Privacy Policy
Version: 1.0 | Last Updated: 4 November 2026
1. Introduction
Welcome to Trixino ("we", "us", "our"), operated through trixinocasinouk.com (the "Website"). We are committed to protecting the privacy and personal data of every individual who visits or uses our services. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, with whom we share it, and what rights you hold regarding that information.
This Policy is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By accessing our Website or registering an account, you acknowledge that you have read and understood this document. This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming page, which together form the complete framework governing your relationship with Trixino.
2. Data We Collect
We collect personal data only to the extent necessary to provide our services, fulfil our legal obligations, and protect the integrity of our platform. The categories of personal data we may collect include:
2.1. Identity and Contact Data
- Full name, date of birth, and gender
- Email address, telephone number, and postal address
- Username and account credentials (password stored in encrypted form)
- Copies of government-issued identity documents (e.g., passport, driving licence) and proof of address submitted during the Know Your Customer (KYC) verification process
2.2. Financial Data
- Payment method details (e.g., card type, masked card number, billing address)
- Deposit and withdrawal transaction history
- Bank account or e-wallet identifiers where applicable
- Affordability and financial verification information when required by applicable regulations
2.3. Gaming and Behavioural Data
- Betting and gaming activity, including game selections, stakes placed, and results
- Session durations, login timestamps, and frequency of play
- Responsible gaming interactions such as self-exclusion requests, deposit limits, and reality-check preferences
- Customer support communications including live chat transcripts and email correspondence
2.4. Technical and Device Data
- IP address, browser type and version, operating system, and device identifiers
- Geolocation data derived from your IP address
- Cookie identifiers and similar tracking technology data (see Section 6)
- Referral source and affiliate tracking data
2.5. Data Collected from Third Parties
We may receive supplementary data from identity verification providers, fraud detection agencies, credit reference bureaux, and payment processors to help us validate your identity, assess financial risk, and prevent money laundering or other illicit activity. Any such data is handled with the same level of care as data you provide directly.
3. How We Use Your Data
We use your personal data for clearly defined purposes and do not process it beyond those purposes without an appropriate legal basis. The primary purposes for which we use your data are:
3.1. Account Management and Service Delivery
We use your identity and contact data to create and maintain your account, process deposits and withdrawals, provide access to our gaming library, and communicate important service-related information such as security alerts and policy updates.
3.2. Regulatory Compliance
We are required to process certain personal data to fulfil legal obligations, including age verification (all users must be 18 or over), identity verification (KYC), anti-money laundering (AML) checks, and responsible gaming monitoring. Failure to provide this data may prevent us from offering our services to you.
3.3. Fraud Prevention and Security
We use technical, financial, and behavioural data to detect and prevent fraudulent activity, unauthorised account access, money laundering, and collusion. This processing is essential to maintaining the safety and integrity of the platform for all users.
3.4. Customer Support
When you contact our support team, we process the information you share in order to investigate your query, resolve disputes, and improve our service standards. Support communications may be recorded or logged for quality assurance purposes.
3.5. Marketing Communications
With your explicit consent, we may use your contact details to send you promotional offers, bonus notifications, and news about Trixino. You may withdraw consent at any time by using the unsubscribe link in any marketing email or by contacting us at [email protected]. Withdrawal of marketing consent does not affect service-related communications.
3.6. Product Improvement and Analytics
Aggregated and anonymised data may be used to analyse usage patterns, improve the Website's design and performance, and develop new features. Where individual-level data is used for analytics, we ensure an appropriate legal basis is in place.
4. Legal Bases for Processing
Under UK GDPR, every act of processing personal data must rest on one of the recognised lawful bases set out in Article 6. The table below maps our key processing activities to their corresponding legal basis:
| Processing Activity | Legal Basis |
|---|---|
| Account creation and service delivery | Contract – processing is necessary to perform our agreement with you |
| Age verification, KYC, and AML checks | Legal obligation – we must comply with applicable laws and regulations |
| Fraud detection and platform security | Legitimate interests – protecting our business and other users from harm |
| Responsible gaming monitoring | Legal obligation / Legitimate interests |
| Direct marketing by email or SMS | Consent – freely given, specific, and withdrawable at any time |
| Website analytics and performance measurement | Legitimate interests – improving our services and user experience |
| Responding to legal claims or regulatory enquiries | Legal obligation / Legitimate interests |
Where we rely on legitimate interests, we have balanced our interests against your rights and determined that our interests do not override your fundamental freedoms. You may object to processing carried out on this basis; please refer to Section 9 for how to exercise that right.
5. Data Sharing & Third Parties
We do not sell your personal data to any third party. We share your data only where necessary and with appropriate safeguards in place. Categories of recipients include:
5.1. Service Providers and Data Processors
We engage trusted third-party suppliers — including payment processors, identity verification providers, cloud hosting companies, customer support platforms, and email service providers — who process data on our behalf. All such processors are bound by written data processing agreements that require them to handle your data securely and solely in accordance with our instructions.
5.2. Regulatory and Law Enforcement Bodies
We may disclose personal data to regulatory authorities, law enforcement agencies, courts, or government bodies where we are legally required to do so, or where disclosure is necessary to prevent or detect crime, including fraud and money laundering.
5.3. Responsible Gaming Partners
To fulfil our responsible gaming obligations, we may share limited data with self-exclusion registers and problem gambling support networks as required. This processing is in the vital interest of the individuals concerned and underpins our commitment to safer gambling. For further information, please review our Responsible Gaming page.
5.4. Business Transfers
In the event of a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction. We will notify you in advance of any such transfer and of any changes to this Privacy Policy that result from it.
5.5. Affiliate and Marketing Partners
Where you arrived at our Website via an affiliate link, we may share limited technical data (such as a click ID) with that affiliate to track the referral. We do not share your name, financial data, or gaming history with affiliates.
6. Cookies & Tracking Technologies
Our Website uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device when you visit a website.
6.1. Types of Cookies We Use
- Strictly necessary cookies: Essential for the Website to function. These cannot be disabled as they enable core features such as secure login sessions, account access, and fraud prevention.
- Performance and analytics cookies: Used to collect anonymised data about how visitors interact with the Website, enabling us to improve functionality and user experience.
- Functional cookies: Remember your preferences, such as language settings and display options, to personalise your experience.
- Targeting and advertising cookies: Used, with your consent, to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns.
6.2. Managing Your Cookie Preferences
When you first visit our Website, a cookie consent banner will invite you to accept or customise non-essential cookies. You may amend your preferences at any time by clicking the "Cookie Settings" link in the footer of any page. You can also manage or delete cookies through your browser settings; however, disabling strictly necessary cookies may impair your ability to use certain parts of the Website. For more information on cookie management, please visit www.allaboutcookies.org.
7. Data Security
We take the security of your personal data seriously and have implemented a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure.
7.1. Technical Measures
- TLS/SSL encryption for all data transmitted between your device and our servers
- Encryption at rest for sensitive data fields, including payment details and identity documents
- Firewalls, intrusion detection systems, and regular vulnerability assessments
- Multi-factor authentication (MFA) for access to administrative systems
- Regular penetration testing carried out by independent security specialists
7.2. Organisational Measures
- Role-based access controls ensuring staff can only access data necessary for their duties
- Mandatory data protection training for all personnel who handle personal data
- Documented data breach response procedures in line with UK GDPR obligations
Despite these measures, no electronic transmission over the internet is completely secure. If you suspect that your account has been compromised, please contact us immediately at [email protected]. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it, and we will inform you without undue delay where required.
8. Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention principles are as follows:
- Active account data: Retained for the duration of your account, plus a minimum of five (5) years after account closure to satisfy AML, KYC, and accounting obligations.
- Transaction records: Retained for a minimum of five (5) years from the date of each transaction in line with financial record-keeping requirements.
- Identity verification documents: Retained for the period required by applicable AML legislation, typically five years from the end of the business relationship.
- Marketing data: Retained until you withdraw consent or for three years of marketing inactivity, whichever comes first.
- Support communications: Retained for up to three years from the date of resolution unless a longer period is required for dispute or legal purposes.
At the end of the applicable retention period, data is securely deleted or anonymised so that it can no longer identify you. If you request deletion of your account, we will assess your request against our legal obligations before proceeding.
9. Your Rights
As a data subject under UK GDPR, you have a comprehensive set of rights in relation to your personal data. We are committed to honouring these rights promptly and transparently.
9.1. Right of Access
You have the right to request a copy of the personal data we hold about you, together with information about how and why we process it. This is known as a Subject Access Request (SAR). We will respond within one calendar month of receiving a valid request. Where requests are complex or numerous, we may extend this period by a further two months, in which case we will notify you within the initial month.
9.2. Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Please log in to your account to update standard profile details, or contact our support team for assistance with documents and verification data.
9.3. Right to Erasure ("Right to Be Forgotten")
You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis exists), or where you object to processing and we have no overriding legitimate interests. This right is not absolute — we may retain data where we are required to do so by law, for example to satisfy AML obligations.
9.4. Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances: for example, while you contest the accuracy of data we hold, or while we assess an objection you have raised. During a restriction period, we will store your data but not actively process it.
9.5. Right to Data Portability
Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format (such as CSV or JSON), and to transmit it to another controller where technically feasible.
9.6. Right to Object
You have the right to object at any time to processing that is based on our legitimate interests, including profiling for direct marketing purposes. If you object to direct marketing, we will stop processing your data for that purpose immediately and without question. For other legitimate interests processing, we will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
9.7. Rights in Relation to Automated Decision-Making and Profiling
Where we make decisions about you solely through automated means — including profiling — that produce legal or similarly significant effects, you have the right to request human review of that decision, to express your point of view, and to contest the outcome. We will notify you clearly when any significant automated decision has been made.
9.8. How to Exercise Your Rights
To exercise any of the rights above, please submit a written request to our Data Protection team at [email protected]. We may need to verify your identity before processing your request. All requests are free of charge; however, we reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.
9.9. Right to Lodge a Complaint
If you are dissatisfied with how we have handled your personal data or responded to a rights request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection, at ico.org.uk or by calling 0303 123 1113. We would, however, appreciate the opportunity to address your concerns directly before you approach the ICO.
10. International Data Transfers
Our primary operations and data storage are based in the United Kingdom. However, some of the third-party service providers we work with may process data in countries outside the UK. Where this occurs, we take steps to ensure that an adequate level of protection is afforded to your personal data, as required by UK GDPR.
Appropriate safeguards for international transfers may include:
- Transfers to countries recognised by the UK Secretary of State as providing adequate data protection (adequacy decisions)
- Use of the International Data Transfer Agreement (IDTA) or the UK Addendum to EU Standard Contractual Clauses, approved by the ICO, to contractually bind the recipient to data protection standards equivalent to those in the UK
- Binding corporate rules where transfers occur within a corporate group
You may request further details about the specific safeguards we apply to any particular transfer by contacting us at [email protected].
11. Minors
Our Website and services are strictly intended for individuals who are 18 years of age or older. We do not knowingly collect, process, or retain personal data belonging to persons under the age of 18. As part of our mandatory age verification process, all new registrants must confirm their date of birth and provide supporting identity documentation before being permitted to deposit funds or access real-money gaming.
If we become aware that personal data has been submitted by or on behalf of a minor, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe that their child has registered with us are encouraged to contact us without delay at [email protected]. For tools and guidance to help protect young people from accessing gambling services, please visit our Responsible Gaming page.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or regulatory guidance. When we make material changes, we will notify you by email to the address associated with your account and/or by posting a prominent notice on our Website at least 14 days before the changes take effect. The updated version will always be accessible on this page, identified by a revised version number and effective date at the top of the document.
Your continued use of the Website after the effective date of any changes constitutes acceptance of the updated Privacy Policy. If you do not agree with the revised terms, you should cease using our services and may request account closure. We encourage you to review this Policy periodically to remain informed about how we protect your information.
13. Contact Information
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way we handle your personal data, please do not hesitate to contact us using the details below:
13.1. General Support
- Email: [email protected]
- Website: trixinocasinouk.com
13.2. Data Protection Enquiries
- Email: [email protected]
For data protection matters — including subject access requests, erasure requests, or objections to processing — please contact us at the privacy email above. Mark your correspondence with the subject line "Data Protection Request" to ensure it is directed to the appropriate team without delay. We aim to acknowledge all data protection enquiries within 5 business days and to provide a full response within the statutory one-month period.
13.3. Responsible Gaming Support Organisations
If you are concerned about your gambling habits or those of someone you know, the following free, confidential support services are available in the United Kingdom:
- GamCare — National Gambling Helpline: 0808 8020 133 (24/7, free) | www.gamcare.org.uk
- BeGambleAware — Information, treatment finder, and helpline: 0808 8020 133 | www.begambleaware.org
- Gordon Moody — Residential treatment and intensive support for severe gambling harm | www.gordonmoody.org.uk
- Gamblers Anonymous UK — Peer-support meetings nationwide | www.gamblersanonymous.org.uk
- Gambling Therapy — Free online support and counselling, available internationally | www.gamblingtherapy.org
- Betknowmore UK — Peer support, group sessions, and digital services including specialist support for women | www.betknowmoreuk.org
Further details on the responsible gaming tools available on our platform can be found on our dedicated Responsible Gaming page.