CrashPirate Privacy Notice for UK Players

Who We Are, Why We Use Your Data and How Long We Keep It

The data controller is the operator of CrashPirate, registered in Costa Rica under a data processing registration and reachable at [email protected]. We use your personal data under the UK GDPR and the Data Protection Act 2018, and each purpose relies on one lawful basis.

Purpose	Data involved	Lawful basis
Opening and running your account	Email address, password, full name, date of birth	Contract
Processing deposits and withdrawals	Payment method, amounts, transaction history	Contract
Identity checks and anti-money laundering	Passport or UK photocard driving licence, proof of address	Legal obligation
Fraud prevention and account security	Session history, device and log data	Legitimate interests
Non-essential cookies and analytics	Cookie identifiers	Consent

We keep account data while your account is open. After closure we retain only what anti-money laundering and tax record-keeping rules require, together with records needed to handle a complaint, and then delete or anonymise it.

How We Use Cookies and Analytics

Cookies keep you signed in between visits, remember your cookie choice and let us measure how the site is used. Essential cookies are needed for sign-in and security and are set without asking. Anything else is governed by the Privacy and Electronic Communications Regulations (PECR), which means we ask for your consent through the cookie banner first. You can refuse or withdraw consent from the banner or in your browser settings, and refusing analytics does not limit your access to games.

What We Collect and Where It Is Processed

At registration we collect your email address, password, date of birth and full name. When you deposit or withdraw we record the method (Visa, Mastercard, bank transfer, Bitcoin, Ethereum, Litecoin, Dogecoin or USDT), the amount and the time. If we ask for verification, we hold the identity document and proof of address you upload. Technical data such as session history and device logs is collected automatically.

Because the operator is registered in Costa Rica, your data is processed outside the United Kingdom. We protect transfers with contractual safeguards, restrict access to staff who need it, and encrypt data in transit with 256-bit SSL. Card details are not stored on our servers and go directly to the payment provider gateway.

We share data only where a service cannot run without it. Outside those cases, your personal and financial information is not passed to third parties.

Recipient	What they receive	Why
Payment processors for Visa, Mastercard and bank transfer	Amount, payment method, payment details you enter	To take deposits and pay withdrawals
Cryptocurrency networks (Bitcoin, Ethereum, Litecoin, Dogecoin, USDT)	Wallet address and amount	To send and receive crypto payments
Identity verification services	Documents you upload	To complete KYC checks
Game studios (BGaming, Pragmatic Play, Hacksaw Gaming, Endorphina, NetGame, Belatra, Gamzix, 3 Oaks Gaming, InOut)	No name, email or payment data	Games run inside our lobby

Your Rights Over Your Data and How We Answer Them

You can ask for a copy of the data we hold, have inaccurate data corrected, ask for it to be erased, restrict or object to certain processing, and receive your data in a portable format. Erasure is limited where the law requires us to keep records, such as anti-money laundering checks. Send the request from your registered email address so we can confirm it is you, and we may ask for a further identity document if we cannot.

Where You Can Take a Complaint About Us

If you think we have handled your data unlawfully, you have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator. We would welcome the chance to fix the problem first, so please email us before you escalate, but you do not have to.

How to Reach Us About Your Data

Send access requests, corrections, erasure requests and questions about this notice to [email protected].