Privacy Policy

Last updated: April 2026

Who Controls Your Data

TDCO Limited, with its registered office at 6th Floor, 6 Kean Street, London, WC2B 4AS, operates casino-tote.com under United Kingdom Gambling Commission licence No. 054779-R-331321-008. TDCO Limited is the data controller for all personal information collected through this website. We process your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, ensuring that your privacy is treated as a core part of our service rather than an afterthought.

What Information We Collect

When you register or interact with Tote Casino, we may gather the following categories of data: your full name, date of birth, email address, telephone number, residential address, payment information (debit card details, e-wallet identifiers), IP address, device type and browser characteristics, and a record of your gaming activity including wagers, results and account transactions. Some data is captured automatically via cookies — for full details see our Cookie Policy.

Why We Process Your Data

We use the information we hold about you to create and manage your player account, confirm your identity and age as mandated by our UKGC licence conditions, handle deposits and withdrawals securely, deliver promotional offers you have chosen to receive, detect and prevent fraudulent or suspicious activity, satisfy our legal and regulatory obligations, and improve the overall performance and usability of casino-tote.com. We do not use your personal data for any purpose that falls outside the operation of Tote Casino and the services described in this policy.

Legal Grounds for Processing

Our processing relies on one or more of the following bases: performance of a contract (the terms you accepted when you registered), compliance with a legal obligation (anti-money-laundering checks, responsible gambling requirements imposed by the UKGC), your explicit consent (for instance, when you opt in to receive marketing communications), and our legitimate interests (fraud prevention, analytics and service improvement) — provided those interests do not override your fundamental rights under data protection legislation.

We never sell your personal information. Data may be shared with payment service providers who process your transactions, identity verification partners who carry out KYC checks on our behalf, regulatory bodies when legally required, and technology suppliers that help us host and secure the platform. Every third party that accesses your data is contractually bound to protect it in line with applicable privacy standards and to use it only for the specific purposes we have authorised.

How Long We Keep Your Data

Your personal data is retained for as long as your account remains active, plus a minimum of five years after closure in order to meet anti-money-laundering record-keeping requirements. Financial transaction records may be held for longer periods where UK regulations demand it. Once the relevant retention period expires, your data is either securely deleted or anonymised so that it can no longer be linked to you as an individual.

Your Data Rights

Under UK GDPR you have the right to access the personal data we hold about you, request correction of inaccurate records, ask for deletion where no legal obligation prevents it, restrict or object to certain types of processing, and receive your data in a portable machine-readable format. To exercise any of these rights, email [email protected]. We aim to respond within 30 calendar days. If you believe your rights have not been adequately addressed, you may lodge a complaint with the Information Commissioner’s Office (ICO).

Data Security Measures

All connections between your browser and our servers are encrypted using 256-bit SSL. On the server side we deploy firewalls, intrusion detection systems and conduct regular third-party security audits. Access to personal data within the organisation is restricted to authorised staff on a strict need-to-know basis. While no system can eliminate every risk entirely, we apply every reasonable safeguard to protect the information entrusted to us.

Privacy Enquiries

For questions about this policy or to exercise your data rights, email [email protected]. We will deal with your request promptly and transparently.