Privacy
Privacy Policy | Great British Wins | greatbritishwins.co.uk
Last Updated: April 2026
Top Media co. Ltd («we», «us», «our») processes personal data through greatbritishwins.co.uk in compliance with UK GDPR (retained by the Data Protection Act 2018). Supervisory authority: Information Commissioner's Office (ICO) — ico.org.uk.
1. DATA WE COLLECT
Account data: email address, username, date of birth (18+ verification), password (bcrypt hash only), chosen region (Nations Cup)
Gameplay data: game results, Token balances, British Honours level, Nations Cup points, session history
Technical data: IP address, browser type, device type, session timestamps — lawful basis: legitimate interests (security, fraud prevention)
Payment data (Gold Member only): processed via Stripe. We do not store card numbers.
Communications: support emails and contact form submissions
2. LAWFUL BASIS (UK GDPR Art. 6)
Consent (Art. 6(1)(a)): marketing emails, analytics cookies
Contract (Art. 6(1)(b)): account operation, gameplay, Gold Member subscription
Legal obligation (Art. 6(1)(c)): VAT records (HMRC)
Legitimate interests (Art. 6(1)(f)): security, fraud prevention, platform improvement
3. YOUR RIGHTS (UK GDPR Arts. 15–22)
Access (Art. 15): request your data — [email protected]. Response within 1 calendar month.
Rectification (Art. 16): correct inaccurate data in Settings or via email
Erasure (Art. 17): Settings → Account → Delete Account. Data removed within 1 calendar month.
Portability (Art. 20): request data in machine-readable format
Object (Art. 21): object to legitimate-interest processing
Complain to ICO: ico.org.uk/make-a-complaint | 0303 123 1113
4. ICO REGISTRATION
Top Media co. Ltd is registered with the ICO as a data controller. ICO Registration Number: [insert upon registration]. Registration required under DPA 2018, s.62.
5. RETENTION
Account data: while active; deleted within 1 month of deletion request
Payment records: 6 years (HMRC requirement)
Technical logs: 90 days
6. INTERNATIONAL TRANSFERS
Some service providers are outside the UK. Transfers are protected by UK International Data Transfer Agreements (UK IDTAs) or equivalent safeguards per UK GDPR Chapter V.
7. CONTACT
[email protected] | Top Media co. Ltd, 231 Chapeltown Road, Leeds LS7 3DX