Last updated: 13 July 2026
Introduction
This Privacy Policy explains how BOOK OF THE FALLEN GAMING LTD ("we", "us", or "our") collects, uses, stores, and protects personal data when you visit or use Book of the Fallen Social Casino at bookofthefallen-spiel.com. We are committed to transparency and to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR). By using our social casino platform, you acknowledge that you have read and understood this policy. Book of the Fallen Social Casino is a free social casino for entertainment only — no real money gambling takes place on our platform.
Who We Are
The data controller responsible for your personal information is BOOK OF THE FALLEN GAMING LTD, a company registered in the United Kingdom. Our registered office is at Westfield London, Ariel Way, London W12 7GF, United Kingdom. You can contact us by telephone at +44 20 8358 0000 or via our Contact page. We operate Book of the Fallen Social Casino as a social casino entertainment platform where all in-game currency is fictitious and designed exclusively for recreational play.
Information We Collect
We may collect the following categories of personal data: identity information (such as your name and username); contact details (email address and telephone number if provided); account credentials (encrypted passwords and login history); technical data (IP address, browser type, device identifiers, operating system, and referral URLs); usage data (pages visited, games played, session duration, and interaction with platform features); communication records (messages sent through our contact forms or support channels); and marketing preferences where applicable. We do not collect payment card details for gambling purposes, as our platform does not facilitate real money wagering.
How We Collect Data
We collect personal data through several methods. Direct interactions occur when you register an account, complete a contact form, subscribe to our newsletter, or communicate with our support team. Automated technologies including cookies, server logs, and analytics tools collect technical and usage data when you browse our website. We may also receive limited information from third-party authentication providers if you choose to sign in through external services, subject to your consent and the provider's own privacy terms.
Legal Basis for Processing
Under UK GDPR, we process your personal data only where we have a lawful basis. Contractual necessity applies when processing is required to provide our social casino services, manage your account, and fulfil subscription arrangements. Legitimate interests cover platform security, fraud prevention, service improvement, and anonymised analytics. Consent is obtained for non-essential cookies, marketing communications, and optional features. Legal obligation applies where we must retain records to comply with UK law. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
How We Use Your Information
We use your personal data to create and manage your social casino account, deliver free fun games and Fallen Coins features, process subscription requests, respond to enquiries, send service-related notifications, maintain platform security, detect and prevent abuse, analyse usage patterns to improve our games and user experience, comply with legal obligations including age verification requirements, and — where you have opted in — send promotional communications about new games and events. We will never use your data to facilitate real money gambling, as our platform operates strictly as a social casino.
Data Sharing and Third Parties
We do not sell your personal data. We may share information with trusted service providers who assist us in hosting, analytics, email delivery, customer support, and payment processing for subscriptions. These processors act on our instructions and are bound by data processing agreements compliant with UK GDPR. We may disclose data to regulators, law enforcement, or courts when required by law. In the event of a corporate restructuring, your data may be transferred to a successor entity subject to equivalent privacy protections. All third-party sharing is limited to what is necessary for the stated purpose.
International Data Transfers
Your data is primarily processed within the United Kingdom and the European Economic Area. Where we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements, adequacy decisions, or Standard Contractual Clauses approved by the Information Commissioner's Office (ICO). You may request details of the safeguards applied to any specific transfer by contacting us using the details provided in this policy.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Account data is kept for the duration of your active account and for a reasonable period thereafter to handle disputes or legal claims. Technical logs are typically retained for up to twelve months unless a security incident requires longer retention. Marketing consent records are kept until you withdraw consent plus any period required by law. When data is no longer needed, we securely delete or anonymise it in accordance with our data retention schedule.
Your Rights Under UK GDPR
As a data subject in the United Kingdom, you have the right to access the personal data we hold about you, request correction of inaccurate data, request erasure in certain circumstances, restrict processing, object to processing based on legitimate interests, request data portability where processing is automated and based on consent or contract, and withdraw consent at any time. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. To exercise any of these rights, please contact us via our Contact page or call +44 20 8358 0000. We will respond within one month of receiving a valid request.
Children's Privacy
Book of the Fallen Social Casino is intended exclusively for persons aged eighteen (18) years or older. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a minor has created an account or provided personal information, we will take immediate steps to delete that data and terminate the account. Parents and guardians who believe their child has accessed our platform should contact us promptly so we can take appropriate action.
Security Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit using TLS/SSL, secure password hashing, access controls limiting employee access to personal data on a need-to-know basis, regular security assessments, and incident response procedures. While we strive to protect your information, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to ensure proper functionality, remember your preferences, and analyse site performance. For detailed information about the cookies we use, their purposes, and how to manage your preferences, please read our Cookie Policy. Essential cookies are necessary for the platform to operate and cannot be disabled. Non-essential cookies require your consent, which you can provide or withdraw through our cookie banner or browser settings.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will post the updated policy on this page with a revised "Last updated" date and, where appropriate, notify registered users by email or through a prominent notice on our platform. We encourage you to review this policy periodically to stay informed about how we protect your data.
Contact Us About Privacy
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact BOOK OF THE FALLEN GAMING LTD at Westfield London, Ariel Way, London W12 7GF, United Kingdom, by phone at +44 20 8358 0000, or through our Contact page. For matters relating to responsible play and player wellbeing, we also encourage you to visit BeGambleAware and GamCare. We aim to respond to all privacy enquiries within thirty days.