Contents

• Privacy policy
• 1.
  General
• 2.
  Financial requirements
• 3.
  Protection of children and other vulnerable persons
• 4.
  ‘Fair and open’ provisions
• 5.
  Marketing
• 6.
  Complaints and disputes
• 7.
  Gambling licensees’ staff
• 8.
  Information requirements
• 9.
  Gaming machines in gambling premises
• 10.
  Assessing local risk
• What is personal data and special category data?
• What personal data do we collect, for what purpose, and what is the basis for doing so?
• Licence applicants and National Lottery vetting
• People who already hold an operating and or personal licence
• People we are investigating/regulatory action
• Complainant data
• Gambling Commission Consultations
• What are cookies?
• Our use of cookies
• How we use information website and digital service users provide us with
• User research
• Links to other websites
• How long we keep the information
• Keeping your personal information secure
• Obtaining data from third parties
• Who we share personal data with
• Your rights
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to object processing
• Law enforcement processing
• Accessing your personal data
• Overseas transfers
• Changes to this privacy statement
• Stakeholder events privacy notice
• How to contact us
• Recruitment privacy notice 2024
• Monitoring social media
• How to complain privacy policy
• Do you need any extra help?
• Regular Feed of Operator Core Data (ROCD) (Pilot Project)

Accessing your personal data

You have the right to confirmation as to whether or not we are processing your personal data and, if access the data together with the reasons we hold it, the period it will be retained and who the information has been shared with.

Your request must be in writing. You can submit your request by post or email to dpo@gamblingcommission.gov.uk

The request must include:

• your name
• your address/ email address for sending the information to you
• a description of the information you wish to obtain.

To ensure confidentiality, we will need evidence which confirms your identity. A copy of photo identification, and proof of your address such as a copy of a photo driving licence or passport and a recent utility bill. Please do not send original documents.

Most requests will receive a response within one month of receipt of a valid request; those which are more complex or numerous may take up to three months.

You may not be entitled to see all the information held about you if an exemption under the GDPR/ the Data Protection Act applies, for example if it contains data mixed with other individuals’ data, if disclosure would prejudice the exercise of our regulatory functions or is subject to legal privilege. Requests which are manifestly unfounded or excessive will be refused.

Previous page
Law enforcement processing Next page
Overseas transfers