About this privacy policy
This document explains how personal information is collected, processed, protected, disclosed and securely destroyed. The policy applies to all online services offered to users in the United Kingdom. Use of personal data is based on the user’s consent, as well as other lawful grounds described below. Admiral Shark sets out how information is handled throughout its lifecycle to uphold privacy and security.
Information we collect and how it is protected
Personal data is collected to operate accounts, deliver services and meet legal duties.
What we collect
- Identity details: name, date of birth, nationality.
- Contact details: email address, telephone number, residential address.
- Account and verification records: usernames, KYC documentation, age checks, source of funds/wealth assessments.
- Payment and transaction information: deposits, withdrawals and billing history. Card details are processed by payment providers; full card numbers are not stored.
- Technical and usage data: IP address, device identifiers, browser type, cookies, session logs, game and sportsbook activity, responsible gambling settings.
- Communications: support chats, emails and call recordings.
Why we collect it
- To provide and manage the user account and services.
- To verify identity and meet Gambling Commission and anti-money laundering requirements.
- To process payments, investigate disputes and prevent fraud.
- To support safer gambling and account security.
- To maintain and improve websites and apps through analytics and testing.
How information is protected
- Encryption in transit (TLS) and at rest where appropriate.
- Role-based access controls and multi-factor authentication.
- Vendor due diligence and contractual data protection obligations.
- Staff training, confidentiality commitments and background checks where relevant.
- Security monitoring, logging, regular testing and independent assessments.
- Incident response procedures and legally required breach notifications.
Your rights under UK law
- Access, rectification, erasure, restriction, portability and objection.
- Withdraw consent at any time where consent is the legal basis.
- Complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.
How to exercise rights
- Use in-account tools where available or contact Support through the Help Centre. Verification of identity may be required.
Compliance
- Processing follows the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations and applicable Gambling Commission rules.
How your data is used
Processing is lawful, fair and transparent. Personal information is used only for specified purposes.
Purposes and legal bases
- Account set-up and service delivery: to register, authenticate and operate the account (contract).
- Payments and withdrawals: to process transactions and keep records (contract/legal obligation).
- KYC, age verification, AML and sanctions screening: to meet legal and regulatory duties (legal obligation).
- Safer gambling: to apply limits, carry out affordability and risk checks, and provide interventions (legal obligation/legitimate interests).
- Customer support and dispute resolution: to respond to requests and manage complaints (legitimate interests/contract).
- Personalisation and experience: to remember preferences and tailor content (legitimate interests/consent for certain cookies).
- Analytics and service improvement: to measure performance and fix issues (legitimate interests).
- Security and fraud prevention: to monitor suspicious activity and protect systems (legitimate interests/legal obligation).
- Regulatory reporting and audits: to comply with Gambling Commission and financial reporting duties (legal obligation).
- Marketing communications: only where permitted and subject to user choices (consent or soft opt-in in line with PECR).
Users can object to processing based on legitimate interests and can withdraw consent at any time without affecting prior lawful processing.
Managing your information and making requests
Users can access, update or delete personal information subject to legal limits.
How to access and update
- Review and edit profile details in the account area where available.
- If changes are restricted, contact Support through the Help Centre for assistance.
Requesting a copy of your data (DSAR)
- Submit a request through the Help Centre or the contact method provided on the website.
- A response will be provided within one month, extendable by up to two months for complex requests.
- Identity verification may be required.
Correction and deletion
- Inaccurate data will be corrected or completed on request.
- Erasure can be requested, subject to retention duties. Records needed for AML, tax, regulatory or dispute purposes may be kept for the required period.
Retention
- Core account, transaction and KYC records are generally retained for at least five years after account closure or the end of the business relationship, or longer where required by law.
Security checks and payments
- By using Admiral Shark, the user consents to security checks and to payment data being processed by authorised payment providers for verification, fraud prevention and transaction processing.
Under-18s and age restrictions
The services are for persons aged 18 and over. Accounts for minors are not permitted.
- The operator cannot verify age without appropriate documents and may request evidence during checks.
- If a minor’s information is discovered, the account will be closed and personal data deleted where permitted by law.
- Parents or guardians may contact Support to request deletion of a minor’s information.
- Age verification and safer gambling controls are applied to protect users and meet UK requirements.
Transfers of data outside the UK
Personal data may be processed in other countries where service providers, payment processors, game suppliers or support teams operate. Use of the site constitutes consent to such transfers where consent is required. Confidentiality and security obligations apply to all partners.
Safeguards
- Transfers rely on UK adequacy regulations where available.
- Where not available, the UK International Data Transfer Agreement or approved Standard Contractual Clauses are used, together with transfer risk assessments and additional technical and organisational measures.
- Only the minimum information necessary is shared for the stated purpose.
Disclaimer applying to this policy
A legal disclaimer may clarify or limit how certain rules apply. The disclaimer takes effect when the user accepts this privacy policy by signature, electronic acceptance or accession through the account.
- Nothing in this document reduces statutory rights under data protection law.
- If any term is invalid under applicable law, the remaining terms continue to apply.
- The operator may update this policy to reflect changes in law, services or processing activities.
Cookies and similar technologies
Cookies are small files placed on a device by websites to store or retrieve information. They are used for statistics, behaviour analysis, personalisation and site improvement. Unless a shorter period applies, cookies are kept for up to 1 year.
Types and controls
- Strictly necessary cookies support core functions and cannot be turned off.
- Performance and analytics cookies help measure usage and improve services.
- Functionality cookies remember preferences.
- Advertising cookies may tailor content where permitted.
Users can manage choices through the cookie tool and browser settings. Blocking some cookies may affect the user experience.
Your acceptance of these terms
Use of the site constitutes full acceptance of this privacy policy. The current version on the website prevails over any prior version. If you do not agree, you should stop using the services and adjust privacy or cookie settings as needed. Where required by law, explicit consent will be requested before processing.
Disclosure to third parties
Personal information may be shared where necessary for the purposes in this policy, to comply with law or to protect rights.
Who may receive information
- Payment processors and banks.
- Identity, KYC, AML and age verification providers.
- Game and sportsbook suppliers delivering content.
- Analytics, security, cloud hosting and IT support providers.
- Communications and customer support platforms.
- Professional advisers, auditors and insurers.
- Courts, regulators, law enforcement and alternative dispute resolution bodies.
Notes
- Categories or lists of providers are made available on the website. If not listed, users will be informed of the purpose and scope where required.
- Providing personal data constitutes consent to sharing where consent is the legal basis. In other cases, sharing relies on contract, legal obligation or legitimate interests.
- Recipients must protect confidentiality and use information only for agreed purposes.
Links to external websites
The site may contain links to other websites that have their own privacy policies. The operator is not responsible for how those websites collect or use information. Users should review the privacy information on any external site before providing personal data.
Updated: