Privacy Policy

This privacy policy explains how GeckoPlay collects, uses, stores, and shares personal data from players based in the United Kingdom. As a UKGC-licensed casino operating under Skill On Net Limited (account number 39326), the brand is bound by UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Reading this page in full helps players understand what information is held, why it is processed, and what rights apply.

What Data GeckoPlay Collects

When a player creates an account or interacts with the GeckoPlay online casino, certain personal data is collected automatically or provided directly. The categories of data typically gathered include:

Full name, date of birth, and residential address
Email address and telephone number
Payment details such as debit card numbers or PayPal account identifiers
Identity documents including passport, driving licence, or utility bills submitted for KYC verification
Financial information covering source of funds, occupation, and income details where requested under AML obligations
Technical data including IP address, device type, browser version, and session activity
Gaming activity data such as deposit history, transaction records, game sessions, and wagering patterns

All data collected relates directly to the operation of a regulated UK casino account. No data is collected beyond what is reasonably necessary for account management, compliance, and player protection purposes.

Why Personal Data Is Processed

GeckoPlay processes personal data for several lawful purposes under UK GDPR. Each purpose has a corresponding legal basis:

Contract performance - processing is necessary to operate a player account, process deposits and withdrawals, and deliver casino services
Legal obligation - identity verification, KYC checks, anti-money laundering (AML) screening, and responsible gambling assessments are required under UKGC licence conditions and UK financial regulations
Legitimate interests - fraud prevention, account security monitoring, and SafeMate spend-tracking tools operate under a legitimate interests basis, balanced against player rights
Consent - marketing communications, personalised promotional offers, and optional responsible gambling tools such as reality check reminders are activated with player consent and can be withdrawn at any time

The casino does not sell personal data to third parties for their own marketing purposes.

How GeckoPlay Uses Payment Data

All UK accounts operate in GBP and use regulated payment routes: Visa and Mastercard debit cards, PayPal, Apple Pay, Instant Bank Payment via Open Banking, and Paysafecard. Payment data is processed solely for the purpose of completing deposits, routing withdrawals to the original payment method, and satisfying AML requirements. Cryptocurrency payments are not supported for UK players, so no crypto wallet data is collected or stored.

Payment processing may involve third-party payment service providers operating under their own data protection frameworks. Where data is shared with these providers, GeckoPlay ensures contractual safeguards are in place.

KYC, AML, and Verification Data

As a condition of the UKGC licence under Skill On Net Limited, the casino is required to verify the identity, age, address, occupation, and source of funds for UK players. Document uploads must be submitted through the Upload Docs section in My Account. Requested documents may include a valid photo ID, proof of address dated within the last three months, and financial documentation if a spending review is triggered.

Data collected during KYC and AML checks is retained for the period required by law, which under UK anti-money laundering regulations is generally five years from the end of the customer relationship. Verification data is not used for any purpose beyond compliance and account integrity.

Responsible Gambling Data and SafeMate

GeckoPlay operates SafeMate, an account monitoring tool that tracks spend, winnings, losses, and session time over a rolling six-month period. This data is used to generate trend-based safer gambling prompts. Players who set deposit limits, cooling-off periods, or self-exclusions will have those preferences stored and applied to the account.

GamStop self-exclusion data is shared with the national self-exclusion register as required by UKGC licence conditions. Once a self-exclusion is activated, no direct marketing is sent to that account for the duration of the exclusion period.

For more detail on the tools available and how personal data relates to safer gambling decisions, players can review GeckoPlay responsible gambling.

Personal data may be shared with the following categories of third parties, strictly where necessary:

Skill On Net Limited as the licence holder and platform operator
Payment service providers handling deposit and withdrawal transactions
KYC and identity verification service providers
AML screening and fraud prevention platforms
Game providers whose software is hosted within the casino lobby
Regulatory bodies including the UK Gambling Commission and the Information Commissioner’s Office (ICO) where required
GamStop, for self-exclusion processing

Data is not transferred outside the UK or the European Economic Area unless adequate legal protections are in place, such as standard contractual clauses approved under UK data protection law.

Data Retention

GeckoPlay retains personal data for as long as an account remains active and for a minimum period after closure, as required by law. Under UK AML and gambling regulations, account records are typically retained for five years following account closure. After this period, data is securely deleted or anonymised unless a legal hold is in place.

Players who have closed accounts but believe data is being held longer than necessary can raise a query through the support team at support@geckoplay.co.uk.

UK residents have the following rights over personal data held by GeckoPlay:

The right to access a copy of personal data held (subject access request)
The right to correct inaccurate or incomplete data
The right to request deletion of data where no legal obligation exists to retain it
The right to restrict processing in certain circumstances
The right to data portability in a structured, machine-readable format
The right to object to processing based on legitimate interests
The right to withdraw consent for marketing or optional tools at any time

Requests can be submitted in writing to support@geckoplay.co.uk. The casino aims to respond within one calendar month in line with ICO guidance. Where a request is complex, a 30-day extension may apply with notification.

Cookies and Tracking Technologies

The casino website uses cookies and similar tracking technologies to maintain sessions, remember preferences, and analyse site performance. Cookies fall into the following categories:

Strictly necessary cookies - required for account login, session management, and security
Performance cookies - used to understand how players navigate the platform
Functional cookies - store language preferences and account settings
Marketing cookies - used to deliver relevant promotional content and limit repeated advertising; these require consent

Players can manage cookie preferences through the site’s consent management tool. Strictly necessary cookies cannot be disabled without affecting core account functionality.

Changes to This Privacy Policy

GeckoPlay may update this privacy policy from time to time to reflect changes in law, regulation, or operational practice. Material changes will be communicated to players via the account area or by email. Continued use of the casino account after a policy update constitutes acknowledgement of the revised terms.

The current version of this policy is effective as of the date shown at the top of the page. Players with questions about data handling or this policy are encouraged to contact the support team directly or submit a formal complaint to the Information Commissioner’s Office at ico.org.uk if concerns remain unresolved.