32red Privacy Policy
This page summarises the privacy rules that 32red publishes for players in the United Kingdom; the operator’s own Privacy Notice and Cookie Policy remain the authoritative texts. Below is an overview of what data the operator collects, why it collects it, who receives it, and which rights players hold over their personal information.
Information We Collect
32red collects personal data primarily to meet legal obligations under anti-money laundering (AML) and age verification rules, and to operate player accounts. The data falls into clearly defined categories centred on identity, verification and account activity.
Personal data collected during registration
The core category is identity and verification data. According to the operator’s Privacy Notice, this includes photographic ID such as a passport or driving licence, collected so that 32red can confirm a player’s age and identity as the law requires. This verification step underpins both AML compliance and the prevention of underage gambling.
Cookies and tracking technologies
32red maintains a separate Cookie Policy covering the tracking technologies used on its platform. Cookies support the operation of the service and feed into the operator’s analytics and personalisation purposes described below.
How We Use Your Information
The operator documents five purposes for processing player data: legal and regulatory compliance, responsible gambling and player safety, account operation and service provision, marketing and personalisation, and business improvement and analytics.
Account management and verification
Identity and verification data serves account operation and service provision, alongside the compliance checks already described. Player safety is a distinct stated purpose: 32red processes data to support responsible gambling measures. Readers who want the fuller picture of those tools can consult this site’s dedicated page: 32red responsible gambling.
Service improvement
Business improvement and analytics is a documented purpose in its own right. The operator uses collected data to refine how the service works and to understand how it is used.
Marketing communications
Marketing and personalisation is listed as one of the five processing purposes. Players who prefer not to receive such communications can rely on the objection and consent-withdrawal rights described in the rights section below.
Data Protection and Security
The operator’s published policies address security measures, the role of the data controller, and data retention. The identity data 32red holds — passports, driving licences and similar documents — is retained and protected in line with the legal obligations that justified collecting it in the first place, particularly AML and age verification requirements.
Third-party sharing
32red names two recipients of player data in its documentation. Verification processing is handled by GB Group (GBG), a specialist identity verification provider, and by Risepoint Limited, formerly known as Trannel. These recipients support the operator’s compliance and verification functions rather than independent marketing use.
Your Rights
Players in the United Kingdom hold the standard set of data protection rights against 32red as data controller. The operator’s documentation lists them explicitly: access, rectification, erasure, restriction, portability, objection and the right to withdraw consent.
- Access: players can request confirmation of what personal data the operator holds about them.
- Rectification: inaccurate or incomplete data can be corrected on request.
- Erasure: players can ask for their data to be deleted, subject to the retention duties that AML and age verification law imposes.
- Restriction: processing can be limited in the circumstances the law provides for.
- Portability: data can be obtained in a transferable format where that right applies.
- Object: players can object to processing, including processing for marketing and personalisation.
- Withdraw consent: where processing rests on consent, that consent can be withdrawn at any time.
The operator’s policies also provide a data protection contact route for exercising these rights. Wider contractual conditions sit outside this page: 32red terms and conditions. Background on how this independent website assesses the operator is here: about 32red.
For the binding wording on every point above, the operator’s own Privacy Notice is the document to read.