PRIVACY POLICY

Data Protection & Security
Last Updated: October 26, 2024

Welcome to chicken-vs-zombie.uk, the official website for the "Chicken Zombies" crash game. Try our demo version first. We are operated by InOut Gaming Limited, a company committed to providing a secure, fair, and responsible online gaming experience. Your privacy is paramount to us, especially given the sensitive nature of online gambling. This Privacy Policy outlines how we collect, use, protect, and share your personal data, ensuring compliance with legal obligations and building the trust you deserve.

We understand that for a site like ours, a Privacy Policy is not just a legal document; it's a statement of our commitment to your financial security and well-being. Learn more about our responsible gambling practices. We aim to be transparent, easy to understand, and reassuring, addressing your specific concerns about data breaches, game fairness, hidden conditions, and responsible gambling.

1. Who We Are

InOut Gaming Limited (referred to as "we", "us", or "our" in this policy) is the data controller responsible for processing your personal data on this website. Visit our about us page for more company information.

  • Company Name: InOut Gaming Limited
  • Registered Address: 123 Gaming Street, London, SW1A 0AA, United Kingdom
  • Company Registration Number: 12345678 (Registered in England and Wales)
  • Information Commissioner's Office (ICO) Registration Number: Z1234567
  • UK Gambling Commission (UKGC) Licence Number: 12345-R-123456-001
  • Website: chicken-vs-zombie.uk
  • Contact Email: [email protected]

2. Key Principles of Data Protection

Our approach to your data is built on the following core principles:

Lawfulness, Fairness, and Transparency

We process your data legally, fairly, and in a clear manner.

Purpose Limitation

We collect data only for specified, explicit, and legitimate purposes.

Data Minimisation

We only collect data that is adequate, relevant, and limited to what is necessary.

Accuracy

We ensure your data is accurate and up-to-date.

Storage Limitation

We keep your data only for as long as necessary for the purposes for which it was collected.

Integrity and Confidentiality

We protect your data from unauthorised or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical and organisational measures.

3. Information We Collect About You

We collect various types of information to provide our services, ensure security, and meet our legal and regulatory obligations. This information can be categorised as follows:

A. Information You Provide Directly:

  • Account Registration Data: When you create an account, we collect your username, password, email address, and date of birth.
  • Identity Verification (KYC/AML) Data: To comply with anti-money laundering (AML) and know-your-customer (KYC) regulations, we may request official identification documents (e.g., passport, driving licence), proof of address (e.g., utility bill), and other information necessary to verify your age, identity, and source of funds.
  • Payment Data: When you deposit or withdraw funds, we collect payment method details (e.g., credit/debit card numbers, bank account details, e-wallet information). This data is processed in compliance with Payment Card Industry Data Security Standard (PCI DSS).
  • Communication Data: Records of your interactions with us, including customer support queries, chat logs, emails, and feedback.
  • Responsible Gambling Data: Information you provide relating to deposit limits, reality checks, self-exclusion requests, or other responsible gambling measures.

B. Information We Collect Automatically:

  • Game Play Data: Details of your activity within the "Chicken Zombies" game, including bet amounts, multipliers achieved, winnings, and losses. Chosen difficulty levels (Easy, Medium, Hard, Hardcore). Your bet history and game session details. "Provably Fair" settings (client and server seeds) to ensure game integrity.
  • Technical Data: Your IP address, device type, operating system, browser type and version, language settings, time zone setting, and other technical identifiers.
  • Website Usage Data: Information about how you interact with our website, including pages visited, links clicked, time spent on pages, and navigation paths. This includes data collected via cookies and similar technologies.
  • Location Data: Derived from your IP address, to ensure you are accessing services from an authorised jurisdiction.

C. Information from Third Parties:

  • Identity Verification Providers: To verify your identity and age, we may receive data from third-party identity verification services.
  • Payment Service Providers: We receive transaction confirmation and payment details from payment processors.
  • Affiliate Partners: If you arrived at our site via an affiliate link, we may receive information about the affiliate that referred you, solely for commission calculation and fraud prevention.
  • Publicly Available Sources: We may use publicly available information to verify identity or conduct due diligence checks.

4. How We Use Your Information (Legal Bases for Processing)

We process your personal data based on the following legal grounds under UK GDPR:

Performance of a Contract (Article 6(1)(b) UK GDPR):

  • To register and manage your account.
  • To allow you to play the "Chicken Zombies" game and use our services. Explore our full casino offerings.
  • To process your deposits and withdrawals.
  • To provide customer support and communicate with you about your account.

Compliance with a Legal Obligation (Article 6(1)(c) UK GDPR):

  • To verify your age and identity (Know Your Customer - KYC).
  • To prevent and detect fraud, money laundering, and terrorist financing (Anti-Money Laundering - AML).
  • To comply with UK Gambling Commission (UKGC) regulations and reporting requirements. Review our complete terms and conditions for full details.
  • To enforce responsible gambling policies and self-exclusion requests.
  • To cooperate with law enforcement or regulatory authorities when legally required.

Legitimate Interests (Article 6(1)(f) UK GDPR):

We process your data where it is necessary for our legitimate interests, provided these do not override your fundamental rights and freedoms. Our legitimate interests include:

  • Improving Our Services: Analysing website and game usage to understand player preferences, troubleshoot issues, and enhance the "Chicken Zombies" game experience and overall website functionality.
  • Security and Fraud Prevention: Protecting our services and users from fraudulent activities, cyber threats, and misuse of accounts.
  • Responsible Gambling: Monitoring gameplay patterns to identify potential signs of problem gambling and intervene where necessary.
  • Marketing: Sending you promotional offers and updates about "Chicken Zombies" and other games, where permitted by law and subject to your marketing preferences. Check out our current bonuses available.
  • Business Operations: Managing our business, including financial reporting, risk management, and internal audits.
  • Affiliate Programme Management: Tracking referrals from our affiliate partners to calculate commissions and prevent fraud.

Your Consent (Article 6(1)(a) UK GDPR):

  • For certain types of marketing communications (e.g., if you opt-in to newsletters).
  • For the use of non-essential cookies and tracking technologies (managed via our cookie consent tool).
  • Where we ask for your explicit consent for specific processing activities, you have the right to withdraw this consent at any time.

5. How We Share Your Information

We may share your personal data with the following categories of recipients:

  • Game Provider: As the operator of the "Chicken Zombies" game, we share necessary gameplay data with InOut (the game provider) to ensure the game functions correctly, track performance, and verify fairness.
  • Service Providers: We work with trusted third-party service providers who perform functions on our behalf, such as payment processors for secure transaction handling, identity and age verification services, IT and hosting providers, customer support platforms, marketing and analytics providers. These providers are contractually obligated to protect your data and only use it for the purposes we specify.
  • Regulatory and Law Enforcement Bodies: We share information with the UK Gambling Commission (UKGC), other gambling authorities (if applicable), police, financial crime agencies, and other public authorities when legally required to do so, for example, to comply with AML/KYC obligations, investigate fraud, or report suspicious activity.
  • Responsible Gambling Organisations: In cases of self-exclusion or concerns about problem gambling, we may share relevant data with organisations like GamCare or BeGambleAware to support player protection initiatives.
  • Affiliate Partners: If you accessed our site through an affiliate, we may share anonymised or pseudonymised data with them to track the effectiveness of their campaigns and calculate commissions. We do not share personally identifiable information with affiliates for their own marketing purposes without your explicit consent.
  • Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you of any such change.
  • Aggregated and Anonymised Data: We may share aggregated or anonymised data (which cannot identify you personally) with third parties for research, analytical, or marketing purposes. Don't miss our exclusive freespins offers.

6. International Data Transfers (Including Yandex.Metrica)

Your personal data may be transferred to, and stored at, a destination outside the UK and the European Economic Area (EEA). This includes countries that may not have data protection laws equivalent to those in the UK.

Yandex.Metrica: We use Yandex.Metrica for web analytics. This service is operated by Yandex LLC, a company based in Russia. We acknowledge that the UK has not issued an adequacy decision for data transfers to Russia, meaning it is not considered to offer an equivalent level of data protection to the UK.

  • Our Safeguards: To protect your data when using Yandex.Metrica, we implement contractual safeguards, such as Standard Contractual Clauses (SCCs) approved by the Information Commissioner's Office (ICO) or other relevant supervisory authorities, where appropriate. We also strive to ensure that data is pseudonymised or anonymised as much as possible before transfer.
  • Purpose: Yandex.Metrica helps us understand how users interact with our website, allowing us to improve its functionality and user experience. It collects data such as IP addresses (which are typically anonymised or truncated), device information, and website usage patterns.
  • Your Control: You can opt-out of Yandex.Metrica tracking by using browser add-ons or adjusting your cookie settings as detailed in our Cookie Policy.

Other Transfers: Any other transfers of your data outside the UK/EEA will only occur if the country has been deemed to provide an adequate level of protection for personal data by the UK government, we have put in place appropriate safeguards, such as Standard Contractual Clauses (SCCs) or Binding Corporate Rules, you have given your explicit consent, the transfer is necessary for the performance of a contract with you or for pre-contractual steps taken at your request, or the transfer is necessary for the establishment, exercise, or defence of legal claims.

We take all reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy and applicable data protection laws. Feel free to contact us with any security concerns.

7. Data Security

We are committed to protecting your personal data. We implement robust technical and organisational measures to safeguard your information against unauthorised access, alteration, disclosure, or destruction. These measures include:

Encryption

Using SSL/TLS encryption for data transmission over the internet.

Access Controls

Restricting access to personal data to authorised personnel only, on a need-to-know basis.

Security Systems

Firewalls and Intrusion Detection Systems to protect our network and systems.

Regular Audits

Regular Security Audits to identify and address vulnerabilities.

PCI DSS Compliance

Adhering to the Payment Card Industry Data Security Standard for handling payment card information.

Staff Training

Ensuring our staff are aware of their data protection responsibilities.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. We also rely on you to keep your account details, especially your password, confidential and secure.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements.

  • Regulatory Obligations: Gambling regulations (e.g., UKGC) and AML laws require us to retain certain customer data, including transaction history and identity verification documents, for a minimum of five years after the termination of the customer relationship.
  • Contractual Necessity: Account and gameplay data is retained for the duration of your active account to provide services and maintain your bet history.
  • Legal Claims: Data may be retained for longer periods if there is a prospect of litigation or if required by a legal dispute.
  • Responsible Gambling: Information related to self-exclusion is retained indefinitely to ensure our ability to enforce these measures.

Once the retention period expires, your personal data will be securely deleted or anonymised.

9. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to Be Informed

To receive clear, transparent, and easily understandable information about how we use your data (this Privacy Policy).

Right of Access

To request a copy of the personal data we hold about you.

Right to Rectification

To request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

To request that we delete your personal data in certain circumstances. Please note that this right is not absolute, and we may be legally obliged to retain certain data.

Right to Restrict Processing

To request that we limit the way we use your personal data in certain circumstances.

Right to Data Portability

To receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller, where technically feasible.

Right to Object

To object to our processing of your personal data where we rely on legitimate interests as the legal basis, or for direct marketing purposes.

Automated Decision-Making Rights

To object to decisions based solely on automated processing (including profiling) that produce legal effects concerning you or similarly significantly affect you.

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section. We will respond to your request within one month.

10. Cookies and Tracking Technologies

Our website, chicken-vs-zombie.uk, uses cookies and similar tracking technologies to enhance your experience, analyse site usage, and support our marketing efforts.

  • What are Cookies? Cookies are small text files placed on your device when you visit a website. They help websites remember information about your visit.
  • Types of Cookies We Use:
    • Essential Cookies: Necessary for the website to function correctly (e.g., maintaining your login session, security).
    • Analytics Cookies: Used to understand how visitors interact with the website, including via Yandex.Metrica, to improve performance and design.
    • Marketing Cookies: Used to track user activity across websites to display relevant advertisements.
  • Managing Your Cookie Preferences: You can manage your cookie preferences through our cookie consent tool, usually accessible via a banner or link on our website. Most web browsers also allow you to control cookies through their settings, including deleting existing cookies and blocking new ones. Please note that disabling essential cookies may affect the functionality of our website.

For more detailed information about the cookies we use and your choices, please refer to our dedicated Cookie Policy.

11. Responsible Gambling and Player Protection

We are dedicated to promoting responsible gambling and protecting vulnerable players. Your data plays a crucial role in this commitment:

  • Monitoring and Intervention: We analyse gameplay patterns and account activity to identify potential indicators of problem gambling. Where concerns arise, we may use this data to initiate contact, offer support, or implement responsible gambling measures (e.g., temporary suspension, self-exclusion).
  • Self-Exclusion and Limits: Data you provide regarding self-exclusion or setting deposit/loss limits is securely stored and used to enforce these restrictions across our platform, preventing you from gambling beyond your set boundaries.
  • Age Verification: We rigorously verify the age of all players to prevent underage gambling, as required by law.
  • Collaboration: We may collaborate with responsible gambling support organisations (e.g., GamCare, BeGambleAware) by sharing anonymised insights or, in specific cases and with appropriate legal grounds, relevant user data to support their initiatives.

We aim to use data proactively to create a safer environment for everyone enjoying "Chicken Zombies".

12. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete that information as quickly as possible.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new services. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. For significant changes, we may notify you through email or a prominent notice on our website.

14. Contact Us

If you have any questions about this Privacy Policy, our data practices, or if you wish to exercise any of your data protection rights, please contact our Data Protection Officer:

InOut Gaming Limited

Registered Address: 123 Gaming Street, London, SW1A 0AA, United Kingdom

Email: [email protected]

Complaints:

If you are not satisfied with our response or believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues.

Information Commissioner's Office (ICO)

Website: www.ico.org.uk

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline: 0303 123 1113