Privacy Policy — Midnight Casino

Last updated: March 2026

Who Controls Your Data

Dribble Media Limited is the data controller for all personal information processed through midnightcasino-uk.com, which operates under the Midnight Casino brand. Our company is registered in England and Wales under number 09555672, with its registered office at 86-90 Paul Street, London, EC2A 4NE. Midnight Casino has been operational since 2018 and holds UK Gambling Commission licence #42647. As data controller within the meaning of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Dribble Media Limited determines the purposes and means of processing your personal data. All communications between your browser and midnightcasino-uk.com are transmitted via 256-bit SSL/TLS encryption, and all monetary amounts on the platform are expressed in GBP.

Categories of Data We Collect

Operating a licensed online casino requires us to gather specific categories of personal information. The data we hold and the reasons for holding it are as follows:

Identity data: Your full legal name, date of birth, nationality, and gender — collected during registration and subsequently during KYC verification as mandated by our UKGC licence.
Contact data: Email address, telephone number, and residential address, used for account management, transactional notifications, and service-related correspondence.
Financial data: Payment method references, partially masked card numbers, and a complete record of all deposits and withdrawals processed in GBP.
Technical data: IP address, device type, operating system, browser version, pages visited, referring URL, and session duration — gathered automatically through cookies and server logs.

Legal Grounds for Processing

Under UK GDPR, every instance of data processing must be supported by a valid lawful basis. Dribble Media Limited relies on the following grounds: (a) contractual necessity — processing your data is required to perform the contract formed when you register an account; (b) legal obligation — UKGC licence conditions, the Money Laundering Regulations 2017, and HMRC reporting requirements mandate the retention of certain records; (c) consent — marketing communications are sent only where you have provided explicit opt-in consent, which you may withdraw at any time; (d) legitimate interest — Dribble Media Limited has a legitimate need to detect fraud, prevent financial crime, and enhance the platform experience for UK players.

How Your Data Is Used

Account administration: Creating your player profile, verifying your identity, and processing financial transactions securely.
Regulatory compliance: Age verification, anti-money-laundering screening, and monitoring of gambling activity as required by our UKGC licence.
Marketing communications: Delivering bonus offers, platform updates, and promotional content — strictly where you have opted in to receive such communications.
Security and fraud prevention: Identifying unusual login patterns, blocking coordinated abuse, and maintaining platform integrity for all players.

Data Sharing

Dribble Media Limited does not sell, rent, or trade your personal data under any circumstances. Limited data sharing occurs only where there is a clear legal or operational requirement:

UK Gambling Commission: Records are disclosed in response to lawful requests from the UKGC or other competent regulatory authorities.
Payment processors: Card networks and e-wallet providers receive transaction data strictly for the purpose of processing deposits and withdrawals.
Identity verification providers: Specialist KYC services cross-reference your submitted documents against official databases to satisfy anti-money-laundering obligations.
Infrastructure partners: Cloud hosting and server providers that store or transmit data on our behalf, each bound by written confidentiality agreements and appropriate data processing contracts.

Retention Periods

Personal data is retained for as long as your account remains active. Following account closure, UKGC licence conditions require us to maintain records for a minimum of three years. Certain anti-money-laundering documentation may be held for up to five years in accordance with the Money Laundering Regulations 2017. Browsing and analytics data is deleted within 13 months. Once a retention period expires, data is either permanently erased or anonymised so that it can no longer be linked to an identifiable individual.

Your Data Protection Rights

The UK GDPR and the Data Protection Act 2018 grant you the following rights in relation to your personal data:

Access: Obtain a copy of all personal data we hold about you.
Rectification: Request correction of any inaccurate or incomplete data.
Erasure: Request deletion of your data, subject to any overriding legal retention obligations.
Restriction: Request a temporary halt to processing while a dispute or enquiry is resolved.
Data portability: Receive your data in a structured, machine-readable format for transfer to another controller.
Objection: Object to processing based on legitimate interest where your particular circumstances warrant it.

To exercise any of these rights, email [email protected]. We will respond within 30 calendar days. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies

Midnightcasino-uk.com uses cookies — small text files stored on your device — to maintain sessions, remember preferences, and analyse traffic. A comprehensive breakdown of every cookie category, purpose, and duration is available on our Cookie Policy page.

Security Measures

All connections to midnightcasino-uk.com are secured with 256-bit SSL/TLS encryption. Database servers are protected by firewalls, and staff access requires multi-factor authentication. Independent penetration testing is conducted on a regular schedule, and identified vulnerabilities are patched without delay.

Policy Updates

This Privacy Policy may be revised when legislative changes occur or when our data handling practices are modified. Updated versions become effective immediately upon publication on this page. We recommend reviewing this page periodically to stay informed.

Data Protection Contact

For any questions regarding this policy or to exercise your data protection rights, contact us at [email protected]. Our data protection team will respond promptly.