32red Privacy Policy
Ever wondered what actually happens to your details when you sign up at an online casino? This independent review site has pulled together a clear, plain-English breakdown of how 32red collects, uses and protects your personal data — because knowing where your information goes matters just as much as knowing where your money goes.
Table of contents
Information We Collect
When you register and play at 32red, the operator gathers several categories of data. Here’s what that looks like in practice.
Personal identification information
32red collects your full name, date of birth, email address, home address and telephone number when you create an account. Because the operator is licensed by the UK Gambling Commission under account number 45322, it must verify that every player is at least 18 years old and genuinely who they claim to be. That means you’ll eventually be asked for copies of identification and confirmation of address before your first withdrawal is processed — standard Know Your Customer (KYC) procedure across every UKGC-licensed site.
Financial and transaction data
Every deposit and withdrawal generates transaction records. Whether you fund your account with a Visa debit card, Mastercard debit card, PayPal, Paysafecard, Neteller, Skrill, Apple Pay, Google Pay, ecoPayz, Bank Transfer or Instant bank transfer, the operator logs the amount, method, date and time. This data supports anti-money laundering checks and helps resolve payment disputes.
Technical and usage data
The operator records your IP address, device type, browser, operating system and how you navigate the site or app. Game sessions — which titles you play, stakes placed, wins and losses — are also logged, both for regulatory reporting and for responsible-gambling monitoring.
Cookies and tracking technologies
Cookies and similar technologies track preferences, login sessions and site performance. The dedicated cookies section further down this page explains the different types and how you can control them.
How We Use Your Information
32red doesn’t collect data just for the sake of it — each category serves a defined purpose, most of them tied directly to its UK Gambling Commission licence obligations.
Account management and verification
Your personal details allow the operator to open and maintain your account, confirm your identity and age, and carry out affordability or source-of-funds checks where required by regulation.
Processing transactions
Payment data is used to process deposits and withdrawals, apply the correct method-specific rules (for instance, debit card payouts take a minimum of 24 hours, while PayPal, Paysafecard and Neteller withdrawals are listed as taking up to 12 hours), and detect fraudulent or duplicate activity.
Marketing communications
If you opt in, the operator may contact you about promotions — such as the current welcome offer, Play £30 Get 320 Free Spins on Big Bass Splash — by email, SMS or on-site messages. You can withdraw this consent at any time, and opting out never affects your account or withdrawals.
Legal and regulatory compliance
Data is shared with the UK Gambling Commission and other authorities when legally required, used to enforce self-exclusion through schemes like GamStop, and retained to satisfy anti-money laundering legislation.
Service improvement
Aggregated, anonymised usage data helps the operator spot technical issues, refine its slots, roulette, blackjack, poker, baccarat and video poker lobbies, and improve the iOS and Android apps.
Data Sharing and Disclosure
Your information isn’t sold to advertisers, but it does move between a small number of controlled parties.
Third-party service providers
Payment processors, identity-verification specialists, game suppliers and customer-support platform providers all handle data on the operator’s behalf under strict contractual obligations. They can only use it for the specific service they provide.
Regulatory and legal requirements
As a UKGC-licensed operator (licence no. 45322), Platinum Gaming Limited must disclose data to the Gambling Commission, HMRC, law enforcement and courts when lawfully requested. Disputes may also be referred to the operator’s approved Independent Alternative Dispute Resolution (ADR) service, which receives the case records it needs to adjudicate.
Business transfers
32red sits within the FDJ United group and counts Unibet as a sister site. If the business is ever sold, merged or restructured, customer data may transfer to the new entity, with the same privacy protections applying.
User consent scenarios
Outside the situations above, your data is only shared with third parties where you’ve given explicit consent — and that consent can be revoked at any time through your account settings or by contacting support.
Data Security Measures
Handing over card details and ID documents online takes trust, so here’s how the operator keeps that information locked down.
Encryption and security protocols
All data transmitted between your device and the operator’s servers is protected with industry-standard SSL/TLS encryption — the same technology banks use. Payment card details are handled by PCI-DSS-compliant processors rather than being stored in plain form on casino servers.
Access controls
Access to personal data within the organisation is restricted to staff who genuinely need it for their role, protected by authentication controls and audit logging. Staff receive data-protection training as part of the operator’s compliance programme.
Data breach procedures
If a breach occurs that risks your rights and freedoms, UK GDPR requires the operator to notify the Information Commissioner’s Office within 72 hours and to inform affected players directly where the risk is high. You’ll be told what happened, what data was involved and what steps to take.
Your Privacy Rights
UK players enjoy strong data-protection rights under UK GDPR and the Data Protection Act 2018. Here’s what you can actually do with them.
Access to personal data
You can submit a Subject Access Request and receive a copy of everything the operator holds about you — account details, transaction history, support correspondence — free of charge, normally within one month.
Correction and deletion requests
If your address, email or other details are wrong, you can correct them in your account or by contacting support. You can also request deletion, though the operator may legally be required to retain certain records first — gambling and AML regulations override the “right to be forgotten” in some cases.
Marketing opt-out
You can unsubscribe from promotional emails and texts at any time via the link in each message or your account preferences. This takes effect promptly and won’t touch service messages about your account or withdrawals.
Data portability
You can ask for the data you’ve provided to be supplied in a structured, commonly used, machine-readable format, so it can be transferred to another service where technically feasible.
GDPR and regional rights
Beyond access and deletion, UK GDPR gives you the right to restrict processing, object to processing based on legitimate interests, and not be subject to purely automated decisions with significant effects. Withdrawal of consent never affects the lawfulness of processing that already took place.
Cookies and Tracking
Cookies do a lot of quiet work behind the scenes at any casino site. Here’s the honest picture of what runs when you browse.
Types of cookies used
- Strictly necessary cookies — keep you logged in, remember your balance session and route payments securely. The site won’t function without them.
- Functional cookies — remember preferences like language, odds format and game favourites.
- Performance and analytics cookies — measure page performance and how visitors move through the lobby, so issues can be fixed.
- Marketing cookies — used (with consent) to measure campaigns and personalise promotional content.
Cookie management options
You can adjust your preferences at any time through the site’s cookie consent tool, or block and delete cookies via your browser settings. Just note that disabling strictly necessary cookies will break login and payment functionality.
Third-party cookies
Some cookies are set by payment providers, game studios and analytics partners rather than the operator itself. These are governed by the third parties’ own privacy policies, which the operator links from its cookie notice.
Data Retention
Casinos can’t simply delete everything the moment you close your account — gambling regulation demands longer memories than that.
Retention periods
Account, identity and transaction records are kept for a defined period after account closure, in line with UK anti-money laundering rules (typically a minimum of five years from the end of the relationship). Marketing consent records are retained until you withdraw consent.
Legal retention requirements
The UK Gambling Commission, HMRC and AML legislation all impose minimum retention duties. Where these apply, deletion requests are honoured only after the mandatory period expires — the operator will tell you when that is.
Deletion procedures
Once retention periods lapse, data is securely deleted or irreversibly anonymised. Backup copies are purged on a rolling cycle, and you can request written confirmation that erasure has taken place.
Contact and Complaints
If something about your data doesn’t sit right, you have several routes — starting with the operator and ending, if needed, with the regulator.
Privacy inquiries
For any privacy question, you can reach 32red’s support team via 24/7 live chat, email at support@32red.com, or by phone on +44 (0)203 589 4560 or 0808 180 3232. This independent review site also covers the wider operator background here: about 32red.
Data protection officer contact
Data protection matters are handled through the operator’s dedicated privacy contact, reachable via the support email above with “Data Protection” in the subject line. Marking your message clearly helps it reach the right team faster.
Regulatory complaints
If you’re unhappy with how a privacy concern was handled, you can escalate to the Information Commissioner’s Office (ICO), the UK’s data protection regulator. Disputes about gambling service itself go to the operator’s UKGC-approved Independent ADR service, and the Gambling Commission supervises licence compliance. The operator’s broader player-protection commitments are covered here: 32red responsible gambling. Related rules also appear here: 32red terms and conditions.
Frequently Asked Questions about 32red
Is 32red legal in United Kingdom?
Yes. 32red is operated by Platinum Gaming Limited and licensed and regulated by the UK Gambling Commission under account number 45322, making it fully legal for players in Great Britain aged 18 and over. The brand launched in 2002 and forms part of the FDJ United group, with Unibet as a sister site.
How do I create a 32red account?
Registration takes a few minutes: provide your name, date of birth, address, email and phone number, then set your login credentials. UK Gambling Commission rules require identity verification with copies of identification and confirmation of address, which must be completed before your first withdrawal can be processed.
What payment methods does 32red support in United Kingdom?
UK players can deposit in GBP using Visa and Mastercard debit cards, PayPal, Paysafecard, Neteller, Skrill, Apple Pay, Google Pay, ecoPayz, bank transfer and instant bank transfer, with no fees. Withdrawals take a minimum of 24 hours to debit cards and up to 12 hours to PayPal, Paysafecard and Neteller.
How do I claim the 32red welcome bonus?
New GB customers opt in within 7 days of registration, deposit and stake £30 on slots using a debit card or instant bank transfer, then claim 320 x £0.10 Free Spins on Big Bass Splash within 48 hours. Free spins winnings carry 10x wagering, and spins expire 30 days after claiming. 18+, T&Cs apply.
Now you know exactly how 32red handles your data, you can make an informed choice about playing there. If you’re comfortable with what’s described above, the button below takes you straight to the site.