Privacy Policy

This Privacy Policy explains what personal data we at Hiddenjack Casino collect, why we collect it, who we share it with and the rights you have over it. It applies to every player who visits hiddenjack.uk.com or holds an account with us.

Data We Collect

We collect only the data we need to run your account, meet our licence obligations under the Malta Gaming Authority and keep gambling safe. That covers six broad categories.

Verification documents (KYC) are required before your first withdrawal: a photo ID, proof of address dated within three months and confirmation of your payment method. We process these within 24 to 48 hours and store them for the statutory retention period.

Identity data: name, date of birth, email address, phone number and residential address.
Verification documents: passport, driving licence or national ID, utility bills, and payment-method screenshots for KYC.
Transaction data: deposits, withdrawals, bonuses claimed and wagering history.
Technical data: IP address, device and browser type, operating system and approximate location derived from your IP.
Gameplay behaviour: games played, stakes, session times, win and loss patterns used for responsible-gambling monitoring.
Marketing preferences: which channels you consented to and the consent records behind them.

How We Use Your Data

We use each category of data for a defined purpose, and never for anything outside those purposes without telling you first.

Creating and managing your account, including login and account settings.
Verifying your identity and age (KYC) and screening against sanctions and AML lists.
Processing deposits and withdrawals through Visa Debit, Mastercard Debit, Trustly, Skrill, Neteller and other methods we offer.
Preventing fraud, money laundering, bonus abuse and account takeovers.
Monitoring gambling behaviour to spot signs of harm and act on them.
Sending you marketing only where you have given consent, and honouring your preferences at any time.
Meeting legal and regulatory obligations, including tax, audit and reporting duties.

Our Legal Bases

Contract. We process identity, transaction and gameplay data to set up your account and deliver the gambling service you signed up for. Without this data we cannot operate your account.

Legal obligation. Anti-money-laundering law and our MGA licence (MGA/B2C/892/2024) require us to verify your identity, monitor transactions and keep records for at least five years. These duties override consent, so we cannot delete that data early even if you ask.

Legitimate interest. We rely on legitimate interest for fraud prevention, security monitoring, service improvement and aggregated analytics. We balance this interest against your rights and you may object at any time.

Consent. Marketing messages, optional cookies and some location checks run on your consent. You can withdraw consent as easily as you gave it, and withdrawal never affects the lawfulness of earlier processing.

How Long We Keep It

Retention depends on the type of data and the reason we hold it. Where gambling law sets a minimum period, that period wins.

Identity and account data: for the life of your account, then up to 24 months unless a longer statutory period applies.
Transaction and KYC records: a minimum of 5 years after account closure, as required by AML and MGA regulations.
Verification documents: up to 5 years after your last transaction.
Gameplay and responsible-gambling logs: retained with transaction records for regulatory review.
Marketing consents and preferences: until you withdraw consent or ask us to delete them.
Technical logs: up to 12 months for security and debugging purposes.

We never sell your personal data. We share it only with partners who need it to deliver the service, and always under data-processing agreements that restrict further use.

Payment processors handling your deposits and withdrawals.
KYC and AML screening providers that verify your documents.
Game and platform providers that receive the minimum data needed to run your session.
IT and cloud hosting providers that store and secure our systems.
Analytics providers measuring site performance, on the basis of consent where required.
Regulators and law-enforcement bodies, including the Malta Gaming Authority, when we are legally obliged to report.
Professional advisers such as auditors and lawyers, bound by confidentiality.

Your Rights Over Data

UK and EU data-protection law gives you direct control over your personal data, and we answer every request within one month.

If we refuse a request, for example where KYC records must be kept by law, we will tell you why and how to challenge our decision. You can also complain to the UK Information Commissioner's Office or, in the EU, to your national data-protection authority.

Access: get a copy of the personal data we hold about you.
Rectification: correct anything that is inaccurate or incomplete.
Erasure: ask us to delete data we no longer have a legal reason to keep.
Portability: receive your account data in a machine-readable format.
Objection: object to processing based on legitimate interest.
Withdraw consent: stop marketing or optional cookies at any time, via account settings or a link in every email.
Complain: escalate to the ICO or your local data-protection authority.

Cookies and Tracking

We use strictly necessary cookies to keep you logged in and secure your session, plus optional analytics and marketing cookies that load only with your consent. You can change your cookie choices at any time from the banner or your browser settings. Full details, including the list of cookies and their lifespans, are in our separate Cookies Policy.

How We Protect Your Data

All traffic between your device and our servers is encrypted with TLS. Passwords are hashed, never stored in plain text, and payment details are handled exclusively by certified PCI-DSS-compliant processors.

Access to player data is limited by role: only trained staff who need it for KYC, support or security can see it, and every access is logged. If a personal-data breach ever occurs, we will notify the relevant supervisory authority within 72 hours and inform you directly where the breach poses a high risk to your rights.

Contact Our Data Officer

Hiddenjack Casino is operated by Hiddenjack Gaming Ltd. Our Data Protection Officer answers all privacy questions, verifies your identity and handles every rights request. Write to [email protected] or use the address published on this site; we respond within one month. You can also reach our support team 24/7 via live chat or at [email protected] for anything not covered by this policy.

Frequently asked questions

Can I delete my KYC documents after verification?

No. Anti-money-laundering law and our MGA licence require us to keep verification records for at least 5 years after your last transaction, so we cannot erase them early. Other data, such as marketing preferences, we delete on request.

Do you sell my personal data to advertisers?

We never sell your data. We share it only with payment processors, KYC providers, platform partners and regulators who need it for a specific purpose, always under strict processing agreements.

How do I stop marketing emails from Hiddenjack Casino?

Use the unsubscribe link at the bottom of any email or switch off marketing in your account settings. We stop sending immediately and record your withdrawal of consent.

How long do you keep my transaction history?

We keep transaction and gameplay records for a minimum of 5 years after your account closes, because our licence obliges us to. Technical and security logs are kept for a shorter period, up to 12 months.

Where do I complain if I am unhappy with your answer?

Contact the UK Information Commissioner's Office, or your national data-protection authority if you are in the EU. We will still try to resolve any issue directly if you contact [email protected] first.