Welcome to Bella Casino's privacy policy for 2026. This document outlines how Bella Casino collects, processes, stores, and protects your personal and financial data in full compliance with the UK GDPR and the Data Protection Act 2018. As a UK-regulated online casino operator, we are committed to safeguarding your information and respecting your data protection rights.
This privacy policy is designed to be clear, transparent, and accessible to all players. Whether you're registering an account, playing our games, or withdrawing funds, understanding how we handle your data is essential. We've structured this document to address your rights as a UK player and explain our obligations under current 2026 regulatory requirements.
π Table of Contents
- π What Data We Collect
- β‘ How We Process Your Data
- π Third-Party Data Sharing
- πͺ Cookies and Tracking Technologies
- β Your Rights Under UK GDPR
- π‘ Data Security and Storage
- π Data Protection Officer Contact
- π© Complaints to the ICO
π What Data We Collect at Bella Casino
Bella Casino collects personal and financial data at several stages of your player journey. Understanding what information we gather helps you make informed decisions about your privacy with us.
Account Registration Data
When you create a Bella Casino account, we collect the following information:
- Essential personal identifiers: Full name, date of birth, email address, and phone number
- Residential information: Full postal address, city, postcode, and country of residence
- Account credentials: Username and password (encrypted securely)
- Payment verification: Billing address, which may differ from residential address
This data is mandatory to comply with UK gambling licensing requirements and anti-money laundering (AML) regulations enforced in 2026. We do not collect this information for marketing purposes without your explicit consent.
Financial and Payment Data
To process deposits, withdrawals, and manage your account balance, Bella Casino collects:
- Payment method details (Visa, PayPal, bank account information)
- Transaction history and amounts wagered
- Deposit and withdrawal records with timestamps
- Currency preferences and payment limits
- Card verification codes (processed securely by third-party payment providers)
We do NOT store full card numbers on our servers. Payment processing is handled by PCI-DSS compliant third-party providers as detailed in the data sharing section below.
Verification and Compliance Data
Under UK GDPR and AML obligations, we collect additional data for identity verification:
- Copies of government-issued ID (passport, driving licence)
- Proof of residential address (utility bills, council tax statements)
- Source of funds documentation (for significant deposits)
- Selfie verification for enhanced account security
This data is retained for six years after account closure, as required by UK financial regulations in 2026.
Gameplay and Behavioural Data
We collect information about your interactions with our platform:
- Games played and time spent on each game
- Betting patterns and wagering amounts
- Login times and session duration
- Device information (operating system, browser type, IP address)
- Referral source and marketing channel attribution
This data helps us improve game performance, customise your experience, and identify players who may benefit from responsible gaming support.
β‘ How Bella Casino Processes Your Data
Data processing at Bella Casino operates under strict legal bases defined by UK GDPR in 2026. We process your information only when we have a lawful justification to do so.
Legal Bases for Data Processing
| Processing Purpose | Legal Basis | Retention Period |
|---|---|---|
| Account creation and management | Contractual necessity (to provide gambling services) | Duration of account + 6 years post-closure |
| AML and identity verification | Legal obligation (Gambling Commission, FCA) | 6 years after account closure |
| Payment processing | Contractual necessity | Duration of payment relationship + 6 years |
| Marketing communications | Explicit consent (opt-in) | Until withdrawal of consent |
| Fraud prevention and security | Legitimate business interest | 2-3 years |
| Responsible gaming interventions | Legal obligation + legitimate interest | As required for player protection |
We do NOT process your data on the basis of legitimate interest alone for marketing or advertising purposes. All marketing communications require your active consent, which you can withdraw at any time via your account settings or by contacting our Data Protection Officer.
Automated Decision-Making and Profiling
Bella Casino uses automated systems to detect fraud, identity mismatches, and responsible gaming risks. These systems may flag your account for additional verification if unusual activity is detected. You have the right to request a manual review of any automated decision. See the Your Rights Under UK GDPR section below for details on how to challenge decisions.
π Third-Party Data Sharing
Bella Casino shares your data with third parties only when necessary to deliver services, comply with law, or protect player safety. We have strict data sharing agreements in place with all partners.
Processors and Service Providers (2026)
| Service Provider Category | Purpose | Location | Data Shared |
|---|---|---|---|
| Payment processors (Visa, PayPal, Stripe) | Transaction processing | EU / International | Payment method, amount, residential address |
| Identity verification providers (IDology, Intellinetics) | AML and KYC verification | EU / USA | ID scan, address, full name, DOB |
| Responsible gaming support organisations | Self-exclusion and problem gambling assistance | UK | Account email, selected self-exclusion settings |
| Hosting and cloud infrastructure | Data storage and platform operation | EU (GDPR-compliant servers) | All account and gameplay data |
| Marketing and analytics partners (if consented) | Campaign tracking and audience insights | EU / International | Email, gaming behaviour (pseudonymised) |
| Affiliate and referral networks | Commission tracking (only if you joined via referral) | EU / International | Referral code, account creation date |
All third-party processors are contractually bound by Data Processing Agreements (DPAs) that comply with UK GDPR. We only share the minimum data necessary for each specific purpose. Processors are not permitted to use your data for their own marketing purposes.
Legal and Regulatory Disclosure
We may disclose your data to UK regulatory bodies without your prior consent if required by law. These include:
- The Gambling Commission (gambling regulation and licence compliance)
- The Financial Conduct Authority (FCA) (anti-money laundering oversight)
- The National Crime Agency (NCA) (serious fraud or crime investigation)
- HM Revenue & Customs (tax compliance)
- UK Police forces (criminal investigations)
Such disclosures are made only when legally required and only the information necessary to fulfil the legal obligation is shared.
πͺ Cookies and Tracking Technologies
Bella Casino uses cookies and similar tracking technologies to enhance your gaming experience, remember your preferences, and analyse site performance in 2026. Below is a breakdown of the cookies we use:
Essential Cookies (Always Active)
- Session ID cookies: Keep you logged in during your session
- Security tokens: Protect your account from unauthorised access
- Preference cookies: Remember your language, currency, and game settings
These cookies are necessary for the website to function and cannot be disabled without preventing access to your account.
Analytics and Performance Cookies (Consent Required)
- Google Analytics cookies: Track page visits, user behaviour, and game popularity
- Heatmap tracking: Understand how players navigate the site
- Performance monitoring: Identify and fix technical issues
These cookies are optional and require your explicit consent during the first site visit. You can change your preferences in the cookie banner at the bottom of any page.
Marketing and Advertising Cookies (Consent Required)
- Retargeting pixels: Show you Bella Casino ads on other websites (if you've consented)
- Third-party ad network cookies: Track ad performance and conversions
- Social media tracking: Enable Facebook Pixel and similar tools (consent-based)
You have full control over marketing cookies. You can opt out at any time without affecting your ability to play at Bella Casino. Marketing cookies are only set if you actively consent in the cookie banner.
Third-Party Cookies
Our payment processors, live casino providers, and responsible gaming partners may set their own cookies. These are governed by their privacy policies. You can review their data practices by visiting their websites directly.
For more information about your gaming options and features, see our complete games guide and live casino section.
β Your Rights Under UK GDPR
As a UK player, you have seven key data protection rights under GDPR in 2026. We explain each right and how to exercise it:
1. Right of Access
You have the right to request a copy of all personal data Bella Casino holds about you. This is called a Subject Access Request (SAR). You will receive your data in a portable, machine-readable format within 30 days of making the request.
How to request: Email our Data Protection Officer (contact details below) with "Subject Access Request" in the subject line. Include your full name, email, and account number.
2. Right to Rectification
If you believe any data we hold about you is inaccurate or incomplete, you can request correction. This is particularly important for address, name, or payment information.
How to request: Log into your Bella Casino account and update your details directly in the profile section, or contact our DPO with evidence of the correct information.
3. Right to Erasure ("Right to Be Forgotten")
Under certain circumstances, you can request that Bella Casino deletes your personal data. However, this right is limited in gambling because we must retain financial records for six years under UK law. We will delete data that is no longer necessary for our original purpose.
Important limitation: We cannot erase data if you have outstanding account balance, active bets, or pending transactions. Self-exclusion data is also retained as required by responsible gaming regulations.
4. Right to Restrict Processing
You can request that Bella Casino limits how we use your data while a dispute is being resolved or if you believe processing is unlawful. Once restricted, we will only store your data but not use it for marketing, gameplay, or other purposes (except where legally required).
5. Right to Data Portability
You have the right to receive your data in a structured, commonly used format (such as CSV or JSON) and to transfer it to another service provider. This applies particularly to email addresses, account history, and gameplay records.
How to request: Contact our DPO and specify the data you want in a portable format. We will provide this within 30 days at no cost.
6. Right to Object
You can object to our use of your data for marketing, profiling, or legitimate interest purposes. If you object, we will stop processing that data for the objected purpose.
Right to object to marketing: Unsubscribe from email campaigns via the "Unsubscribe" link in any marketing email, or log into your account and update communication preferences.
7. Rights Related to Automated Decision-Making
You have the right to challenge automated decisions made about you (such as account suspension for fraud or bonus denial). You can request a manual review and explanation of how the decision was made.
How to request: Contact our DPO within 14 days of receiving notification of the automated decision. Explain why you believe the decision is incorrect.
π‘ Data Security and Storage
Bella Casino implements industry-leading security measures to protect your data from unauthorised access, breaches, and misuse in 2026.
Encryption and Technical Safeguards
- SSL/TLS encryption: All data transmission between your browser and our servers is encrypted with 256-bit SSL
- Data encryption at rest: Personal and financial data is encrypted when stored on our servers
- Firewalls and intrusion detection: Multiple layers of network security monitor and block unauthorised access attempts
- Regular security audits: Third-party security firms conduct penetration testing and vulnerability assessments annually
- Password hashing: Passwords are hashed using bcrypt, making them unreadable even to Bella Casino staff
Data Storage Locations
Your data is primarily stored on GDPR-compliant servers located within the European Union. We do not transfer data to countries outside the UK/EU without adequate safeguards in place (such as Standard Contractual Clauses).
Access Controls
Only authorised Bella Casino staff can access your personal data, and only for legitimate purposes (customer support, fraud prevention, regulatory compliance). All staff members sign confidentiality agreements and receive annual data protection training.
Data Retention Schedule
| Data Type | Retention Period | Reason for Retention |
|---|---|---|
| Account registration details | Duration of account + 6 years after closure | UK AML and gambling law requirements |
| Payment and transaction records | 6 years after final transaction | Tax and financial regulation compliance |
| Identity verification documents (ID, address) | 6 years after account closure | Gambling Commission requirements |
| Fraud detection and security logs | 2-3 years | Fraud prevention and security |
| Marketing and analytics data (if consented) | Until consent withdrawn | Personalisation and campaign optimisation |
| Responsible gaming and self-exclusion records | As required by regulation (typically permanent) | Player protection and multi-operator enforcement |
| Customer support chat logs | 1-2 years | Service improvement and dispute resolution |
| Server logs and IP addresses | 30-90 days | Technical troubleshooting and security |
π Bella Casino Data Protection Officer Contact
If you have questions about this privacy policy, wish to exercise any of your rights, or have concerns about how Bella Casino processes your data, please contact our Data Protection Officer (DPO):
Bella Casino Data Protection Officer
Email: [email protected]
Address: Bella Casino Legal Department, UK (registered address available on our website)
Response time: Within 14 days of receipt
When contacting our DPO, please include:
- Your full name and Bella Casino account email address
- A clear description of your request or concern
- Any reference numbers or supporting documentation
- Your preferred method of contact (email or postal mail)
We take all data protection enquiries seriously and will provide a substantive response within the timeframes required by UK GDPR. If you're not satisfied with our response, you can escalate your complaint to the Information Commissioner's Office (ICO) as detailed below.
π© Complaints to the Information Commissioner's Office (ICO)
If you believe Bella Casino is not complying with UK GDPR or your data rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection authority.
How to File a Complaint with the ICO
ICO Contact Details (2026):
Website: ico.org.uk
Email: [email protected]
Telephone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, UK
You have the right to file a complaint at any time, whether or not you have contacted Bella Casino's DPO first. However, we encourage you to contact us first so we can attempt to resolve the issue. Many concerns can be resolved quickly through direct communication.
What the ICO Will Investigate
The ICO investigates complaints related to:
- Unauthorised data processing or use
- Failure to grant you access to your data
- Breach of your GDPR rights
- Inadequate data security leading to breaches
- Unwanted marketing communications
- Data sharing without consent
The ICO can issue formal enforcement notices, fine organisations, and award compensation to data subjects who have suffered damage as a result of violations.
Additional Privacy Information
Changes to This Policy
Bella Casino may update this privacy policy at any time to reflect changes in our data practices, UK law, or regulatory guidance. We will notify you of material changes by email or through a prominent notice on our website. Your continued use of Bella Casino after such changes constitutes acceptance of the updated policy.
Links to Other Websites
This privacy policy applies only to Bella Casino's website and services. We are not responsible for the privacy practices of third-party websites linked from our site, including payment processors, responsible gaming organisations, or game providers. Always review the privacy policies of external sites before sharing your information.
Children and Under-18 Players
Bella Casino is strictly for players aged 18+ (21+ in some jurisdictions). We do not knowingly collect data from anyone under 18. If we become aware that a minor has registered, we will immediately suspend the account and delete associated data. Parents or guardians who believe their child has accessed our site should contact us immediately.
Related Bella Casino Policies
For a complete understanding of how we operate, please review our related documents:
- See the full Bella Casino terms and conditions including data-related account rules and bonus terms
- Manage your account and player protection settings including self-exclusion and deposit limits
- Common questions about account verification and data in our frequently asked questions section
Last Updated: January 2026
Next Review Date: January 2027
