Privacy Policy – How We Handle Your Data

Types of Data We Collect

We collect only the data necessary to provide our services and meet our legal obligations. This includes:

• Identity data – full name, date of birth, nationality.
• Contact data – email address, phone number, postal address.
• Financial data – payment method details, transaction history.
• Technical data – IP address, browser type, device information, login timestamps.
• Usage data – pages visited, games played, session duration on tombola game.
• Verification data – copies of ID documents submitted during KYC checks.

Legal Basis for Processing

We process your personal data on the following legal grounds under UK GDPR:

• Contractual necessity – to fulfil our obligations when you register and use our services.
• Legal obligation – to comply with anti-money laundering, age verification, and gambling regulations.
• Legitimate interests – to improve platform security, prevent fraud, and enhance user experience.
• Consent – where you have opted in to receive marketing communications from us.

You may withdraw consent for marketing at any time through your account settings or by contacting us directly.

Cookies & Tracking Technologies

We use cookies and similar technologies to ensure the tombola game platform functions correctly and to improve your experience. Cookie categories we use include:

You can manage your cookie preferences through your browser settings at any time.

Data Retention

We retain your personal data only for as long as is necessary for the purposes outlined in this policy or as required by law. As a UK-licensed gambling operator, we are required to retain certain records — including transaction history and identity verification documents — for a minimum of five years following account closure. After the retention period expires, your data is securely deleted or anonymised.

Data Sharing & Third Parties

We do not sell your personal data. We may share your information with trusted third parties only where necessary:

• Payment processors – to facilitate deposits and withdrawals securely.
• Identity verification providers – to meet KYC and AML regulatory requirements.
• IT and hosting providers – who support the operation of our platform.
• Regulatory authorities – including the UK Gambling Commission, if required by law.
• Fraud prevention agencies – to protect against financial crime.

All third-party processors are bound by contractual data protection obligations.

Your Rights Under UK GDPR

As a UK resident, you have the following rights in relation to your personal data:

• Right of access – request a copy of the data we hold about you.
• Right to rectification – ask us to correct inaccurate or incomplete data.
• Right to erasure – request deletion of your data where applicable.
• Right to restriction – limit how we process your data in certain circumstances.
• Right to portability – receive your data in a structured, machine-readable format.
• Right to object – object to processing based on legitimate interests.

To exercise any of these rights, contact us via the official support channel on tombolalogin-uk.com. We will respond within 30 days.

Data Security & Contact

We implement industry-standard technical and organisational security measures to protect your personal data from unauthorised access, loss, or disclosure. These include SSL encryption, access controls, and regular security audits. Despite these measures, no online platform can guarantee absolute security, and you use our services at your own risk in this regard. If you believe your data has been misused or you wish to make a complaint, you have the right to contact the Information Commissioner's Office (ICO) at ico.org.uk. For all privacy-related enquiries, please reach out through the contact page on tombolalogin-uk.com.