32red Privacy Policy
This page summarises the operator’s published privacy rules; the operator’s own Privacy Notice and Cookie Policy remain the authoritative texts. For any player who treats their bankroll with care, understanding how 32red handles personal data is as much a part of smart money management as reading bonus terms — data shared is a cost, so it pays to know exactly what is collected, why, and for how long.
Information We Collect
32red collects personal data across clearly defined categories, each tied to a documented purpose. The operator’s published Privacy Notice and Cookie Policy set out the scope of collection, and the sections below break that scope into its main areas so players can see precisely what leaves their hands when they open and use an account.
Personal Data Collected During Registration
During sign-up and verification, 32red gathers identity and verification data required to meet legal obligations under anti-money laundering (AML) and age verification rules. This includes photographic ID such as a passport or driving licence. The verification step is not optional: it is the operator’s mechanism for confirming age and identity before funds move, which is the same arithmetic that protects every player’s account from misuse. More on this: 32red sign up bonus.
Gameplay and Transaction Data
Beyond identity documents, 32red collects data generated by account operation and service provision — the records needed to run gameplay, process deposits and withdrawals, and keep an auditable trail of account activity. This collection is grouped under the operator’s stated purpose of account operation and service provision, meaning every data point in this category exists to keep the account functioning rather than to pad a marketing file.
Cookies and Tracking Technologies
The operator’s Cookie Policy governs tracking on the 32red site, sitting alongside the Privacy Notice as part of the published framework. Cookies feed into the operator’s business improvement and analytics purpose, and consent-based tracking can be refused by exercising the right to withdraw consent described further below.
How We Use Your Information
32red documents five purposes for processing player data: legal and regulatory compliance, responsible gambling and player safety, account operation and service provision, marketing and personalisation, and business improvement and analytics. Each purpose maps to a distinct type of processing, so a player can see which of their data points serve compliance and which serve promotion.
Account Management and Verification
Identity and verification data power account operation and legal compliance: AML checks, age verification, and the day-to-day running of deposits, gameplay and withdrawals. This is the non-negotiable layer of processing — without it the account cannot legally exist.
Service Improvement
Under the business improvement and analytics purpose, 32red analyses how the service performs and where it can be refined. The operator also applies processing to responsible gambling and player safety, using account data to support safer-play obligations. Related player protections are covered on this site’s dedicated page: 32red responsible gambling.
Marketing Communications
Marketing and personalisation is a stated, separate purpose. Because consent-based processing sits behind it, players who judge that promotional targeting has negative expected value for them can withdraw consent at any point — a right listed explicitly in the operator’s framework and detailed in the rights section below.
Data Protection and Security
The operator’s published policy framework includes dedicated provisions on security measures, the data controller, and data retention, together with named recipients of player data. The key structural facts are set out below.
Data Controller and Named Recipients
The operator identifies a data controller responsible for player data and names two recipients with whom data is shared: GB Group (GBG) and Risepoint Limited (formerly Trannel). Sharing with these parties sits inside the documented processing purposes rather than open-ended third-party distribution.
Security and Retention
The operator maintains dedicated security measures and a defined data retention policy as part of its published privacy framework. A data protection officer contact is also provided, giving players a direct channel for privacy questions and requests. The wider contractual framework around the account is summarised on: 32red terms and conditions.
Your Rights
32red lists seven player rights in its privacy framework: access, rectification, erasure, restriction, portability, object, and withdraw consent. Each right is exercised through the operator, and the DPO contact is the documented route for raising a request.
- Access — obtain confirmation of, and a copy of, the personal data held about the account.
- Rectification — correct inaccurate or incomplete personal data.
- Erasure — request deletion of personal data where the legal grounds for holding it no longer apply.
- Restriction — limit how the operator processes data in defined circumstances.
- Portability — receive personal data in a transferable format.
- Object — object to processing, including processing for marketing and personalisation.
- Withdraw consent — revoke consent-based processing at any time without affecting processing already carried out.
From a value perspective, the object and withdraw-consent rights are the two that directly control marketing exposure, while erasure and restriction govern how long a data footprint persists after play stops. More background on how this independent review site assesses the operator appears on: about 32red.
Frequently Asked Questions about 32red
Is 32red legal in United Kingdom?
32red processes player data under legal and regulatory compliance obligations, including anti-money laundering and age verification rules, which require photographic ID such as a passport or driving licence. Identity and verification data is collected specifically to meet these legal obligations, and the operator’s framework includes dedicated provisions for responsible gambling and player safety.
How do I create a 32red account?
Account creation at 32red involves providing identity and verification data, including photographic ID such as a passport or driving licence, to satisfy AML and age verification requirements. That data is then processed for account operation and service provision, and the operator names GB Group (GBG) and Risepoint Limited (formerly Trannel) as data recipients involved in this processing.
Players who have weighed the operator’s data practices against their own privacy threshold can proceed to the 32red site with a clear picture of what is collected and why.