Privacy Policy

Version: 1.0  |  Last Updated: 9 November 2026

1. Introduction

Welcome to Bananzia, operated via playbananzia.com (the "Platform", "we", "us", or "our"). We are firmly committed to protecting the privacy and personal data of every individual who visits or uses our Platform. This Privacy Policy explains what personal data we collect, why we collect it, how we process and store it, with whom we may share it, and what rights you have over it.

This Policy applies to all users of playbananzia.com and is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). It should be read alongside our Terms & Conditions and our Responsible Gaming page, which together form the complete framework governing your use of the Platform. By registering an account or continuing to browse, you acknowledge that you have read and understood this Policy.

Our minimum age requirement is 18 years. We do not knowingly collect personal data from anyone under this age.

2. Data We Collect

We collect personal data in several ways: directly from you when you register, deposit, or contact us; automatically through your use of the Platform; and, in limited circumstances, from trusted third parties. The categories of data we may hold about you include the following.

2.1. Identity & Contact Data

• Full name, date of birth, and nationality
• Residential address, email address, and telephone number
• Username and account password (stored in encrypted form)
• Copies of government-issued identity documents (e.g., passport, driving licence) collected for Know Your Customer (KYC) and age-verification purposes
• Proof of address documentation (e.g., utility bill, bank statement)

2.2. Financial Data

• Payment card details (processed via PCI DSS-compliant third-party providers; we do not store full card numbers)
• Bank account or e-wallet identifiers used for deposits and withdrawals
• Transaction history, including deposit amounts, withdrawal requests, and bonus redemptions
• Source-of-funds information where required by our anti-money laundering obligations

2.3. Gaming & Behavioural Data

• Betting and gaming activity, including game types, session durations, wagering volumes, and outcomes
• Responsible gaming interactions such as self-exclusion requests, deposit limits, and time-out elections (see our Responsible Gaming page)
• Bonuses claimed and promotional activity
• Customer support communications and complaints records

2.4. Technical & Usage Data

• IP address, device type, operating system, browser type and version
• Pages viewed, links clicked, referral source, and session timestamps
• Geolocation data (country/region level) derived from IP address
• Cookie identifiers and similar tracking data (see Section 6)

2.5. Marketing Preferences

• Opt-in or opt-out status for email, SMS, and push-notification marketing
• Communication history related to promotional offers

3. How We Use Your Data

We process your personal data only for specified, explicit, and legitimate purposes. The principal purposes for which we use the data described in Section 2 are set out below.

3.1. Account Registration & Service Delivery

We use your identity and contact data to create and manage your account, verify your age (minimum 18), authenticate your login, enable deposits and withdrawals, and provide access to our games and promotions.

3.2. Identity Verification & Fraud Prevention

We are required to verify the identity of all customers before allowing withdrawals and in certain other circumstances. This includes conducting KYC checks, anti-money laundering (AML) screenings, and sanctions list checks. We may use automated tools alongside manual review. We also monitor transactions and behavioural patterns to detect and prevent fraud, money laundering, and match-fixing.

3.3. Responsible Gaming

We analyse gaming and behavioural data to identify markers of potential gambling harm. Where we detect such markers, we may intervene proactively to offer support tools or restrict activity in line with our obligations. This processing is explained in detail on our Responsible Gaming page.

3.4. Payment Processing

Financial data is used to process your deposits and withdrawals securely, to handle chargebacks or disputes, and to maintain accurate financial records as required by law.

3.5. Customer Support

When you contact us, we use your personal data to respond to your enquiry, resolve complaints, and improve our service quality. Support communications may be recorded for training and compliance purposes.

3.6. Marketing & Personalisation

Where you have provided consent, we may use your data to send you promotional materials by email, SMS, or push notification. You can withdraw consent at any time by updating your account settings or contacting us at support@playbananzia.com. We do not sell personal data to third-party marketers.

3.7. Legal & Regulatory Compliance

We process data to meet our obligations under applicable law, including responding to lawful requests from regulatory authorities, law enforcement agencies, and courts.

3.8. Analytics & Platform Improvement

Aggregated or pseudonymised technical and usage data helps us understand how the Platform is used, identify and fix technical issues, and develop new features.

4. Legal Bases for Processing

Under UK GDPR, every processing activity must rest on a valid legal basis. The table below maps our principal processing purposes to the applicable legal ground.

Where we rely on legitimate interests, we have conducted a balancing test to ensure our interests do not override your fundamental rights. You may request details of that assessment by writing to us at privacy@playbananzia.com.

Where processing involves special category data (e.g., health-related inferences about gambling behaviour), we additionally rely on Article 9(2)(g) UK GDPR (substantial public interest) in combination with the DPA 2018 Schedule 1 provisions.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We may, however, share it with carefully selected third parties where necessary and lawful, as described below.

5.1. Payment & Financial Service Providers

We share necessary financial data with payment processors, banking partners, and e-wallet providers to execute your transactions. These providers include, but are not limited to, services supporting: Visa, Mastercard, PayPal, Skrill, Neteller, Paysafecard, Apple Pay, Google Pay, Bank Transfer (Faster Payments), and Trustly. All such partners are contractually bound to protect your data and use it only for the stated purpose.

5.2. Identity Verification & Compliance Partners

We use regulated third-party KYC and AML service providers to verify your identity and screen against sanctions lists. These processors act under data processing agreements consistent with UK GDPR requirements.

5.3. Regulatory & Law Enforcement Bodies

We may disclose personal data to competent regulatory authorities, law enforcement, or courts where we are required to do so by law or court order.

5.4. Technology & Infrastructure Partners

We use third-party cloud hosting, analytics, and customer support software providers. These vendors act as data processors and are authorised only to process data on our documented instructions. All are subject to binding contractual protections including data processing agreements (DPAs).

5.5. Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify affected users in advance and ensure the receiving entity continues to honour this Policy.

6. Cookies & Tracking Technologies

We use cookies and similar technologies (collectively, "cookies") on the Platform. A cookie is a small text file stored on your device that enables the Platform to recognise you across sessions and gather usage data.

6.1. Types of Cookies We Use

• Strictly Necessary Cookies: Essential to the Platform's operation. These cannot be disabled as they enable core functions such as secure login, session management, and fraud prevention.
• Performance & Analytics Cookies: Collect anonymous or pseudonymous information about how visitors use the Platform (e.g., pages visited, error messages). We use this data to improve functionality.
• Functional Cookies: Remember your preferences, such as language settings and account options, to provide a more personalised experience.
• Targeting & Advertising Cookies: Used, with your consent, to deliver relevant promotional messages and measure campaign effectiveness. These may be set by trusted third-party advertising partners.

6.2. Managing Your Cookie Preferences

When you first visit the Platform, you will be presented with a cookie consent banner allowing you to accept or reject non-essential cookie categories. You can change your preferences at any time through the cookie settings link in the footer. You may also manage cookies through your browser settings; note that disabling certain cookies may affect Platform functionality. For more information, visit allaboutcookies.org.

Marketing-related cookies that use personally identifiable information are only activated following your explicit consent in accordance with the Privacy and Electronic Communications Regulations (PECR).

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes, but is not limited to:

• Encryption in transit: All communications between your browser and our servers are protected by TLS (Transport Layer Security) encryption.
• Encryption at rest: Sensitive personal and financial data stored in our databases is encrypted using industry-standard algorithms.
• Access controls: Personal data is accessible only to employees and contractors who require it to fulfil their role, subject to strict role-based access permissions and audit logging.
• Penetration testing & vulnerability management: Our systems are subject to regular security assessments and patch management processes.
• Incident response: We maintain a data breach response procedure. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and, where required, inform affected individuals without undue delay.

Whilst we take security very seriously, no electronic transmission over the internet or method of storage is completely secure. We therefore cannot guarantee absolute security, but we will act promptly to contain and remediate any breach should one occur.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulation. Key retention principles are as follows:

• Active accounts: Data is retained for the duration of your account plus a minimum of five (5) years after account closure, in line with AML and financial record-keeping requirements under UK law.
• KYC documentation: Identity verification records are retained for a minimum of five (5) years from the end of the business relationship, as required under the Money Laundering Regulations 2017.
• Transaction records: Financial transaction data is kept for at least five (5) years to satisfy regulatory and tax obligations.
• Marketing data: Where consent is the legal basis, we will delete or anonymise marketing preference data promptly following withdrawal of consent, unless retention is required for another lawful purpose.
• Technical logs: Server and access logs are routinely purged or anonymised in line with our internal security policy.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be attributed to you.

9. Your Rights

As a data subject under UK GDPR, you have a comprehensive set of rights in relation to your personal data. We are committed to honouring these rights promptly and in full. The following rights apply to you:

9.1. Right of Access

You have the right to request a copy of the personal data we hold about you, together with information about how it is used. This is commonly known as a Subject Access Request (SAR). We will respond within one calendar month of receiving a valid request. Where requests are complex or numerous, we may extend this period by a further two months, in which case we will notify you of the extension and the reasons for it.

9.2. Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You may update many details directly in your account settings; for other changes, please contact our support team.

9.3. Right to Erasure ("Right to Be Forgotten")

You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. This right is not absolute — we may decline or delay erasure where retention is required by law (e.g., AML record-keeping obligations).

9.4. Right to Restriction of Processing

You have the right to request that we limit the way we process your personal data in certain circumstances, for example while the accuracy of data is contested, or while an objection to legitimate-interests processing is being assessed.

9.5. Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format, or that we transmit it directly to another controller where technically feasible.

9.6. Right to Object

You have the right to object at any time to the processing of your personal data where that processing is based on legitimate interests, including profiling. You also have an absolute right to object to your data being used for direct marketing purposes; we will stop such processing immediately upon receiving your objection.

9.7. Rights Related to Automated Decision-Making & Profiling

We may use automated processes as part of our fraud-detection and responsible gaming monitoring activities. Where a solely automated decision produces legal or similarly significant effects on you, you have the right to request human review of that decision, to express your point of view, and to contest the outcome.

9.8. How to Exercise Your Rights

To exercise any of the rights described above, please submit a written request to privacy@playbananzia.com. We will verify your identity before processing your request. All rights may be exercised free of charge, unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act.

9.9. Right to Lodge a Complaint

If you are not satisfied with how we handle your personal data or respond to your rights request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority:

• Website: ico.org.uk
• Helpline: 0303 123 1113

We encourage you to contact us first so that we have an opportunity to address your concerns directly.

10. International Data Transfers

Some of our third-party service providers, including cloud hosting and analytics partners, may store or process your data on servers located outside the United Kingdom. UK GDPR requires that we apply additional safeguards when transferring personal data to countries that have not been granted an adequacy decision by the UK Secretary of State.

Where such transfers occur, we ensure that at least one of the following appropriate safeguards is in place:

• UK International Data Transfer Agreements (IDTAs) or approved addenda to Standard Contractual Clauses (SCCs) as recognised under UK law
• Transfer to a country that benefits from a valid UK adequacy decision
• Binding corporate rules, where applicable

You may request details of the specific safeguards in place for any particular transfer by contacting us at privacy@playbananzia.com.

11. Minors

The Platform is strictly intended for adults aged 18 years and over. We do not knowingly collect or process personal data belonging to individuals under 18. As part of our registration process, we implement age-verification procedures to prevent underage access.

If we become aware that we have inadvertently collected personal data from a minor, we will delete that data promptly and close the associated account. If you believe that a minor has registered on the Platform, please notify us immediately at support@playbananzia.com so that we can take appropriate action. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling services.

12. Changes to This Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data-processing practices. When we make material changes, we will:

• Update the Last Updated date and version number at the top of this page
• Display a prominent notice on the Platform or notify you by email, where appropriate

We encourage you to review this Policy periodically. Your continued use of the Platform following the posting of an updated Policy constitutes your acceptance of the changes. If you do not agree with any amendments, you should cease using the Platform and may request account closure. The current and all prior versions of this Policy are retained for reference in line with our document management obligations.

13. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please get in touch using the details below.

When submitting a data-related request, please include your full name, registered email address, and a clear description of your request to help us respond as efficiently as possible. We aim to acknowledge all privacy-related enquiries within 5 business days and to resolve them fully within the statutory timeframe of one calendar month.

For information about our Terms & Conditions, please visit /terms-and-conditions. For information about our safer gambling commitments and the tools available to help you stay in control, please visit /responsible-gaming.

Frequently Asked Questions

What personal data does Bananzia collect when I register?

When you register, we collect your name, date of birth, residential address, email address, phone number, and account credentials. We also collect identity documents during the KYC verification process. Full details are set out in Section 2 of this Policy.

How long does Bananzia keep my data after I close my account?

We retain your data for a minimum of five (5) years after account closure, in accordance with our AML and financial record-keeping obligations under UK law. After this period, data that is no longer required is securely deleted or anonymised. See Section 8 for full retention details.

Can I request a copy of all the data you hold about me?

Yes. You may submit a Subject Access Request (SAR) at any time by emailing privacy@playbananzia.com. We will verify your identity and respond within one calendar month of receiving your valid request, free of charge in most circumstances.

How do I opt out of marketing emails?

You can withdraw your marketing consent at any time by updating your communication preferences in your account settings or by emailing support@playbananzia.com. We will action opt-out requests promptly. Withdrawing marketing consent does not affect the lawfulness of processing carried out before withdrawal.

Who can I contact if I have a complaint about how my data is handled?

Please contact our Data Protection team at privacy@playbananzia.com in the first instance. If you remain dissatisfied, you have the right to escalate your complaint to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.