and request deletion of your data in accordance with Section 9.1.3 above, subject to our legal retention obligations.

13. Contact Information

13.1. Holiganbet takes data protection seriously and has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection legislation. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact us using the details below:

13.2. We aim to respond to all data protection enquiries within five working days. Complex subject access requests will be handled within the statutory one-month period as described in Section 9.1.1. All communications should be sent in English.

13.3. For urgent issues relating to suspected account compromise or data breach, please contact support@holiganbet.co.uk and mark your message as urgent. Our team monitors this address during operational hours.

Support for Problem Gambling in the UK

We are committed to safer gambling. If you or someone you know needs help, the following free, confidential organisations provide support across the United Kingdom:

For more information on the tools and protections available to you, including deposit limits, self-exclusion, and cooling-off periods, please visit our Responsible Gaming page.