Privacy Policy

Effective date: 28 July 2026

1. Who We Are

Card Treasure Hub Ltd. ("we", "us", "our") operates Card Treasure Hub at cardtreasurehub.com. We are the data controller for personal data collected through this Site.

Registered address: 42 New Broad Street, London EC2M 1JJ, United Kingdom
Contact: [email protected]

2. What Data We Collect

We collect the following categories of personal data:

Account Registration (if you sign up)

• Name — provided voluntarily at registration.
• Email address — used to identify your account and, if you opt in, to send occasional platform updates.
• Phone number (optional) — provided at your discretion; not required.
• Marketing consent — a record of whether you opted in or out of marketing communications.

Technical Data

• IP address (approximate location for compliance purposes only).
• Browser type, device type, and operating system.
• Pages visited, session duration (via cookies — see our Cookies Policy).

Contact Form

If you contact us, we collect your name, email, and the content of your message to respond to you.

3. How We Use Your Data

We use personal data for the following purposes and on the following lawful bases:

• Account management — to create and maintain your account (lawful basis: performance of a contract / legitimate interest).
• Platform operation — to provide access to games and manage site security (legitimate interest).
• Legal compliance — age verification, fraud prevention, and regulatory obligations (legal obligation).
• Marketing communications — only if you specifically opted in at registration (consent). You may withdraw consent at any time by emailing [email protected].
• Responding to enquiries — to reply to your contact-form messages (legitimate interest).

4. Cookies

We use a small number of cookies to operate the Site. For full details of what cookies we set and how to manage them, please see our Cookies Policy.

5. Third-Party Processors

We may share data with the following categories of service providers:

• Hosting provider — the server infrastructure that runs this website. Data is processed in accordance with their data processing agreement.
• Game providers — game iframes are served directly from providers' servers (Pragmatic Play, NetEnt, Play'n GO, Evoplay, Pariplay). Your IP address may be visible to those providers when their iframes load. We recommend reviewing their respective privacy policies.
• Analytics — if we use analytics software, it is configured to anonymise IP addresses. We do not sell data to advertisers.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

6. Your Rights Under UK GDPR

As a data subject under the UK GDPR, you have the following rights:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — ask us to delete your personal data where there is no compelling reason to keep it.
• Right to restriction — ask us to restrict processing of your data in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on our legitimate interests.
• Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.
• Right to lodge a complaint — you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

To exercise any of these rights, email us at [email protected]. We will respond within one month.

7. Data Retention

We retain account data for as long as your account is active, and for up to 24 months after account closure for compliance and dispute-resolution purposes. Contact-form messages are retained for 12 months. You may request earlier deletion by exercising your right to erasure.

8. Children's Privacy

This Site is intended for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under the age of 18. If we discover that personal data has been collected from a person under 18, we will delete it promptly. If you believe a minor has provided us with their data, please contact us immediately.

9. International Transfers

If your data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the ICO, or equivalent mechanisms. Our primary hosting infrastructure is located within the UK/EEA.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Site. Continued use of the Site after any changes constitutes acceptance of the updated Policy.

11. Contact for Privacy Requests

For any privacy-related enquiries or to exercise your rights:

• Email: [email protected]
• Post: Card Treasure Hub Ltd., 42 New Broad Street, London EC2M 1JJ, United Kingdom