1. Data Controller
The data controller responsible for your personal information under the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 is Excalibur Interactive Studios Ltd (Registered in England & Wales No. 14892031), with its registered office at 1 City Square, Leeds, LS1 2AL, United Kingdom.
2. Information We Collect
- Account Registration Data: First name, last name, chosen screen name, email address, date of birth (to verify 18+ eligibility), country, and a salted cryptographic hash of your password.
- Virtual Gameplay & Progression Telemetry: Avalon Crown (AC) and Bonus Crown (BC) balances, Loyalty Gems, Daily Wheel timestamps, quest progress, and provably fair client/server seeds.
- Wellbeing & Control Settings: Any daily spin limits, reality-check intervals, or cooling-off / self-exclusion preferences you configure.
- Technical & Consent Logs: Browser user-agent, anonymised IP security logs, and your Cookie Consent Mode choice.
3. How We Use Your Data
We process your data solely to operate your knight profile, credit free Daily Coin Drops and Wheel rewards, display your chosen screen name on Community Jackpot boards, enforce your responsible gaming limits, and respond to support enquiries. We never sell or rent personal data to third-party data brokers.
4. Lawful Bases for Processing
- Performance of a Contract (Art. 6(1)(b) UK GDPR): Operating your registered account, syncing virtual balances, and delivering platform features under our Terms of Service.
- Legitimate Interests (Art. 6(1)(f) UK GDPR): Maintaining platform security, preventing automated abuse, and enforcing 18+ age eligibility.
- Consent (Art. 6(1)(a) UK GDPR): Optional marketing emails and non-essential analytics cookies, which you may withdraw at any time.
5. Data Sharing & Embedded Game Studios
When you launch an embedded HTML5 cabinet from Play’n GO or Pragmatic Play, your browser establishes an encrypted HTTPS connection to their demo asset servers to load graphics and audio. No personal profile data or email addresses are transmitted to those game servers.
6. Data Retention
Active account records are retained for as long as you maintain your Excalibur PlayHub profile. If you request account deletion, personal identifiers are purged within 30 days, except where a minimal hash is retained to honour an active permanent self-exclusion request.
7. Security Measures
All traffic across excaliburplayhub.com is encrypted via TLS 1.3. Passwords are hashed using modern one-way cryptographic hashing (password_hash), and session cookies are protected with strict same-site attributes.
8. Your Rights Under UK GDPR
You have the right to request access to your personal data, rectification of inaccurate details, erasure (“right to be forgotten”), restriction of processing, data portability, and objection to processing. To exercise any of these rights, email privacy@excaliburplayhub.com.
9. Protection of Minors (18+ Strict Policy)
Excalibur PlayHub is strictly for adults aged 18 and older. We do not knowingly collect personal data from anyone under 18. If we discover that an account belongs to a minor, it is terminated and erased immediately.
10. Updates to This Privacy Policy
Whenever we update this Privacy Policy, we revise the date at the top of this page and post a notice inside your Account Notifications panel.
11. Contact Our Data Protection Officer
- Data Protection Officer
- Excalibur Interactive Studios Ltd
- Privacy Email
- privacy@excaliburplayhub.com
- Postal Address
- 1 City Square, Leeds, LS1 2AL, United Kingdom
- Telephone
- +44 7761 012345