This Privacy Policy explains how PrizePounce Ltd (“PrizePounce”, “we”, “us”, “our”) collects, uses, stores and shares your personal information when you visit prizepounce.com or use our instant-win games and related services (the “Services”). We process your data in accordance with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
PrizePounce Ltd is incorporated in England & Wales. We hold UK Remote Lottery Operating Licence GC 05938472 issued by the Gambling Commission.
• Account details – name, date of birth, postal address, email, phone
• Identity & age-verification documents – passport, driving licence, proof of address
• Payment data – card / e-wallet tokens (processed by PCI-DSS-certified providers)
• Gameplay & transaction logs – wagers, wins, losses, bonus use, session times
• Device & usage data – IP address, browser type, pages visited, cookies, marketing
preferences
We process your personal information to:
• create and administer your account
• verify age and identity (legal obligation)
• take and settle wagers and pay prizes (contractual necessity)
• detect fraud, money-laundering and self-exclusion breaches (legal obligation & legitimate interests)
• personalise content and bonuses (legitimate interests)
• send service messages; with consent, send promotions
• comply with licensing, tax and regulatory reporting duties
Our primary legal bases are: contract performance, legal obligation, and legitimate interests. Where we rely on consent (e.g. email marketing), you may withdraw it at any time via your account settings or by clicking “unsubscribe” in any promotional email.
We use first-party cookies for core site functionality and security, and third-party analytics cookies (Google Analytics 4) to understand site performance. You can manage cookie preferences in our Cookie Banner or through your browser settings. Full details appear in our separate Cookie Policy.
We disclose data only to:
• payment processors and banking partners
• identity-verification and anti-fraud vendors
• UK Gambling Commission, HMRC, law-enforcement or courts when legally required
• marketing platforms (Mailchimp & Meta Ads) – only with your consent
All suppliers are bound by strict data-processing agreements.
Where partners operate outside the UK/EEA, we use UK approved Standard Contractual Clauses or an ICO adequacy decision to safeguard your information.
We keep account, transaction and KYC records for 5 years after account closure, as required by the UK Money Laundering Regulations and our licence conditions, after which they are securely deleted or anonymised.
Under UK GDPR you may request:
• access to the personal data we hold about you
• correction of inaccurate data
• erasure (where no legal basis overrides)
• restriction or objection to certain processing
• data portability
To exercise any right, email privacy@prizepounce.com.
If you believe we have not handled your request properly, you may complain to the
ICO (ico.org.uk).
We employ TLS 1.3 encryption, network firewalls, multi-factor admin access, routine penetration testing and annual ISO 27001 audits to protect your data.
You must be 18 years or older to use our Services. We cross-check your identity against third-party databases and respect self-exclusion via GAMSTOP.
We may update this Privacy Policy from time to time. Material changes will be notified by email or in-account message. The revision date at the top indicates the latest version.
Questions or concerns? Contact our Data Protection Officer:
Email: privacy@prizepounce.com