Privacy overview and scope

Agent No Wager collects only the information needed to provide services, operate accounts, and meet legal duties in the UK.

Personal data we collect

• Identity and contact details: name, date of birth, address, email, phone.
• Account and verification records: username, security credentials, KYC and age‑verification documents.
• Financial and transaction information: payment details, deposits, withdrawals, and account balances.
• Gameplay and betting activity: stakes, outcomes, time on site, responsible gambling settings.
• Technical and usage data: device identifiers, IP address, browser type, approximate location, cookies.
• Communications and preferences: messages to support, marketing choices.
• Dispute and compliance information: sanctions screening, fraud flags, audit logs.
• Special category data: only if a user provides it voluntarily for customer care or safer gambling. If processed, it is handled under explicit consent or an applicable UK legal condition.

Why we collect it

• To set up and manage accounts, deliver online services, and process payments.
• To verify age and identity, prevent fraud, and meet anti‑money laundering obligations.
• To support safer gambling, including self‑exclusion and limits.
• To improve the website, apps, and customer support.
• To meet legal, regulatory, and reporting requirements.

How we protect information

• Encryption in transit and at rest, strong access controls, segregated environments.
• Multi‑factor authentication for sensitive systems, regular security testing, and monitoring.
• Staff training, role‑based access, and vetted third‑party providers.
• Data minimisation, pseudonymisation where appropriate, and secure destruction.
• Data protection impact assessments for high‑risk processing and breach response procedures, including notifying the ICO and affected users when required.

User rights under UK law

Users can exercise: access, rectification, erasure, restriction, portability, objection to processing, objection to direct marketing, and withdrawal of consent. Users may complain to the Information Commissioner’s Office at ico.org.uk.

Retention

• Account and verification records: kept for the life of the account and at least five years after closure to satisfy anti‑money laundering requirements.
• Transactions and financial records: retained for up to seven years where required by law.
• Cookies: see the Cookies section for one‑year retention of non‑essential cookies.

This Policy aligns with UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations, and the Gambling Commission’s LCCP.

We use personal data for lawful, fair, and transparent purposes.

• Service delivery: to create and manage accounts, provide online casino and sportsbook services, and operate features users request.
• Payments: to process deposits, withdrawals, refunds, chargebacks, and fraud checks.
• Customer support: to respond to queries and resolve complaints or disputes.
• Improvement and safety: to test, maintain, and enhance the websites and apps, and to safeguard system integrity.
• Personalisation: to tailor content and settings based on usage and preferences.
• Marketing: to send updates and offers when a user has opted in. Users can opt out at any time.
• Analytics and statistics: to understand performance and usage patterns and improve services.
• Compliance: to meet obligations under the Gambling Commission rules, anti‑money laundering laws, and tax and accounting requirements.

Lawful bases

• Consent: for marketing communications and certain cookies.
• Contract: to provide services and perform account‑related requests.
• Legal obligation: AML checks, age verification, record keeping.
• Legitimate interests: fraud prevention, service improvement, and network security, balanced against user rights.
• Substantial public interest or explicit consent: safer gambling interactions where applicable under UK law.

Automated decisions and profiling

• Fraud, AML, and risk screening may be automated and can affect access to services.
• Users can request human review, express their point of view, and contest an automated decision where required by law.

Users can access and manage their information through account settings or by contacting customer support. We may ask for proof of identity before acting on a request.

• Access: we provide a copy of personal data and details about processing. Response time is usually one month.
• Rectification: incorrect or incomplete data is corrected promptly.
• Erasure: data is deleted when there is no legal basis to keep it. Certain records must be retained for AML, fraud prevention, or dispute resolution.
• Restriction and objection: processing can be limited or objected to in specific cases, including direct marketing.
• Portability: a machine‑readable copy can be provided where the right applies.
• Withdrawal of consent: users can withdraw consent at any time for activities based on consent.

By using Agent No Wager, users consent to security checks, identity and age verification, and processing of payment data by authorised payment providers and verification partners, some of which act as independent controllers.

For self‑exclusion, we use and share necessary details to honour requests, including checks against GAMSTOP as required in Great Britain.

The service is for adults aged 18 or over. Accounts must not be created or used by anyone under 18.

The operator cannot confirm age without appropriate documents. If a parent or guardian believes a minor has provided personal data, they should contact support. Once verified, the account will be closed and the child’s information will be deleted, subject to any legal obligations to retain limited records for fraud or law enforcement purposes.

Personal data may be processed outside the UK in countries where our partners and service providers operate. By using the service, users consent to such transfers where consent is the appropriate legal basis. In other cases, transfers rely on lawful safeguards.

• Safeguards include UK adequacy regulations, the International Data Transfer Agreement or UK Addendum to the EU SCCs, and transfer risk assessments.
• All partners must keep information confidential, use it only for instructed purposes, and apply appropriate technical and organisational measures.
• Copies of key transfer safeguards can be requested, subject to commercial confidentiality.

This legal notice clarifies that this Policy operates alongside applicable law. If there is any inconsistency, UK GDPR and the Data Protection Act 2018 prevail.

• Certain provisions may limit or clarify obligations to the extent permitted by law and regulatory rules.
• Acceptance occurs when a user signs, clicks to accept, or otherwise accedes to the Policy within the service.
• If any part is found invalid by a competent authority, the remainder continues in effect.
• Nothing in this Policy limits statutory rights available under UK law.

Cookies are small files stored on a device by websites. We use cookies and similar tools for statistics, behaviour analysis, personalisation, and site improvement. Non‑essential cookies are retained for up to one year.

• Essential cookies: required for security and core functions.
• Performance and analytics: help measure usage and improve services.
• Functional: remember preferences and settings.
• Advertising: only used where consented to and subject to user control.

Users can manage cookie preferences in their browser and in our preference centre. We follow the Privacy and Electronic Communications Regulations and UK GDPR for consent and transparency.

Using Agent No Wager signifies full acceptance of this Privacy Policy. The current version published on the website prevails over any previous versions.

Personal data may be shared where necessary to provide services, comply with law, resolve disputes, or enforce agreements. Typical recipients include payment processors, banks, identity and age‑verification providers, analytics and cloud hosting services, customer support tools, fraud‑prevention partners, regulatory bodies, dispute resolution services, and law enforcement.

The website lists key third‑party categories and, where available, named providers. If not listed at the time of collection, users will be informed of the purpose and scope before sharing. Providing personal data can constitute consent where consent is the lawful basis; otherwise sharing is based on contract, legal obligation, or legitimate interests. Third parties are required to protect information and process it only as instructed, but they may have their own privacy notices.

Our websites may include links to external sites that operate under their own privacy policies. We are not responsible for how those sites collect or use personal information. Users should review the privacy notices on any external site and take care before sharing data.