This Privacy Policy explains how BankID Sweden collects, uses, stores and protects your personal information when you access our online casino platform. We are committed to handling personal data responsibly and in accordance with the General Data Protection Regulation (GDPR) and applicable Swedish data protection legislation. Please read this policy carefully before registering an account or using our services.
BankID Sweden provides an online casino experience for players in Sweden. The legal entity operating the platform acts as the data controller for personal information collected through our services, determining how and why that information is processed.
Online gambling operators offering services to the Swedish market must hold the appropriate licence from the Swedish Gambling Authority (Spelinspektionen). Information about the operator's legal name, registered address, licence status and data protection contact should be available through the platform's official documentation.
If you have questions about how your personal data is handled, please contact our customer support team using the contact details published on the website.
BankID Sweden collects personal information at different stages of your interaction with the platform. The type of information depends on the services you use and the legal requirements that apply.
This may include:
BankID Sweden collects only personal data that is relevant and necessary for specified purposes, subject to applicable legal requirements.
Your personal data may be processed for the following purposes:
You can opt out of direct marketing communications at any time using the unsubscribe option where available or by updating your communication preferences. This does not affect essential account notices or communications that we must send for legal or security reasons.
BankID Sweden processes personal data only where a valid legal basis applies under the GDPR. Depending on the purpose, this may include:
Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
BankID Sweden does not sell personal data to third parties. However, we may disclose information to trusted recipients when necessary to provide our services, meet legal obligations or protect our users and platform.
These recipients may include:
Where third-party providers process personal data on our behalf, appropriate contractual and security measures must be in place. Information may also be disclosed where necessary to establish, exercise or defend legal claims.
BankID Sweden may use cookies and similar technologies to keep the platform secure, remember your preferences and understand how visitors use our website. Cookies are small files stored on your device when you visit a website.
The categories may include:
Non-essential cookies will be used in accordance with applicable consent requirements. You can manage cookie preferences through the website's cookie settings and, where available, your browser settings. Disabling essential cookies may prevent certain features from working correctly.
BankID Sweden retains personal data only for as long as necessary for the purposes for which it was collected, taking into account applicable legal and regulatory requirements.
The retention period depends on the type of information and the reason it is processed. Account details, identity verification records, transaction histories and compliance documents may need to be retained after an account is closed to meet statutory obligations, investigate suspicious activity or resolve disputes.
We do not apply a single retention period to every category of personal data. Once information is no longer required and there is no valid legal reason to retain it, it will be securely deleted or anonymised in accordance with our retention procedures.
BankID Sweden uses technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.
These measures may include encrypted connections, access controls, authentication procedures, secure data storage and regular reviews of information security practices. Access to personal data is limited to authorised personnel and service providers who need it for legitimate business purposes.
No online system can guarantee absolute security. If a personal data breach occurs, we will assess the incident and notify the relevant supervisory authority and affected individuals where required by the GDPR and applicable law.
Your personal data may be processed by service providers located outside Sweden or the European Economic Area (EEA). Where personal data is transferred to a country outside the EEA, BankID Sweden will ensure that the transfer complies with applicable GDPR requirements.
Depending on the circumstances, safeguards may include a European Commission adequacy decision, approved Standard Contractual Clauses or other legally recognised transfer mechanisms. Additional safeguards will be considered where necessary to ensure an appropriate level of data protection.
You may contact us for further information about international transfers and the safeguards applicable to your personal data.
Under the GDPR, you have several rights concerning your personal data. These rights are subject to certain conditions and legal exceptions.
To exercise your rights, contact us using the official contact details published on the BankID Sweden website. We will handle valid requests in accordance with the GDPR's response deadlines, generally within one month, subject to permitted extensions where a request is complex or numerous requests have been submitted.
If you believe your personal data has been processed unlawfully, you may lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
