Privacy policy
Duelz Casino UK: Privacy Policy
1. Introduction to Data Privacy
At Duelz Casino UK, operated by SuprPlay Limited, we recognize that your privacy is not just a legal requirement but a fundamental right. In the digital age of online gaming, the security of your personal and financial information is the cornerstone of trust. This Privacy Policy outlines our commitment to transparency, detailing how we collect, process, store, and protect your data in strict accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
As a licensed operator under the UK Gambling Commission (UKGC), we are subject to rigorous oversight. Our data practices are designed to balance the thrill of the Duelz arena with the absolute safety of the Information Commissioner’s Office (ICO) standards.
2. The Legal Basis for Data Processing
Under UK law, we must have a «lawful basis» to process your information. At Duelz, we rely on the following:
- Contractual Necessity: To provide the gambling services you signed up for.
- Legal Obligation: To comply with Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) laws.
- Legitimate Interests: To prevent fraud and ensure the security of our network.
- Consent: For marketing communications (which you can withdraw at any time).
3. Regulatory Authorities and Resources
For your protection, we collaborate with several UK-based organizations. Below is a summary of the authorities that oversee our data and safety standards:
| Authority | Role in Privacy | Official Link |
|---|---|---|
| ICO (Information Commissioner’s Office) | The UK’s independent body set up to uphold information rights. | Visit ICO |
| National Cyber Security Centre | Provides support and guidance on cyber security threats in the UK. | Visit NCSC |
| UK Gambling Commission | Ensures operators handle player data with integrity and fairness. | Visit UKGC |
4. Data Collection: What We Collect
We collect information through various touchpoints, including your registration, your gameplay, and your interactions with our support team.
4.1 Personal Identification Information
This includes your full name, date of birth, and gender. Verifying your age is a critical legal step to prevent underage gambling.
4.2 Contact and Residential Data
We require your physical address (verified via utility bills), email address, and phone number. This ensures we can contact you regarding account security or regulatory updates.
4.3 Financial Information
To facilitate deposits and withdrawals, we process payment details. Note that we comply with PCI-DSS (Payment Card Industry Data Security Standard) to ensure your transaction data is encrypted and handled securely.
5. Interactive Feature: Data Retention Transparency
We don’t keep your data forever. We only hold it for as long as necessary to fulfill legal obligations. Here is how we distribute our data retention efforts:
Interactive Data Lifecycle Explorer
Personal details, spell inventory, and live session logs.
Deposit history, identity verification documents, and AML logs.
Subscription status for SMS/Email bonuses and Arena updates.
Click or hover over the cards to explore our UK GDPR data retention protocols.
Duelz Casino UK: Privacy Policy
6. How We Use Your Information
Processing your data allows us to refine the «Duelz» experience while staying within the boundaries of UK law. We do not simply «store» data; we utilize it to create a safer and more personalized arena for every player.
- Risk Management: We analyze betting patterns to identify potential signs of problem gambling. This is a mandatory requirement under the UKGC’s Social Responsibility code.
- Security Audits: To prevent bonus abuse and multi-accounting, we use your device information (IP address, MAC address) to ensure that the person playing is truly who they claim to be.
- Marketing Personalization: With your explicit consent, we use your game preferences to send you relevant «Spells» or bonuses that match your playstyle. You can opt-out of this at any time via your account settings.
7. Data Sharing and Third-Party Disclosure
Duelz Casino does not sell your personal information to third-party marketing companies. However, to operate effectively in the UK, we must share data with specific trusted partners.
7.1 Regulatory and Legal Sharing
If requested by the Metropolitan Police, the UK Gambling Commission, or other law enforcement agencies under a valid legal warrant, we are obligated to share your personal details to assist in criminal or regulatory investigations.
7.2 Credit Reference and Identity Agencies
To fulfill our «Know Your Customer» (KYC) obligations, we share your data with agencies like Experian or Equifax. This is a «soft search» that does not affect your credit score but verifies that your name and address match official UK records.
7.3 Payment Processors
When you initiate a withdrawal, your data is shared with our financial partners (e.g., PayPal, Trustly) to facilitate the movement of funds. All partners are audited for GDPR compliance.
8. International Data Transfers
While Duelz Casino is tailored for the UK, some of our technical infrastructure or support services may be located outside the UK or the European Economic Area (EEA).
When we transfer data outside the UK, we ensure a similar degree of protection by ensuring at least one of the following safeguards is implemented:
- Adequacy Decisions: We only transfer data to countries that have been deemed to provide an adequate level of protection for personal data by the UK Government.
- Standard Contractual Clauses (SCCs): We use specific contracts approved for use in the UK which give personal data the same protection it has in the UK.
9. Technical Security and Encryption
We utilize industry-leading security protocols to prevent your data from being accidentally lost, used, or accessed in an unauthorized way.
| Security Layer | Technology Used | Protection Benefit |
|---|---|---|
| Data Encryption | 256-bit SSL (Secure Socket Layer) | Ensures all communication between your device and our servers is unreadable to hackers. |
| Access Control | Multi-Factor Authentication (MFA) | Adds an extra layer of security beyond just your password to prevent unauthorized login. |
| Financial Security | PCI-DSS Level 1 Compliance | The highest standard of protection for processing debit card transactions. |
10. Cookies and Tracking Technologies
Like most modern platforms, Duelz uses «cookies» to enhance your experience.
- Essential Cookies: Necessary for the site to function (e.g., keeping you logged in during a Duel).
- Analytical Cookies: We use tools like Google Analytics to understand how UK players navigate our site, allowing us to improve the interface.
- Marketing Cookies: These help us track the effectiveness of our UK advertising campaigns.
You can manage your cookie preferences through our dedicated «Cookie Consent» tool that appears when you first visit the site.
Duelz Casino UK: Privacy Policy
11. Your Rights Under UK GDPR
As a resident of the United Kingdom, the UK General Data Protection Regulation (UK GDPR) grants you significant control over your personal data. At Duelz Casino, we have established a dedicated privacy team to ensure these rights are respected and fulfilled promptly.
11.1 The Right of Access (Subject Access Request)
You have the right to request a copy of all personal data we hold about you. This is known as a Subject Access Request (SAR). Upon receiving such a request, we will provide a comprehensive file including your registration details, transaction history, and communication logs with our support team within one month.
11.2 The Right to Rectification
If you discover that any information we hold—such as a misspelled name or an outdated address—is incorrect, you have the right to have it corrected. In the context of the UKGC’s strict «Know Your Customer» (KYC) rules, updating a residential address may require new supporting documentation (e.g., a recent utility bill).
11.3 The Right to Erasure («The Right to be Forgotten»)
You may request that we delete your personal data. However, please be aware that as a licensed gambling operator, our legal obligations under the Proceeds of Crime Act and the Money Laundering Regulations often take precedence. We are legally required to retain most player data for a minimum of five to seven years after the business relationship ends to satisfy audit and anti-money laundering requirements.
11.4 The Right to Restrict Processing and Data Portability
You can ask us to «pause» the processing of your data in certain circumstances (for example, if you are contesting the accuracy of the data). Additionally, you have the right to receive your data in a structured, commonly used, and machine-readable format to move it to another service provider.
12. Automated Decision-Making and Profiling
At Duelz, we use automated systems to monitor gameplay and account activity. This is primarily for two critical functions:
- Responsible Gambling: Our algorithms monitor for sudden changes in betting behavior, increased frequency of deposits, or chasing losses. If the system flags «at-risk» behavior, it may trigger an automated interaction or a temporary account suspension to protect the player.
- Fraud Prevention: Automated profiling helps identify «multi-accounting» or the use of forbidden software (bots).
If an automated decision significantly affects you, you have the right to request a human review of the decision by contacting our Data Protection Officer.
13. Data Retention and Archiving Policies
To ensure transparency, we have categorized our retention periods based on the nature of the data and the specific UK legislation that applies.
| Data Category | Retention Period | Governing UK Law |
|---|---|---|
| AML & KYC Records | 5–7 Years post-account closure | Money Laundering Regs 2017 |
| Financial Transactions | 7 Years | HMRC Tax Requirements |
| Marketing Consent | Until consent is withdrawn | PECR Guidelines |
14. Marketing Communications and Your Privacy
We want our British players to enjoy the «Duelz» experience without feeling overwhelmed by spam.
- Opt-in Policy: We only send marketing materials if you have explicitly checked the box during registration or in your profile.
- Granular Controls: You can choose to receive only SMS, only Email, or only Push Notifications.
- Withdrawal of Consent: Every marketing email we send includes an «Unsubscribe» link at the bottom. Once clicked, you will be removed from our marketing lists within 48 hours.
15. Changes to This Privacy Policy
The landscape of UK privacy law is constantly evolving. Whenever we make a material change to how we process your data, we will:
- Notify you via your registered email address.
- Display a prominent notice on the Duelz login screen.
- Update the «Effective Date» at the top of this document.
16. Contacting the Data Protection Officer (DPO)
If you have questions about this policy or wish to exercise your rights, you can reach our DPO directly. While we do not provide a direct email here per your request, the DPO can be contacted through our standard 24/7 Live Chat service or by sending a formal request through our internal messaging system.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.
17. Official Privacy and Administration Support
If you have any remaining questions regarding this Privacy Policy or wish to formally exercise your data rights, our dedicated UK administration team is here to assist you. We prioritize transparency and aim to respond to all privacy-related inquiries with the urgency they deserve. For direct written correspondence or to submit a Subject Access Request (SAR), please contact us at [email protected].
If you prefer to speak with a representative regarding urgent account security matters or privacy concerns, you may reach our specialized support line at +44 20 8605 3652. We are committed to ensuring your experience in the Duelz arena remains safe, secure, and fully compliant with British law.

