Privacy Policy

This Privacy Policy explains how Loot collects, uses, stores and protects personal information belonging to players who register an account, browse the site or otherwise interact with our services. It applies to all visitors and registered account holders and should be read together with our Terms & Conditions and our Responsible Gaming information. The policy covers the types of data we gather, the legal grounds for processing it, how cookies are used, how information is shared with third parties, how long records are kept, and what rights a player has over their own data. It also sets out how to raise a query or a complaint about the handling of personal information.

Loot operates under regulation from the UK Gambling Commission and the Alderney Gambling Control Commission, and as a UK-facing gambling business we are required to hold certain personal and financial records for defined periods as part of our licensing conditions and anti-money laundering obligations. This means that some data retention and verification requirements described below are not optional and apply to every account regardless of activity level or deposit history.

Who This Policy Applies To

This policy applies to anyone who visits the Loot website, creates an account, deposits funds, plays games or contacts customer support. Registration and continued use of the account is restricted to individuals who are at least 18 years old, which is the legal minimum age for gambling in the United Kingdom. Age verification is carried out as part of the account registration and identity checking process, and any account found to belong to a person under 18 will be closed, with funds handled in line with our internal policy and regulatory guidance.

By creating an account, a player confirms that the personal details provided are accurate and that they consent to the collection and processing of that data as described in this document. Where a player does not agree with any part of this policy, they should not proceed with registration or continued use of the account, and should instead contact customer support to discuss closing any existing account.

Personal Data We Collect

We collect several categories of information in order to open and maintain an account, process payments, meet legal obligations and improve the service. The table below summarises the main categories of data collected and the general purpose for each.

Some of this data is provided directly by the player during registration or when contacting support, while other data is generated automatically through use of the website or collected from payment providers and verification partners during the KYC process.

How We Use Personal Data

Personal data is used for a defined set of purposes connected to running the account and meeting legal requirements. These include verifying identity and age before allowing deposits or withdrawals, processing payments through the methods described in our payments information, detecting and preventing fraud or money laundering, communicating with players about their account, transactions or changes to terms, and monitoring for signs of gambling harm as part of our responsible gambling commitments. Data is also used to maintain records required by the UK Gambling Commission and the Alderney Gambling Control Commission, including transaction logs and verification documents, which must be retained for defined periods even after an account becomes inactive or is closed.

Where a player has opted in, data may also be used to send information about account activity, site updates or bonus terms relevant to their account, such as the conditions attached to free spins or bonus cash. Any communication of this kind is limited to factual information about how such features operate, including wagering requirements and eligibility conditions, and is never designed to pressure a player into depositing or playing beyond their means. Players can withdraw consent to marketing communications at any time through account settings or by contacting support.

Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to operate correctly, remember player preferences, and understand how the site is used. Cookies are small text files stored on a device when the website is visited. Some cookies are strictly necessary for the site to function, such as those used to keep a player logged in during a session or to maintain security. Other cookies are used for analytics, helping us understand which pages are visited and how players navigate the site, and some may be used to measure the effectiveness of on-site content.

Most browsers allow cookies to be controlled or deleted through browser settings, and a player can choose to block some or all cookies, although doing so may affect certain site functions such as remaining logged in or accessing parts of the account area. Where cookies are used for purposes beyond strict necessity, we aim to give players the ability to manage their preferences through a cookie consent mechanism presented on first visit.

Legal Basis for Processing

We process personal data on a number of legal grounds depending on the purpose. Processing necessary to perform the contract with a player, such as managing deposits, withdrawals and gameplay, is carried out under contractual necessity. Processing required to meet legal and regulatory obligations, including anti-money laundering checks and record keeping tied to our gambling licences, is carried out under legal obligation. Where processing is based on consent, such as certain marketing communications or non-essential cookies, that consent can be withdrawn at any time. In limited cases we may rely on legitimate interest, for example to detect fraud or maintain the security of the platform, balanced against the rights of the individual.

Sharing Data with Third Parties

Personal data may be shared with a limited number of third parties where necessary to operate the service or meet legal obligations. This includes payment providers used to process deposits and withdrawals, such as those handling debit card, PayPal, Skrill, Neteller, Paysafecard and Pay By Mobile transactions, identity verification providers used to confirm age and identity during KYC checks, regulatory bodies including the UK Gambling Commission and the Alderney Gambling Control Commission where required by law, and organisations connected to responsible gambling initiatives, including GAMSTOP, where a player chooses to self-exclude. Data may also be shared within the wider operator group that runs a number of UK-facing gambling brands, particularly for purposes such as network-wide deposit limits and responsible gambling monitoring, which apply across sister sites operated by the same group.

We do not sell personal data to third parties for their own marketing purposes. Any sharing of data is limited to what is reasonably necessary for the stated purpose, and third parties handling personal data on our behalf are expected to apply appropriate safeguards to protect that information.

International Data Transfers

Where personal data is transferred outside the United Kingdom, for example to a service provider or payment processor based in another jurisdiction, appropriate safeguards are applied in line with data protection law, such as relying on providers that offer adequate levels of protection or using approved contractual mechanisms. Players can request further information about specific transfers by contacting customer support.

Data Retention

Personal data is retained for as long as necessary to fulfil the purposes described in this policy, including ongoing legal and regulatory requirements tied to our gambling licences. Financial records, verification documents and transaction histories are generally retained for a minimum period required by anti-money laundering regulation, even after an account is closed or becomes dormant. Where data is no longer required for these purposes, it is deleted or anonymised in line with our internal retention schedule. Some technical or usage data may be retained for a shorter period, primarily for security and fraud prevention purposes.

Data Security

We apply administrative, technical and physical safeguards designed to protect personal data against unauthorised access, loss, misuse or alteration. This includes encryption of sensitive data during transmission, restricted access to personal information within our organisation, and ongoing monitoring for suspicious activity on accounts. While we take reasonable steps to protect personal data, no method of electronic storage or transmission can be guaranteed to be completely secure, and players are encouraged to use strong, unique passwords and to keep their login details confidential.

Player Rights Over Personal Data

Players have a number of rights regarding their personal data under applicable data protection law. These generally include the right to access the personal data we hold, the right to request correction of inaccurate information, the right to request deletion of data where it is no longer needed for a lawful purpose, the right to object to certain types of processing such as direct marketing, and the right to request a copy of personal data in a portable format. Requests of this kind can be made by contacting our support team through live chat or email, and we will respond within the timeframe required by applicable law. Some rights may be limited where data must be retained to meet regulatory or legal obligations connected to our gambling licences, for example verification records required for anti-money laundering purposes.

Players who believe their data has been mishandled also have the right to raise a complaint with the relevant data protection supervisory authority, in addition to raising the matter directly with us.

Responsible Gambling and Data

As part of our commitment to player protection, certain account and usage data is monitored to help identify patterns that may indicate a player is at risk of gambling-related harm. This can include changes in deposit frequency, session length or spending patterns. Where such indicators are identified, this may lead to proactive contact from support, the offer of tools such as deposit or time limits, or in some cases a temporary restriction on the account pending a conversation with the player. Data relevant to responsible gambling tools, including self-exclusion status registered through GAMSTOP, is also shared across the operator’s network of sister sites so that limits and exclusions are applied consistently. Players wishing to review or amend responsible gambling settings can find dedicated tools within their account or by contacting support, and further information is available through the responsible gaming section of the site.

Bonus-Related Data and Verification

Where an account benefits from bonus features such as free spins, bonus cash, or participation in prize draws and reel-based promotions, certain wagering and gameplay data connected to that account is recorded so that eligibility and wagering conditions can be verified. This includes tracking wagering progress against the applicable requirement, such as the flat 10x wagering that applies to bonus cash generally, and confirming that games played meet eligibility rules, since spins tied to a specific game contribute only when wagered on that title. This data is retained for as long as necessary to confirm compliance with the relevant terms and to resolve any dispute about bonus eligibility or conversion.

The following table summarises, purely as a record of how related data is used, the type of information tracked in connection with bonus terms.

No personal data connected to bonus activity is used for any purpose beyond verifying eligibility, resolving disputes and meeting regulatory record-keeping requirements.

Children’s Privacy

Our services are intended only for individuals aged 18 or over, in line with the legal minimum gambling age in the United Kingdom. We do not knowingly collect personal data from anyone under this age. Where we become aware that an account has been opened by a person under 18, the account will be closed and any personal data handled in accordance with applicable law and regulatory guidance.

Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in our practices, technology, legal requirements or the way our services operate. Where changes are significant, we will take reasonable steps to bring them to the attention of registered players, for example through an on-site notice or a message to the registered email address. Continued use of the account after such changes take effect will be treated as acceptance of the updated policy.

Contacting Us About Privacy

Players who have questions about this Privacy Policy, wish to exercise any of the rights described above, or want to raise a concern about how their personal data has been handled, can contact our support team through live chat or email. Our support team can also direct more detailed data protection queries to the appropriate internal contact where required. We aim to respond to all privacy-related enquiries promptly and to resolve any concerns fairly and transparently.

For general account information, payment details or an overview of how the site operates, players can also refer to other sections of the Loot website, including information on available payment methods and the terms that govern the account.