Contents

• Privacy policy
• 1.
  General
• 2.
  Financial requirements
• 3.
  Protection of children and other vulnerable persons
• 4.
  ‘Fair and open’ provisions
• 5.
  Marketing
• 6.
  Complaints and disputes
• 7.
  Gambling licensees’ staff
• 8.
  Information requirements
• 9.
  Gaming machines in gambling premises
• 10.
  Assessing local risk
• What is personal data and special category data?
• What personal data do we collect, for what purpose, and what is the basis for doing so?
• Licence applicants and National Lottery vetting
• People who already hold an operating and or personal licence
• People we are investigating/regulatory action
• Complainant data
• Gambling Commission Consultations
• What are cookies?
• Our use of cookies
• How we use information website and digital service users provide us with
• User research
• Links to other websites
• How long we keep the information
• Keeping your personal information secure
• Obtaining data from third parties
• Who we share personal data with
• Your rights
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to object processing
• Law enforcement processing
• Accessing your personal data
• Overseas transfers
• Changes to this privacy statement
• Stakeholder events privacy notice
• How to contact us
• Recruitment privacy notice 2024
• Monitoring social media
• How to complain privacy policy
• Do you need any extra help?
• Regular Feed of Operator Core Data (ROCD) (Pilot Project)

How long we keep the information

We operate under a detailed data retention policy which sets out how long certain categories of data will be retained and/or how often certain data will be reviewed for the purpose of assessing whether it needs to be retained. We have four main retention periods:

• 25 years: for data relating to research
• 10 years for data associated with contracts that we have entered into and also for enforcement activities
• 5 years for data relating to Regulation of Investigatory Powers Act 2000, intelligence activities and reports, licensee and operator documents (including correspondence, reports, reviews and assessments)
• 3 years for data relating to call centre records and complaints.

Fourth National Lottery Licence

Personal data collected and processed for the purposes of fit and proper checks on Applicants (and other key individuals) of the Fourth National Lottery Licence shall be retained until August 2025.

Personal data collected and processed for the purposes of fit and proper checks on the licensee of the Fourth National Lottery Licence (the successful Applicant and other key individuals) shall be retained for the life of licence plus 7 years.

Previous page
Links to other websites Next page
Keeping your personal information secure