We respect your privacy and are committed to protecting the personal data you provide when you use TuffPuff Casino services. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the choices and rights you have under applicable data protection laws, including the GDPR where it applies. If you have questions or wish to exercise your rights, contact us.
We act as the data controller for the personal data we collect in connection with use of our website and services. We process personal data in accordance with applicable data protection laws. You can contact us about privacy matters.
When you register an account or log in, we collect and process certain personal data to create and maintain your account and to make services available to you. Typical data we collect at registration and login includes:
We may require identity verification in certain circumstances to comply with legal obligations or our internal controls. Verification data is processed only for those purposes and handled securely.
To deliver interactive content and an engaging experience, we share limited personal data with service partners, such as game providers and technical vendors, where necessary for them to provide their services. Shared data is limited to what is required for service delivery and typically consists of account identifiers and anonymized gameplay data. We require partners to protect personal data to the same standards we apply.
We use certain personal data to present and administer promotional offers and communications. This may include:
We rely on your consent where required and on our legitimate interests where appropriate (for example, to send non‑promotional account messages). You can opt out of marketing communications at any time by using the unsubscribe option in messages or writing to email.
If you participate in any loyalty or VIP program, we process data related to your account activity and program status to manage tiers, rewards and communications. This processing is carried out on the basis of performance of our services and our legitimate interests in providing and improving the program. You may request information about how your program data is used or ask that we stop using it for marketing purposes.
We process account activity and related records necessary to manage your account and comply with legal and regulatory obligations. Such processing is limited to the data required for those purposes and is handled securely. We do not use this policy to detail operational billing or method specifics.
We process personal data to administer and enforce our terms, to prevent and detect fraud, and to protect the security and integrity of our services. This includes investigating suspicious activity, resolving disputes and cooperating with legal authorities when required. The lawful bases for this processing include our legitimate interests and compliance with legal obligations.
When you access our services from a mobile device or browser, we collect technical and device data to provide and optimise the user experience. This may include:
We use cookies and similar technologies to support functionality, remember preferences and analyse usage. You may control cookie settings through your browser or device settings. For choices about certain tracking and analytics, please use the cookie or tracking controls presented to you when you first use the site and your browser privacy settings.
We apply administrative, technical and physical safeguards to protect personal data against unauthorized access, loss, misuse or alteration. Measures include encryption of data in transit, access controls, logging, and staff training on data protection. We regularly review our security practices and respond to incidents in line with applicable law.
We use activity logs and aggregated analytics to monitor fairness and integrity of services. Where profiling or automated processes are used for risk assessment or fraud prevention, you have the rights described below to request human review where required by law.
We process personal data to enable responsible use of services, including any tools or controls we offer such as activity monitoring, time-based controls, or account restrictions. We may also process information you share with us about wellbeing or support needs to provide appropriate assistance. Processing of any special category information is carried out only with explicit consent or where otherwise permitted by law and with appropriate safeguards.
Why we process your data
Potential risks and how we reduce them
Data retention
We retain personal data for as long as is necessary to provide services, to meet legal or regulatory obligations, to resolve disputes, and to enforce our terms. Retention periods depend on the type of data and the purpose for processing; where practicable we review and delete or anonymise data that is no longer needed.
International transfers
Personal data may be processed or stored in locations outside your country. Where transfers outside the European Economic Area or other jurisdictions with similar rules occur, we implement safeguards such as standard contractual clauses, rely on adequacy decisions, or other lawful mechanisms to protect your data.
Your rights
Subject to applicable law, you have rights regarding your personal data, including:
To exercise your rights or ask questions about privacy, contact us at [email protected]. We will respond in accordance with applicable legal timeframes and may require additional information to verify your identity before fulfilling sensitive requests.
We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make material changes, we will provide notice through the site or by email where appropriate. Continued use of our services after changes constitutes acceptance of the updated policy.
If you have privacy questions, wish to exercise your rights, or need further information, contact us.
