Privacy Policy

This Privacy Policy explains how Swift Casino ("Swift Casino" operated via svvift.casino) collects, uses, stores, shares and protects your personal data when you visit our website, create an account, place bets, use our games, contact support or otherwise interact with us. It is required under UK data protection law and gambling regulation so that you understand what happens to your information and what rights you have.

This Privacy Policy applies to visitors to svvift.casino, registered players of Swift Casino, individuals who receive our marketing communications, and anyone who contacts us or uses our online services in the United Kingdom.

Effective date: 6 November 2025.

Who We Are

Swift Casino is a trading name operated for UK players as "Swift Casino" via the website svvift.casino.

Controller and operator

Controller: SkillOnNet Ltd, operating the brand Swift Casino at svvift.casino for UK customers.
Registered legal address: Office 1/5297 Level G, Quantum House, 75, Abate Rigord Street, Ta' Xbiex, XBX 1120, Malta.
UK gambling licence: Licence number 39326 issued by the United Kingdom Gambling Commission (UKGC) for online gambling services to UK players (status: active, verified January 2025).
International licence: Licence number MGA/CRP/171/2009 issued by the Malta Gaming Authority (MGA) for certain non-UK operations of SkillOnNet Ltd.

Contact details

General and support contact: email [email protected] (primary support channel, typical response time approximately 14 hours based on January 2025 field tests).
Support channels: live chat (bot first, then human agent) and email [email protected], normally available 06:00 - 00:00 GMT (not 24/7).

Data Protection Officer / data protection contact

Responsible entity: Data Protection Officer (DPO) / Data Protection Team, SkillOnNet Ltd.
Contact for privacy matters: please write to [email protected] with "For the attention of the Data Protection Officer" in the subject line.
Postal contact: Data Protection Officer, SkillOnNet Ltd, Office 1/5297 Level G, Quantum House, 75, Abate Rigord Street, Ta' Xbiex, XBX 1120, Malta.

What Personal Data We Collect

We collect and process only the personal data necessary to operate Swift Casino at svvift.casino safely, lawfully and in line with UK gambling regulation. This includes:

Identification and contact data

Identity details: full name, date of birth, gender, nationality, place of residence, username, unique player ID, copies or details of identity documents (e.g. passport, driving licence, ID card), and proof of address (e.g. utility bill, bank statement).
Contact details: email address (for example, your registered address used with [email protected]), telephone number or mobile number, postal address and preferred language.
Account information: registration details, account status, login history, verification status, responsible gambling limits, communication preferences.

Regulatory and financial data

Payment and transaction data: partial card details (masked where possible), cardholder name, bank account or e-wallet identifiers, payment provider details, deposits, withdrawals, in-game purchases and balance.
KYC/AML data: information required by anti-money laundering (AML) and counter-terrorist financing (CTF) laws and UKGC rules, including occupation, source of funds and source of wealth information, affordability assessments, sanctions and politically exposed person (PEP) checks, and ongoing monitoring results.
Tax and reporting data: records needed for statutory reports to regulators, tax authorities or law-enforcement where required.

Technical and usage data

Technical identifiers: IP address, device identifiers, browser type and version, operating system, time zone setting, mobile network information, approximate location derived from your IP (e.g. country or region).
Log and security data: access times, login attempts, changes to security settings, device fingerprint data used to prevent fraud and multiple-account abuse, error logs and crash reports.
Website and app usage: pages viewed, navigation paths, time spent on pages, clicks on banners or links, language preferences and referring URLs.

Gameplay and behavioural data

Betting and gaming history: games played, stakes, wins and losses, bonuses used, jackpot participation, game session durations, risky patterns and responsible gambling indicators (e.g. rapid session increases, repeated deposit patterns).
Behavioural profiles: risk and affordability profiles derived from your gaming behaviour, used for responsible gambling interventions and AML/CTF purposes.

Communications and marketing data

Communications: copies of emails, live chat transcripts, internal notes of our support teams, and records of complaints or disputes (including with ADR providers such as eCOGRA or IBAS where relevant).
Marketing and preferences: opt-in/opt-out status for email, SMS, push notifications or on-site messages, records of consent and withdrawal of consent, interactions with marketing campaigns.

Cookies and similar technologies

Cookie data: unique cookie IDs, session identifiers, and information stored or read from your browser or device through cookies, pixels, tags and similar technologies.
Analytics and advertising data: aggregated statistics and identifiers that help us measure site performance, detect technical issues and, where consented, deliver tailored offers or advertising.

We do not intentionally collect data from anyone under 18 years of age. We use age-verification and identity checks to comply with UKGC rules and to prevent underage gambling.

Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we must have a lawful basis for processing your personal data. Depending on the specific processing activity, we rely on one or more of the following:

Performance of a contract

Account creation and management: we process your identification, contact, technical and account data to register your Swift Casino account at svvift.casino, allow you to log in and manage your profile.
Providing gambling services: we process gameplay, transaction and technical data to enable you to deposit, place bets, play games, receive bonuses, and withdraw winnings in line with our Terms and Conditions.
Customer support: we use your contact and communications data to answer questions, resolve incidents, manage complaints, and provide information about your account.

Compliance with legal and regulatory obligations

UKGC and MGA rules: we process identity, KYC/AML and transactional data to comply with licence 39326 conditions, MGA requirements where applicable, and related codes of practice (including participation in GAMSTOP and use of approved ADR providers such as eCOGRA and IBAS).
AML/CTF and financial laws: we conduct identity verification, affordability checks, sanctions screening, fraud monitoring and suspicious activity reporting as required by UK AML/CTF legislation and regulatory guidance.
Data protection and consumer laws: we keep certain records of consent, contracts and communications to demonstrate compliance with UK GDPR, PECR and consumer protection laws.

Legitimate interests

Service improvement and analytics: we analyse aggregated technical, usage and gameplay data to improve user experience, site performance, game selection and customer support, while protecting your privacy.
Fraud and security: we use device fingerprinting, IP analysis, behavioural monitoring and internal risk models to prevent fraud, multiple-account abuse, money laundering, bonus misuse and account takeover.
Business operations: we process limited data to manage our business, including reporting to our parent company, managing risk, testing systems and enforcing our terms, where these interests are not overridden by your rights.
Direct marketing to existing customers: in some cases we may rely on our legitimate interests (and PECR "soft opt-in") to send relevant offers about similar products to existing players, subject to easy opt-out.

Consent

Marketing communications: where required by law, we send email, SMS or push marketing only if you have given valid consent. You may withdraw this consent at any time via your account settings or the unsubscribe link in each message.
Non-essential cookies and tracking: we place or read analytics and advertising cookies, pixels or similar technologies on your device only with your consent obtained through our cookie banner or settings centre.
Special categories of data: if, in the context of responsible gambling, you voluntarily share health-related information (for example, about problem gambling), we may process this only with your explicit consent or where otherwise permitted by law to protect your vital interests.

Where we rely on consent, you are free to refuse or to withdraw it at any time, and this will not affect the lawfulness of processing based on consent before its withdrawal. In some cases, refusal of certain processing may affect our ability to provide specific features (such as personalised offers).

Purpose of Processing

We use your personal data for clearly defined purposes, strictly limited to what is necessary for Swift Casino at svvift.casino and our legal obligations.

Providing and managing our services

Operating your account: registering and authenticating you, managing balances, processing deposits and withdrawals, and providing access to games and features.
Game operation and fairness: enabling gameplay, recording bets, wins and losses, preventing technical errors, and supporting independent testing and certification of games where applicable.
Customer care: handling your requests via live chat and email, recording communications to improve support quality and ensure a consistent service.

Safety, compliance and risk management

Regulatory compliance: fulfilling requirements of the UK Gambling Commission, Malta Gaming Authority and other relevant authorities, including account monitoring, reporting and record-keeping.
Anti-fraud and AML/CTF: detecting and preventing fraud, money laundering, terrorist financing, bonus abuse, account takeover and other unlawful or abusive behaviour.
Responsible gambling: monitoring behaviour and applying limits, reality checks, cool-off periods, self-exclusion (including through GAMSTOP) and other interventions to promote safer gambling.

Improvement, personalisation and marketing

Service optimisation: analysing technical performance and user behaviour (in aggregated or pseudonymised form where possible) to enhance our website, games, offers and user experience.
Personalised content: tailoring in-site messages, account pages and offers to your preferences and playing patterns, within responsible gambling and legal limits.
Marketing and promotions: sending you offers, bonuses, newsletters or surveys by email, SMS or other channels where permitted by law and your preferences.

Legal, business and administrative purposes

Dispute resolution: managing complaints and disputes, including through ADR bodies such as eCOGRA and IBAS, and maintaining evidence to defend or establish legal claims.
Business records: maintaining accounting, tax and corporate records, and generating anonymised statistics about our operations and market performance.
Security and integrity: ensuring the security of our systems, investigating incidents and enforcing our Terms and Conditions and other policies.

Disclosure & Sharing

We treat your personal data as confidential. We only share it with carefully selected third parties where this is necessary for the purposes described above, where required by law or with your consent.

Group companies and service providers

SkillOnNet group entities: other companies within the SkillOnNet Ltd group may access your data for centralised customer support, risk management, internal reporting, IT hosting and compliance functions, subject to strict access controls.
Payment and banking partners: banks, card schemes, payment processors, e-wallets and other financial institutions that process your deposits and withdrawals.
KYC/AML providers: identity verification, sanctions/PEP screening, credit-reference and affordability-assessment providers that assist us in complying with AML/CTF and responsible gambling obligations.
Technical and security partners: hosting providers, cloud infrastructure services, security and anti-fraud vendors (including device fingerprint and IP intelligence services), and providers of SSL/TLS certificates such as DigiCert.

Marketing, analytics and cookies partners

Analytics providers: third-party analytics services that help us measure site performance and usage trends using cookies or similar technologies, usually in aggregated or pseudonymised form.
Advertising and affiliate networks: marketing networks, affiliate partners and campaign platforms that promote Swift Casino at svvift.casino, but only where necessary and in compliance with your marketing and cookie preferences.

Regulators, authorities and dispute bodies

Regulators: the UK Gambling Commission, Malta Gaming Authority and other national or international regulators, where required for licensing, reporting, AML/CTF or responsible gambling purposes.
Data protection and law-enforcement authorities: the UK Information Commissioner's Office (ICO), other supervisory authorities, the police, tax authorities and other public bodies when required by law or to protect our rights or the rights of others.
Alternative Dispute Resolution (ADR): recognised ADR bodies such as eCOGRA and the Independent Betting Adjudication Service (IBAS) when we are resolving gambling disputes at your request.

Corporate transactions and anonymised data

Business transfers: in the event of a merger, acquisition, reorganisation or sale of assets, your data may be disclosed to prospective or actual buyers or their advisers, subject to confidentiality obligations.
Aggregated and anonymised information: we may share statistics that do not identify you (for example, aggregated betting volumes or general market trends).

We do not sell your personal data in the sense of transferring it to third parties for their own independent marketing purposes without your consent.

International Transfers

Because SkillOnNet Ltd operates internationally, your personal data may be transferred outside the United Kingdom. We always ensure that any such transfers comply with UK data protection law and that appropriate safeguards are in place.

Transfers within the UK and EEA

UK and Malta: your data may be processed in the UK and in Malta (our legal seat and a member of the European Economic Area) for licensing, support, compliance and operational purposes.
Other EEA countries: certain service providers may be located in the EEA. The UK currently recognises the EEA as providing an adequate level of protection for personal data.

Transfers to other countries

Non-EEA/UK service providers: if we use processors or partners in countries that do not have an "adequacy decision" from the UK government, we implement appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA), the International Data Transfer Addendum to the EU Standard Contractual Clauses, or other contractual protections approved by the ICO.
Additional safeguards: where appropriate, we apply technical and organisational measures such as encryption, access controls and data minimisation to reduce risks associated with international transfers.

You may contact us for more information about the safeguards we use for specific international transfers.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy and to meet legal, regulatory and reporting requirements, particularly those imposed by the UK Gambling Commission and AML/CTF legislation.

Retention periods by category

Category of data	Typical retention period
Account and identification data (KYC documents, account details)	Up to 5 years after account closure or last activity, to comply with AML/CTF and gambling regulations.
Transaction and gameplay records	5-7 years after the relevant transaction or game session, to meet accounting, tax and regulatory requirements and to resolve disputes.
Marketing and consent records	As long as you remain subscribed or until you withdraw consent, plus a short period (up to 2 years) to demonstrate compliance with your choices.
Customer support communications and complaints	Up to 6 years after resolution of the issue or dispute, to defend or establish legal claims and for quality monitoring.
Technical logs and security data	From a few months up to 5 years, depending on the nature of the logs and security requirements.

Deletion and anonymisation

Deletion or anonymisation: when data is no longer needed, we securely delete it or irreversibly anonymise it so that it can no longer be linked to you.
Legal holds: if data is needed for ongoing investigations, disputes or regulatory requests, we may retain it longer than the periods above, but only for as long as necessary.
User requests: where you exercise your right to deletion, we will erase or anonymise your data unless we must retain certain information to comply with legal obligations or to establish, exercise or defend legal claims.

Your Rights

Depending on your location and subject to legal conditions, you have a range of rights in relation to your personal data under UK GDPR, and where applicable, the EU GDPR and relevant Mexican privacy laws (such as the Federal Law on Protection of Personal Data Held by Private Parties). We will honour these rights to the fullest extent required by the laws that apply to our processing of your data.

Core data protection rights

Right of access: you can request confirmation of whether we process your personal data and obtain a copy of that data together with information about how we use it.
Right to rectification: you can request correction of inaccurate data and completion of incomplete data (for example, updating your contact details or address).
Right to erasure: you can request that we delete your personal data in certain circumstances (for example, where it is no longer needed, or you withdraw consent and there is no other legal basis). This right may be limited where we must retain data to comply with gambling, AML/CTF or other legal obligations.
Right to restriction: you can ask us to restrict processing of your data in certain cases, such as while we verify its accuracy or when you contest our legitimate interest basis.
Right to object: you can object at any time to processing based on our legitimate interests, including profiling, and we will stop unless we have compelling legitimate grounds that override your interests or we need the data for legal claims.
Right to object to marketing: you can object to, or opt out of, direct marketing at any time, and we will stop sending marketing communications.
Right to data portability: in certain circumstances, you can receive personal data you provided to us in a structured, commonly used and machine-readable format and request that we transmit it to another controller where technically feasible.
Rights relating to automated decision-making: where we use automated decisions that significantly affect you (for example, certain risk assessments), you may request human review, express your point of view and contest the decision, as required by applicable law.

Consent and Mexican law alignment

Withdrawal of consent: when we rely on your consent (for example, for marketing or certain cookies), you may withdraw it at any time through your account settings or by following the instructions in our messages.
Mexican rights (where applicable): if Mexican data protection law applies to you, you may have additional ARCO rights (access, rectification, cancellation and opposition) and specific consent requirements. We will facilitate these rights in a manner consistent with both UK/EU GDPR standards and Mexican law where relevant.

How to exercise your rights

Submit a request: contact us at [email protected] with sufficient information to identify you and your account, and clearly describe the right you wish to exercise (for example, access, rectification or erasure).
Identity verification: we may ask for additional information or documentation (such as a copy of an ID document) to verify your identity, particularly for sensitive rights like access or erasure.
Response times: we aim to respond without undue delay and in any event within 1 month (30 days) of receiving your complete request. For complex or numerous requests, this period may be extended by up to 2 additional months, in which case we will inform you.
Fees: we handle rights requests free of charge. If a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request, as permitted by law.

Exercising your rights will not affect your ability to access our services, although in some cases certain functions may no longer be available if your data is restricted or deleted (for example, you may not be able to continue using your account once it is erased or if we can no longer meet our regulatory obligations).

Cookies & Tracking Technologies

We use cookies and similar technologies on svvift.casino to make Swift Casino work, to secure your account and to improve our services. Some cookies are essential for the site to function, while others are optional and used only with your consent.

Types of cookies

Session cookies: temporary cookies that exist only while your browser is open and are deleted when you close it. They help us remember your selections during a session and keep you logged in.
Persistent cookies: cookies stored on your device for a defined period. They help us remember your preferences and recognise you when you return.
First-party cookies: cookies set directly by svvift.casino to operate Swift Casino.
Third-party cookies: cookies set by third-party providers, such as analytics or advertising partners, when you use our site.

Cookie purposes

Strictly necessary cookies: required for the site to function and for you to log in, navigate and use essential features (for example, maintaining your session and enabling payment pages). These cannot be switched off through our banner.
Functional cookies: help remember your preferences (such as language, region or display settings) and enhance your user experience.
Analytics cookies: provide aggregated statistics about how visitors use our site, which pages are visited most and how users move around the site, so we can improve performance and usability.
Advertising and marketing cookies: used, where permitted, to deliver relevant offers and promotions to you, measure the effectiveness of campaigns and prevent showing the same promotion repeatedly.

Managing cookies

Cookie banner and settings: on your first visit, we present a cookie banner that allows you to accept or reject non-essential cookies. You can change your choices at any time via our cookie settings panel (where available).
Browser settings: most browsers allow you to block, delete or disable cookies in their settings. However, blocking certain cookies may affect the functionality of svvift.casino and your ability to use Swift Casino.
Do Not Track: while we respect privacy-enhancing technologies, our site may not currently respond to all "Do Not Track" signals in a uniform way due to the absence of a standard approach.

Data Security

We apply robust technical and organisational measures to protect your personal data and player funds, in line with industry standards and UKGC requirements. Nevertheless, no system can be guaranteed 100% secure, and you also play an important role in keeping your account safe.

Technical safeguards

Encryption in transit: data transmitted between your device and svvift.casino is protected using TLS 1.2 or higher with 128-bit SSL encryption, verified by trusted certificate authorities such as DigiCert.
Encryption and security at rest: sensitive data is stored using encryption, hashing and other security mechanisms, with strict segregation of environments and backups.
Access controls: personal data is accessible only to authorised personnel on a need-to-know basis, using unique credentials, role-based permissions and logging of access.
Authentication measures: we use strong authentication processes, which may include SMS verification during registration or sensitive account changes, in line with UKGC expectations.

Organisational and procedural measures

Security governance: we maintain internal policies and procedures covering information security, data protection, incident response and acceptable use, and review them regularly.
Staff training: employees and contractors with access to personal data receive appropriate training on data protection, confidentiality and security practices.
Testing and audits: our systems and controls are subject to technical testing, vulnerability assessments and independent audits where appropriate, following recognised security standards (such as ISO 27001-aligned practices or SOC-type controls where applicable).
Incident response: we have processes to detect, investigate and respond to suspected personal data breaches. Where required by law, we will notify the relevant supervisory authority and affected individuals without undue delay.

Player funds and regulatory protections

Funds segregation: consistent with UKGC requirements, player funds are held separately from business funds at a "Medium" protection level. This classification refers to fund protection and is separate from our handling of personal data.
Your responsibilities: you should keep your login details confidential, use strong passwords, log out after each session and notify us immediately if you suspect your account has been compromised.

Complaints & Contacts

If you have questions, concerns or complaints about how we handle your personal data, we encourage you to contact us first so we can try to resolve the issue directly.

How to contact us

Data protection contact (DPO): email [email protected] with "For the attention of the Data Protection Officer" in the subject line.
Live chat: accessible via svvift.casino, typically available from 06:00 - 00:00 GMT. Initial responses may be automated before a human agent joins (usually within a few minutes based on January 2025 tests).
Postal address: Data Protection Officer, SkillOnNet Ltd, Office 1/5297 Level G, Quantum House, 75, Abate Rigord Street, Ta' Xbiex, XBX 1120, Malta.

Please include your name, contact details, account username (if relevant) and a clear description of your concern. We aim to respond to privacy-related complaints within 30 days, although complex matters may take longer; in such cases we will keep you informed.

Escalation to supervisory authorities

United Kingdom - Information Commissioner's Office (ICO): if you are in the UK and are not satisfied with our response, you have the right to lodge a complaint with the ICO: https://ico.org.uk or by using the contact details provided on that website.
European Union/EEA: if EU GDPR applies to you (for example, in relation to services provided under our MGA licence), you may complain to your local supervisory authority or to the Office of the Information and Data Protection Commissioner (IDPC) in Malta: https://idpc.org.mt.
Mexico: where Mexican data protection law applies, you may also complain to the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI): see https://www.inai.org.mx for contact details and procedures.

Gambling-related disputes

Internal complaints: if your complaint relates to gambling transactions, please contact our support team first. We will follow our internal complaints procedure and aim to resolve the issue promptly.
ADR providers: if you remain dissatisfied with the outcome of a gambling dispute, you may escalate it to an approved Alternative Dispute Resolution provider such as eCOGRA or IBAS, in line with our Terms and Conditions and UKGC requirements.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, regulatory guidance or technical developments. When we do, we will take appropriate steps to inform you.

How we will notify you

On-site notices: we may display a prominent notice or banner on svvift.casino informing you of significant changes.
Email notifications: where changes are material or where required by law, we may send you an email to the address associated with your Swift Casino account.
Account dashboard: we may provide alerts or messages within your account area summarising key updates.

Effective date, versioning and advance notice

Last updated: November 2025.
Version control: we maintain internal records of previous versions of this Privacy Policy and the dates on which they were in effect.
Advance notice for significant changes: where we make substantial changes that affect your rights or the way we process your data, we will, where reasonably possible, give you at least 30 days' notice before the new version takes effect. If you do not agree to the changes, you may close your account and stop using our services.

Summary of material changes (where applicable)

Clarified the role of SkillOnNet Ltd as the controller for Swift Casino at svvift.casino and updated regulatory references to UKGC licence 39326 and MGA licence MGA/CRP/171/2009.
Expanded descriptions of KYC/AML processing, responsible gambling monitoring and the use of technical security measures such as TLS 1.2+ and DigiCert-verified SSL.
Aligned user rights and complaints mechanisms with current UK GDPR standards and, where relevant, EU and Mexican data protection frameworks as of 2025.