This Privacy Policy explains how Legacy Of Dead collects, processes, stores, and protects personal data relating to players within the United Kingdom. The document establishes the legal framework for data handling, lawful processing, and compliance with applicable data protection legislation. Transparency regarding data practices is provided without omission. Account management procedures, verification protocols, and individual rights under UK law are detailed. Security obligations and organisational measures are documented in accordance with statutory requirements. This policy functions as the official record of data processing activities conducted by the brand.
Data Collection and Types of Personal Information Processed
Legacy Of Dead processes personal data collected directly from players during account registration, transactions, and ongoing account management. The categories of information include, but are not limited to, full name, date of birth, residential address, email address, and telephone number. Identification data, such as a copy of a valid passport or driving licence, is obtained to satisfy know-your-customer obligations. Financial information, including bank account details, payment card numbers, and transaction histories, is recorded to process deposits, withdrawals, and any related fees.
Technical data collected automatically includes IP addresses, browser type, operating system, device identifiers, and session activity logs. Compliance-related records are maintained to document responsible gambling interactions, self-exclusion requests, and any correspondence with regulatory authorities. Additional data may be collected in connection with the use of promotional offers, such as the 50 freispiele legacy of dead bonus, where eligibility verification requires confirmation of account standing and deposit history. Marketing preference data, including consent to receive promotional materials, is recorded separately. No special category data under UK data protection law is intentionally collected unless required for legal compliance.
- Registration details: name, date of birth, address, contact information.
- Identification documents: passport, driving licence, utility bills.
- Transactional records: deposits, withdrawals, gaming activity, bonus usage.
- Technical data: IP address, device information, browser logs.
- Compliance data: self-exclusion logs, responsible gambling notes, regulatory reports.
Data Usage and Legal Basis for Processing
Personal data is used to verify player identity, process financial transactions, maintain account security, and fulfil legal and regulatory obligations under United Kingdom licensing conditions. The performance of contract is the legal basis for processing data required to open and operate an account, including the execution of wagers and the administration of withdrawals. Consent is relied upon where players opt to receive marketing communications or participate in specific promotional campaigns, including those related to legacy of dead free spins offers.
Legitimate interest is the basis for processing data to detect fraudulent activity, prevent money laundering, and maintain the integrity of gaming operations. Legal obligations under the Gambling Act 2005 and related regulations mandate the retention of transaction records, identification documents, and responsible gambling interactions. The assessment of a legacy of dead slot payout calculation does not involve automated decision-making affecting players unless explicitly disclosed. Where data is processed for direct marketing, a clear opt-out mechanism is provided. The legal basis for each processing activity is documented internally and available upon request to the data protection officer.
| Processing Activity | Legal Basis |
|---|---|
| Account registration and verification | Performance of contract |
| Transaction processing | Performance of contract |
| Marketing communications | Consent |
| Fraud prevention and security monitoring | Legitimate interest |
| Regulatory compliance and record-keeping | Legal obligation |
Data Storage, Security Measures and Retention Rules
Personal data is stored on encrypted servers located within the European Economic Area or in jurisdictions deemed adequate by the United Kingdom data protection framework. Access to data is restricted to authorised personnel who require the information to perform their duties. Security measures include firewalls, intrusion detection systems, regular penetration testing, and encryption of data in transit using transport layer security protocols. Physical and logical access controls are applied to all systems containing personal data.
Retention periods are determined by legal, regulatory, and operational requirements. Player account data is retained for the duration of the account’s active status and for a period of six years after account closure to satisfy anti-money laundering obligations and tax reporting requirements. Transaction records are kept for six years from the date of completion. Responsible gambling interaction logs are retained for a minimum of five years. Data related to the legacy of dead max win outcome calculations is stored as part of game server logs and retained for two years unless otherwise required by regulatory audit. Upon expiry of the retention period, data is securely deleted or anonymised using industry-standard deletion protocols. Archival procedures ensure that data no longer required for active processing is isolated and scheduled for irreversible disposal.
Player Rights and Data Access Procedures
Under the UK General Data Protection Regulation and the Data Protection Act 2018, players have the right to access personal data held about them by submitting a subject access request. Requests must be made in writing, and identity verification is required before any data is disclosed. Acceptable verification documents include a current passport or driving licence. The response time is one month from receipt of a valid request, which may be extended by an additional two months for complex or multiple requests. Players may request correction of inaccurate or incomplete data.
The right to erasure, also known as the right to be forgotten, applies where data is no longer necessary for the purposes for which it was collected, where consent is withdrawn, or where processing is unlawful. Restriction of processing may be requested where the accuracy of data is contested or where processing is unlawful. Players may object to processing based on legitimate interest, including direct marketing. Data portability is available for data provided by the player and processed by automated means on the basis of consent or contract. Requests for exercise of these rights are processed without undue delay. Complaints regarding data handling may be directed to the Information Commissioner’s Office. No fees are charged for the exercise of these rights unless the request is manifestly unfounded or excessive. The data protection officer can be contacted through account support channels.