Tombola Privacy Policy
Handing over your personal details to an online bingo site takes a bit of trust, so it’s worth knowing exactly what Tombola does with your information. This page breaks down, in plain English, what data the operator collects, why it collects it, and what control you have over it — all from the perspective of this independent review site, not the operator itself.
Table of contents
Data Collection
What personal information does Tombola collect?
Tombola collects the details you’d expect from a licensed UK gambling operator: your name, date of birth, address, email and phone number at registration, plus payment details when you deposit with a Visa debit card, Mastercard debit card, Visa Electron or Apple Pay. Because the operator is licensed by the UK Gambling Commission (licence no. 38613), it also gathers identity verification documents to confirm you’re over 18 and to meet anti-money-laundering rules. On top of that, it records gameplay activity, login history and support conversations.
How does Tombola collect your data?
Most of it comes straight from you — when you sign up, verify your account, deposit, or contact the 24/7 support team via live chat, email or the UK freephone line. Some is gathered automatically as you use the site or the native iOS and Android apps: device information, IP address and session behaviour. Since all games are built in-house on proprietary Tombola software, your gameplay data stays within the operator’s own platform rather than being generated by outside studios.
Cookies and tracking technologies
Like most gambling sites, Tombola uses cookies to keep you logged in, remember your preferences and measure how the site performs. These typically fall into three buckets:
- Essential cookies — needed for login, payments and security features like 3-D Secure 2.0 on card transactions
- Functional cookies — remember settings such as your preferred bingo room or chat options
- Analytics cookies — help the operator understand how players move around the site and apps
You can manage or block cookies through your browser settings, though switching off essential ones will stop core features from working properly.
Data Usage
How does Tombola use your information?
Tombola uses your data to run your account and meet its legal obligations under its UK Gambling Commission licence — everything else flows from that. In practice, that means processing deposits and withdrawals, verifying your identity and age, applying responsible gambling tools like net spend limits, deposit caps and self-exclusion, and spotting fraud or unusual account activity. Your gameplay history also feeds into how the operator personalises your lobby and promotions, such as the welcome offer of a 100% bonus match up to £50 with 1 Free Play for every £1 deposited (up to 50 Free Plays).
Marketing communications
Marketing messages — emails, texts, push notifications about offers like occasional £5 FREE code promotions or the Playmates referral programme — are only sent where you’ve opted in. You can change your marketing preferences at any time through your account settings or by using the unsubscribe link in any message. Opting out of marketing doesn’t affect the service messages Tombola must send, such as payment confirmations or changes to the terms.
Third-party sharing policies
Tombola doesn’t sell your data. Sharing happens only where it’s needed to operate legally and safely, for example with:
- Payment processors and banks handling your debit card or Apple Pay transactions
- Identity verification and age-check services
- Regulators like the UK Gambling Commission and, for international operations, the Gibraltar authorities (RGL 052)
- Responsible gambling bodies such as BeGambleAware, where self-exclusion schemes require it
- Group companies — Tombola has been owned by Flutter Entertainment since 2022
Data Protection & Your Rights
Security measures
Tombola protects your information with full-site SSL encryption, 3-D Secure 2.0 on card payments and fee-free transaction handling, with safeguards like a £300 maximum balance and a weekly net-deposit ceiling adding an extra layer of account control. Account access sits behind your own credentials, and the operator’s responsible gambling tools — net spend limits, deposit/loss caps, session reminders and self-exclusion — also act as a protective framework around your activity.
Your rights under GDPR
As a UK player, you’re covered by UK GDPR, which gives you a solid set of rights over your data. You can:
- Access — request a copy of the personal data Tombola holds about you
- Rectify — ask for inaccurate details to be corrected
- Erase — request deletion in certain circumstances
- Restrict or object — limit how your data is processed, including for marketing
- Portability — receive your data in a usable format
- Complain — raise concerns with the Information Commissioner’s Office if you’re unhappy with how things are handled
Note that some data must be retained for set periods to satisfy gambling regulation and anti-money-laundering law, so deletion requests can be limited where a legal obligation applies.
How to request data deletion
You can request deletion of your Tombola data by contacting the operator’s support team directly — via live chat, by email at support@tombola.co.uk, or on the freephone line 0800 29 888 73 (9 AM–11 PM). The operator will confirm your identity before acting on the request and will explain anything it’s legally required to keep. Closing your account and requesting erasure are separate steps, so it’s worth asking for both if that’s what you want.
If you’d like the bigger picture on how the site fits together beyond privacy, start here: home. The full rules governing your account sit in the operator’s Tombola terms and conditions, and you can learn more about this independent review project on the about Tombola.
Frequently Asked Questions about Tombola
What personal data does Tombola collect?
Tombola collects your name, date of birth, address, contact details, payment information for Visa debit card, Mastercard debit card, Visa Electron or Apple Pay, identity verification documents, gameplay history and support conversations. Some data, like device and session information, is collected automatically as you play.
How does Tombola protect my information?
Tombola secures your data with full-site SSL encryption and 3-D Secure 2.0 on card payments. Account-level safeguards include a £300 maximum balance, a weekly net-deposit ceiling and responsible gambling tools such as deposit caps and self-exclusion, all required under its UK Gambling Commission licence no. 38613.
Can I request my data from Tombola?
Yes. Under UK GDPR you can request a copy of the personal data Tombola holds about you by contacting support via live chat, email at support@tombola.co.uk or the freephone line 0800 29 888 73. The operator will verify your identity before releasing anything, and you can also ask for corrections or deletion.
Does Tombola share my data with third parties?
Tombola doesn’t sell your data, but it does share it where necessary: with payment processors, identity and age-verification services, regulators such as the UK Gambling Commission, and Flutter Entertainment group companies since the 2022 acquisition. Sharing is limited to what’s needed to run your account legally and safely.
Now you know how Tombola handles your data, you can sign up with a clear head and claim the 100% bonus match up to £50 on your first deposit.
Claim your Tombola welcome bonus
