Privacy Policy

Win Rewards UK | winrewardsuk.co.uk | Last Updated: April 2026
Limited M3 Market processes personal data in compliance with UK GDPR (Data Protection Act 2018).
Supervisory authority: ICO — ico.org.uk

1. Data We Collect

• Account: email, username, date of birth (18+ verification), password (bcrypt hash only — we never store plain passwords)
• Subscription: email, consent timestamp, IP at subscription, source ('homepage_form')
• Gameplay: game results, Reward Points balance, Reward Tier, session data
• Technical: IP address, browser type, device, timestamps — collected under legitimate interests (security, fraud prevention)

2. Why We Collect Email (Subscription)

We collect your email to:

• (a) unlock subscriber game access (City Poker, Britannia Roulette, UK Lucky Draw);
• (b) send marketing emails (Friday Rewards Night reminders, game updates) — with your explicit consent.

You may withdraw marketing consent at any time via the unsubscribe link in any email or by contacting [email protected].

3. ICO Registration

Limited M3 Market is registered with the ICO as a data controller.
ICO Registration Number: [to be inserted upon registration — ico.org.uk/registration]

4. Your Rights (UK GDPR Arts. 15–22)

Right	How to exercise
Access (Art. 15)	[email protected] — response within 1 calendar month
Rectification (Art. 16)	Settings → Account or via email above
Erasure (Art. 17)	Settings → Account → Delete Account — data removed within 1 calendar month
Portability (Art. 20)	Contact [email protected]
Objection (Art. 21)	Contact [email protected]
Complain to ICO	ico.org.uk/make-a-complaint | 0303 123 1113

5. PECR — Email Marketing

Marketing emails are sent only with your consent (Privacy and Electronic Communications Regulations 2003). Every marketing email contains an unsubscribe link. Unsubscribe requests are processed within 5 working days. Every email includes our registered address: 80 Basinghall Street, London EC2V 5AR.

6. Data Retention

Data type	Retention period
Account & subscription data	While active; deleted within 1 calendar month of deletion request
Email consent records	3 years (PECR audit trail)
Technical logs	90 days

7. Google Tag Manager & Analytics

We use Google Tag Manager (container GTM-W7RCVWQ4) to manage Google Analytics 4. Analytics cookies are only loaded after you give cookie consent. GA4 runs with IP anonymisation enabled (anonymize_ip: true).

8. Contact

[email protected] | Limited M3 Market, 80 Basinghall Street, London EC2V 5AR