Who We Are and What This Policy Covers
Royale Lounge Casino is operated by Grace Media (Gibraltar) Limited, a company incorporated in Gibraltar under company number 120628. Its registered office is at Sovereign Place, 117 Main Street, Gibraltar, GX11 1AA, Gibraltar.
Grace Media (Gibraltar) Limited is the data controller responsible for deciding how and why personal data connected with Royale Lounge Casino is processed. The operator is licensed and regulated in Great Britain by the UK Gambling Commission under account number 57869.
This Privacy Policy applies when you visit Royale Lounge Casino, register an account, use casino or betting services, claim an offer, make a payment, contact customer support or otherwise interact with the website.
Personal data is handled in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 and applicable amendments introduced by the Data (Use and Access) Act 2025. Where relevant, processing is also subject to Gibraltar data protection law and the operator’s regulatory obligations.
Personal Data We Collect
The information collected depends on how you use Royale Lounge Casino and which services you request. It may include the following categories.
Identity and Account Information
- Full name, previous names, username and account identifier
- Date of birth, age, gender and nationality
- Residential address and country of residence
- Email address, telephone number and communication preferences
- Copies of passports, driving licences, identity cards and proof of address
- Photographs, biometric comparison results or liveness checks used during identity verification
- Account status, registration history and verification results
Payment and Financial Information
- Deposit, withdrawal and transaction records
- Payment method details and masked card or account information
- Bank statements, payment evidence and ownership confirmation
- Source of funds and source of wealth information
- Income, occupation and affordability-related information where a proportionate assessment is required
- Chargeback, refund and payment dispute records
Complete payment card details may be processed directly by authorised payment providers. Royale Lounge Casino receives only the information needed to confirm, manage and reconcile the transaction.
Gambling and Safer Gambling Information
- Games played, bets placed, stakes, wins, losses and account balances
- Playing frequency, session duration and deposit patterns
- Bonus use, wagering activity and promotional history
- Deposit limits, time-outs, reality checks and self-exclusion records
- Customer interactions concerning gambling behaviour or financial circumstances
- Indicators that may suggest gambling-related harm, fraud or unusual activity
Technical and Usage Information
- IP address, device identifier and browser type
- Operating system, screen settings and language preferences
- Login times, session records and pages visited
- Cookie identifiers and consent choices
- Approximate location derived from an IP address
- Security events, error reports and suspicious login activity
- Referral information showing how you reached the website
Communications and Other Records
Royale Lounge Casino may record emails, live chat conversations, telephone calls, complaints, survey responses and other communications. Records may also include documents or information voluntarily supplied when you ask for support, make a privacy request or dispute an account decision.
How We Obtain Personal Data
Most information is collected directly from you when you register, verify your identity, make a payment, gamble or contact Royale Lounge Casino. Other information may be generated automatically through your use of the website or received from authorised third parties.
Third-party sources may include:
- Payment providers, banks and card issuers
- Identity, age and address verification services
- Credit reference and fraud prevention agencies
- Sanctions and politically exposed person screening providers
- Game suppliers and gambling platform providers
- GAMSTOP and other self-exclusion systems
- Affiliates through which you reached Royale Lounge Casino
- Regulators, law enforcement bodies and public authorities
- Publicly accessible registers and reliable open sources
If another person provides information about you, Royale Lounge Casino will process it only where there is a lawful reason to do so. You must not submit another person’s personal data unless you have authority to provide it.
Why We Use Personal Data
Providing and Managing Your Account
Personal data is used to create and administer your account, authenticate logins, provide games and betting services, maintain your balance, process transactions, apply account settings, communicate service information and respond to support enquiries. This processing is generally necessary to perform the contract entered into when you accept the Royale Lounge Casino Terms and Conditions.
Identity, Age and Eligibility Checks
Royale Lounge Casino verifies that customers are aged 18 or over and eligible to use the service. Information may be checked against documents, electronic databases and trusted verification providers. These checks are required to comply with gambling regulation, prevent underage gambling and protect the integrity of the platform.
Anti-Money Laundering and Fraud Prevention
Account, identity, payment and gambling information may be examined to detect money laundering, terrorist financing, fraud, sanctions violations, stolen payment methods, collusion, bonus abuse and other unlawful conduct.
Royale Lounge Casino may request additional evidence concerning your identity, payment method, source of funds or source of wealth. Processing for these purposes is necessary to meet legal and regulatory obligations and to pursue the legitimate interest of protecting customers, the operator and the wider gambling system from financial crime.
Safer Gambling
Royale Lounge Casino analyses account activity and customer interactions to identify possible indicators of gambling-related harm. This may include reviewing changes in deposit frequency, losses, session duration, failed payments, limit adjustments and communications with support.
Where appropriate, this information may be used to provide safer gambling messages, request further information, impose account restrictions, recommend a break, prevent marketing or apply self-exclusion controls. Such processing supports compliance with UK Gambling Commission requirements and the legitimate interest of reducing gambling-related harm.
Security and Service Improvement
Technical information is used to secure accounts, prevent unauthorised access, diagnose faults, test website performance and improve navigation. Royale Lounge Casino may also analyse aggregated or anonymised information to understand general service use. Information that has been irreversibly anonymised is not personal data.
Complaints, Disputes and Legal Claims
Records may be used to investigate complaints, respond to data protection requests, enforce contractual rights, establish facts and defend or pursue legal claims. Data may also be supplied to an approved alternative dispute resolution provider where this is necessary to consider an eligible gambling dispute.
Lawful Bases for Processing
Royale Lounge Casino uses one or more of the following lawful bases, depending on the purpose and circumstances:
- Contract: processing is necessary to register and manage your account or provide a service you have requested.
- Legal obligation: processing is required by gambling, anti-money laundering, taxation, consumer protection or data protection law.
- Legitimate interests: processing is reasonably necessary to secure the service, prevent fraud, manage risk, improve operations or defend legal rights, provided that those interests are not overridden by your rights.
- Consent: you have made a clear and informed choice, particularly for certain marketing communications, optional cookies or specific uses of information.
- Substantial public interest: processing is necessary for safeguarding, fraud prevention, regulatory compliance or other purposes recognised by law.
- Legal claims: processing is necessary to establish, exercise or defend a legal claim.
Where consent is the lawful basis, you may withdraw it at any time. Withdrawal does not affect processing carried out before consent was withdrawn and does not prevent processing required under another lawful basis.
Special Category and Criminal Offence Data
Some communications or safer gambling assessments may reveal information about physical or mental health. Compliance checks may also identify suspected or confirmed criminal conduct. Royale Lounge Casino processes this information only where a valid condition under applicable data protection law permits it.
Access to sensitive information is restricted to personnel and service providers who require it for authorised duties. It is not used for unrelated advertising or general customer segmentation.
Automated Analysis and Profiling
Automated systems may be used to identify unusual transactions, assess security risks, detect potential fraud, support identity verification, monitor gambling behaviour and determine whether additional checks are required. Marketing preferences may also be used to select communications that are relevant to an eligible customer.
These systems may assign risk indicators or generate alerts for review. Where a decision is based solely on automated processing and produces a legal or similarly significant effect, Royale Lounge Casino will provide the safeguards required by law. Depending on the circumstances, you may request human intervention, express your point of view and challenge the decision.
Details about a specific significant decision can be requested through the contact information provided below, subject to restrictions needed to protect fraud prevention systems, confidential methods and the rights of other people.
Direct Marketing
Royale Lounge Casino may send information about relevant games, services and promotions by email, SMS, telephone or another electronic channel where there is a lawful basis. Consent will be requested where required by the Privacy and Electronic Communications Regulations 2003.
You can stop direct marketing by:
- Selecting the unsubscribe option in a marketing email
- Following the opt-out instructions in an SMS
- Changing available communication preferences in your account
- Contacting customer support at helpteam@royale-lounge-casino-uk.com
An opt-out request does not prevent essential messages about account security, verification, payments, changes to terms or responsible gambling. Limited suppression information may be retained to ensure that your marketing preference continues to be respected.
Marketing must not be directed to underage persons, self-excluded customers or customers who should not receive promotional communications under safer gambling requirements.
Cookies and Similar Technologies
Royale Lounge Casino uses cookies and comparable technologies to operate essential functions, maintain sessions, remember preferences, prevent fraud and understand website performance. Optional analytics or advertising technologies are used only where the required permission has been obtained.
You can accept, reject or adjust optional cookie categories through the website’s consent controls. Withdrawing consent must be as straightforward as giving it. Essential technologies cannot always be disabled because they are needed for security, account access or other services you request.
Further information about cookie categories, providers, purposes and storage periods is available in the Royale Lounge Casino Cookie Policy.
Who May Receive Your Information
Personal data may be disclosed only where necessary and proportionate. Recipients may include:
- Companies providing the gambling platform, games and account infrastructure
- Payment processors, banks and financial institutions
- Identity, affordability, fraud and compliance service providers
- Cloud hosting, cybersecurity and technical support suppliers
- Customer service and communication providers
- Professional advisers, auditors, insurers and legal representatives
- GAMSTOP and other responsible gambling organisations
- Alternative dispute resolution providers
- The UK Gambling Commission, the Gibraltar Gambling Commissioner and other competent regulators
- Police, courts, tax authorities and law enforcement agencies
- A purchaser, investor or successor involved in a legitimate corporate transaction
Service providers acting as processors are permitted to use personal data only for agreed purposes and must apply appropriate confidentiality and security protections. Some recipients, such as regulators, banks and fraud prevention agencies, may act as independent data controllers under their own legal responsibilities.
Royale Lounge Casino does not sell customer personal data to unrelated third parties.
International Data Transfers
Grace Media (Gibraltar) Limited is established in Gibraltar, and some authorised suppliers may process information in Gibraltar, the United Kingdom, the European Economic Area or other countries. Privacy and data protection standards may differ between jurisdictions.
Where personal data is transferred outside the United Kingdom, Royale Lounge Casino uses a lawful transfer mechanism. This may include a UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses or another safeguard recognised under UK data protection law. Appropriate transfer risk assessments and supplementary security measures are applied where required.
You may request further information about the safeguard relevant to a particular transfer. Confidential commercial terms and information affecting the security or rights of other people may be withheld.
How Long We Retain Personal Data
Personal data is kept only for as long as reasonably necessary for the purpose for which it was collected and for any subsequent legal, regulatory, security or dispute-related requirement.
Retention periods are determined by considering:
- The duration of the customer relationship
- UK Gambling Commission licence requirements
- Anti-money laundering record-keeping duties
- Tax, accounting and payment obligations
- Fraud prevention and cybersecurity requirements
- Self-exclusion and safer gambling controls
- Applicable limitation periods for legal claims
- Unresolved complaints, investigations or regulatory requests
Identity, customer due diligence and transaction records required under anti-money laundering rules are generally retained for at least five years after the end of the business relationship or the relevant transaction. Information may be kept longer where another law, regulatory instruction, investigation or legal claim requires it.
When retention is no longer justified, information is securely deleted, anonymised or placed beyond operational use. A request to close an account does not automatically remove records that must be retained for compliance, self-exclusion, fraud prevention or legal purposes.
How We Protect Personal Data
Royale Lounge Casino uses technical and organisational controls designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction. Measures are selected according to the nature of the information and the risks associated with its processing.
Controls may include:
- Encryption during transmission and, where appropriate, storage
- Access restrictions based on job responsibilities
- Authentication, logging and account monitoring
- Network, application and endpoint security
- Staff confidentiality and data protection training
- Supplier due diligence and contractual safeguards
- Backup, recovery and business continuity procedures
- Incident investigation and breach response processes
No internet service can guarantee absolute security. Customers should use a unique password, keep login credentials confidential, enable available security features and contact Royale Lounge Casino promptly if unauthorised account activity is suspected.
If a personal data breach creates a risk to individuals, Royale Lounge Casino will notify the Information Commissioner’s Office where legally required. Affected individuals will also be informed when the breach is likely to result in a high risk to their rights and freedoms.
Your Data Protection Rights
Subject to the conditions and exemptions in applicable law, you may have the right to:
- Receive information about how your personal data is used
- Obtain a copy of personal data held about you
- Correct inaccurate or incomplete information
- Request deletion where continued processing is not legally justified
- Restrict processing in specified circumstances
- Object to processing based on legitimate interests
- Object to direct marketing at any time
- Receive qualifying information in a structured, commonly used and machine-readable format
- Request the transfer of qualifying information to another controller
- Withdraw consent where processing relies on consent
- Challenge certain decisions made solely through automated processing
- Make a complaint about the handling of your personal data
These rights are not absolute. Royale Lounge Casino may retain or continue processing information where this is required for anti-money laundering checks, gambling regulation, self-exclusion, fraud prevention, legal claims or the protection of another person’s rights.
Making a Rights Request
Send your request to helpteam@royale-lounge-casino-uk.com. Include enough information to identify your account and describe the data or processing concerned. Do not send unnecessary identity documents with your first message.
Royale Lounge Casino may request proportionate evidence of identity before releasing or changing personal data. This protects account information from unauthorised access. Requests are normally answered within one month after receipt, although the period may be extended where a request is particularly complex or several requests are made. You will be informed if an extension applies.
A reasonable fee may be charged, or a request may be refused, where it is manifestly unfounded or excessive. Any refusal will be explained and will include information about your right to complain.
Privacy Complaints
If you believe that Royale Lounge Casino has mishandled your personal data, contact helpteam@royale-lounge-casino-uk.com and provide a clear description of the issue. Relevant account references and previous correspondence should be included where available.
You may also write to:
Grace Media (Gibraltar) Limited
Sovereign Place
117 Main Street
Gibraltar
GX11 1AA
Gibraltar
Royale Lounge Casino will acknowledge and investigate a data protection complaint, keep you informed where appropriate and provide an outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office, the independent UK data protection regulator. You are encouraged to contact Royale Lounge Casino first so that the matter can be reviewed directly, but doing so does not restrict your right to approach the regulator.
Customers Under 18
Royale Lounge Casino is intended only for persons aged 18 or over. A person under 18 must not register, gamble, deposit funds or submit personal data through the service.
If information associated with an underage person is identified, the account may be suspended and the information investigated in accordance with legal and regulatory requirements. A parent or guardian who believes that a minor has provided personal data should contact customer support immediately.
Third-Party Websites
The website may contain links to payment services, game providers, responsible gambling organisations or other external websites. Those services control their own processing activities and publish separate privacy notices. Royale Lounge Casino is not responsible for the privacy practices or content of an external website merely because a link is provided.
Changes to This Privacy Policy
This Privacy Policy may be revised when processing activities, legal obligations, technology or casino services change. The current version will remain available on this website. Where a change materially affects how existing customer data is used, Royale Lounge Casino will provide an appropriate notice through the website, account area, email or another suitable channel.
Contact Royale Lounge Casino
Questions about this Privacy Policy, the use of your personal data or your data protection rights can be sent to:
Email: helpteam@royale-lounge-casino-uk.com
Data controller: Grace Media (Gibraltar) Limited
Company number: 120628
Registered address: Sovereign Place, 117 Main Street, Gibraltar, GX11 1AA, Gibraltar
UK Gambling Commission account number: 57869
Please do not include passwords, complete payment card details or unrelated identity documents in an email.