Grosvenor Casino Nottingham Privacy & Data Protection

Privacy at Grosvenor Casino Nottingham

At Grosvenor Casino Nottingham, we treat the privacy and security of personal information as an important part of our relationship with guests and members. Our land-based casino processes information connected with registration, visits, gaming activity, payments, identity checks, responsible gaming and security, while our digital services may also process account, device, website and cookie data. We use personal information only for defined operational, contractual, regulatory, security and marketing purposes and apply data-protection safeguards when information is shared with authorised organisations. Our privacy framework also gives customers rights over their personal information, including access, correction and certain rights to restrict, delete or transfer data.

Personal Data Collected by Grosvenor Casino Nottingham

At Grosvenor Casino Nottingham, the information we process depends on how a guest interacts with us. A visit to our land-based casino can generate registration, gaming, transaction, communication and CCTV information, while use of Grosvenor digital services can also generate account, device, location and website-usage data. We may obtain some information directly from customers and some from authorised external organisations or publicly available sources where verification, fraud prevention, affordability or regulatory checks are required.

Identity and Registration Data

• • Personal details: information can include name, age, date of birth, gender, address, telephone number and email address.
• • Identity information: we may process photographs, images and information from identity documents when age or identity must be verified.
• • Membership details: information connected with casino registration, Grosvenor membership and the customer profile can be retained as part of our relationship with a guest.
• • Online credentials: digital services can also process details such as username, password and other account information.

Casino Visit and Gaming Data

• • In-casino activity: information may be collected from activity during visits to our casino, including activity associated with a registered customer profile or membership card.
• • Gaming information: where relevant, we can process information about wagers, games, promotions and interactions with our services.
• • Responsible gaming information: information connected with safer gambling discussions, self-exclusion, restrictions or other player-protection measures may be recorded.

Payment and Financial Information

• • Banking details: information necessary for eligible deposits, withdrawals and payment processing can include bank-account information.
• • Payment details: digital services may process limited payment-card details, PayPal information or other supported payment information.
• • Source-of-funds information: we may request financial documents or other evidence where this is required for regulatory, anti-money-laundering, affordability or responsible gaming checks.
• • Transaction information: records associated with deposits, withdrawals and other relevant financial activity can be retained where required.

CCTV and Security Information

• • CCTV images: cameras operate throughout our land-based premises and may record guests during their visit.
• • Security records: information relating to incidents, suspensions, suspected fraud, cheating or other security matters may be processed when necessary.

Communications and Customer-Service Data

• • Direct communications: we may retain information provided in person, by telephone, email, chat or other communication channels.
• • Recorded calls: calls to customer-support teams may be recorded.
• • Research and surveys: information may be collected when customers voluntarily take part in market research or customer-satisfaction surveys.
• • Social interactions: interactions with our social-media channels or chat services may also generate personal information.

Device and Technical Data

• • Device identifiers: online services can collect IP and MAC addresses, device model, operating system, browser type, time zone and browser configuration information.
• • Website usage: data can include pages viewed, links followed, response times, browsing activity, clicks, scrolling and time spent on pages.
• • Location information: technology may be used to establish location for identity, permitted-territory and service requirements.

Information from External Sources

• • Verification providers: information may be obtained from authorised organisations used to check age, identity, address, source of funds and fraud risk.
• • Public information: where appropriate, checks can use information from sources such as public registers, company records, insolvency information or publicly available social-media material.
• • Self-exclusion information: relevant information can be received from recognised self-exclusion and player-protection schemes where applicable.

Sensitive Personal Information

• • Health and gambling-related information: a customer may provide information about physical or mental health or concerns about gambling when asking for support.
• • Verification information: identity checks may indirectly reveal sensitive information such as nationality or ethnicity; we use this only where there is an appropriate lawful or regulatory reason.

How Grosvenor Casino Nottingham Uses Personal Data, Identity Checks and Cookies

At Grosvenor Casino Nottingham, we use personal information to operate and maintain customer accounts, provide casino and digital services, process eligible payments, respond to enquiries and maintain an accurate customer profile. We also process information where necessary to meet legal and regulatory obligations, protect the integrity of our services, prevent fraud and other unlawful activity, support responsible gaming and manage security. Information about how customers use our services can also help us personalise relevant features, understand how our services perform and improve the overall customer experience. Identity and verification checks form an important part of our privacy and compliance framework. We may verify a customer's age, identity, address and source of funds and, where necessary, use authorised third-party providers or appropriate public information to confirm details. Certain checks can also support fraud prevention, risk management and affordability assessments. A verification search made through an authorised credit-reference service may leave a soft-search record where applicable, but the current privacy policy states that this does not affect the customer's credit score. Cookies and similar technologies are primarily relevant when customers use our websites and digital services rather than when they simply visit the physical casino. Cookies can support essential functions such as authentication and preferences, help analyse website performance, remember configuration choices and support relevant advertising where permitted. We may also collect technical information including IP address, device information, browser details, page views, clicks, scrolling, session activity and the route used to reach or leave a page. Analytics technologies are used to understand how digital services are used and to identify opportunities to improve performance. Similar technologies can include pixels, web beacons and related tracking tools. These may help measure website traffic, understand interaction with marketing communications and determine whether an advertisement or email has been viewed or used. Some tracking technologies are provided by external analytics, advertising or technical partners, and their use is governed by the applicable privacy and consent settings. Marketing consent can be managed separately from essential account and service communications, so withdrawing marketing permission does not prevent us from sending messages that are necessary to operate an account or service.

Who Grosvenor Casino Nottingham May Share Personal Data With

At Grosvenor Casino Nottingham, we keep personal information confidential but may share it where this is reasonably necessary to operate our services, meet legal and regulatory requirements, process payments, verify customers, protect gaming integrity or provide appropriate customer support. We apply contractual and organisational safeguards when working with service providers and expect organisations processing data for us to protect it appropriately. Information is not disclosed simply because another organisation requests it; legal and regulatory disclosures must have an appropriate basis.

Other Companies Within Rank Group

• • Personal information may be shared with other companies within Rank Group for legitimate administrative, operational and customer-support purposes.
• • Relevant safer gambling information can also be shared within the group where this is necessary to provide appropriate support and player protection.

Identity, Age and Fraud-Prevention Providers

• • We may work with specialist organisations that assist with age, identity, address and source-of-funds verification.
• • These services can also support fraud prevention, risk management and regulatory checks.
• • Current privacy information identifies providers and credit-reference organisations used for certain verification and affordability processes.

Payment Providers and Banks

• • Payment processors, acquiring services and banks can receive the information necessary to complete eligible deposits, withdrawals and other financial transactions.
• • Only the information reasonably required for the relevant service should be processed for this purpose.

IT and Technical Service Providers

• • Companies supporting our IT infrastructure, systems, applications, hosting and technical services can process information when required to provide those services.
• • Digital gaming providers may receive specified account information where this is necessary to supply an online game or related service.

Analytics and Data-Insight Providers

• • Analytics specialists may process technical and usage information to help us understand how our digital services perform.
• • Data-insight providers can help us keep customer information accurate and up to date.

Marketing and Advertising Partners

• • Where the appropriate privacy and marketing requirements are met, selected partners can assist us with advertising, campaign delivery and relevant communications.
• • Customers can manage applicable marketing consent preferences independently of essential service messages.

Regulators, Courts and Law-Enforcement Authorities

• • Information may be disclosed where we are legally required to provide it to regulators, courts, police or other authorised public bodies.
• • Such disclosures can support legal compliance, criminal investigations, regulatory obligations or the protection of our rights and those of our customers.
• • Requests from law-enforcement or statutory bodies must have an appropriate legal basis or valid authority.

Professional Advisers

• • Relevant information can be shared with authorised legal, professional or specialist advisers where this is necessary to protect or defend our legitimate interests.

Other Casinos and Gaming-Integrity Organisations

• • Information concerning suspected cheating, collusion, fraud or other unlawful or improper activity can be shared with appropriate casinos or organisations where permitted.
• • Sporting bodies may receive information where this is necessary in connection with legitimate sporting-integrity matters.

International Service Providers

• • Some suppliers may operate outside the country or outside the European Economic Area.
• • Where required, we use recognised contractual clauses or other legal mechanisms designed to provide appropriate safeguards for international transfers of personal information.

Data Security, Retention and Privacy Rights at Grosvenor Casino Nottingham

At Grosvenor Casino Nottingham, we use reasonable technical and organisational measures intended to protect personal information against loss, misuse or unauthorised alteration. Security controls apply across our casino and relevant digital services, although no information-security system can guarantee that every potential security incident will be prevented. Where information is handled by external service providers, appropriate contractual or legal safeguards are used according to the nature and location of the processing. We retain personal information only for as long as it is required for appropriate operational, regulatory and legal purposes. Under our current privacy framework, personal data is typically retained for seven years after our relationship with a customer ends in order to meet obligations that can include accounting, reporting and anti-money-laundering requirements. Use of personal information for marketing purposes stops no more than two years after the customer's last transaction with us. Information relating to problem gambling, self-exclusion, a suspension or termination may be retained for longer where we reasonably consider this necessary for regulatory, player-protection or security purposes. Customers have a number of rights in relation to their personal information. These include the right to ask for a copy of information we process and to request correction of inaccurate information. In appropriate circumstances, a customer can ask us to restrict or stop processing information or request its deletion. Customers may also have the right to obtain relevant information in a machine-readable format and, where technically feasible and legally applicable, request a transfer to another service provider. Some privacy rights are subject to legal limitations. We may need to retain information despite a deletion request where continued processing is required to meet a legal or regulatory duty, establish or defend legal rights, maintain safer gambling controls or satisfy other lawful requirements. Where we cannot fulfil a request, we will explain the relevant reason. We aim to respond to privacy-rights requests without undue delay and generally within one month, although particularly complex requests can require additional time in accordance with applicable data-protection rules. Customers who remain dissatisfied with how their personal information has been handled can raise the matter through the appropriate privacy process and have the right to complain to the Information Commissioner's Office. Privacy preferences relating to marketing can also be changed separately, while essential operational, security and account communications may still be sent when required.

Grosvenor Casino Nottingham Privacy and Player Responsibilities

Protecting personal information is a shared process. At Grosvenor Casino Nottingham, we apply appropriate security, verification and data-management procedures, while customers are expected to provide accurate information, keep membership and online account details secure and notify us when important personal details change. Guests should also take care when using shared devices, digital accounts or payment services and should not allow another person to use personal credentials. Privacy rights remain available to customers, but certain information must still be processed or retained where regulatory, legal, anti-fraud or responsible gaming obligations apply.

Area	Our Role	Player Role
Per­son­al data	Use data for clear op­er­a­tion­al, legal and reg­u­la­to­ry needs	Give ac­cu­rate and up-to-date de­tails
ID checks	Ver­i­fy age, iden­ti­ty and, where need­ed, source of funds	Give valid proof when a check is re­quired
Ac­count se­cu­ri­ty	Apply tech­ni­cal and or­gan­i­sa­tion­al safe­guards	Keep log-in and PIN de­tails pri­vate
Pay­ments	Use ap­proved pay­ment and fraud-check ser­vices	Use own au­thor­ised pay­ment de­tails
Cook­ies	Use cook­ies and sim­i­lar tools for site func­tions and ap­proved track­ing	Man­age avail­a­ble cook­ie and mar­ket­ing choices
CCTV	Use im­ages for safe­ty, se­cu­ri­ty and venue needs	Be aware that cam­er­as op­er­ate in our prem­is­es
Data rights	Han­dle valid pri­va­cy re­quests in line with data law	Give enough de­tail to let us ver­i­fy and act on a re­quest
Data re­ten­tion	Keep data only for valid bus­i­ness, legal or reg­u­la­to­ry needs	Note that some data can­not be erased on de­mand where law re­quires it