Tombola Privacy Policy
Knowing exactly what happens to your personal details is a basic right, and this page sets out how Tombola — the UK bingo operator licensed by the UK Gambling Commission, licence no. 38613 — collects, uses and protects player data. This independent review breaks down the operator’s documented privacy practices so you can decide with confidence before opening an account.
How does Tombola collect your data?
Tombola collects personal information at registration, during verification checks, and through ongoing account activity. This includes identity details, payment information tied to debit cards (Visa, Mastercard, Visa Electron) and Apple Pay, plus technical data such as device type and login behaviour. The data supports account management, payments and legal compliance.
What personal information we collect
The operator documents the following categories of player data:
- Identity and contact details: full name, date of birth, home address, email address and phone number. Date of birth is mandatory — the minimum age to play is 18.
- Payment details: card information linked to a Visa debit card, Mastercard debit card or Visa Electron, and Apple Pay token data where used. Card transactions are protected by 3-D Secure 2.0.
- Account and gameplay data: deposit and withdrawal history, ticket purchases on in-house games, bonus activity and net spend figures.
- Verification documents: copies of ID or proof of address where requested under UK Gambling Commission Know Your Customer requirements.
- Technical data: IP address, device and browser type, and app usage data from the iOS and Android native apps or the HTML5 web client.
How we collect your data
Collection happens through three main channels. First, you supply details directly when registering, depositing or contacting support via live chat, email or the UK freephone line. Second, data is generated automatically as you play, deposit and withdraw. Third, verification data may come from third-party identity and age-check services, as required under licence 38613.
Cookies and tracking technologies
Tombola uses cookies to keep sessions secure, remember preferences and measure site performance. Essential cookies run the login and payment flows; optional analytics and marketing cookies can be managed through the on-site consent tool. Blocking essential cookies will prevent account access.
How does Tombola use your information?
Tombola uses player data to run accounts, process payments, meet UK Gambling Commission obligations and deliver safer gambling tools. Marketing is sent only with consent, and data is shared with a limited set of service providers and regulators — never sold. Retention follows legal and licensing requirements.
How we use your information
- Account operation: processing deposits from £10 first deposit (£5 subsequent, £5 minimum via Apple Pay) and withdrawals to debit cards, which take 3-5 banking days.
- Legal compliance: age verification, anti-money-laundering checks and responsible gambling monitoring, including the £300 maximum balance and weekly net-deposit ceiling.
- Safer gambling: enforcing net spend limits, deposit/loss caps, session reminders and self-exclusion requests.
- Customer support: handling queries raised through 24/7 live chat, email or the freephone line.
Marketing communications
Promotional messages — including occasional £5 FREE code promotions and Playmates referral offers — are sent only where you have opted in. You can withdraw consent at any time through account settings or the unsubscribe link in each message, and the change takes effect without affecting your account status.
Third-party sharing policies
Sharing is limited to what the operator documents: payment processors handling card and Apple Pay transactions, identity verification agencies, regulators such as the UK Gambling Commission, and group services under Flutter Entertainment, which has owned Tombola since 2022. Data is not sold to advertisers. The full contractual terms sit here: Tombola terms and conditions.
How does Tombola protect your data and what are your rights?
Tombola protects data with full-site SSL encryption, 3-D Secure 2.0 on card payments and access controls across its systems. Under UK GDPR you can request access, correction, restriction or deletion of your data at any time — submit a request via live chat or email support@tombola.co.uk and the operator must respond within one month.
Security measures
- Full-site SSL encryption on web and the iOS and Android apps.
- 3-D Secure 2.0 authentication on all debit card payments.
- UK Gambling Commission oversight under Account No. 38613, with additional Gibraltar licensing (RGL 052) for international operations.
- Responsible gambling tools that flag unusual spending patterns early.
Your rights under GDPR
As a UK player you hold the right to access your data, correct inaccuracies, request erasure, restrict processing, object to marketing and receive a portable copy of your information. Identity confirmation may be required before any request is actioned. If you are unhappy with the response, you can escalate to the Information Commissioner’s Office.
How to request data deletion
- Contact support through 24/7 live chat or email support@tombola.co.uk stating you want your data erased.
- Confirm your identity when asked.
- Withdraw any remaining balance first — withdrawals to debit cards take 3-5 banking days.
- Note that some records must be retained for regulatory and anti-money-laundering periods even after account closure.
Background on who operates the brand and its history since 2006 is covered here: about Tombola. For a full overview of the product, see Tombola review.
Frequently asked questions about Tombola
What personal data does Tombola collect?
Tombola collects identity and contact details, payment information for debit cards (Visa, Mastercard, Visa Electron) and Apple Pay, gameplay and transaction history, verification documents and technical data such as IP address and device type. Collection starts at registration and continues through normal account activity.
How does Tombola protect my information?
The operator applies full-site SSL encryption, 3-D Secure 2.0 on card payments and internal access controls. Activity is supervised under UK Gambling Commission licence no. 38613, with additional Gibraltar licensing. Responsible gambling monitoring adds a further layer of account protection.
Can I request my data from Tombola?
Yes. Under UK GDPR you can request a copy of your personal data by contacting support via 24/7 live chat or emailing support@tombola.co.uk. Identity verification may be required, and the operator must respond within one month of receiving a valid request.
Does Tombola share my data with third parties?
Sharing is limited to payment processors, identity verification agencies, regulators such as the UK Gambling Commission and group services within Flutter Entertainment. Data is never sold to advertisers, and marketing messages are sent only where you have actively opted in.
Ready to play with a licensed UK operator that takes data protection seriously? Check out the welcome offer — 100% bonus match up to £50 on a minimum £10 first deposit, with 1 Free Play for every £1 (up to 50 Free Plays) and no wagering requirements. 18+. GambleAware. T&Cs apply.