Your data sits on secure servers in places with strong privacy laws, including the UK or the European Economic Area. If a data breach ever takes place, the casino must by law tell the Information Commissioner’s Office and anyone involved within 72 hours of discovering it.