Privacy Policy
At Gransino, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store and protect your data when you use our online casino services. We operate in full compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. Gransino is operated by a company registered in Curaçao under licence number 8048/JAZ.
1. Nature and Scope of Personal Data Collected
To provide you with our casino services, we collect various categories of personal data. The type and extent of data collected depends on your interactions with our platform and the services you utilise. We only collect data that is necessary for the purposes outlined in this policy, in accordance with GDPR data minimisation principles.
- Identity information including full name, date of birth, gender and nationality
- Contact details such as residential address, telephone number and postal address
- Financial information including bank account details, payment card information and transaction history
- Verification documents such as passport, driving licence, utility bills and proof of funds
- Account credentials including username, password and security questions
- Gaming activity data including betting history, game preferences and session duration
- Technical data such as IP address, device information, browser type and operating system
- Communication records including customer support interactions and correspondence
- Location data to verify your jurisdiction and ensure regulatory compliance
- Responsible gambling information including self-exclusion status and deposit limits
2. Purposes and Objectives of Data Processing
We process your personal data for specific, explicit and legitimate purposes as required under GDPR. We ensure that your data is not processed in a manner incompatible with these purposes. The legal bases for our processing activities include contractual necessity, legal obligations, legitimate interests and your consent where applicable.
- Creating, managing and maintaining your player account
- Processing deposits, withdrawals and financial transactions securely
- Verifying your identity and age to prevent underage gambling
- Complying with anti-money laundering regulations and preventing fraud
- Fulfilling our regulatory and licensing obligations
- Providing customer support and responding to your enquiries
- Delivering personalised gaming experiences and recommendations
- Implementing responsible gambling measures and player protection tools
- Sending promotional communications where you have provided consent
- Analysing platform usage to improve our services and security
- Investigating and preventing suspicious or fraudulent activity
- Maintaining records for legal, tax and audit purposes
3. Security Measures and Technical Integrity
Gransino implements comprehensive security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. In compliance with GDPR Article 32, we maintain appropriate technical and organisational measures to ensure a level of security appropriate to the risk.
We utilise industry-standard SSL encryption technology to protect all data transmitted between your device and our servers. Our systems are protected by advanced firewalls, intrusion detection systems and regular security monitoring. We conduct periodic security assessments and penetration testing to identify and address potential vulnerabilities.
Access to personal data is strictly limited to authorised personnel who require such access to perform their duties. All staff members undergo comprehensive data protection training and are bound by confidentiality obligations. We maintain detailed access logs and audit trails to monitor and review data access activities.
Our data centres are located in secure facilities with physical access controls, environmental protections and redundant systems to ensure data availability and integrity. We have established incident response procedures to detect, report and investigate any personal data breaches in accordance with GDPR requirements.
4. Sharing Information with Third Parties
We may share your personal data with carefully selected third parties where necessary to provide our services, comply with legal obligations or pursue legitimate interests. We ensure all third parties are bound by appropriate data protection agreements and process your data only for specified purposes in compliance with GDPR.
- Payment service providers and financial institutions for transaction processing
- Identity verification and age verification service providers
- Gaming software providers and platform operators
- Regulatory authorities and licensing bodies as required by law
- Law enforcement agencies when legally compelled to do so
- Anti-fraud and responsible gambling organisations
- Professional advisers including legal, accounting and auditing firms
- Cloud hosting and IT infrastructure service providers
- Customer support and communication platform providers
- Marketing and analytics service providers where consent has been obtained
We do not sell your personal data to third parties for their own marketing purposes. Any sharing of data is conducted on a need-to-know basis and is subject to appropriate safeguards to protect your privacy rights.
5. Cookie Management and Similar Technologies
Gransino uses cookies and similar tracking technologies to enhance your experience on our platform, analyse usage patterns and deliver relevant content. In accordance with GDPR and the Privacy and Electronic Communications Regulations, we obtain your consent before placing non-essential cookies on your device.
Essential cookies are necessary for the basic functioning of our website and cannot be disabled. These include cookies that enable secure login, remember your preferences and maintain your session while you navigate our platform. Performance cookies help us understand how visitors interact with our website by collecting anonymous statistical information.
Functionality cookies allow us to remember choices you make and provide enhanced, personalised features. Marketing cookies may be used to deliver advertisements relevant to your interests and measure the effectiveness of advertising campaigns. Third-party cookies may be placed by our partners for analytics and marketing purposes.
You can manage your cookie preferences through our cookie consent tool, which is displayed when you first visit our website. You may also control cookies through your browser settings, although disabling certain cookies may affect the functionality of our services. We regularly review and update our cookie practices to ensure compliance with applicable regulations.
6. Data Retention Period
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting or reporting requirements. In determining appropriate retention periods, we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, and our legal obligations.
Account information and gaming records are typically retained for a minimum of six years following account closure to comply with anti-money laundering regulations and potential regulatory enquiries. Transaction records are maintained for the period required by financial regulations and tax authorities in the relevant jurisdictions.
Responsible gambling data, including self-exclusion information, may be retained for extended periods to ensure the effectiveness of player protection measures. Marketing preferences and consent records are kept for as long as necessary to demonstrate compliance with applicable regulations.
When personal data is no longer required, we securely delete or anonymise it in accordance with our data retention policies and GDPR requirements. Anonymised data may be retained indefinitely for statistical analysis and research purposes where it can no longer be linked to you as an individual.
7. User Rights Over Their Data
Under the GDPR and UK data protection legislation, you have comprehensive rights regarding your personal data. We are committed to facilitating the exercise of these rights and will respond to any valid request within one month of receipt, or inform you if an extension is required for complex requests.
- Right of access: You may request confirmation of whether we process your personal data and obtain a copy of that data along with information about how it is processed
- Right to rectification: You may request correction of inaccurate personal data or completion of incomplete data we hold about you
- Right to erasure: You may request deletion of your personal data in certain circumstances, such as when it is no longer necessary for the purposes collected or you withdraw consent
- Right to object: You may object to processing based on legitimate interests or for direct marketing purposes, and we will cease such processing unless compelling grounds exist
- Right to data portability: You may request to receive your personal data in a structured, commonly used and machine-readable format, or have it transmitted directly to another controller
You also have the right to restrict processing in certain circumstances and the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects concerning you. To exercise any of these rights, please contact our Data Protection Officer through our customer support channels.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office, the supervisory authority for data protection in the United Kingdom.
8. International Data Transfers
As a company registered in Curaçao operating under licence 8048/JAZ, some of your personal data may be transferred to and processed in countries outside the United Kingdom and the European Economic Area. We ensure that any such transfers comply with GDPR requirements and that your data receives an adequate level of protection.
Where we transfer data to countries not recognised as providing adequate data protection, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, binding corporate rules, or other legally recognised transfer mechanisms. We also conduct transfer impact assessments to evaluate the legal framework in recipient countries.
Our service providers and partners who process data on our behalf are contractually obligated to maintain appropriate security measures and process your data only in accordance with our instructions and applicable data protection laws. We regularly review and audit our international data transfer arrangements to ensure ongoing compliance.
You may request information about the specific safeguards we apply to international transfers of your personal data by contacting our Data Protection Officer through the appropriate channels.
9. Privacy Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements or regulatory guidance. Any material changes will be communicated to you through appropriate means, such as prominent notices on our platform or direct notification to your registered contact details.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. The date of the most recent revision will be indicated at the top of this document. Your continued use of our services following the posting of changes constitutes your acknowledgement of such changes.
Where changes require your consent under GDPR, we will seek such consent before implementing those changes. You will always have the option to close your account if you do not agree with any updates to our Privacy Policy, subject to applicable legal retention requirements.
Previous versions of this Privacy Policy are available upon request to demonstrate our compliance history and commitment to transparency in data protection matters.
10. Contact Information
If you have any questions, concerns or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer through the customer support section of our platform. We are committed to addressing your enquiries promptly and thoroughly.
For general data protection enquiries or to exercise your rights under GDPR, please use the secure messaging system within your player account or submit a request through our customer support channels. We aim to acknowledge all requests within 48 hours and provide a substantive response within one month.
If you are not satisfied with our response to your data protection concerns, you may escalate the matter to our senior management team. You also have the right to contact the Information Commissioner's Office, the UK supervisory authority for data protection matters.
Gransino operates under licence number 8048/JAZ issued in Curaçao. Our commitment to data protection and privacy is fundamental to our operations and the trust you place in us as your chosen gaming platform.
Responsible Gambling Disclaimer: Gransino is committed to promoting responsible gambling. If you feel that gambling is affecting your life negatively, please seek help immediately. For support and advice, contact the National Gambling Helpline operated by GamCare on 0808 8020 133, available 24 hours a day, 7 days a week. You may also access support through GambleAware or use our responsible gambling tools including deposit limits, reality checks and self-exclusion options.
This website is restricted to persons aged 18 years and over. Underage gambling is a criminal offence. Gransino operates strict age verification procedures to prevent access by minors. Please gamble responsibly.