Do online casinos share my data?

Do online casinos share my data? The direct answer

Yes, every online casino shares some of your personal data, because it can’t operate legally without doing so. To open your account it must check your age and identity with outside databases. To take deposits and pay winnings it passes details to payment providers. To stop self-excluded players gambling it checks with GAMSTOP. And when the law requires it, it gives information to the Gambling Commission, the police or other authorities.

What a licensed casino can’t do is pass your details around freely. UK data protection law, the UK GDPR and the Data Protection Act 2018, requires a lawful reason for each use and a privacy notice that tells you who receives your data. On top of that, the Gambling Commission’s rules limit marketing in particular. Our guide to casino data privacy covers the legal background in more depth; this page focuses on who actually gets your data and what you can do about it.

Who online casinos share your data with

The privacy notice on each casino’s website lists its categories of recipients. If a category is missing from the table above, it is worth asking support what it covers before you sign up.

Identity checks: the data shared when you sign up

Since 7 May 2019, online casinos have had to verify your age and identity before you can deposit or play, including with a bonus or on free-to-play demo games. The minimum is your name, address and date of birth. The Commission’s guide to age, ID and financial verification (opens in a new tab) explains that operators typically check these against databases such as those held by credit reference agencies and the electoral roll, and ask for documents if the database check isn’t enough.

An identity check isn’t a loan application, but if you are concerned about how it appears on your credit file, ask the casino which agency it uses and contact that agency. Our pages on age verification and KYC checks set out what can be requested and when, and why casinos ask for documents covers the paperwork.

Financial checks: what data casinos look at

Since 28 February 2025, operators have had to run a financial vulnerability check when your deposits minus withdrawals pass £150 in a rolling 30 days. That check looks at public records such as bankruptcies, county court judgments, individual voluntary arrangements and debt relief orders. The threshold was £500 from 30 August 2024. The code is set out in LCCP 3.4.4 (opens in a new tab).

Fuller ‘financial risk assessments’ using credit reference agency data were piloted with Equifax, Experian and TransUnion but are not live. The Commission’s April 2026 update said no decision to implement them had been made, and it describes the phrase ‘affordability checks’ as inaccurate. Separately, a casino may ask you directly for payslips or bank statements as part of anti-money-laundering or source-of-funds checks; see why a casino wants my payslips and why casinos ask for bank statements.

Casinos also analyse how you play to spot signs of harm, as required by the customer interaction rules. That data is used within the business to decide whether to contact you, stop marketing or restrict your account.

Marketing: when casinos can use your details

Direct marketing is where you have the most control. Since 1 May 2025, under LCCP 5.1.12 (opens in a new tab), casino, betting and bingo operators must let you opt in separately for each product (casino, betting, bingo) and each channel (email, SMS, phone), with everything switched off unless you choose otherwise. Existing customers were asked to confirm their preferences at their first log-in after the rule started.

Two further rules stop marketing regardless of your settings. Since 12 February 2023, an operator that identifies strong indicators of harm must stop marketing to you and stop new bonus take-up. And if you self-exclude, the operator must remove you from its marketing. Our pages on marketing consent rules and opting out of casino marketing explain the steps, and the Commission’s page how can I stop getting gambling marketing texts and emails (opens in a new tab) covers reporting unwanted contact.

Do casino sister sites share your data?

Many casino brands sit under one licence holder, and data held by that company can be visible across its brands. Coral and Ladbrokes, for example, are both run by LC International Limited (Gambling Commission account 54743), part of Entain. That is one reason its new-customer offers may treat an existing customer of one brand as ineligible for the other’s welcome offer, so check the terms. The privacy notice explains whether, and why, data moves between group companies. See Coral sister sites for the brands on the same licence.

Self-exclusion works in a similar way. If you self-exclude with one brand, check whether the exclusion applies to the operator’s other brands too; GAMSTOP covers every GB-licensed online operator at once.

What casino apps collect: store privacy labels

Apple and Google require apps to describe the data they collect. These labels are written by the developers, not checked line by line by the stores, but they are a useful starting point. The table summarises the UK listings as checked on 20 October 2026.

On an iPhone you can refuse app tracking when asked, and both platforms let you limit location access in settings. Playing on your phone raises other practical points, covered in can I play casino games on my phone.

Your data rights at a UK online casino

Under the UK GDPR you can ask any casino what data it holds about you and receive a copy, normally free of charge and within one month. You can ask for inaccurate details to be corrected, object to direct marketing at any time and withdraw consent you gave earlier. You can also ask for data to be deleted, although that right has limits for a regulated business.

1. Find the data protection contact in the casino’s privacy notice, usually an email address for its data protection officer.
2. Write a short request saying you want a copy of your personal data, and include your account name and email so they can find you.
3. Expect to be asked to confirm your identity before anything is released.
4. Look for a reply within one month; complex requests can be extended, but they must tell you.
5. If you are unhappy with the reply, complain to the casino first and then to the Information Commissioner’s Office.

Can a casino delete my data when I close my account?

Not all of it, straight away. Anti-money-laundering law requires regulated businesses to keep customer identity and transaction records for a period after the relationship ends, five years under the Money Laundering Regulations 2017. Records of self-exclusion also need to be kept so the exclusion can be enforced. Marketing data, on the other hand, should stop being used as soon as you object. Our guide on how to close a casino account explains the difference between closing, self-excluding and asking for deletion.

How to limit what an online casino shares

• Leave all marketing boxes unticked at sign-up, or switch them off later in your account settings.
• Read the privacy notice before registering, especially the section on recipients and group companies.
• Refuse app tracking on your phone and limit location permissions.
• Use payment methods in your own name only; mismatches lead to extra checks and more data requests.
• Keep your password unique; our casino account security guide explains why.
• Ignore anyone claiming to be a casino who asks for your password or card number by message.

If you want gambling companies to stop contacting you altogether because you are trying to stop gambling, GAMSTOP (opens in a new tab) blocks access to GB-licensed online gambling for 6 months to 5 years. See our self-exclusion rules page for what operators must do.

Licensed casinos bound by UK data and marketing rules

Coral and PlayOJO are both licensed by the Gambling Commission, so the marketing-consent, verification and self-exclusion rules on this page apply to them. Coral’s offer: 18+, new players, deposit and bet £10 on slots for 100 free spins at 10p each on selected games, no wagering on winnings, with certain payment methods excluded. PlayOJO’s offer: 18+, new UK customers excluding Northern Ireland, 80 free spins on Big Bass Bonanza at 10p each with a first deposit of £10 or more, winnings paid in cash. Terms apply; checked 5 October 2026. More answers are on the questions hub.

18+. Gambling should be entertainment that costs money, not a way to make it. Set a deposit limit before you play: how to set deposit limits. Free, confidential help: National Gambling Helpline 0808 8020 133.