This Privacy Policy explains how Galleon Entertainment Ltd (“we”, “us”, “our”) collects, uses, stores, and protects the personal information of players who use Galleon’s web platform. These practices apply in full to all players residing in the United Kingdom. By creating an account and using our platform, you agree to the handling of your data as described below.

What We Collect and Why

When you register an account, we collect personal information such as your full name, date of birth, email address, postal address, and contact details. This information is necessary to verify your identity, satisfy our obligations under anti-money laundering requirements, and maintain a secure and compliant player environment.

When you make deposits or withdrawals, we also process financial data relating to your chosen payment method. This may include card details or digital wallet identifiers. We collect this data solely to process your transactions accurately and to meet regulatory standards governing financial activity. We do not store full payment card numbers on our servers beyond what is strictly required for transaction processing.

We also gather technical data as you navigate our platform, including IP addresses, browser type, device identifiers, and session logs. This information helps us maintain the security, stability, and functionality of the platform, detect unusual activity, and prevent fraudulent access to your account.

How We Protect and Share Your Data

Your data is protected using 256-bit SSL encryption across all connections between your browser and our servers. Personal and financial records are held on secure servers with strictly controlled internal access — only personnel with a legitimate operational need may access your information, and all such staff are bound by confidentiality obligations.

We do not sell your personal data to third parties. We may share specific information with external parties only in limited and defined circumstances. These include licensed payment processors who handle your transactions, identity verification services used to confirm your details during account opening, and regulatory or law enforcement authorities where we are legally required to disclose information. Any third party with whom we share data is required to handle it in a manner consistent with applicable data protection standards.

As a UK-based player, your personal data is handled in accordance with applicable data protection legislation. If data is transferred outside of the United Kingdom for processing purposes, we take steps to ensure that equivalent protections are in place.

You have the right to request access to the personal data we hold about you, to ask for corrections where information is inaccurate, and to request the deletion of your data where no legal obligation requires us to retain it. To exercise any of these rights, please contact our support team through the contact channels available on the platform. We will respond to your request within a reasonable timeframe and in accordance with our legal obligations.

We retain your personal data for as long as your account remains active. Following account closure or a period of inactivity, we retain records only for as long as required by our licensing authority, the Anjouan Gaming Authority, and applicable legal retention obligations. Once that period has elapsed, your data is securely deleted or anonymised.

If we make material changes to this Privacy Policy, we will notify you through the platform prior to those changes taking effect. We encourage you to review this page periodically so that you remain informed about how your data is handled.