Zombillion Casino Privacy Policy: Personal Information and Data Rights
Zombillion Casino Privacy Policy explains the principles governing personal information associated with our website, account-related services and relevant communications. We recognise that people need to understand how their information is used, why certain details may be necessary and what rights they have. Privacy is relevant when visiting a website as well as when registering an account, requesting assistance or carrying out financial activity.
At Zombillion Casino, we believe personal information should be processed for legitimate purposes and handled with appropriate care. Different activities may involve different categories of data, and the lawful basis for one activity does not automatically apply to another.
This policy explains personal information, data use and privacy rights. You can raise questions about the responsible data controller, data recipients or retention through the contact options on our website.
Scope of Our Privacy Policy
Our privacy information concerns personal data processed through Zombillion Casino website activities and related account services where those services are available.
A person browsing general information may have a different relationship with the website from someone registering an account or submitting a withdrawal request.
We believe the relevant differences should be explained clearly so that individuals understand which processing activities affect them.
Website Visitors
Visitors may access publicly available content without registering. Technical information may nevertheless be processed to provide requested pages, maintain security or support other lawful functions.
The precise categories depend on the website's systems. We do not assume that every optional analytics or advertising technology is active.
Registered Account Holders
Account services may involve identification details, contact information, authentication records, financial transactions and relevant gaming activity.
Each category should have a defined purpose. We recognise that account information can be sensitive, especially where identity documents or financial records are involved.
People Contacting Us
An enquiry may contain a name, contact method and information about the issue. Some complaints may also involve transaction details or other personal records.
We believe information should be limited to what is reasonably necessary for the request.
Categories of Personal Data
The personal information relevant to your account depends on the services you use and the actions you take.
The following descriptions explain common types of data that may be necessary. They do not establish that every category is actively collected through our website.
Identity Information
Personal identification may include a legal name, date of birth, address or supporting documentation where necessary.
Such information may be relevant to confirming eligibility and account ownership. We recognise that identification documents require careful handling.
Contact Information
Contact details may include an email address, telephone number or other approved communication information.
These details can support account administration, notices and legitimate recovery processes.
We encourage account holders to keep their records accurate.
Account and Authentication Records
Account information may include identifiers, status records, security events and relevant authentication activity.
The purpose may be to provide requested services or protect against unauthorised access.
Passwords should be handled according to appropriate security standards and must remain confidential.
Financial Information
Where payment services are provided, records may include transaction amounts, dates, payment references and information needed for eligible financial processing.
The exact details depend on the cashier and the financial services involved.
We believe information should be collected only where a legitimate purpose exists.
Gaming and Responsible Gambling Information
Where gambling services are offered, relevant data may include stakes, outcomes, account balances and participation history.
Some information may be necessary to administer games, investigate disputes or identify gambling-related risk.
The purpose and lawful basis must be assessed for each relevant activity.
Technical Information
Technical data may include IP addresses, browser characteristics, session identifiers and device details.
Such information can qualify as personal data when it identifies or can be linked to an individual.
We recognise that technical records also require appropriate privacy consideration.
Why We Process Personal Information
Personal data should be used for clearly defined purposes and supported by an appropriate lawful basis.
Different activities may have different reasons for processing. We do not treat consent as the automatic basis for every account requirement.
Account Administration
Certain information may be necessary to create, maintain or manage a requested account service.
This may involve registered contact details, authentication records and information about account status.
Eligibility and Identity Checks
Identity information may be required to establish age, ownership and other relevant eligibility conditions.
Such processing should remain connected to legitimate requirements.
Financial Transactions
Payment information may be needed to process eligible deposits and withdrawals, reconcile balances or investigate transaction problems.
The information used should be relevant to those purposes.
Security and Fraud Prevention
Some technical and account records may be necessary to protect services against misuse, unauthorised access or suspected fraudulent activity.
Any processing should remain proportionate and legally justified.
Compliance With Legal Requirements
Certain records may need to be maintained or disclosed to satisfy applicable legal obligations.
These obligations may continue after an account is closed.
Lawful Bases for Processing
UK data protection law provides different lawful bases for personal information processing. The correct basis depends on the specific purpose and circumstances.
Each processing purpose needs an appropriate lawful basis. You can raise questions about how a basis applies to your personal information through our contact options.
Contractual Necessity
Certain information may be necessary to provide account services requested by an individual.
The processing must genuinely relate to that contractual purpose.
Legal Obligation
Identity, financial and recordkeeping activities may sometimes be required by law.
Where this applies, the relevant legal duty determines the purpose of processing.
Legitimate Interests
Some security and administrative activities may be supported by legitimate interests, subject to the applicable balancing requirements.
The interests must be considered alongside individual rights and freedoms.
Consent
Consent may be required for optional marketing or certain non-essential tracking activities.
Where consent is the basis, it must be valid, informed and capable of withdrawal.
Cookies and Website Technologies
Cookies and similar technologies can support website functionality, sessions, preferences and optional measurement activities.
We recognise that not all technologies serve the same purpose or have the same legal requirements.
Review cookie information and browser settings to understand how website technologies affect your device and privacy.
Essential Cookies
Some technologies may be necessary for a requested website function or an appropriate security purpose.
Their use must correspond to the relevant technical and legal conditions.
Analytics Cookies
Analytics technologies can help measure website performance. Review cookie information and your consent choices to understand any optional tracking.
Non-essential cookies generally require appropriate consent before placement or access.
Review your cookie choices before allowing optional analytics or tracking.
Advertising and Preference Cookies
Certain optional technologies may support advertising or stored preferences.
Their purposes, recipients and retention arrangements must be disclosed accurately where relevant.
Cookie Consent
Where affirmative consent is required, merely continuing to browse should not be treated as a sufficient positive choice.
Individuals should receive the appropriate information and controls.
Sharing Personal Information
Personal information may sometimes need to be shared with appropriately authorised recipients for legitimate purposes.
The actual recipients depend on the service arrangements. We believe unnecessary disclosure should be avoided.
Technical Service Providers
Hosting, security, account administration or other technical services may involve access to relevant information.
The roles and applicable safeguards should be established through suitable arrangements.
Financial Services
A deposit or withdrawal may involve a financial service processing relevant transaction details.
Information should be limited to what is necessary for the payment or another legitimate requirement.
Identity Verification Services
Where identity checks are required, relevant information may be processed through approved verification arrangements.
You can ask which verification providers receive your personal information and why it is shared.
Legal Disclosures
Personal information may be disclosed where required by a valid legal obligation or process.
Such requests must be assessed appropriately.
International Data Transfers
Some technical or financial services may involve personal information being processed outside the United Kingdom.
Restricted transfers require an appropriate legal basis and safeguards.
Storage and transfer locations can affect the protections that apply to your data. You can contact us with questions about international transfers and the safeguards relevant to your information.
The relevant destinations and transfer arrangements must be described in the final policy where applicable.
Personal Data Retention
Different categories of information may need to be retained for different periods.
A single retention period should not automatically apply to all records.
We believe personal information should be retained only for as long as there is a legitimate reason.
Account Records
Account information may be needed during an active relationship and for certain lawful purposes after closure.
Retention depends on the record type, the purpose of processing and applicable legal requirements. You can ask about the retention of information associated with your account.
Financial Records
Financial transaction information may need to be retained to satisfy legal obligations or resolve disputes.
The applicable periods can differ from ordinary website records.
Enquiries and Complaints
Support communications may be retained where necessary to address the issue, maintain appropriate records or satisfy relevant legal requirements.
Deletion and Anonymisation
Information no longer required should be deleted or otherwise handled lawfully.
Anonymisation may be appropriate where individual identification is no longer necessary.
Your Privacy Rights
Individuals may have rights concerning personal information under applicable UK data protection law.
The availability and scope of each right depend on the relevant circumstances, lawful basis and any applicable exemptions.
Access to Personal Data
A person may request access to personal information and relevant supplementary information.
We recognise that identity confirmation can be necessary before confidential records are disclosed.
Correction of Information
Inaccurate personal data may be corrected, and incomplete information may be completed where appropriate.
Some changes may require verification to protect account integrity.
Erasure
An individual may request deletion of personal information in qualifying circumstances.
The right is not absolute where lawful retention obligations apply.
Restriction of Processing
Certain circumstances may permit a request to restrict how information is used.
The relevant conditions determine whether processing must be limited.
Objection to Processing
Individuals may object to certain processing activities. The right to object to direct marketing has particular significance.
We believe such choices should be respected according to the applicable requirements.
Data Portability
Where the relevant conditions apply, an individual may be entitled to receive personal information in a structured, commonly used and machine-readable form.
Withdrawal of Consent
Where an activity relies on consent, the individual may withdraw it.
Withdrawal does not automatically invalidate earlier lawful processing.
Marketing and Communication Preferences
Marketing messages differ from account notifications required for administration or security.
We believe optional promotional communications should respect the individual's applicable choices and rights.
Marketing Consent
Where consent is required, it should be separate from unrelated contractual conditions and based on an informed choice.
Preselected permission should not be treated as an appropriate affirmative opt-in where one is required.
Opting Out
Individuals should have an appropriate way to withdraw consent or object to relevant direct marketing.
A marketing opt-out does not necessarily prevent essential account-related communications supported by another lawful basis.
Communication Records
Consent records and relevant communication preferences may need to be maintained to demonstrate compliance.
Retention should follow legitimate criteria.
Personal Data Security
We recognise the importance of protecting personal information against unauthorised access, accidental loss and inappropriate disclosure.
Appropriate technical and organisational measures are necessary, but no digital system can promise absolute protection.
Password Protection
We encourage individuals to maintain strong, unique passwords and avoid sharing credentials.
Unexpected requests for passwords or authentication codes should be treated cautiously.
Access to Sensitive Information
Information should be available only to people and services with a legitimate need.
Keep sensitive information within the access permissions and responsibilities that apply to it. Avoid sharing account records through public or unsecured channels.
Data Security Incidents
An incident may require investigation, containment and, where legally necessary, notification.
The appropriate response depends on the nature of the information and the risk to individuals.
Children and Account Eligibility
Zombillion Casino content is intended for eligible adults aged 18 and above.
We do not support underage gambling.
Adults should protect credentials and payment information on shared devices. Where information indicates possible underage account activity, appropriate safeguards must be applied.
Automated Processing and Profiling
Some digital services may use automated processing for account administration, security or risk assessment.
Where decisions have legal or similarly significant effects, additional rights and disclosures may apply.
You can ask whether automated processing affects a decision about your account and exercise any applicable rights concerning that decision.
You can ask how automated processing affects your information and exercise any applicable rights concerning significant decisions.
Changes to Our Privacy Policy
Privacy information may need updating when services, data uses or legal requirements change.
Material changes should be communicated appropriately.
Where fresh consent is necessary, a revised notice alone does not replace that consent.
Read policy updates when considering how your data is handled, and contact us if you have a question about a change.
Privacy Requests and Concerns
A privacy request may concern access, correction, deletion, marketing preferences or an alleged security problem.
Use the contact options on our website to raise a privacy request. We may need to check your identity before disclosing confidential account information.
We may need to confirm identity before disclosing confidential records. Individuals may also have the right to complain to the relevant supervisory authority under applicable data protection law.