GrandIvy Privacy Policy

At Grand Ivy, we are deeply committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share information about you when you use our website at grandivy.com, including our casino, sportsbook, and all related services. We encourage you to read this document carefully before using the GrandIvy platform. By accessing our services, you acknowledge that you have read and understood this policy.

Our services are operated by White Hat Gaming Limited, a company registered in Malta (company reg. no. C73232), with a registered office at 85 St John Street, Valletta, VLT1165, Malta. We are licensed by the UK Gambling Commission (account number 52894) and the Malta Gaming Authority (licence MGA/B2C/370/2017), and we process your personal data in full compliance with applicable data protection legislation, including GDPR.

Information We Collect

When you register and use the Grand Ivy Casino platform, we collect a variety of personal data necessary to provide our services, verify your identity, and comply with regulatory requirements. Here at GrandIvy, we handle your information with the utmost care and transparency.

Data You Provide Directly

• Full name, date of birth, and contact details (email address, phone number)
• Residential address and proof of identity documents
• Payment method information (card details, e-wallet accounts, bank account data)
• Source of funds and financial information where required for verification
• Username, &o_4^9!ZqE93lzrB, and account preferences
• Communications you send to our support team at support@grandivy.com

Data We Collect Automatically

• Device information, browser type, and operating system
• IP address and approximate geographic location
• Pages visited, time spent on site, and navigation patterns
• Gaming activity, betting history, and transaction records
• Session data, login timestamps, and interaction logs
• Cookies and similar tracking technologies (see our Cookie section below)

How We Use Your Information

We at GrandIvy use your personal data for clearly defined and lawful purposes. We do not sell your information to third parties for their own marketing purposes. The primary reasons we process your data include the following:

• Account management: We use your registration data to create and maintain your Grand Ivy casino account, process deposits and withdrawals, and provide access to our full game library.
• Identity verification (KYC): We are legally required to verify your age, identity, address, and payment methods. Cumulative deposit verification is triggered at EUR 2,000 as part of our regulatory obligations.
• Fraud prevention and security: We monitor account activity to detect suspicious behaviour, protect against money laundering, and ensure the integrity of our platform.
• Customer support: We use your contact information to respond to your queries, complaints, and requests submitted via live chat or email.
• Regulatory compliance: We process data as required by the UK Gambling Commission, the Malta Gaming Authority, and applicable anti-money-laundering legislation.
• Marketing communications: With your consent, we may send you information about Grand Ivy bonuses, promotions, free spins offers, and updates. You can opt out at any time.
• Responsible gambling: We use gaming activity data to monitor for signs of problem gambling and to enforce responsible gambling tools and limits.

Legal Basis for Processing

Our GrandIvy platform processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our agreement with you when you register an account and use our services.
• Legal obligation: Processing required to comply with gambling regulations, anti-money laundering laws, and tax obligations.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and service improvement.
• Consent: Where we rely on your consent (e.g., for marketing emails), you have the right to withdraw it at any time.

Cookies and Tracking Technologies

At Grand Ivy, we use cookies and similar technologies to improve your experience on our website. Cookies help us remember your preferences, keep you logged in, analyse site traffic, and deliver relevant content. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period).

We use cookies for the following purposes:

• Essential cookies: Required for the operation of the GrandIvy website, including login sessions and security functions.
• Analytics cookies: Help us understand how visitors use our site so we can improve performance and usability.
• Marketing cookies: Allow us to deliver relevant Grand Ivy promotions and track the effectiveness of our advertising campaigns.
• Preference cookies: Remember your language, currency, and other settings.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our services.

Sharing Your Data

We may share your personal data with carefully selected third parties where necessary to operate our services or comply with legal obligations. Our Grand Ivy partners and service providers are contractually required to protect your data and use it only for the purposes we specify.

• Payment processors: To facilitate deposits and withdrawals via Visa, Mastercard, Maestro, Apple Pay, Paysafecard, and other methods.
• Identity verification providers: To perform KYC checks as required by our licences.
• Game providers: Including NetEnt, Microgaming, Evolution, Play'n GO, Pragmatic Play, and others who power our casino and live casino products.
• Regulatory bodies: We may be required to share data with the UK Gambling Commission, Malta Gaming Authority, or law enforcement where legally required.
• Dispute resolution: We may share relevant data with eCOGRA, our approved Alternative Dispute Resolution (ADR) provider, in the event of a complaint escalation.

Data Retention

We retain your personal data for as long as your account remains active and for a period thereafter as required by applicable law. In most cases, we at GrandIvy are required to retain financial and identity records for a minimum of five years following the closure of an account, in accordance with anti-money laundering regulations. We will securely delete or anonymise your data when it is no longer required.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data held by our Grand Ivy platform:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate or incomplete data.
• Right to erasure: In certain circumstances, you may request that we delete your personal data.
• Right to restriction: You may ask us to restrict how we process your data in certain situations.
• Right to data portability: You may request that we transfer your data to another organisation in a machine-readable format.
• Right to object: You may object to our processing of your data where we rely on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us at support@grandivy.com. We will respond to your request within the timeframes required by applicable law.

Data Security

We at GrandIvy implement industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include SSL encryption, secure server infrastructure, access controls, and regular security assessments. While we take every reasonable precaution, no online platform can guarantee absolute security, and we encourage you to keep your login credentials confidential.

International Data Transfers

As a Malta-based operation, our GrandIvy services may involve transferring your personal data to countries outside the European Economic Area. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data to the same standard as within the EEA.

Children's Privacy

Our Grand Ivy casino and sportsbook services are strictly for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has provided us with personal information, we will promptly close the account and delete the data. Age verification is a mandatory part of our KYC process.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will notify you through our website or via email. We encourage you to review the Grand Ivy Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please do not hesitate to reach out to us. Our support team is available 24/7 via live chat at grandivy.com or by email at support@grandivy.com. You also have the right to lodge a complaint with your local data protection authority if you believe your rights have not been respected.