32red Privacy Policy

This page summarises the privacy and data-handling rules that 32red publishes for players in the United Kingdom; the operator’s own Privacy Notice and Cookie Policy remain the authoritative texts. The sections below set out, in the third person, what data the operator collects, why it is processed, how it is protected, and which rights players hold under data protection law.

What information does 32red collect?

According to the operator’s archived Privacy Notice and Cookie Policy, the data 32red collects falls into several main areas, with identity and verification data forming the core of the record. This information is gathered to meet legal obligations under anti-money laundering (AML) and age verification rules that apply to licensed gambling in the United Kingdom.

Identity and verification data

To comply with AML and age verification requirements, the operator requests photographic identification from players. The accepted documents include a passport or a driving licence, which are used to confirm the account holder’s identity and legal age before full account functionality is enabled.

Gameplay and transaction data

Beyond identity documents, the operator’s data collection covers the activity generated by an account in use — the records needed for account operation and service provision. This supports the operator’s stated purposes of legal and regulatory compliance, as well as responsible gambling and player safety monitoring.

Cookies and tracking technologies

The operator maintains a dedicated Cookie Policy alongside its Privacy Notice. This document governs the tracking technologies used on the platform, which feed into the operator’s purposes of marketing and personalisation, as well as business improvement and analytics.

How does 32red use your information?

The operator documents five purposes for processing player data: legal and regulatory compliance, responsible gambling and player safety, account operation and service provision, marketing and personalisation, and business improvement and analytics. Each category of collected data maps onto one or more of these stated purposes.

• Legal and regulatory compliance — identity and verification data supports AML checks and age verification obligations.
• Responsible gambling and player safety — account activity is processed to uphold the operator’s safer gambling duties. Related detail is covered here: 32red responsible gambling.
• Account operation and service provision — the data required to run a player account and deliver the gambling service day to day.
• Marketing and personalisation — information used to tailor communications and promotional content to the account holder.
• Business improvement and analytics — aggregated analysis that informs how the operator develops its product.

How does 32red protect and share your data?

The operator’s Privacy Notice sets out the security measures applied to stored player data, the retention periods for each category of record, and the limited set of third parties that receive personal information. Retention follows the legal and regulatory obligations described above rather than being open-ended.

Data recipients

According to the operator’s policy, personal data is shared with a small number of named recipients. These are listed in the table below.

Data controller and DPO contact

The operator’s Privacy Notice identifies the data controller responsible for player information and provides a dedicated contact route for its Data Protection Officer. Players wishing to raise a privacy query directly with the operator can use the DPO contact channel named in that document.

What rights do 32red players have?

The operator’s Privacy Notice grants players a full set of data protection rights: access, rectification, erasure, restriction, portability, the right to object, and the right to withdraw consent. These rights can be exercised through the contact channels the operator publishes, including the DPO route described in its policy.

• Access — request a copy of the personal data the operator holds.
• Rectification — have inaccurate or incomplete records corrected.
• Erasure — request deletion of personal data where the operator has no overriding legal duty to retain it.
• Restriction — limit how the data is processed in defined circumstances.
• Portability — obtain the data in a transferable format.
• Object — oppose processing carried out for purposes such as marketing.
• Withdraw consent — revoke previously given consent at any time, without affecting processing already completed.

Marketing communications fall under the object and withdraw-consent rights: players can opt out of personalised promotional contact without closing their account. The broader contractual framework that sits alongside this policy is set out here: 32red terms and conditions.

For background on how this independent website assesses the operator and its published policies, see: about 32red.