Privacy Policy

1. Introduction

1.1. About This Policy

Welcome to BigDrago ("we", "us", "our", or "the Platform"), accessible at bigdrago.bet. We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access or use our website, services, and related features (collectively, the "Services").

This document should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy, which together govern your relationship with BigDrago.

1.2. Scope

This Privacy Policy applies to all users of BigDrago, including visitors who browse the Platform without registering, registered account holders, and individuals who contact us through any communication channel. By using our Services, you acknowledge that you have read and understood this Privacy Policy.

1.3. Our Commitment

We process personal data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We act as the data controller in respect of the personal data you provide to us or that we collect about you through your use of the Services.

2. Data We Collect

2.1. Information You Provide Directly

When you register an account, make a deposit, or interact with our Services, we collect the following categories of personal data:

• Identity Data: Full name, date of birth, gender, username.
• Contact Data: Email address, phone number, postal address.
• Verification Data: Copies of government-issued identification (e.g., passport, driving licence), proof of address (e.g., utility bill, bank statement), and selfie/photo for identity verification purposes.
• Financial Data: Payment method details (e.g., card number — masked), bank account information, transaction history, deposit and withdrawal records.
• Account Preferences: Responsible gaming limits, communication preferences, and promotional opt-ins.
• Communications Data: Records of correspondence via email, live chat, or support tickets.

2.2. Data Collected Automatically

When you access the Platform, we automatically collect technical and behavioural data, including:

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution.
• Usage Data: Pages visited, session duration, clickstream data, game activity, wagering behaviour, and login timestamps.
• Location Data: General geolocation inferred from your IP address to ensure compliance with geographic restrictions.
• Cookie Data: Information stored via cookies and similar tracking technologies (see Section 6 for full details).

2.3. Data from Third Parties

We may receive personal data about you from trusted third-party sources, including:

• Identity Verification Providers: KYC (Know Your Customer) and AML (Anti-Money Laundering) service providers who assist in verifying your identity.
• Payment Processors: Information necessary to complete or verify financial transactions.
• Fraud Prevention Agencies: Data used to detect, prevent, and investigate fraudulent activity.
• Analytics Providers: Aggregated or anonymised data regarding Platform usage.
• Self-Exclusion Registers: Data from services such as GamStop, confirming whether you have voluntarily self-excluded from gambling services.

3. How We Use Your Data

3.1. Primary Purposes

We use your personal data for the following primary purposes:

• To create, verify, and manage your account on the Platform.
• To process deposits, withdrawals, and other financial transactions in your preferred currency (GBP — British Pounds Sterling).
• To provide access to our gaming products, including slots, live casino, table games, and sports betting features.
• To conduct mandatory identity, age, and source-of-funds verification checks in compliance with regulatory obligations.
• To prevent, detect, and investigate fraud, money laundering, and other unlawful activities.
• To enforce our Terms & Conditions.

3.2. Responsible Gaming

In support of our commitment set out in the Responsible Gaming Policy, we use your data to monitor gameplay patterns, apply self-imposed limits, identify signs of problem gambling, and fulfil obligations arising from responsible gaming legislation. For more detail on how data supports safer gambling, please refer to that policy.

3.3. Marketing & Communications

Where you have given us your explicit consent, we may use your contact details to:

• Send promotional offers, bonuses, and personalised recommendations.
• Deliver newsletters and product updates via email or SMS.
• Present targeted advertisements on third-party platforms.

You may withdraw consent or manage your marketing preferences at any time from within your account settings or by contacting support@bigdrago.bet.

3.4. Analytics & Platform Improvement

We use aggregated and pseudonymised data to analyse user behaviour, optimise the user experience, develop new features, and conduct internal performance reporting. This data is used in a manner that does not identify you individually.

4. Legal Bases for Processing

4.1. Overview

We process your personal data only where we have a valid legal basis under the UK GDPR. The following table outlines the legal bases we rely upon:

4.2. Legitimate Interests

Where we rely on legitimate interests as our legal basis, we have balanced our interests against your rights and freedoms. You may object to processing based on legitimate interests at any time (see Section 9 — Your Rights).

4.3. Special Categories of Data

We do not intentionally collect special category data (such as health, biometric, or racial data) unless strictly required by law or where you have provided explicit consent. Data relating to problem gambling status may be treated with equivalent sensitivity and handled accordingly.

5. Data Sharing & Third Parties

5.1. Who We Share Data With

We do not sell your personal data to third parties. We may share your data only with trusted partners and service providers for the purposes outlined in this policy:

• Payment Service Providers: Including Visa, Mastercard, PayPal, Skrill, Neteller, Apple Pay, Google Pay, Paysafecard, bank transfer operators, and other processors relevant to GB players — solely to process your financial transactions.
• KYC / Identity Verification Partners: Third-party providers who perform identity and document verification on our behalf.
• AML & Fraud Prevention Services: Agencies that screen transactions and account activity against fraud and money laundering indicators.
• Game Software Providers: Third-party game studios whose software powers the games on our Platform, which may collect limited gameplay data under their own privacy practices.
• Technology & Hosting Providers: Cloud infrastructure, software-as-a-service, and IT support partners who process data on our behalf under strict data processing agreements.
• Analytics Providers: Tools such as web analytics services that help us understand Platform performance (data is pseudonymised where possible).
• Regulatory & Law Enforcement Authorities: We may disclose data to regulatory bodies, law enforcement agencies, or courts where required by law or to protect our legal rights.
• Self-Exclusion Schemes: Data is shared with GamStop and similar multi-operator self-exclusion programmes as required by responsible gaming obligations.

5.2. Data Processing Agreements

All third-party processors who access your personal data are required to enter into a Data Processing Agreement (DPA) with us, ensuring they handle your data in accordance with applicable data protection law and our instructions.

5.3. Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to a successor entity. We will notify you of any such change and ensure your data remains protected under equivalent standards.

6. Cookies & Tracking Technologies

6.1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help the site recognise your device on return visits and enable certain functionality. We also use related technologies including web beacons, pixel tags, and local storage objects.

6.2. Types of Cookies We Use

6.3. Managing Cookies

When you first visit BigDrago, you will be presented with a cookie consent banner allowing you to accept or customise your cookie preferences. You may withdraw or amend your consent at any time via the cookie settings link in our website footer.

Additionally, most browsers allow you to control cookies through their settings. Please be aware that disabling strictly necessary cookies may impair the functionality of our Platform. For further guidance, visit aboutcookies.org.

7. Data Security

7.1. Security Measures

We take the security of your personal data seriously and implement a range of technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction. These include:

• Encryption: All data transmitted between your browser and our servers is protected using TLS (Transport Layer Security) encryption (HTTPS).
• Access Controls: Strict role-based access controls ensure that only authorised personnel can access personal data on a need-to-know basis.
• Password Security: User account passwords are stored using industry-standard one-way hashing algorithms.
• Two-Factor Authentication (2FA): Available to users to add an additional layer of security to their accounts.
• Penetration Testing: We conduct regular security assessments and vulnerability testing of our systems.
• Data Minimisation: We collect only the minimum data necessary for each processing purpose.
• Incident Response: We maintain a documented data breach response procedure, including notification to the Information Commissioner's Office (ICO) within 72 hours of becoming aware of a qualifying breach.

7.2. Your Responsibilities

You are responsible for maintaining the confidentiality of your account credentials. Do not share your password with anyone. If you suspect unauthorised access to your account, please contact us immediately at support@bigdrago.bet.

8. Data Retention

8.1. Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are as follows:

8.2. Post-Retention Deletion

Upon expiry of the relevant retention period, your personal data will be securely deleted, anonymised, or pseudonymised so that it can no longer be attributed to you. We maintain a formal data retention schedule reviewed at least annually.

9. Your Rights

9.1. Rights Under UK GDPR

As a data subject located in the United Kingdom, you have the following rights in relation to your personal data:

• Right of Access (Art. 15): You have the right to request a copy of the personal data we hold about you, along with information about how it is used. This is known as a Subject Access Request (SAR).
• Right to Rectification (Art. 16): You have the right to request correction of inaccurate or incomplete personal data without undue delay.
• Right to Erasure (Art. 17): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing (Art. 18): You may ask us to pause the processing of your data in certain circumstances (e.g., while accuracy is contested).
• Right to Data Portability (Art. 20): Where processing is based on consent or contract, you may request your data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21): You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Rights Related to Automated Decision-Making (Art. 22): You have the right not to be subject to a decision based solely on automated processing that produces significant legal or similarly significant effects, without human review.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

9.2. How to Exercise Your Rights

To exercise any of the rights listed above, please submit a written request to our Data Protection team at privacy@bigdrago.bet. We will respond within 30 calendar days of receipt. We may request additional information to verify your identity before processing your request.

9.3. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters:

10. International Data Transfers

10.1. Transfer Outside the UK

Some of our service providers and technology partners are located outside the United Kingdom. Where personal data is transferred to countries that do not offer an equivalent level of data protection to the UK, we ensure appropriate safeguards are in place, including:

• UK Adequacy Regulations: Transfers to countries recognised by the UK Government as providing adequate data protection.
• International Data Transfer Agreements (IDTAs): Contracts approved by the ICO that impose equivalent data protection obligations on the recipient.
• Binding Corporate Rules (BCRs): Applicable where transfers occur within a group of companies that have adopted approved BCRs.
• Derogations: In limited cases, transfers may occur based on your explicit consent or where the transfer is necessary for the performance of your contract with us.

10.2. Further Information

For further details about the safeguards in place for international transfers, or to obtain copies of relevant transfer agreements, please contact privacy@bigdrago.bet.

11. Minors

11.1. Minimum Age Requirement

BigDrago's Services are strictly intended for individuals who are 18 years of age or older. We do not knowingly collect, process, or retain personal data relating to persons under the age of 18. As part of our registration and verification processes, we verify the age of all users in accordance with applicable regulations.

11.2. Discovery of Under-Age Data

If we become aware that we have inadvertently collected personal data from a person under the age of 18, we will take immediate steps to delete that data, close the relevant account, and reimburse any funds as required. We encourage parents and guardians to make use of parental control tools and filtering software to prevent minors from accessing gambling services.

For more information on our age verification processes and safer gambling tools, please refer to our Responsible Gaming Policy.

12. Changes to This Policy

12.1. Policy Updates

We reserve the right to amend or update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or new Services offered on the Platform. All changes will be published on this page with an updated Version Number and Effective Date.

12.2. Notification of Material Changes

Where changes are material — meaning they significantly affect your rights or the way we process your data — we will notify you via email (at the address registered to your account) and/or by displaying a prominent notice on the Platform at least 14 days prior to the change taking effect. Your continued use of the Services after the effective date constitutes your acceptance of the updated policy.

12.3. Previous Versions

Previous versions of this Privacy Policy are available on request by contacting privacy@bigdrago.bet.

13. Contact Information

13.1. General Support

For general questions about your account, Services, or this Privacy Policy, please contact our Customer Support team:

13.2. Data Protection & Privacy Enquiries

For matters specifically related to data protection, privacy rights, Subject Access Requests, or data breach notifications, please contact our Data Protection team directly:

13.3. Related Policies

This Privacy Policy is part of a suite of legal documents governing your use of BigDrago. We encourage you to review the following:

• Terms & Conditions — The rules governing your use of the Platform, including accounts, bonuses, and gameplay.
• Responsible Gaming Policy — Information about safer gambling tools, self-exclusion, and support resources.
• Privacy Policy — This document (current page).

© 2026 BigDrago | bigdrago.bet — All rights reserved. This document was last updated on 21 October 2026 (Version 1.0). Gambling can be addictive. Please play responsibly. 18+ only.