Privacy policies rarely get the credit they deserve for being genuinely useful, mostly because they are usually written to satisfy a legal team rather than the player actually trying to understand what happens to their information. This page takes a different approach, walking UK players through what personal data Kong Casino collects, why it gets collected, how it stays protected, and what rights you hold over it under current UK data protection law. Any figures referenced throughout are shown in British pounds, matching the currency used across the UK version of the platform in 2026.
What information gets collected and when
Registration is the point where most personal data collection begins, and it helps to know precisely what gets requested and why. Identity details such as your full name, date of birth, and residential address get gathered primarily to confirm you meet the legal age requirement and to satisfy UK identity verification obligations that every licensed operator must follow. Contact information, including your email address and phone number, allows the platform to send account updates, security alerts, and, only where you have specifically opted in, promotional communications. Financial details tied to your chosen payment method also get recorded, though card numbers themselves are typically tokenised or encrypted rather than stored as plain, readable digits sitting somewhere in a database.
| Data category | Examples | Main purpose |
|---|---|---|
| Identity data | Full name, date of birth, ID documents | Age and identity verification |
| Contact data | Email address, phone number, home address | Account communication |
| Financial data | Payment method, transaction records | Deposits, withdrawals, fraud checks |
| Technical data | IP address, browser type, device information | Platform security and functionality |
| Behavioural data | Game history, session duration, wagering patterns | Responsible gambling monitoring |
Why each category actually gets collected
None of the categories listed above exist purely for convenience, each one serves a specific operational or legal purpose tied to running a properly licensed gambling platform in the UK. Identity and age verification exist because gambling regulation requires operators to confirm every player is genuinely who they claim to be and old enough to gamble legally in the first place. Financial data supports the practical mechanics of deposits and withdrawals, but it also plays a direct role in anti-money-laundering checks that every UK-facing operator must carry out as a matter of course. Behavioural data, covering things like session length and how often someone plays, feeds into the responsible gambling systems described elsewhere on the platform, helping flag patterns that might suggest a player would benefit from setting a limit.
Legal grounds relied upon for processing data
- Consent, given when you opt into marketing emails or optional cookies
- Contractual necessity, required simply to deliver the account services requested
- Legal obligation, tied directly to UK gambling and anti-money-laundering rules
- Legitimate interest, covering areas such as fraud prevention and platform security
How your information stays protected day to day
Security is not something switched on once and left alone, it operates as a continuous, layered system running quietly in the background. Encrypted connections, typically relying on SSL or TLS standards, protect data as it travels between your device and the platform’s servers, making interception by third parties considerably harder to achieve. Internal access to stored personal information stays restricted, meaning only staff with a genuine operational reason, such as compliance officers or support agents handling a specific query, can actually view sensitive account records. Regular security testing, including audits and penetration testing, helps identify weaknesses before they can be exploited, a practice that has become fairly standard across UK-regulated operators. Two-factor authentication remains available as an optional extra layer of protection, and it is genuinely worth enabling rather than skipping past.
Who your data might get shared with
Data sharing sounds more alarming than it usually is in practice, since most sharing here stays narrow, purpose-specific, and tightly regulated rather than open-ended. Payment processors receive only the information needed to complete a specific transaction, nothing beyond that. Regulatory bodies, including the UK Gambling Commission, may receive relevant data where required for compliance reviews or investigations into suspicious account activity. Identity verification providers occasionally get used to confirm documents quickly and accurately, which speeds up account approval considerably compared to manual review alone. Marketing partners only ever receive data where explicit consent has been given, and that consent can be withdrawn at any point through account settings without affecting your ability to keep using the platform.
Third parties commonly involved in data handling:
- Payment processors handling deposits and withdrawals
- Identity verification providers confirming documents and age
- UK regulatory authorities, including the Gambling Commission
- Fraud prevention and anti-money-laundering service providers
- Marketing platforms, strictly limited to where consent has been given
Rights you hold under UK data protection law
UK data protection law, shaped by the UK GDPR alongside the Data Protection Act, gives players real, enforceable rights over their own personal information rather than purely symbolic ones. You can request a copy of the data held about you, commonly known as a subject access request, and the platform must legally respond within a defined timeframe. You can also request corrections to inaccurate information, ask for certain data to be deleted where legally permissible, and object to specific types of processing such as direct marketing communications. Where consent underpins a particular type of processing, such as promotional emails, that consent can be withdrawn at any point without affecting the legality of anything processed beforehand.
A summary of your available rights:
- Right to access the personal data held about you
- Right to correct inaccurate or outdated information
- Right to request deletion, subject to legal exceptions
- Right to object to certain types of processing
- Right to withdraw consent at any point
How long your data actually stays on record
Data retention is not indefinite, though gambling regulation does require certain records to be kept for specific minimum periods regardless of individual player preference. Financial and transaction records typically get retained for several years following account closure, satisfying anti-money-laundering and audit obligations set by UK regulators. Identity verification documents get similarly retained for a defined period, mainly so the platform can demonstrate compliance if ever questioned by a regulatory authority. Marketing-related data, by contrast, tends to get deleted far sooner, particularly once consent is withdrawn or an account becomes inactive over an extended stretch of time. Closing your account entirely usually results in most non-regulatory data being deleted or anonymised within a reasonable period, though certain records remain in place as required by law.
Cookies and their connection to your data
Cookies work alongside the broader data collection described throughout this page, helping the platform remember preferences and understand general usage patterns across the site. Essential cookies remain necessary for basic functions like staying logged in, while optional analytics and marketing cookies can be adjusted or switched off entirely through cookie preference settings. None of this cookie-related data gets treated any differently from other personal information in terms of the security and access controls applied to it. A more detailed breakdown of specific cookie types sits on a separate page dedicated entirely to that particular topic.
Getting in touch about your personal data
If you have a question about how your data gets used, or want to exercise any of the rights outlined above, reaching out through the platform’s dedicated data protection contact is the recommended starting point. Requests like this typically get handled separately from general customer support, reviewed instead by staff specifically trained in data protection matters. If a response feels inadequate or a concern goes unresolved, UK players retain the right to escalate the issue to the Information Commissioner’s Office, the independent body overseeing data protection compliance across the UK. Trying direct contact first tends to resolve most issues considerably faster than jumping straight to a formal complaint, based on how these situations usually play out in practice.
