Ready, Set, Spin
Your Next Win Awaits
When you play at National Lottery Casino, your privacy is important. This policy explains what personal information is gathered and how it is used to run games, handle £, stop fraud, and follow UK law. In addition, it tells you about your rights, how cookies can be tracked, and how information may be shared with payment providers and regulators. Where necessary, it also includes protections for UK players.
When you make an account at National Lottery Casino, you are asked to confirm that you have read and agree to our Privacy Policy. This step is necessary to create your profile, prove who you are, and allow safe access to games and payments during the sign-up process. Accepting these terms affects how we collect, use, and protect your personal information from the time you sign up until after you have unregistered. If you do not agree, you should not go ahead and create an account because we will not be able to offer account-based services like depositing £100 or withdrawing £500.
When you register, you give consent by actively confirming the Privacy Policy (for example, by checking a box or going through another similar step). This confirmation is required for essential processing, such as keeping your account safe, stopping fraud, and following the law. By clicking "I agree," you give us permission to use the information you give us when you sign up, like your contact information, date of birth, and any other information we need to make sure you're eligible. We may also use information about your nationality or where you live to make sure we're following the rules in the best way possible for you.
Account services include the ability to log in, help for players, tools for responsible gaming, and payment processing. Compliance and safety—helps with identity checks, controls to stop fraud, and keeping records required by law. If the Privacy Policy is changed in a big way, you may be asked to confirm your agreement again. We will always try to make the request clear when you log in or continue with steps related to registration if you continue to use your account after an update. You can change some privacy settings after signing up, like your marketing preferences, but core data processing that is needed to run your account legally and safely will stay in place as long as your account is active.
This is to make sure that the National Lottery Casino is safe, legal, and fair. These checks help make sure you are who you say you are, that you are old enough to play, and that no one else is abusing your account. As part of the check, we only ask for the information we need. We may also recheck the information if there are changes to your account activity, your information is updated, or transactions meet certain risk thresholds, like when you try to withdraw $100 or more, or if your deposit patterns change.
Identity and age verification data is used to make sure you are who you say you are and that you were born on a certain date. Name, date of birth, home address, and copies or images of your ID documents may be included. To make sure you are who you say you are and that you are the right age, we may also check your information against trusted databases, but only if they allow it. Your email address, phone number, and account login information can be used to verify your identity, keep your account safe, and make sure that you own the contact methods linked to your profile.
Payment and financial verification data helps make sure that the payment methods you use are real and that the transactions you make are legal. We might only need a few pieces of information about the payment method, proof that you own the payment method, and records of transactions related to deposits or withdrawals, depending on the method used. When you withdraw £250, change your withdrawal destination, or try to cash out a large amount of money, for example, we may ask for more proof.
Fraud and security data are used to spot fishy behavior and stop account takeovers, bonus abuse, and other types of fraud. This could include device IDs, IP addresses, rough locations, timestamps, login history, and patterns of gameplay and transactions. For example, when you log in from a new device or an odd place, these signals let us know that you are safe. To follow the law and stop money laundering, information about the source of funds and affordability may be asked for. Some supporting documents may be needed along with information about how you're funding your play. For example, if you make a lot of deposits or withdrawals in a short amount of time, or if your activity suggests that you are a high risk, we may ask for this. Proof of address and ownership of a payment method are some of the most common documents. These can be an ID card, passport, or driver's license. If we need to check your source of funds, we may ask for proof like payslips, bank statements, or other proof that fits your situation. If you send us documents, we may take a picture of them, write down their number, the dates they were issued and when they expire, and any other information that can be seen on them that we need to finish the check. Some verification providers may also send us confirmations that checks passed or failed, along with reference IDs. Instead of keeping more data than we need, we may collect these pieces of information. People's UK of residence and UK may be processed as part of compliance checks if this is necessary to follow the law or meet verification standards that are specific to the jurisdiction.
When you make a deposit or ask for a withdrawal, National Lottery Casino only processes the payment information needed to complete the transaction, confirm the payer, and keep your account safe from fraud. Using secure payment channels, payment information is sent to the right place, transactions are checked, and customers can ask for help with things like finding a missing payout. Encrypting sensitive payment information while it's in transit and only letting staff see it for support purposes keeps the risk level low. We try to avoid storing full payment credentials by using tokenization and masked references instead. This helps keep your financial information safe while still letting you easily deposit up to £10 and withdraw up to £20 (minimums can vary by method and UK).
We use personal information to make sure you're eligible, make sure you get your rewards, and stop people from abusing the system when you choose to take part in these activities. As part of this, you should make sure that your account information is correct and that any rules for promotions can be fully applied. We also use what you want to decide if we should send you marketing messages. When you choose to receive offers, you stay in charge. You can change your mind at any time by going to your account settings.
To see if you are eligible for a promotion, we may look at information about your account and activities, such as your age confirmation, registration information, verification status, session and device signals, deposit and wagering activity, and whether you have used previous offers within their limits. Your location or UK residency signals may also be used if needed. If it's important for a campaign, your UK may also be used.
When you activate a promotion, we process the information we need to give you the bonus and keep an eye on its terms, such as the minimum deposit amount (for example, £20), the bonus amount (up to £200), and any wagering requirements that are linked to the offer. This makes it easier to give out bonuses correctly, keep track of progress, and avoid giving out duplicate or wrong awards.
You may see different types of offers if you agree to marketing. For example, if you like different types of bonuses, we may suggest them based on your interests. The point of personalization is not to share your information with other players, but to make promotions more relevant to you. You can choose to opt in. You will only get promotional messages if that's how you want to be contacted. Email, SMS push notifications (if enabled), and account messages may send you offers, depending on what you choose. You can choose not to receive them or change your preferences. You can change your marketing settings or use the unsubscribe link in messages at any time to stop agreeing to receive promotional messages. If you opt out, you won't get any more promotional emails, but you will still get important service messages about your account, security, or transactions.
We could use information about bonuses to look for odd patterns, like people using multiple accounts, working together, or trying to get the same reward over and over again. When needed, this can include checking identifiers and account signals against each other to make sure our promotions are safe and we're following the rules.
The National Lottery Casino encourages responsible gaming by letting you set limits on your gambling and, if necessary, turn on self-exclusion. This is to make sure that the limits apply to your whole account and can't be gotten around. To do this, we need to process some personal data. This part talks about what kind of information is gathered about limits and self-exclusion, how it is used, who can see it, and how long it is kept. We only use this information to make gambling tools safer, follow the law, and keep you safe.
When you set limits on your deposit, loss, wagering, session, or time (for example, a daily deposit cap of £100), we keep track of the limit value, the time period it applies to, and any changes to it. This way, we can make sure that cooling off rules are followed and that your balance doesn't rise too quickly. We process the information we need to identify you and reliably apply the block if you ask for self-exclusion. This usually has your account number, contact information, date of birth, and settings for exclusions like the start date, duration, and scope. Device and technical identifiers that are linked to your account activity may also be stored if needed to stop people from re-registering. Limit settings—amount and time period (for example, a weekly loss limit of £250); Effective dates—when a limit starts, ends, or resets; Change logs—who changed the setting (you or customer service) and when; Cooling off or lock indicators—flags that stop increases until the allowed time has passed; Self exclusion parameters—duration, channel coverage, and rules for when you can be allowed to play again; We do not use your responsible gambling settings to make marketing decisions or to make promotions based on your profile. They're meant to stop play, not make it more likely. Limit and self-exclusion data are used to put blocks in place automatically and in real time. It's possible that your daily deposit limit is £100. Once you reach that limit, we won't let you make any more deposits and you won't be able to raise the limit until the required waiting period ends. Self-exclusion means that you agree to be limited in how you can use your account, deposit money, bet, and do other things.
Only trained teams who need to see them to protect people and meet their legal obligations can see these records. In cases where the law or licensing rules require it, we may share information about self-exclusion with regulated responsible gambling partners or exclusion schemes. This way, the exclusion can be seen and followed. If service providers are involved, like in identity verification or platform security, they are legally bound to keep our data private and can only process it as we tell them to.
We keep records of your choices to limit or self-exclude for as long as it takes to enforce those choices and meet our legal and regulatory retention obligations. Information about people who self-exclude may need to be kept after the exclusion period ends to show compliance and stop people from immediately re-registering. When someone asks for deletion, we will compare it to the time we are required to keep the information and will stop processing it if full deletion is not possible.
You can usually raise or lower limits right away in your account. In order to protect you, most increases come with a waiting period. Requests to self-exclude can be made through your account tools or by calling customer service. Once approved, they go into effect right away. So that we can make sure you are safe, if you think your limits or self-exclusion are not being followed correctly, please contact support right away.
If you use the National Lottery Casino on your phone, the app permissions you choose to allow are the first line of defense for your privacy. Even though permissions are needed for the app to work, you still have control over it. You can grant, deny, or change most permissions later in your phone's settings without affecting the security of your account. Mobile phones also create technical data that can be used to keep games stable, stop fraud, and help with controls for responsible gambling. According to this part, you can ask for certain permissions, process certain device data, and handle location signals in a way that protects your privacy. When an app asks for permissions, it may only do so when it needs to for a feature you are using. For instance, if you choose to make sign-in faster, the app may use the security features on your device. You may need file access to attach images or PDFs when you contact support or upload documents for account checks. This is the camera that you use to scan or take pictures of documents for verification or to take pictures that you want to send. Photos and files are used to upload papers, save receipts, or get the statements you need. This is where account alerts (like confirmations of logins), messages about responsible gambling, and marketing alerts (if you choose to receive them) go. Biometrics and device authentication are used to make sign-in easier when supported (for example, fingerprint or face unlock), but the app doesn't store your biometric template. Network access is needed to play games, get to your account, and talk to casino systems safely. Certain features may not work until you allow the relevant permission. If you deny a permission, the app should still let you play games and manage your account. In most cases, you can change permissions at any time in the settings of your device. Hints for better control: Keep security alert notifications turned on, but if you'd rather get fewer messages, turn off promotional notifications. Don't let people see your camera or files unless you need to do verification or send documentation to support. Device data: This is information that is automatically collected. To make sure that the mobile experience is safe and reliable, the app and services that go with it may process device and usage data, like the model of the device, the version of the operating system and app that is being used, the language, the time zone, the IP address, and diagnostic logs (for example, crash reports). This information is useful for fixing problems, improving performance, and keeping accounts safe from strange activity. Security checks may also use device IDs and signals to find logins that don't seem right, stop account takeovers, and stop automated abuse. When you're not in your casino account, these signals are usually used to check for risk and make sure the service is honest, not to find out who you are. Location data: what it can be used for Mobile phones usually use network-based signals (like IP-based location) and, when needed, device-level location services to handle location. The main reasons are to make sure that you can play from where you are, to enforce legal and regulatory rules, and to stop people from trying to get in illegally. When precise location is asked for, it should be linked to a clear purpose, like making sure the person can use the service while they are in UK. If you don't want to share your exact location, the app may find other ways to find you or limit what you can do until your eligibility is confirmed. Note: If you turn off location services, you might not be able to get to the casino from some places if the app can't confirm that you meet the requirements.
These layers include encryption, account protection, and data breach response. These steps are meant to lower the risk of unauthorized access while keeping the site running quickly and reliably. Regular checks, limited access within the company, and written procedures for handling incidents all make security an ongoing process. What you can expect from these protections and what you can do to make your account safer are listed below. Account protection, encryption, and breach response encryption and safe connections. Standard encryption protocols, like TLS, protect the data that is sent between your device and the casino platform. This makes it harder for people to steal sensitive data like passwords, account numbers, and payment information while it's being sent. When it's needed, sensitive data stored on systems is further protected by encryption and strict key management, so that only authorized personnel can access it. Controls to protect your account. Multiple safety measures are used for authentication, sessions, and behavioral monitoring to lower the risk of account takeover. It's best to use both the platform's security features and your own safety habits, especially if you play on a shared device or a public network. Security for passwords: Make sure each one is unique and long, and don't use credentials from other services. As soon as you think your password might have been seen, change it. Security measures for sessions: If you leave your device unattended, automatic session timeouts and device checks can help stop people from getting in without your permission. When someone tries to log in more than once and fails, their account may be temporarily restricted or subject to more checks to make sure they are not doing anything wrong. Verified changes: For high-risk actions like changing important account information, you may need extra confirmation to make sure the request really is yours. Keep your browser and operating system up to date, and don't save your passwords on devices that other people use. Keeps transactions and balances safe. Processing of payments is done through encrypted channels with checks that look for signs of fraud. If you are depositing £50 or withdrawing £, you may have to go through extra verification steps to make sure the transaction is legal and lower the risk that someone will misuse your account or payment method. How to find and fix data breaches. The casino has procedures in place to deal with security incidents quickly and consistently. Usually, this means finding the systems that are affected, containing the problem, keeping the relevant logs, and safely restoring services. Problematic players may be told about it and given useful advice on how to keep their accounts safe, like changing their passwords and checking to see if they've recently used their accounts. What you can do if you think something is wrong. If you see strange logins, bets, or changes to your information, you should change your password right away, end any active sessions if you can, and contact support with the time of the event and any relevant transaction or screenshot references. This makes the investigation go faster and helps keep your account safe from more bad behavior.
“Privacy Policy” for National Lottery Casino explains how we gather, use, share, and safeguard personal data you give us when you use our website, mobile apps, and other services related to this policy. You agree that you have read and understood this Privacy Policy when you sign up for an account or use our services. Stop using the services if you don't agree.
name, date of birth, username, password, nationality, and account identifiers. Information on how to get in touch: email address, phone number, and mailing address. Verification data includes copies or references of IDs, proof of address, and any age or eligibility checks that the law requires. Payment method information (usually tokenized), transaction history, and fraud-prevention signals are some of the financial and transaction data that is stored. Gameplay and activity data, such as session activity, game participation, bonuses, settings for responsible gaming, and interactions with customer service. Information about the device, its IP address, type of browser, operating system, cookies, and log files are all examples of technical data. Location data: an approximation of the location based on the IP address or a precise location when enabled for legal reasons. Note: We do not knowingly collect personal information from people who are not old enough to legally gamble. We will delete this data and make it harder to get to if we find it.
We use personal information to create your account and provide services, like registering you, letting you play, processing transactions, and running promotions. Identity, security, and compliance: to do Know Your Customer (KYC) checks, stop fraud, meet licensing requirements, and follow anti-money laundering rules. Customer support: to answer questions, settle disagreements, and keep the quality of service high. Personalization and analytics: to learn how things are used, make features better, and get the best performance. To send you marketing messages and deals when the law allows it and when you ask us to. Responsible gaming means keeping an eye on signs of risk and providing tools, limits, or other actions that encourage safe play.
Where applicable, we process personal information under one or more of the following legal bases: Contract : processing necessary to provide the services you request. Legal obligation: following the rules for taxes, licenses, and regulations. We have legitimate interests, such as protecting you from fraud, making services better, and encouraging responsible gaming, while also respecting your rights. In exchange for your permission, we will send you marketing messages and cookies or features that you may choose not to use.
We use cookies and other like them to run the site, remember your preferences, keep your accounts safe, and look at traffic. Cookies can be managed in your browser settings and, if they're available, through our consent tools. Some functions may not work properly if cookies are turned off.
We may share information with service providers like payment processors, identity verification partners, hosting providers, analytics providers, customer support platforms, and security vendors as long as they agree to keep it safe. If it's needed for licensing, audits, reporting, legal requests, or to protect our rights and users, regulators and authorities will see it. Affiliates and business transactions: within our company or in connection with a merger, acquisition, or reorganization, as long as the right safeguards are in place. To find and stop suspicious activity and make sure the platform is honest, fraud and risk networks are used. Transfers to other countries: Your information may be used in places other than your own. We use the right safeguards when transfers happen, such as contractual protections and security controls, to keep your information safe. For as long as it takes to provide services and meet legal and regulatory requirements, we keep personal information. Account status, transaction history, and laws that apply may change how long information is kept. If data is no longer needed, it is securely erased or made anonymous.
To keep personal information safe, we use administrative, technical, and physical measures such as access controls, monitoring, secure development practices, and encryption in transit when it makes sense. That being said, you should always keep your credentials and devices safe, because no system is 100% safe.
This depends on where you live, but you may have rights when it comes to your personal information. For example, you can access the information we have about you and ask for a copy of it. Correction: ask for updates to data that is wrong or missing. In cases where it is legal to do so, request deletion. Limitation and objection: ask that processing be limited or say no to certain uses. Request the transfer of certain data in a structured format that is commonly used. Choices about marketing: Use the controls given to stop receiving marketing messages. We may need to check your identity before fulfilling requests to keep your account safe. Account Controls and Responsible Gaming: We give you tools to help you control your play, such as deposit and loss limits, session reminders, cooling-off periods, and the ability to block yourself from playing. We may look at what you do with your account to help enforce responsible gaming rules and meet legal requirements. This Privacy Policy may be changed if the law, technology, or the way we do things changes. We will post the updated version with a new effective date. If necessary, we may let you know about important changes through the services or by email. You can get in touch with our privacy team through the ways listed in the services if you have any questions or concerns about privacy. Include enough information for us to be able to check and respond correctly.
Name, date of birth, email address, phone number, address, and login/security information are some of the things we need to open and manage your account. We also handle payment details (like masked card data, bank information, or wallet IDs) and transaction history for deposits and withdrawals. We may collect information about your device and session (IP address, browser, device ID), as well as your gameplay history and your "responsible gaming" settings, in order to stop fraud and follow the rules. We don't give out your personal information to other people.
All payments are sent through encrypted channels that are kept safe. When we can, we don't store full card numbers. Instead, we only store what we need for billing, handling chargebacks, and following the rules. Also, we keep an eye on transactions to see if there is anything fishy going on, do risk checks, and may ask for proof of payment method ownership before releasing withdrawals. If you think someone else is using your account without your permission, change your password right away and contact our support so we can lock the account and look over recent transactions.
There are legal requirements we have to follow and verification helps us make sure people are who they say they are. If we notice changes like a new device, payment method, or strange deposit patterns, we may ask for verification when you sign up, before your first withdrawal, after large withdrawals, or after you are registered. Common documents are a photo ID, proof of address, and proof that you own the payment method. Make sure that your profile information matches what's on your documents, and send in clear, unedited pictures to avoid delays in getting paid.
Availability is based on the rules in UK. Your ability to register and play may be limited if we don't allow players from your area. We may share limited account and transaction data with regulators or law enforcement when the law, licensing rules, or a valid request from them say so. We only tell people what they need to know, and when we do, we keep records of those disclosures. It is up to you to make sure that you are allowed to play from your country.
Checks for bonus eligibility and abuse depend on account, device, and payment information to make sure that each person and household only has one account, to confirm UK/location where necessary, and to apply bonus terms. If we find multiple accounts or patterns that look fishy, we may hold on to bonus funds and ask for proof before letting you withdraw £. There are limits on how much you can deposit, lose, and play in a session. We remember these limits so that they are applied on both desktop and mobile devices. The same security measures protect mobile access, and we suggest that you lock your device and avoid using public Wi-Fi for payments.
Our payment and transaction data is safe because we use encrypted connections and limited access. We only gather the information we need to handle deposits and withdrawals, stop fraud, and meet AML and licensing requirements. Payment partners who are regulated handle your card or banking information; we only store limited references where we are allowed to. For your safety, we may hold off on a withdrawal until we confirm who owns the account, the payment method, or the source of the funds for cashouts that are more risky or worth more.
Bonus
for first deposit
1000£ + 250 FS
