Tombola Privacy Policy

This Tombola Privacy Policy explains how personal data may be collected, used, stored, shared and protected when a player visits the website, uses the app, registers an account, plays games, makes payments, contacts support or uses Safe Play tools.

The latest Privacy Notice update is listed as 26 September 2024. Tombola services are operated by Tombola (International) Plc, company number 105556, with operating address at Floor 4, 55 Line Wall Road, Gibraltar, GX11 1AA. Tombola is licensed by the Government of Gibraltar under RGL No. 052 and is licensed and regulated in Great Britain by the Gambling Commission under account number 38613.

Overview

Tombola collects and uses personal data to provide online gambling services, manage player accounts, process payments, complete verification checks, protect account security, meet legal duties and support safer gambling controls.

This Privacy Policy applies to Tombola websites, applications, products and services that link to the Privacy Notice or do not have a separate privacy notice. It is designed to explain what data is used, why it is needed and what rights players have under data protection law.

Players with questions about personal data can contact Tombola support at [email protected] or by telephone free on 0800 298 8873.

Personal Data Tombola May Use

Tombola may use different types of personal data. Some information is provided directly by the player, some is created through use of the services, and some may come from trusted third parties or public sources.

Personal data may include:

Registration Information: Name, date of birth, residential address, email address, mobile number, username and account details.

Verification and KYC Data: Identity documents, proof of address, payment ownership information and due diligence records.

Customer Experience Data: Messages, calls, support requests, complaints, chat records and contact history.

Payment Information: Deposits, withdrawals, payment method details, transaction records and payment status.

Gaming and Transaction Data: Game activity, stakes, winnings, losses, promotions, account balance and session history.

Financial Information: Data needed for affordability, risk, fraud prevention, AML and regulatory checks.

Safe Play Information: Deposit limits, session controls, time-outs, self-exclusion status, risk indicators and responsible gambling interactions.

Device and Online Data: IP address, device type, browser information, app data, tracking data, cookies and website usage.

Marketing Data: Communication preferences, consent records, campaign interactions and promotional eligibility.

Profiling and Analytical Data: Risk analysis, customer segmentation, service usage patterns and account behaviour.

Data from Other Sources: Information from public sources, trusted partners, identity verification providers, fraud prevention services or regulatory tools.

Data Provided by the Player

The player provides personal data during registration, account updates, support contact, payments, verification and safer gambling interactions. This may include account details, contact information, identity documents and payment information.

The player should make sure that all information is accurate and up to date. Incorrect details can affect account verification, withdrawal processing, support responses or safer gambling checks.

Data Created by Using Tombola Services

Some data is created automatically when the player uses Tombola services. This may include login records, gameplay history, transaction activity, bonus use, device information, cookies, Safe Play interactions and customer support records.

This information helps Tombola operate the account, improve service quality, detect fraud, meet regulatory duties and monitor player protection risks.

Data from Other Sources

Tombola may receive personal data from other sources where lawful and necessary. This may include identity verification providers, fraud prevention services, payment providers, public registers, regulatory sources and trusted partners.

This data may be used to confirm account details, complete due diligence, detect suspicious activity, support anti-money laundering checks or protect players from gambling-related harm.

How and Why Personal Data Is Used

Tombola uses personal data only where there is a lawful reason to do so. The main legal bases may include performance of a contract, legal or regulatory obligations, legitimate interests, consent, public interests or vital interests.

Personal data may be used for:

Registering and verifying the account

Providing access to games and services

Processing deposits and withdrawals

Managing customer support requests

Sending marketing where consent applies

Preventing fraud and account misuse

Supporting Safe Play and player protection

Managing risk and customer analysis

Meeting anti-money laundering and counter-terrorist financing duties

Personalising services where appropriate

Handling complaints, disputes and legal obligations

Registering and Verifying an Account

Tombola may use personal data to create an account, confirm eligibility and complete verification checks. This can include confirming that the player is aged 18 or over, checking identity, validating address details and confirming payment ownership.

Verification checks may be required before withdrawals or when account activity triggers further review. If verification cannot be completed, account access or payments may be delayed or restricted.

Processing Payments and Delivering Services

Personal data is used to process deposits, withdrawals, refunds where applicable, account balances and transaction records. Payment data may be shared with payment providers, banks, fraud prevention tools or regulatory systems where necessary.

Tombola may also use personal data to provide access to games, account tools, promotions, Safe Play settings, customer support and technical functions.

Customer Experience Contact

When a player contacts Customer Experience, Tombola may process the information provided during the conversation. This may include account details, support messages, documents, complaint information, payment questions or technical issue reports.

Support records may be kept to resolve issues, improve service quality, meet legal obligations and protect both the player and the operator.

Marketing

Tombola may use personal data for marketing where the player has provided consent or where marketing is otherwise allowed by law. Marketing may include information about games, promotions, account updates or service features.

The player can change marketing preferences or withdraw consent. Essential service messages, such as account security notices, payment updates, verification requests or legal communications, may still be sent even if marketing is turned off.

Fraud Prevention

Tombola may use personal data to detect and prevent fraud, account misuse, duplicate accounts, payment abuse, identity theft, technical manipulation and other prohibited activity.

Fraud prevention may involve identity checks, payment reviews, login monitoring, transaction analysis and risk assessment. Data may be shared with trusted fraud prevention partners or authorities where necessary.

Safe Play

Safe Play data is used to support responsible gambling and player protection. Tombola may process information about deposit limits, session activity, time-outs, self-exclusion, risk indicators and gambling behaviour.

This data helps Tombola identify potential gambling-related harm, apply safer gambling tools and meet regulatory duties. Safe Play information may also be used to contact players, restrict activity or support protective account measures.

Anti-Money Laundering and Counter-Terrorist Financing

Tombola may process personal and financial data to meet anti-money laundering and counter-terrorist financing obligations. This can include identity checks, source-of-funds checks, transaction monitoring and review of unusual activity.

The player may be asked to provide documents or information if additional due diligence is required. Failure to provide requested information may result in account restrictions or delayed withdrawals.

Service Personalisation and Analysis

Tombola may analyse use of its services to improve website performance, app functionality, game access, support quality and player experience. Personal data may also be used to personalise certain service features where lawful.

Analysis may include account behaviour, device use, promotion engagement, service usage and customer trends. Where possible, aggregated or anonymised data may be used.

Tombola may share personal data within the wider Flutter Group where necessary for lawful business, regulatory, security or service reasons. Personal data may also be shared with selected service providers.

These may include payment processors, identity verification providers, fraud prevention partners, IT providers, analytics tools, customer support systems, professional advisers, regulators or law enforcement authorities.

Third parties should process data only for authorised purposes and under appropriate data protection safeguards.

International Transfers

Personal data may be transferred internationally where Tombola or its service providers operate across different locations. When personal data is transferred outside the UK, Gibraltar or the European Economic Area, appropriate safeguards should be used where required by data protection law.

International transfers may be needed for hosting, payments, verification, fraud prevention, analytics, support or group operations.

Keeping Personal Data Secure

Tombola should apply technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration or disclosure. Security measures may include access controls, encryption, monitoring, staff training and secure processing systems.

Players should also protect their own account access. Passwords should be kept private, public Wi-Fi should be avoided for account activity, and suspicious login activity should be reported to support.

How Long Personal Data Is Kept

Tombola keeps personal data for as long as necessary to provide services, meet legal obligations, handle disputes, prevent fraud, support safer gambling requirements and comply with gambling regulation.

Some data may need to be retained after account closure. This can include verification records, transaction history, safer gambling records, complaint records and information required for anti-money laundering or regulatory purposes.

Player Data Rights

Under data protection law, players may have several rights over their personal data. These rights may apply differently depending on the type of data, reason for processing and legal obligations that apply.

Players may have the right to request:

Access: A copy of personal data held about the player.

Rectification: Correction of inaccurate or incomplete information.

Erasure: Deletion of data where legally possible.

Restriction: Temporary restriction of certain processing.

Portability: Transfer of certain data in a structured format.

Objection: Objection to some forms of processing.

Automated Decision Review: Rights relating to automated decision-making and profiling.

Complaint: The right to complain to a data protection regulator.

Some rights are limited by legal, regulatory, gambling, AML, fraud prevention or safer gambling obligations. Tombola may need to verify identity before responding to a data rights request.

How to Exercise Data Rights

Players can contact Tombola about personal data rights by email or telephone.

Email: [email protected]

Telephone: 0800 298 8873

A request should include the registered account details and a clear explanation of the right being exercised. Tombola may ask for additional information to confirm identity before processing the request.

Complaints to a Regulator

If a player is unhappy with how personal data has been handled, the player may have the right to complain to a data protection supervisory authority.

Tombola should first be contacted directly so the issue can be reviewed. If the response is not satisfactory, the player can use the regulator complaint route available under applicable data protection law.

Cookies and Online Tracking

Tombola may use cookies and similar technologies through its website and app. Cookies can support login, account security, service performance, preferences, analytics and marketing controls.

Players can manage cookie settings through Cookie Management or browser settings. Blocking some cookies may affect website performance or account functions.

Contact

For privacy questions, data rights requests or concerns about personal data, players can contact Tombola through the official support routes.