This Privacy Policy explains how personal data is collected, used, stored, shared and protected in connection with Genting Casino Coventry. It applies to visitors to the premises and to users of services associated with Genting Casino Coventry in the United Kingdom.
Personal data is processed in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This document sets out applicable data protection rights, the obligations of the relevant Genting UK entity and the lawful bases on which personal data is processed.
Questions about this Privacy Policy, or requests to exercise data protection rights, may be directed to the Data Protection Officer at [email protected].
1. Who The Controller Is
Genting Casino Coventry operates as part of the Genting UK group of companies. For the purposes of data protection law, the relevant Genting UK entity acts as the data controller for personal data processed in connection with Genting Casino Coventry.
The registered Data Protection Officer can be contacted by email at [email protected] or by post at the address associated with the relevant Genting UK entity.
2. Personal Data Collected
The categories of personal data collected and processed depend on the way in which an individual interacts with Genting Casino Coventry. These may include:
- Identity data - full name, date of birth, nationality and government-issued identification documents used for age verification and Know Your Customer (KYC) checks.
- Contact data - postal address, email address and telephone number.
- Account and gaming activity data - records of visits, gaming sessions, transaction history and any self-exclusion or responsible gambling preferences that have been registered.
- Verification and compliance data - documentation submitted to satisfy Anti-Money Laundering (AML) obligations, source of funds declarations and related correspondence.
- Technical data - where applicable, IP addresses, device identifiers and access logs associated with any digital services operated in connection with Genting Casino Coventry.
Personal data relating to individuals under the age of 18 is not knowingly collected. If it is discovered that a person under 18 has provided personal data or accessed services, the relevant account will be closed and the data deleted or anonymised where required by law.
3. Purposes and Legal Bases for Processing
Personal data is processed only where a lawful basis under UK GDPR applies. The main legal bases relied upon are:
- Performance of a contract - processing necessary to provide casino services, manage an account and fulfil obligations arising from use of the facilities.
- Legal and regulatory obligations - processing required to comply with AML legislation, Gambling Commission licence conditions, age verification requirements and other statutory duties.
- Legitimate interests - processing carried out to prevent fraud, maintain the security of premises and systems and maintain accurate business records, where those interests are not overridden by the rights and freedoms of the individual.
- Consent - in limited situations, such as certain types of marketing communication, processing is based on consent. Consent may be withdrawn at any time by contacting the Data Protection Officer or using any opt-out mechanism provided.
Personal data is not used for purposes that are incompatible with those described above without prior notification and, where required, the obtaining of consent.
4. Responsible Gambling and Data Processing
Gaming activity data is processed as part of responsible gambling and safer gambling obligations. This includes:
- monitoring patterns of play
- recording self-exclusion registrations
- maintaining records of interactions or interventions linked to problem gambling or similar concerns
This processing is carried out to comply with Gambling Commission licence conditions and to meet regulatory duties of care.
Where a self-exclusion has been registered directly with Genting Casino Coventry or through a third-party scheme such as GAMSTOP, the associated records are retained for as long as required under applicable regulatory obligations. This may continue even where erasure of other personal data has been requested.
5. Data Sharing
Personal data is shared only where necessary and in line with applicable data protection and gambling regulation. Recipients may include:
- Regulatory and law enforcement authorities - including the UK Gambling Commission and relevant law enforcement bodies, where disclosure is required by law or regulation.
- Group companies - other entities within the Genting UK group, where sharing is necessary for operational, compliance or administrative purposes.
- Third-party service providers - organisations that process data on behalf of the Genting UK group, such as identity verification providers, IT service suppliers and professional advisers. These parties are subject to contractual obligations to process personal data only on documented instructions and to apply appropriate security measures.
Personal data is not sold to third parties.
6. Data Retention
Personal data is retained for as long as necessary to fulfil the purposes described in this Privacy Policy and to satisfy legal and regulatory requirements. In particular:
- Account and transaction records are typically retained for a minimum of five years following account closure or the end of the relevant business relationship, in line with AML and other regulatory record-keeping requirements.
- Responsible gambling records, including self-exclusion data, are retained for the periods required by Gambling Commission licence conditions and related regulatory rules.
When data is no longer required for these purposes, it is deleted or anonymised in a secure manner.
7. Your Data Rights
Under UK GDPR, individuals have the following rights in relation to their personal data:
- Right of access - to request a copy of the personal data held.
- Right to rectification - to request correction of inaccurate or incomplete personal data.
- Right to erasure - to request deletion of personal data in certain circumstances, subject to legal and regulatory retention obligations.
- Right to restriction of processing - to request restriction of processing in specific situations set out in UK GDPR.
- Right to data portability - where processing is based on consent or on a contract and carried out by automated means, to request a machine-readable copy of personal data, or transmission to another controller where technically feasible.
- Right to object - to object to processing based on legitimate interests, and to object at any time to processing for direct marketing purposes.
To exercise any of these rights, contact the Data Protection Officer at [email protected]. A response will be provided within the timeframe required by law, which is ordinarily one calendar month from receipt of a valid request.
If the handling of personal data or the response to a request is not considered satisfactory, a complaint may be lodged with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. The ICO can be contacted via ico.org.uk or by telephone on 0303 123 1113.
8. Security
Appropriate technical and organisational measures are in place to protect personal data against unauthorised access, loss, destruction or alteration. Access to personal data is limited to staff and contractors who require it for legitimate operational or compliance purposes and who are subject to confidentiality obligations and relevant policies.
9. Changes to This Policy
This Privacy Policy may be updated from time to time to reflect changes in law, regulatory guidance or internal practices. Where changes are material, reasonable steps will be taken to draw attention to the updated version. The current version of this Privacy Policy is available on request and through official communications.
10. Contact
For any queries relating to this Privacy Policy or the handling of personal data in connection with Genting Casino Coventry, contact:
Data Protection Officer
Email: [email protected]
Written correspondence may also be sent by post to the registered address of the relevant Genting UK entity. Details of that address are available on request.