Privacy Policy
This privacy policy outlines how BigClash collects, uses, stores, and protects your personal information when you access and use our online slot game platform. We are committed to safeguarding your privacy and ensuring transparency about our data practices. By using BigClash, you agree to the terms set out in this policy. We process your data in accordance with applicable data protection regulations, including the General Data Protection Regulation (GDPR) and relevant Irish legislation. This document explains your rights regarding your personal information and how we maintain safe gaming standards whilst handling your data.
Information We Collect
When you register and play on the BigClash casino platform, we collect several categories of personal information necessary for service provision and regulatory compliance. Account registration requires your full name, date of birth, residential address, email address, and telephone number. We verify your identity through government-issued identification documents such as passports or driving licences to comply with anti-money laundering regulations and age verification requirements. Financial information including payment card details, bank account numbers, and transaction history is collected when you deposit or withdraw funds. We automatically gather technical data through cookies and similar technologies, including your IP address, device type, browser information, operating system, and gameplay patterns. Location data may be collected to ensure compliance with geographical restrictions and licensing requirements. Communication records are maintained when you contact customer support through email, live chat, or telephone. We also monitor gameplay activity, betting patterns, and session durations to promote responsible gambling and detect unusual activity that might indicate problem gambling behaviour.
How We Use Your Information
Your personal information serves multiple legitimate purposes essential to operating the BigClash platform safely and legally. We process your data to create and manage your gaming account, authenticate your identity, and verify that you meet the legal gambling age requirement of 18 years in Ireland. Payment processing requires us to handle your financial information securely to facilitate deposits, process withdrawals, and maintain accurate transaction records. We use your data to comply with legal obligations under Irish and European Union gambling regulations, including reporting suspicious transactions to relevant authorities and maintaining records for regulatory audits. Your gameplay information helps us personalise your experience by suggesting games that might interest you based on your preferences. We analyse account activity to implement safe gaming measures, identifying patterns that may indicate problematic gambling behaviour and enabling us to intervene with appropriate support resources. Communication data allows us to respond to your enquiries, resolve technical issues, and send important account notifications regarding security alerts or policy changes. Marketing communications about new games, promotions, and special offers are sent only with your explicit consent, which you can withdraw at any time. We conduct internal research and statistical analysis using aggregated, anonymised data to improve our services, develop new features, and enhance user experience across the BigClash platform.
Data Sharing and Third-Party Disclosure
BigClash maintains strict controls over who can access your personal information, sharing data only when necessary for service delivery or legal compliance. We engage payment processing companies to handle financial transactions securely, ensuring these partners adhere to Payment Card Industry Data Security Standards (PCI DSS). Identity verification services assist us in confirming your age and identity during registration and withdrawal requests. Cloud hosting providers store data on secure servers located within the European Economic Area, maintaining high security standards and redundancy measures. Customer relationship management systems help us track support interactions and resolve your queries efficiently. Anti-fraud and security specialists analyse patterns to detect and prevent unauthorised access, bonus abuse, and other fraudulent activities. We share information with licensing authorities, gambling commissions, and regulatory bodies in Ireland and other jurisdictions where we hold operating licences. Law enforcement agencies may receive data when legally required through valid court orders or statutory obligations. Auditing firms access records during compliance reviews to verify our adherence to gambling regulations and responsible gaming standards. Marketing partners receive limited data only with your consent for promotional purposes, and you retain the right to opt out at any time. The following table summarises our primary data sharing relationships:
| Third-Party Category | Purpose | Data Shared | Legal Basis |
|---|---|---|---|
| Payment Processors | Transaction handling | Financial details, name, address | Contract performance |
| Identity Verification | Age and identity checks | ID documents, personal details | Legal obligation |
| Cloud Providers | Data storage | All account information | Legitimate interest |
| Regulatory Bodies | Compliance reporting | Transaction records, account activity | Legal obligation |
| Customer Support | Query resolution | Contact details, account history | Contract performance |
| Anti-Fraud Services | Security monitoring | Gameplay patterns, IP addresses | Legitimate interest |
We never sell your personal information to third parties for their own marketing purposes. All partners processing your data on our behalf operate under strict contractual obligations to protect your privacy and use information only for specified purposes. International data transfers outside the European Economic Area occur only when adequate safeguards exist, such as Standard Contractual Clauses or Privacy Shield certification.
Your Rights and Data Protection
Under the bigclash casino privacy policy framework and GDPR regulations, you possess several rights regarding your personal information that we fully respect and facilitate. You have the right to access all personal data we hold about you by submitting a subject access request, which we will fulfil within one month of receipt. Rectification rights allow you to request correction of inaccurate or incomplete information in your account profile at any time. You may exercise your right to erasure, commonly known as the right to be forgotten, requesting deletion of your data when it is no longer necessary for the purposes collected, though we must retain certain records to meet legal and regulatory obligations. Data portability enables you to receive your personal information in a structured, commonly used format and transmit it to another service provider if technically feasible. You can object to processing activities based on legitimate interests, including profiling for marketing purposes, and we will cease such processing unless compelling legitimate grounds override your interests. The right to restrict processing allows you to limit how we use your data in specific circumstances, such as whilst contesting accuracy or challenging the lawfulness of processing. You maintain control over marketing communications, with the ability to withdraw consent at any time through your account settings or by contacting our data protection officer directly. Automated decision-making and profiling occur on our platform for fraud detection and safe gaming purposes, but you have the right to request human intervention and challenge decisions made solely by automated means. To exercise any of these rights, contact our data protection team at [email protected] or write to our registered address. We will verify your identity before processing requests to prevent unauthorised disclosure of personal information. If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Data Protection Commission in Ireland. We take all privacy concerns seriously and will work to resolve issues promptly and transparently.
Data Security and Retention
Protecting your personal information is paramount to BigClash, and we implement comprehensive technical and organisational measures to prevent unauthorised access, disclosure, alteration, or destruction of your data. We employ industry-standard 256-bit SSL encryption for all data transmitted between your device and our servers, ensuring that sensitive information remains confidential during communication. Access to personal data is restricted to authorised personnel who require it to perform their job functions, with all staff receiving regular training on data protection principles and privacy obligations. Multi-factor authentication protects administrative systems, whilst role-based access controls limit what information each team member can view or modify. We maintain secure backup systems with encrypted storage to prevent data loss whilst ensuring business continuity. Regular security audits conducted by independent third parties identify vulnerabilities and verify the effectiveness of our protective measures. Penetration testing simulates cyber attacks to evaluate our defences and improve security protocols continuously. Firewall systems and intrusion detection software monitor network traffic for suspicious activity, blocking potential threats before they compromise data integrity. We retain your personal information only for as long as necessary to fulfil the purposes outlined in this privacy policy or to comply with legal, regulatory, and accounting requirements. Active account data remains accessible whilst your account exists and for six years after closure to meet Irish tax and gambling regulatory obligations. Financial transaction records are preserved for seven years following the transaction date as required by anti-money laundering legislation. Identity verification documents are retained for the duration of the business relationship and five years thereafter. Marketing consent records are maintained to demonstrate compliance with your preferences and data protection regulations. When retention periods expire, we securely delete or anonymise your information using methods that prevent reconstruction or identification. Despite our robust security measures, no internet-based system can guarantee absolute security, and you should take precautions to protect your login credentials and report any suspicious activity on your account immediately to [email protected] for prompt investigation and resolution.
