The BigClash Casino Privacy Policy explains how we collect, use, store and protect personal data when you visit big-clash.co.uk, register an account, deposit, withdraw, place a bet or contact our support team. We treat your information as something we are looking after on your behalf, not as a product to be sold or repackaged for advertising networks. This policy applies to every player who interacts with the BigClash Casino brand, whether you are an Irish resident playing on a phone, a desktop user in another European market or a visitor browsing our promotions page without an account.
We are committed to compliance with the General Data Protection Regulation (GDPR), the Irish Data Protection Act 2018 and the privacy provisions of the regulators we hold a licence under. The principles that govern our approach are simple. We only collect data we genuinely need to operate the platform and meet our legal obligations. We never sell personal information to third parties. We keep your account data for as long as the law and our licence require, then we delete it. You can reach our data protection contact at privacy@big-clash.co.uk at any time to exercise any of the rights described on this page.
What personal information does BigClash Casino collect?
When you create an account we collect identifying information needed to verify that you are over eighteen and legally allowed to gamble. That includes your full legal name, date of birth, residential address, email address, mobile number and a username of your choice. During the standard identity check that happens once per account we may also collect a copy of a government-issued photo identification document, a recent proof of address such as a utility bill or bank statement, and a brief source-of-funds declaration where regulation requires it. Identity documents are stored encrypted, accessed only by trained verification staff and deleted on a defined retention schedule once the obligation to hold them has expired.
During play we record transactional and behavioural data needed to run the platform. That includes deposits, withdrawals, every bet and every spin, the games and live tables you visit, the tournaments you opt into, the limits you set on yourself, the marketing preferences you tick, and the time stamp of every login. We also collect basic technical data such as the device type, operating system version, browser and the IP address from which you accessed the site. This data sits behind your account and is used to power features like recent games, tournament leaderboards, the responsible gambling tools and our fraud and anti-money-laundering controls.
How is your data stored, encrypted and shared?
All personal information is stored on servers within the European Economic Area, encrypted in transit using TLS 1.2 or higher and encrypted at rest using AES-256. Access is restricted on a strict need-to-know basis, audited continuously and reviewed at least quarterly. Card details are tokenised through PCI-DSS Level 1 certified payment processors, which means the full card number never touches BigClash Casino infrastructure. Crypto wallet addresses are stored only for the purpose of routing your withdrawals back to the wallet you deposited from.
We share data with third parties only where it is necessary to operate the platform, meet a legal obligation or protect against fraud. The categories of recipients are limited to payment processors, identity verification providers, game and live dealer suppliers, the customer support platform, the regulator we hold a licence under, and law enforcement when we receive a properly authorised request. We do not share player data with marketing networks or data brokers. A full list of our data processors is available on request from privacy@big-clash.co.uk and is published in the appendix of this policy in our internal compliance manual.
What are your rights as a BigClash Casino player?
Under GDPR you have the right to access the personal data we hold about you, correct any information that is wrong or outdated, request that we delete your data subject to legal retention obligations, restrict how we process your information, object to specific processing activities, and receive your data in a portable machine-readable format so you can transfer it elsewhere. You also have the right to withdraw consent for marketing communications at any time, and the right to lodge a complaint with the Irish Data Protection Commission if you feel we have not handled your data correctly.
Most of these rights can be exercised directly inside your account. Marketing preferences sit one click away from the account dashboard. The full transaction and game history is exportable as a CSV file from the account history page. To request a complete data export, a deletion or a restriction, email privacy@big-clash.co.uk from the address linked to your account. We aim to respond within seventy-two hours and to complete the request within thirty calendar days, which is the GDPR standard. You will not be charged for the first request in any twelve month period, and we will explain in writing if we ever need to refuse a request because of a legal or regulatory obligation.
How long do we keep player data, and what about marketing?
Account, identity verification and transactional records are retained for the period required by our gaming licence and applicable anti-money-laundering laws, which is currently a minimum of five years after the closure of the account. Some categories of data, such as documents used to verify the source of funds on larger transactions, are held for longer where regulation requires. Once the retention period expires we delete or anonymise the data on the next quarterly purge cycle. Behavioural data used for product analytics is aggregated and anonymised on a monthly cadence so that it can no longer be linked back to a specific player.
Marketing communications are opt in. We will only send promotional emails, SMS or push notifications if you have ticked the relevant box during registration or in your account preferences. Every marketing message includes a one click unsubscribe link, and unsubscribing takes effect immediately. Transactional messages such as withdrawal confirmations, security alerts, login notifications and responsible gambling reminders are not marketing and cannot be turned off because they are part of the service. If you would like a full record of the marketing messages we have sent you, the request can be made through the same data access process described above.
How to contact us about privacy
The data protection contact for BigClash Casino is reachable by email at privacy@big-clash.co.uk. Postal correspondence and formal data subject requests can be addressed to our registered office under the name of the licensee operating the platform. We respond to every privacy enquiry in writing and keep a log of requests and responses for our own compliance audit. Cookie related preferences can be reviewed on the cookie policy page. If you ever feel that a response from us has not addressed your concern, you have the right to escalate the matter to the Irish Data Protection Commission at dataprotection.ie. We treat any escalation as an opportunity to improve and will cooperate fully with the regulator's review.