Nomini Casino puts the protection of personal data of its players, website visitors, and affiliate partners first nomini-casino.co.uk. This policy on data protection sets out the framework Nomini Casino adheres to to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It details how personal information gets gathered, processed, stored, and shared, and what rights you hold over your data. The policy covers every service provided through the Nomini Casino platform, including the affiliate programme. By acting openly about its practices and adhering to strict data handling rules, Nomini Casino works to gain trust and show it is serious when it comes to privacy. This document is a clear reference for anyone engaging with the brand. It specifies the legal grounds for processing, the specific types of data included, and the steps carried out to block unauthorised access. Whether you are a player enjoying casino games or an affiliate promoting the brand, your information is handled with care and in complete accordance with UK law.
Security Measures
Nomini Casino puts in place a full range of technical and organisational controls to safeguard personal data against accidental loss, unauthorised access, alteration, or disclosure. All data transferring between your device and Nomini Casino servers is protected with strong Transport Layer Security (TLS) encryption. Sensitive data, like payment card details, has an extra layer of safeguarding through tokenisation, so the actual card numbers are never kept on Nomini Casino systems. Access to personal data is limited to authorised staff on a strict need-to-know ground, enforced through role-based access controls and multi-factor authentication. The company performs regular security audits, vulnerability scans, and penetration tests to detect and remedy potential weak spots. Physical security at data centre facilities encompasses biometric access controls, 24/7 surveillance, and redundant power supplies. All staff go through mandatory data protection and information security instruction when they join and at regular intervals after that. Incident response procedures are set to spot, control, and report any personal data breach to the relevant supervisory authority within 72 hours when needed. These layered security practices get evaluated and improved constantly as new threats pop up and industry best practices progress.
Information Sharing and Disclosures to Third Parties
Nomini Casino might share personal data with carefully chosen third parties that help run the platform and deliver services. These cover payment processors, identity verification providers, marketing platforms, and affiliate tracking software. Data can also be revealed to regulatory bodies, law enforcement agencies, and legal advisors when the law demands it or to safeguard the company’s legitimate interests, like probing suspected fraud or complying with a court order. The company does not trade personal data to third parties for their own marketing. All third-party partners are tied by contracts that mandate the same level of data protection described in this policy, and Nomini Casino performs due diligence to check compliance. In the affiliate programme, performance data is transmitted with the relevant affiliate tracking platform, but personal details of players are not shared to affiliates without explicit consent. When data goes to payment processors, only the bare minimum, like name and transaction amount, is disclosed. Any sharing beyond these outlined purposes needs extra consent or a specific legal obligation. Nomini Casino stays the data controller and maintains full responsibility for making sure third parties stick to strict confidentiality and security requirements.
Legal Basis for Managing Personal Data
Nomini Casino processes personal data solely when a proper lawful basis applies, as specified by the UK GDPR. The key bases encompass the requirement to execute a contract, such as when a player creates an account or an affiliate joins for the programme. Consent is another key basis, particularly for direct marketing messages and the utilization of non-essential cookies. Nomini Casino also leans on legitimate interests for things like fraud prevention, network security, and service enhancements, as much as those interests do not override your rights and freedoms. Processing may also be essential to meet legal obligations, such as anti-money laundering rules and inquiries from law enforcement. Each processing activity gets a diligent assessment to make sure the appropriate lawful basis is noted and that individuals are notified about it. Where special category data gets processed, like identity documents that might reveal biometric data, Nomini Casino secures explicit consent or another specific condition under Article 9 of the UK GDPR. Nomini Casino does not use automated decision-making that produces legal effects without human intervention and proper safeguards. For example, credit checks or automated profiling always undergo a manual review before any significant outcome lands.
Aim and Purpose of This Policy
These guidelines governs all personal data Nomini Casino handles as part of its online gaming services and affiliate programme. It encompasses information collected from registered players, prospective customers, website visitors, and affiliate partners. The aim is to offer a clear explanation of how Nomini Casino handles personal data, the lawful bases it uses, and the measures implemented to secure that data. The policy also sets out the responsibilities of the data controller and the rights of data subjects under UK law. By accessing the Nomini Casino website or taking part in the affiliate programme, you agree you have read and understood the practices described here. This document gets reviewed regularly to incorporate changes in regulation or how the business functions, so compliance stays current and data protection standards remain high. Every staff member, contractor, and third-party service provider who handles personal data on Nomini Casino’s behalf must adhere to this policy and handle all information as confidential. The scope covers data collected through cookies, account registration forms, customer support chats, and affiliate tracking technologies. If there is ever a clash between this policy and applicable law, the law takes precedence.
Categories of Personal Data Gathered
The kinds of private data Nomini Casino obtains depend on how you use the platform. For customers, this typically includes identity data like full name, birth date, and location; reach details such as e-mail and contact number; fiscal information such as bank card particulars and transaction history; and system information like IP address, browser type, and device IDs. For associates, additional data could be gathered, like website links, site metrics, and payment particulars. Nomini Casino also collects usage information about how people navigate the website and interact with games, which helps improve the user journey. All data gathering sticks to what is essential for the stated aims, and sensitive data gets handled with stricter safety protocols. The company does not knowingly collect data from any person under 18. Occasionally, identity verification records like a passport or a utility bill are needed to satisfy legal obligations. This details is handled solely for personal verification and is kept safeguarded. Where it can, Nomini Casino masks or de-identifies data before employing it for analysis, cutting down the risk of association.
The way Nomini Casino Processes Your Information
Individual details gets used for a range of purposes that are central to providing a secure and enjoyable gaming experience. Player details facilitates account opening, payment execution, and customer assistance possible. It is further utilized to confirm identity and age, a regulatory requirement for gambling operators in the United Kingdom. Transaction records assists Nomini Casino adhere to anti-money laundering regulations and spot fraudulent activity. With proper permission, contact details may be used to send promotional offers and news about new games or affiliate options. Usage statistics is analysed to enhance how the website works and to personalize material. For affiliates, data is processed to track referrals, work out commissions, and produce results reports. In all situations, Nomini Casino guarantees data usage is fair, transparent, and aligns with what people assume. All processing actions adhere to the principles of data limitation and purpose restriction. For example, evaluation for responsible gambling entails examining deposit patterns and session times to flag possible issues, but this is in no way applied for automated actions that alter account status without a human check.
Information Keeping Durations
Nomini Casino retains personal data only for as long as needed to satisfy its collection objectives, or as the law mandates. Player account information is usually stored for the duration of the account and for five years after account closure to meet anti-money laundering and tax rules, and to handle any possible legal claims. Transaction records, such as deposits, withdrawals, and wagers made, are kept for at least seven years to fulfill financial reporting obligations. Affiliate data, like commission records and referral logs, is kept for a similar period to meet contractual and tax duties. Identity verification documents are stored securely and then removed or irreversibly anonymised once the verification process wraps up, unless a regulator insists on a longer hold. Cookie data and website analytics remain for shorter periods, generally between 12 and 26 months, depending on the cookie type. When the retention period runs out, Nomini Casino securely erases or anonymises the data so it can no longer be connected to an identifiable person. Regular checks of data retention schedules make sure no information hangs around longer than it should.
Your individual Data Protection Rights
As per the UK GDPR, you have a range of rights over your personal data. These include the right to access the data Nomini Casino maintains and to get a copy of it, often called a subject access request. You can also ask for inaccurate or incomplete information to be rectified, and in certain circumstances, for your data to be deleted, for example if it is no longer necessary for the reason it was collected. The right to restrict processing allows you restrict how your data is used while a issue or accuracy dispute gets looked into. Data portability facilitates the transfer of data you provided to another system in a structured, commonly used format. Where processing rests on consent, you can withdraw that consent at any point without affecting the lawfulness of processing that happened before the withdrawal. You also have the right to object to processing based on legitimate purposes, including profiling for direct marketing. Requests to use any of these privileges can be sent to the Data Protection Officer using the contact details on the Nomini Casino website. Nomini Casino will answer all valid requests within one month and will give clear explanations if any right cannot be fully honoured because of legal exemptions.
International Data Transfers
Several of the third-party service providers Nomini Casino uses may be based beyond the United Kingdom, for example in places that might not have equivalent data protection laws. In such cases, Nomini Casino puts proper safeguards in place personal data consistent with UK GDPR obligations. These safeguards generally involve standard contractual clauses approved by the UK Information Commissioner’s Office, binding corporate rules for transfers within a group, or reliance on adequacy decisions where the destination country has been found to offer an adequate level of protection. For example, when player payment data is managed by a payment gateway based in the European Economic Area, the company confirms that an adequacy decision applies. If a processor is situated in a country lacking an adequacy decision, Nomini Casino adds extra measures like encryption at rest and in transit, and performs transfer impact assessments to ensure your rights stay enforceable in practice and effective. You have the right to ask for more details about the particular safeguards used to any international transfer of your personal data by getting in touch with the Data Protection Officer.
