SmashToWin Privacy Policy 2026 | How We Use Your Data

We gather information in three ways. First, details you give us directly: your name, date of birth, address, email address, phone number and password when you register. Second, verification material: during KYC checks we may ask for photo ID, proof of address and evidence of how a payment method belongs to you. Third, information created through use of your account: deposits, withdrawals, gameplay history, device and browser details, IP address and records of conversations with our support team. We only ask for what we genuinely need to run your account safely and lawfully.

We use your data to open and manage your account, confirm you are 18 or over, process payments in GBP and pay out your withdrawals. We also use it to meet the safer-gambling duties placed on us, including spotting signs of harm and honouring any limits or exclusions you set. Beyond that, we rely on it to detect fraud and money laundering, answer your questions, improve our games and website, and, only where you have agreed, tell you about offers. You can switch marketing off whenever you like without affecting your ability to play.

Under UK data protection law we need a valid reason for each way we use your information. Most of our activity rests on contract, because we cannot run your account without it. Many checks, such as identity verification, record keeping and reporting suspicious activity, rest on legal obligation, since the UK Gambling Commission and other laws require them. Fraud prevention, security and service improvement rest on our legitimate interests, which we balance carefully against your rights. Marketing messages rely on your consent, which you can withdraw at any time from your account settings or by contacting us.

We never sell your personal data. We share it only where necessary: with payment providers and banks that handle deposits and withdrawals, with identity and fraud-prevention partners that help us complete KYC, and with technology suppliers who host our systems or provide support tools under strict contractual controls. We also disclose information to regulators, law enforcement or courts when the law requires it. Where you use GAMSTOP or other safer-gambling services, relevant details may be checked against their records to keep you protected.

We keep personal data only as long as there is a real reason to. Account and transaction records are generally held for the period you remain a customer and for a set time afterwards, because gambling and anti-money-laundering rules oblige us to retain them. KYC documents follow the same approach. Once the legal retention period ends, we delete or anonymise the information. Marketing preferences are kept until you opt out, and support conversations are held only as long as they remain useful or required. Specific periods can vary with the type of record and any ongoing legal obligations.

You have meaningful control over your data. You may ask for a copy of what we hold, request corrections to anything inaccurate, and in some circumstances ask us to erase, restrict or stop using your information. You can object to processing based on our legitimate interests, ask for your data in a portable format and withdraw consent at any point. Some requests may be limited where we must keep records by law, and we will explain if that applies. If you are unhappy with our response, you may complain to the Information Commissioner's Office.

Protecting your data is built into how we operate. Information travels between your device and our servers using SSL encryption, payments run through secure processing channels, and access to personal records is restricted to staff who need it for their role. Identity checks help guard your account against misuse, and we review our safeguards regularly. No system is entirely risk-free, so we also ask you to choose a strong, unique password, keep it private and contact us promptly if you suspect anyone else has gained access.

Our website uses cookies and similar technologies to keep you logged in, remember your preferences, understand how pages perform and, where you allow it, support relevant marketing. Essential cookies are needed for the site to work, while others depend on the choices you make through our cookie banner. You can change those choices at any time. For a full breakdown of the cookies we use and how to manage them, please read our separate cookie policy.

If you want to exercise a right, ask a question about this policy or raise a concern, write to our Data Protection Officer through the support channels listed in your account or on our help pages. To protect you, we may ask for proof of identity before acting on a request, and we aim to reply within the time limits set by UK law, normally one month. Our operator's full legal details are shown in the website footer and terms.

We may update this policy as our services, technology or legal duties evolve. When we make a meaningful change, we will update the version on this page and, where the change affects how we use your data in a significant way, let you know by email or a notice in your account. We encourage you to look back from time to time. Gambling should be fun and never a way to earn money. Please play within your means, and use our deposit limits, time-outs and GAMSTOP self-exclusion if you ever need them. 18+ only.