Nomini Casino places the protection of personal data related to its players, website visitors, and affiliate partners first nomini-casino.co.uk. This policy on data protection establishes the framework Nomini Casino follows to stay compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It details how personal information is collected, processed, stored, and shared, and what rights you have over your data. The policy encompasses every service offered through the Nomini Casino platform, including the affiliate programme. By acting openly about its practices and following strict data handling rules, Nomini Casino strives to build trust and show it is dedicated when it regards privacy. This document is a simple reference for anyone engaging with the brand. It outlines the legal grounds for processing, the specific types of data included, and the steps carried out to prevent unauthorised access. Whether you are a player enjoying casino games or an affiliate marketing the brand, your information is managed with care and in full line with UK law.
Purpose and Purpose of These Guidelines
This document covers all personal data Nomini Casino manages as part of its online gaming services and affiliate programme. It covers information gathered from registered players, prospective customers, website visitors, and affiliate partners. The aim is to provide a clear explanation of how Nomini Casino processes personal data, the lawful bases it uses, and the measures adopted to secure that data. The policy also lays out the responsibilities of the data controller and the rights of data subjects under UK law. By utilizing the Nomini Casino website or participating in the affiliate programme, you acknowledge you have read and understood the methods set out here. This document undergoes reviewed regularly to account for changes in legislation or how the business operates, so compliance keeps current and data protection standards are kept high. Every staff member, contractor, and third-party service provider who processes personal data on Nomini Casino’s behalf must follow this policy and treat all information as confidential. The scope covers data collected through cookies, account registration forms, customer support chats, and affiliate tracking technologies. If there is ever a discrepancy between this policy and applicable law, the law takes precedence.
Groups of Individual Data Gathered
The forms of private data Nomini Casino obtains vary by how you use the platform. For customers, this commonly includes identification information like entire name, birth date, and address; communication details such as e-mail and phone number; monetary records including payment card details and account activity; and tech information like IP number, browser, and device identifiers. For affiliates, supplementary data may be gathered, including website addresses, site data, and payment information. Nomini Casino also obtains user metrics about how people navigate the website and engage with games, which helps sharpen the user interaction. All data collection follows what is essential for the specified purposes, and private details gets managed with stricter security measures. The company does not consciously gather data from anyone under 18. Occasionally, verification documents like a passport copy or a utility bill are needed to meet compliance obligations. This data is managed solely for identity checks and is kept securely. Where it is possible, Nomini Casino anonymises or pseudonymises data before applying it for analysis, minimising the chance of recognition.
Lawful Ground for Managing Personal Data
Nomini Casino processes personal data exclusively when a lawful lawful basis is present, as outlined by the UK GDPR. The main bases encompass the need to perform a contract, such as when a user creates an account or an affiliate joins for the scheme. Consent is another key basis, particularly for direct marketing materials and the use of non-essential cookies. Nomini Casino also depends on legitimate interests for matters like fraud prevention, network security, and service improvements, as long as those interests do not outweigh your rights and freedoms. Processing may also be essential to meet legal obligations, covering anti-money laundering rules and requests from law enforcement. Each processing activity undergoes a careful assessment to make sure the correct lawful basis is noted and that users are notified about it. Where special category data is managed, like identity documents that might expose biometric data, Nomini Casino acquires explicit consent or another specific provision under Article 9 of the UK GDPR. Nomini Casino does not use automated decision-making that produces legal effects without human intervention and proper safeguards. For instance, credit checks or automated profiling always undergo a manual review before any significant outcome occurs.
Data Sharing and External Disclosures
Nomini Casino might share personal data with carefully selected third parties that support the platform and provide services. These encompass payment processors, identity verification providers, marketing platforms, and affiliate tracking software. Data may also be disclosed to regulatory bodies, law enforcement agencies, and legal advisors when the law requires it or to protect the company’s legitimate interests, like probing suspected fraud or answering a court order. The company does not trade personal data to third parties for their own marketing. All third-party partners are governed by contracts that demand the same level of data protection described in this policy, and Nomini Casino performs due diligence to check compliance. In the affiliate programme, performance data is exchanged with the relevant affiliate tracking platform, but personal details of players are not passed on to affiliates without explicit consent. When data goes to payment processors, only the bare minimum, like name and transaction amount, is revealed. Any sharing beyond these specified purposes needs extra consent or a specific legal obligation. Nomini Casino acts as the data controller and retains full responsibility for guaranteeing third parties stick to strict confidentiality and security requirements.
Data Retention Periods
Nomini Casino keeps personal data only for as long as needed to achieve the reasons for its collection, or as the law dictates. Player account information is usually maintained for the duration of the account and for five years after account closure to meet anti-money laundering and tax rules, and to handle any likely legal claims. Transaction records, covering deposits, withdrawals, and gaming activity, are kept for at least seven years to fulfill financial reporting requirements. Affiliate data, like commission records and referral logs, is kept for a similar period to meet contractual and tax duties. Identity verification documents are stored securely and then removed or irreversibly anonymised once the verification process finishes, unless a regulator demands a longer hold. Cookie data and website analytics persist for shorter periods, generally between 12 and 26 months, depending on the cookie type. When the retention period ends, Nomini Casino securely erases or anonymises the data so it can no longer be linked to an identifiable person. Regular checks of data retention schedules guarantee no information stays longer than it should.
Security Measures
Nomini Casino implements a full range of technical and organisational controls to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. All data moving between your device and Nomini Casino servers is shielded with strong Transport Layer Security (TLS) encryption. Sensitive data, like payment card details, has an extra layer of safeguarding through tokenisation, so the actual card numbers are never stored on Nomini Casino systems. Access to personal data is restricted to authorised staff on a strict need-to-know ground, enforced through role-based access controls and multi-factor authentication. The company runs regular security audits, vulnerability scans, and penetration tests to identify and address potential weak spots. Physical security at data centre facilities includes biometric access controls, 24/7 surveillance, and redundant power supplies. All staff go through mandatory data protection and information security instruction when they join and at regular intervals after that. Incident response procedures are set to detect, control, and report any personal data breach to the relevant supervisory authority within 72 hours when needed. These layered security approaches get reviewed and improved constantly as new threats emerge and industry best practices progress.
Data Transfers Abroad
Several of the third-party service providers Nomini Casino uses may be based beyond the UK, such as in places that might not have comparable data protection laws. Under those circumstances, Nomini Casino implements proper safeguards to protect personal data consistent with UK GDPR requirements. These safeguards generally include standard contractual clauses endorsed by the UK Information Commissioner’s Office, binding corporate rules for transfers inside a corporate group, or dependence on adequacy decisions whereby the destination country has been found to offer an adequate level of protection. For instance, when player payment data is managed by a payment gateway based in the European Economic Area, the company checks that an adequacy decision applies. If a processor is located in a country that lacks an adequacy decision, Nomini Casino introduces extra measures including encryption at rest and in transit, and conducts transfer impact assessments to guarantee your rights stay enforceable and effective. You are entitled to ask for more details about the particular safeguards used to any international transfer of your personal data by getting in touch with the Data Protection Officer.
The manner in which Nomini Casino Processes Your Information
Personal data is utilized for a variety of reasons that are central to providing a protected and entertaining gaming journey. Player details makes account setup, payment handling, and customer service feasible. It is also used to authenticate identity and age, a legal must for gambling companies in the United Kingdom. Transaction records supports Nomini Casino stick to anti-money laundering requirements and identify fraudulent actions. With explicit permission, contact details may be used to transmit promotional promotions and news about new games or affiliate chances. Usage data is evaluated to enhance how the website works and to tailor information. For affiliates, data is handled to record referrals, determine commissions, and produce activity analyses. In each instance, Nomini Casino makes sure data usage is equitable, open, and aligns with what people would expect. All processing actions comply with the principles of data limitation and purpose restriction. For example, evaluation for responsible gambling includes examining deposit patterns and session durations to flag possible problems, but this is in no way applied for automated decisions that alter account standing without a human review.
Your Data Protection Rights
Under the UK GDPR, you hold a number of rights over your personal data. These comprise the right to access the data Nomini Casino maintains and to get a copy of it, often called a subject access request. You can also ask for inaccurate or incomplete information to be fixed, and in certain situations, for your data to be removed, for example if it is no longer required for the reason it was collected. The right to restrict processing lets you limit how your data is used while a complaint or accuracy dispute gets looked into. Data portability permits the transfer of data you provided to another provider in a structured, commonly used format. Where processing rests on consent, you can withdraw that consent at any moment without affecting the lawfulness of processing that happened before the withdrawal. You also have the right to object to processing based on legitimate grounds, including profiling for direct marketing. Requests to use any of these rights can be sent to the Data Protection Officer using the contact details on the Nomini Casino website. Nomini Casino will answer all valid requests within one month and will give clear reasons if any right cannot be fully fulfilled because of legal exemptions.