- Introduction
This Privacy Policy sets out how personal data is collected, processed, stored, and protected in connection with the services provided by Grosvenor Casino Stoke. The policy applies to customers, visitors, and any other individuals whose personal data is handled as part of the casino’s operations.
Processing of personal data is carried out in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By engaging with the services of Grosvenor Casino Stoke, you acknowledge that your personal data will be processed as described in this policy.
This policy should be read together with any other privacy notices or terms provided at the point of data collection.
- Data Controller
Grosvenor Casino Stoke is the data controller in respect of personal data collected through its premises and associated services. As data controller, Grosvenor Casino Stoke determines the purposes and means of processing your personal data.
Questions about this policy or requests to exercise data protection rights should be submitted using the contact details set out in Section 9.
- Personal Data Collected
The following categories of personal data may be collected and processed:
- Identity data: full name, date of birth, photographic identification such as passport or driving licence copies, and proof of signature.
- Contact data: postal address, email address, and telephone number.
- Verification data: documents submitted for age verification, identity verification, and source of funds checks.
- Transaction data: records of gaming activity, account history, and financial transactions.
- Compliance data: information collected for anti-money laundering checks, fraud prevention, and due diligence obligations.
- Responsible gambling data: information relating to self-exclusion requests, spending patterns, and gambling behaviour monitoring.
- Technical data: where applicable, information collected through digital interactions with services associated with Grosvenor Casino Stoke.
Special category data is not collected unless required by law or where explicit consent has been provided.
- Purposes and Legal Bases for Processing
Personal data is processed only where a lawful basis applies. The primary purposes and associated legal bases are as follows:
4.1 Service Delivery
Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract. This includes managing customer accounts, verifying identity, and enabling participation in gaming activities on the premises.
4.2 Legal and Regulatory Compliance
Personal data is processed to comply with legal and regulatory obligations under UK law and applicable licence conditions. This includes obligations under the Money Laundering Regulations 2017, requirements imposed by the Gambling Commission, and applicable anti-money laundering and counter-terrorism financing legislation.
Under these obligations, certain records may be required to be retained for a minimum period of five years from the end of a business relationship or the date of an occasional transaction, or for such longer period as required by applicable law.
4.3 Fraud Prevention and Crime Detection
Personal data is processed where necessary for the prevention and detection of unlawful acts, including fraud, money laundering, and match-fixing. This may involve sharing data with fraud prevention agencies, law enforcement bodies, and sports integrity organisations where permitted or required by law.
4.4 Responsible Gambling Obligations
As a licensed gambling operator, Grosvenor Casino Stoke must monitor customer gambling behaviour and take appropriate action where indicators of harm are identified. Processing for this purpose is carried out in line with Gambling Commission licence conditions and the Social Responsibility Code of Practice.
4.5 Legitimate Interests
In certain cases, personal data is processed on the basis of the legitimate interests of the company, provided such interests are not overridden by your rights and freedoms. This may include internal record-keeping, operational security, and the prevention and investigation of misuse of services.
- Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected or as required by applicable law and regulatory obligations.
Purpose - Retention Period
Identity and verification records - Minimum 5 years from end of relationship
Transaction and gaming records - Minimum 5 years from date of transaction
Responsible gambling records - Duration of relationship plus applicable statutory period
Compliance and AML records - As required under Money Laundering Regulations 2017
Where retention beyond these periods is required by law or regulatory guidance, data will be retained for the period specified.
- Data Sharing
Personal data may be shared with third parties in the following circumstances:
- Regulatory authorities: including the Gambling Commission and other competent authorities where required by law or licence conditions.
- Law enforcement and crime investigation bodies: where there is a legal obligation or lawful basis to disclose information.
- Fraud prevention and risk agencies: for the purposes of conducting checks and preventing financial crime.
- Sports integrity bodies: where relevant to the detection or prevention of match-fixing or related offences.
- Third-party service providers: acting as data processors on behalf of Grosvenor Casino Stoke, subject to appropriate contractual safeguards and instructions.
Personal data is not sold to third parties. Any sharing of personal data takes place only where a lawful basis exists and where appropriate safeguards are in place.
- Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
- The right of access to the personal data held about you.
- The right to rectification of inaccurate or incomplete personal data.
- The right to erasure of personal data, subject to legal and regulatory retention obligations.
- The right to restriction of processing in certain circumstances.
- The right to data portability where processing is based on consent or contract and carried out by automated means.
- The right to object to processing based on legitimate interests.
- The right to withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact Grosvenor Casino Stoke using the details in Section 9. Verified requests will be responded to within one calendar month. Where requests are complex or numerous, this period may be extended by a further two months. In such cases, you will be informed of the extension.
- Complaints
If you consider that your personal data has not been handled in accordance with applicable data protection law, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
You are encouraged to contact Grosvenor Casino Stoke in the first instance so that any concerns can be addressed before escalation to the ICO.
- Contact Details
For data protection enquiries, requests to exercise your rights, or questions regarding this Privacy Policy, contact Grosvenor Casino Stoke using the official contact channels available at the casino premises or on the official website.
- Changes to This Policy
Grosvenor Casino Stoke may update this Privacy Policy from time to time. Any material changes will be communicated through appropriate channels. Periodic review of this document is recommended in order to remain informed about the processing of personal data.
This policy was last reviewed in 2025.