Privacy Policy — GRP Casino

Last updated: March 2026

Data Controller — Who We Are

Eaton Gate Gaming Ltd runs the website grpcasino-uk.com under the GRP Casino brand. Our registered office sits at 10 Barley Mow Passage, BM3S.02, London W4 4PH. The UK Gambling Commission granted us Remote Operating Licence 044448-R-323408-017 (account 44448). Since we launched in 2025, keeping player data safe has been a practical priority, not just a policy statement. As the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Eaton Gate Gaming Ltd decides what personal information to collect, why, and how long to keep it. Every byte moving between your browser and grpcasino-uk.com travels through a 256-bit SSL/TLS tunnel, and all monetary values on the platform are expressed in British pounds (GBP).

What Data We Collect

Running an online casino lawfully means gathering certain information about you. Here is exactly what we hold and why:

Identity data: Full legal name, date of birth, nationality, and gender — gathered when you register and again during KYC (Know Your Customer) checks mandated by our UKGC licence.
Contact data: Your email address, phone number, and home address. We use these to manage your account, send transaction confirmations, and deliver service-related updates.
Financial data: References to your chosen payment method, partially masked card digits, plus a full ledger of every deposit and withdrawal you make in GBP.
Technical data: IP address, device model, operating system, browser build, the pages you visit, where you came from, and how long each session lasts. This arrives automatically through cookies and server logs.

Legal Basis for Processing

UK GDPR says we need a valid reason for every piece of data we touch. Here are ours: (a) contractual necessity — when you sign up, a contract forms and we need your data to honour it; (b) legal obligation — UKGC licence conditions, the Money Laundering Regulations 2017, and HMRC reporting rules all demand specific records; (c) consent — we only send promotional emails or SMS messages after you actively opt in, and you can withdraw that consent at any time; (d) legitimate interest — Eaton Gate Gaming Ltd has a genuine need to detect fraud, block suspicious transactions, and improve the platform experience for UK players.

How We Use Your Data

Account management: Building your player profile, confirming who you are, and moving money in and out of your account securely.
Regulatory compliance: Verifying your age, running anti-money-laundering screenings, and monitoring gambling activity as our UKGC licence demands.
Promotional messages: Sending you bonus offers, product news, and platform updates — only if you said yes to marketing during sign-up or afterwards.
Security and fraud prevention: Spotting unusual login patterns, blocking coordinated abuse, and keeping the platform running smoothly for honest players.

Data Sharing

We do not sell your personal data. Full stop. We do not rent it or swap it either. That said, certain third parties receive limited data when there is a clear legal or operational reason:

UK Gambling Commission: When the UKGC or another regulator makes a lawful request, we hand over the relevant records.
Payment service providers: Card networks and e-wallet operators receive transaction data strictly to process your deposits and cashouts.
Identity verification vendors: Specialist KYC services cross-check your documents against government databases to satisfy anti-money-laundering rules.
Hosting and infrastructure suppliers: Cloud and server partners that store or transmit data on our behalf, each bound by a written confidentiality agreement.

Data Retention

We hold your personal data for as long as your account is active. After you close it — or we close it — UKGC licence conditions require us to retain records for at least three years. Certain anti-money-laundering documents may need to stay on file for up to five years under the Money Laundering Regulations 2017. Browsing and analytics data is wiped after 13 months at the latest. Once a retention window expires, records are either permanently deleted or stripped of every identifying detail so they cannot be traced back to you.

Your Rights

The UK GDPR and the Data Protection Act 2018 give you a clear set of rights over your personal information:

Access: Ask for a copy of everything we hold about you.
Rectification: Tell us to fix any details that are wrong or out of date.
Erasure: Request that we delete your data — unless a legal retention rule overrides the request.
Restriction: Ask us to temporarily pause processing while a dispute or query is being resolved.
Data portability: Get your data in a structured, machine-readable file you can take elsewhere.
Objection: Challenge processing that relies on legitimate interest if your personal circumstances warrant it.

Send your request to [email protected] and we will reply within 30 calendar days. Not happy with our response? You can escalate the matter to the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies

Our site drops cookies — small data files — onto your device to keep sessions running, remember your settings, and measure traffic. The full breakdown of every cookie name, category, and lifespan lives on our Cookie Policy page.

Security Measures

Every connection to grpcasino-uk.com is protected by 256-bit SSL/TLS encryption. Our database servers sit behind firewalls, and staff access requires multi-factor authentication. We commission independent penetration tests on a regular cycle and patch vulnerabilities as soon as they surface.

Changes to This Policy

We may update this Privacy Policy when laws change or when our data practices evolve. Any new version takes effect the moment it appears on this page. Checking back periodically is the easiest way to stay current.

Contact for Data Protection Enquiries

Got a question about how we handle your data, or want to exercise one of the rights listed above? Drop a line to [email protected] and our data protection team will get back to you.