Privacy Policy

1. Who is responsible

The controller of your personal data is ProgressPlay Limited, company number C 58305, registered office Soho St. Julian's, Office 2B, Punchbowl Centre, Elia Zammit Street, St. Julian's, STJ 3154, Malta, head office Kolonakiou 26, Office No.18, Agios Athanasios, Limassol, 4103, Cyprus. We operate Fruity King under Gambling Commission account number 39335.

This policy applies to the Site, the casino, the sportsbook, bingo, your account and its services (verification, deposits, withdrawals, limits and self-exclusion), and every communication between you and us by email, contact form or phone.

For data protection requests, write to privacy@fruityking.co. For anything else, including complaints about the service, use the Contact & Complaints page.

2. What we collect

Information you give us directly:

• Identity and contact details: name, date of birth, email address, home address and postcode.
• Verification documents: copies of ID, proof of address and, where needed, payment and source of funds documents.
• Financial data: deposit and withdrawal records, partial card details and e-wallet account identifiers. Full card numbers are handled by our payment provider, not stored by us.
• Gambling activity: bets, game rounds, bingo tickets, stakes, results and balances.
• Safer gambling data: limits, time-outs, self-exclusions and our notes of any safer gambling conversations.
• Technical data: IP address, device and browser type, login times and the cookie and local-storage identifiers described in the Cookie Policy.
• Correspondence: messages you send us and our replies.

3. Information received from other sources

Not everything we hold comes from you. We may receive identity-verification results, fraud-risk information, payment-status information, self-exclusion matching results and information relevant to regulatory or anti-money-laundering checks from identity-verification providers, credit reference agencies, fraud-prevention agencies, payment providers, GAMSTOP, game and sportsbook providers, and public sources where permitted by law.

In practice that means: a match or no-match result and a confidence score from the electronic identity check; a chargeback, refund or declined-payment notice from a payment provider; a yes or no answer from GAMSTOP; game-round and bet-settlement records from the provider that ran the game or market; and, where we need to check the source of larger sums, information from the credit reference agency named at the time.

4. When you must provide data

We need certain identity, age, contact, verification and payment information to open and operate your account, meet our legal and regulatory obligations, prevent fraud and provide gambling services. Providing it is a condition of the contract between us and, for age, identity and anti-money-laundering checks, a legal requirement on us. If you do not provide the required information, or we cannot verify it, we may be unable to register you, accept deposits or bets, pay withdrawals, or continue to provide our services.

This applies in particular to proof of identity and address, source-of-funds information when we ask for it, the GAMSTOP check, and proof that a payment method belongs to you.

5. Why we use it

If you choose to provide health information, or we process information that is special-category personal data, we will process it only where a separate condition under data protection law applies, such as your explicit consent or a substantial public interest condition under the Data Protection Act 2018, with appropriate safeguards. We do not treat your gambling activity as health data in itself.

6. Automated checks and decisions

We use automated systems to help verify identity, detect fraud, identify self-exclusion matches, assess technical and geographic risks (for example an IP address outside Great Britain or the use of a VPN), screen payments, and identify potential gambling-related harm. These systems use your identity and contact details, device and location data, payment data and gambling activity. They may flag or restrict an account, payment, bet or withdrawal for review, and a self-exclusion match or a failed age check blocks registration automatically.

Where a decision is based solely on automated processing and has a legal or similarly significant effect on you, you may ask for human intervention, express your point of view and challenge the decision by contacting privacy@fruityking.co or support@fruityking.co, subject to legal and regulatory restrictions: where the law prevents us from disclosing the reason for a decision, for example in connection with an anti-money-laundering report, we will tell you only that a review has taken place.

7. Who we share it with

We share only what each party needs:

• payment providers and banks, to process deposits and withdrawals, and their fraud tools;
• identity verification, credit reference and fraud prevention agencies, and anti-money-laundering screening providers;
• game and sportsbook providers, which receive an account identifier, not your name;
• GAMSTOP, to check self-exclusion;
• customer support, email and CRM providers used to answer your messages;
• IT, hosting, cloud storage and security providers;
• the Gambling Commission, sports integrity bodies, the police and other authorities where the law requires it;
• IBAS, if you refer a dispute to them;
• our auditors, legal and accounting advisers, where they need customer records to advise us;
• other companies in our corporate group that provide licensing, compliance or technical services to us.

We do not use analytics, advertising or affiliate-attribution providers that receive your personal data. If that changes, we will name them here and in the Cookie Policy, and ask for consent where the law requires it, before they receive anything.

Where service providers process personal data for us, they act as processors under a written contract and may use the data only on our documented instructions, unless they are required to process it independently by law. We do not sell your personal data.

8. International transfers

Some providers process data outside the United Kingdom. Where personal data is transferred outside the United Kingdom, we use an adequacy regulation, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with any supplementary safeguards required by law. You can request further information about relevant safeguards, including which one applies to a particular transfer and a copy or summary of it where we are able to provide one, by contacting privacy@fruityking.co.

9. How long we keep it

• Account, identity and verification records, transactions and anti-money-laundering records, and betting and gameplay records: we keep these for at least five years after account closure where required by anti-money-laundering, gambling or tax rules, and for longer if a complaint, dispute or investigation is still open.
• Self-exclusion and safer-gambling records: we retain self-exclusion and safer-gambling restriction records for the duration of the restriction and for any additional period required to prevent re-registration, meet regulatory duties or handle complaints. Our notes of safer gambling interactions are kept with the account records above.
• Marketing consent and suppression records: we retain marketing-consent records and suppression records for as long as necessary to demonstrate compliance and honour your opt-out, which means the suppression entry outlives the account.
• Messages from people who are not customers: kept for 12 months after the last reply, then deleted.
• Technical and security logs: we retain security logs for a limited period based on security, fraud-prevention and legal needs, normally no more than 12 months.
• Cookies and local storage: the lifetimes are listed in the Cookie Policy.

10. Security

We use technical and organisational measures designed to protect personal data, including encryption in transit, access controls, role-based permissions, access logging, secure storage and procedures for managing security incidents. Passwords are stored as one-way hashes, and verification documents are stored outside the public web directory and are only accessible to the staff who need to check them. Staff who handle customer data are trained in data protection and confidentiality.

11. Your rights

Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or, in certain circumstances, transfer it to another organisation. The right to data portability applies only to data you provided to us that we process by automated means on the basis of your consent or our contract. You can withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before you withdrew it, and you can ask for human intervention in any solely automated decision described in section 6.

Some rights are limited where we must keep data by law, for example anti-money-laundering records and self-exclusion records.

Email privacy@fruityking.co. We normally respond within one month. If a request is complex or you make several requests, we may extend this period as permitted by law and will tell you why. We may ask for information to verify your identity before acting on a request.

12. Marketing

We only send marketing if you have ticked the marketing box, and never while you are self-excluded or on a time-out. We currently market by email only; if we add SMS, push or phone marketing we will ask for your consent for each channel first. You can switch it off in My Account → Profile or with the unsubscribe link in any message.

Your marketing choice does not affect the gambling service itself: declining marketing never limits what you can play, deposit or withdraw. Withdrawing marketing consent does not affect service, security, regulatory or responsible-gambling communications that we need to send about your account, such as verification requests, withdrawal confirmations, safer gambling and self-exclusion messages, complaint responses and legal notices. Withdrawing consent does not affect the lawfulness of marketing sent before you withdrew it.

13. Changes and complaints

We will post changes to this policy on this page, update the dates at the top, and tell you by email if they are significant. If you are unhappy with how we use your data, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.