Data Protection & Privacy

Information Collection

Personal data is collected and processed by Skill On Net Limited in connection with the provision of gambling and gaming services through the geckoplay-casino.co.uk platform. The following categories of personal data are subject to processing:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification document details, including passport numbers and driving licence references, are collected for the purposes of identity verification and compliance with applicable regulatory obligations.
• Contact Data: Residential address, electronic mail address, and telephone number are recorded to facilitate account administration and communications.
• Financial Data: Payment card details, bank account information, transaction histories, deposit records, and withdrawal requests are processed in connection with the operation of financial transactions and the detection of fraudulent activity.
• Technical Data: Internet Protocol (IP) addresses, browser type and version, device identifiers, operating system data, time zone settings, and cookie data are collected automatically upon interaction with the platform.
• Usage Data: Records of gaming activity, session durations, wagering patterns, product preferences, and platform navigation behaviour are processed for operational and analytical purposes.
• Compliance Data: Responsible gambling self-assessments, self-exclusion records, source of funds documentation, and politically exposed person (PEP) screening results are maintained in fulfilment of statutory obligations imposed by the United Kingdom Gambling Commission (Licence Reference: 039326-R-319358-059) and the Malta Gaming Authority (Licence Reference: MGA-C50024).
• Communications Data: Correspondence submitted through support channels, including electronic mail, live chat transcripts, and complaint records, is retained for quality assurance and dispute resolution purposes.

Personal data is obtained directly from data subjects at the point of account registration, during the course of ongoing account usage, and through automated technical mechanisms operating within the platform environment. Where required by law, personal data may additionally be obtained from third-party identity verification agencies, credit reference bureaus, and fraud prevention organisations.

Data Usage

Personal data is processed by Skill On Net Limited for defined, explicit, and legitimate purposes in accordance with applicable data protection legislation, including the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. The following purposes govern the processing of personal data:

• Account Registration and Management: Personal data is processed to establish, maintain, and administer user accounts, to verify the identity of data subjects, and to ensure compliance with age verification requirements mandated under gambling legislation.
• Service Delivery: The provision of gaming and gambling services, the processing of financial transactions, and the facilitation of customer support interactions necessitate the processing of relevant personal and financial data.
• Regulatory Compliance: Processing is undertaken in fulfilment of legal obligations imposed by the United Kingdom Gambling Commission and the Malta Gaming Authority, including anti-money laundering (AML) and counter-terrorism financing (CTF) screening, responsible gambling assessments, and mandatory reporting requirements.
• Fraud Prevention and Security: Personal and technical data is analysed for the detection, investigation, and prevention of fraudulent transactions, unauthorised account access, and other unlawful activities affecting the integrity of the platform.
• Responsible Gambling: Usage and behavioural data is monitored for the identification of at-risk gambling patterns. Self-exclusion requests and spending limit configurations are administered in accordance with regulatory requirements and the operator's responsible gambling obligations.
• Financial Administration: Transaction records are maintained for accounting, audit, and taxation purposes, and to facilitate the accurate processing of deposits, withdrawals, and bonus-related adjustments.
• Platform Improvement: Aggregated and anonymised usage data is analysed for the purposes of enhancing platform functionality, optimising user experience, and informing product development decisions.
• Marketing Communications: Where explicit consent has been obtained from the data subject, personal data may be used to transmit promotional communications relating to products and services offered by Skill On Net Limited. Data subjects retain the right to withdraw such consent at any time.
• Legal Claims: Personal data may be processed where necessary for the establishment, exercise, or defence of legal claims arising in connection with the provision of services.

The lawful bases relied upon for data processing include the performance of a contract to which the data subject is party, compliance with legal obligations to which Skill On Net Limited is subject, the legitimate interests of the controller, and, where applicable, the explicit consent of the data subject.

Data Protection

Skill On Net Limited implements comprehensive technical and organisational measures to ensure the security, integrity, and confidentiality of personal data processed in connection with the operation of geckoplay-casino.co.uk. Such measures are designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or unlawful disclosure.

The following technical safeguards are maintained:

• Encryption: All data transmitted between user devices and platform servers is protected through Secure Socket Layer (SSL) and Transport Layer Security (TLS) encryption protocols. Sensitive data held within internal systems is subject to encryption at rest.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Role-based access control mechanisms ensure that only authorised personnel are permitted to access data categories relevant to their designated functions.
• Authentication: Multi-factor authentication procedures are applied to administrative systems and sensitive operational environments to mitigate the risk of unauthorised access.
• Monitoring and Logging: System activity logs and security monitoring tools are deployed to detect anomalous behaviour, potential intrusions, and unauthorised data access attempts.
• Vulnerability Management: Regular security assessments, penetration testing, and vulnerability scanning procedures are conducted to identify and remediate security weaknesses within platform infrastructure.
• Data Minimisation: Personal data is collected only to the extent necessary for the purposes for which it is processed. Data is retained for no longer than is required to fulfil those purposes or to comply with applicable legal retention obligations.

The following organisational measures are maintained:

• Staff Training: All personnel with access to personal data are required to undertake mandatory data protection training and are bound by confidentiality obligations as a condition of their engagement.
• Data Processing Agreements: Third-party service providers engaged to process personal data on behalf of Skill On Net Limited are required to execute formal data processing agreements containing appropriate contractual safeguards.
• Incident Response: A documented data breach response procedure is maintained. In the event of a personal data breach, notifications are made to relevant supervisory authorities and, where required, to affected data subjects within the timeframes prescribed by applicable law.
• Data Protection Officer: A designated data protection function is maintained to oversee compliance with data protection legislation and to act as a point of contact for supervisory authorities and data subjects.
• Privacy by Design: Data protection considerations are integrated into the design and development of systems, processes, and products from their inception, in accordance with the principle of privacy by design and by default.

Notwithstanding the measures described herein, the transmission of data over public networks cannot be guaranteed to be entirely secure. Data subjects are advised to exercise appropriate caution when transmitting personal data electronically.

Privacy Rights

Data subjects whose personal data is processed by Skill On Net Limited in connection with geckoplay-casino.co.uk are afforded a number of rights under applicable data protection legislation, including the UK GDPR and the Data Protection Act 2018. The exercise of such rights is subject to certain conditions, limitations, and exemptions as provided for under applicable law.

The following rights are available to data subjects:

• Right of Access: Data subjects are entitled to request confirmation as to whether personal data concerning them is being processed, and, where such processing is confirmed, to receive a copy of the personal data held together with information regarding the purposes, categories, recipients, retention periods, and safeguards applicable to such processing. Such requests are referred to as Subject Access Requests (SARs) and shall be responded to within one calendar month of receipt.
• Right to Rectification: Data subjects are entitled to request the correction of inaccurate personal data held by Skill On Net Limited without undue delay. Where personal data is incomplete, data subjects may request that incomplete data be completed, having regard to the purposes of the processing.
• Right to Erasure: Data subjects are entitled to request the deletion of personal