Guidance
The prevention of money laundering and combating the financing of terrorism
Gambling Commission guidance for remote and non-remote casinos: Fifth edition (Revision 5).
10 - Data protection
Any personal data obtained by casino operators for the purposes of the Regulations may only be processed for the purposes of preventing money laundering, terrorist financing or proliferation financing.162
Personal data should not be used for any other purpose unless:
- use of the data is permitted by or under any law other than the Regulations, or
- the casino operator has obtained the agreement of the subject of the data to the proposed use of the data.163
Casino operators are obliged to provide new customers with the following information before they establish a business relationship with them:
- the registrable particulars of the operator
- a statement that any personal data received from the customer will be processed only for the purposes of preventing money laundering, terrorist financing or proliferation financing, or as permitted by the circumstances described in the previous paragraph.164
References
162 Regulation 41(1).
163 Regulation 41(3).
164 Regulation 41(6).
Form in which records are to be kept
Last updated: 22 October 2025
Show updates to this content
Updated in line with revision 5 of the guidance.