Tombola Privacy Policy
This privacy policy explains how Tombola, a UK Gambling Commission licensed bingo operator (licence no. 38613), collects, uses and protects personal data across its website and native iOS and Android apps. It is written as an independent editorial summary of the operator’s published practices, so players can understand what happens to their information before registering.
Table of contents
Data Collection
What personal information we collect
Tombola collects the personal information needed to open and operate a player account under UK gambling regulation. According to the operator, this includes identity details, contact information and payment data supplied during registration and deposits.
- Identity data: full name, date of birth (players must be 18 or over) and residential address, used to verify age and identity.
- Contact data: email address and telephone number, used for account communications and support.
- Financial data: details linked to the deposit methods on the account — debit cards (Visa, Mastercard, Visa Electron) and Apple Pay — alongside transaction history covering deposits from the £10 minimum first deposit and withdrawals to the registered card.
- Account activity data: game participation across the in-house titles (Bingo90, Bingo75 Lines, Bingo80 and others), ticket purchases, bonus claims such as the 100% bonus match up to £50, and net-deposit history used to enforce the £300 maximum balance and weekly net-deposit ceiling.
- Verification documents: copies of photographic ID or proof of address where the operator requests them for compliance checks.
How we collect your data
Data reaches Tombola through several channels. Most is provided directly when a player registers an account, makes a first deposit or contacts the 24/7 support team via live chat, email (support@tombola.co.uk) or the UK freephone line 0800 29 888 73 (9 AM-11 PM). Additional data is generated automatically through gameplay and transactions, and some is obtained from third-party verification services used to confirm age and identity in line with UK Gambling Commission requirements. Because Flutter Entertainment has owned the brand since 2022, certain compliance processes may be handled within that wider group’s systems.
Cookies and tracking technologies
The Tombola website and responsive HTML5 client use cookies and similar technologies to keep sessions secure, remember login states and analyse how the site is used. The operator distinguishes between strictly necessary cookies (required for account access and payments protected by 3-D Secure 2.0) and optional cookies used for analytics and marketing measurement. Players can manage non-essential cookies through the on-site consent tool or their browser settings, although disabling essential cookies can prevent the account area from functioning.
Data Usage
How we use your information
Tombola uses personal data primarily to run the account a player has registered: processing deposits and withdrawals, verifying identity, delivering games and meeting its licence conditions. Processing is grounded in contract performance, legal obligation and, where relevant, consent.
| Purpose | Data used | Legal basis |
|---|---|---|
| Account creation and management | Identity and contact data | Contract |
| Processing payments fee-free | Card and Apple Pay details, transaction history | Contract |
| Age and identity verification | Identity documents, date of birth | Legal obligation (UK Gambling Commission 38613) |
| Responsible gambling controls | Net spend, deposit caps, session reminders, self-exclusion status | Legal obligation |
| Fraud and security monitoring | Login, device and transaction data | Legitimate interest |
| Customer support | Contact data, chat and call records | Legitimate interest |
Marketing communications
Marketing messages from Tombola — including information about promotions such as occasional £5 FREE code offers for new players or the Playmates referral programme — are sent only where the player has opted in. Consent can be withdrawn at any time through account settings or the unsubscribe link in each message, and opting out does not affect the account itself or eligibility for the welcome offer’s no-wagering cash winnings.
Third-party sharing policies
The operator documents a limited set of data recipients. Payment data goes to the card schemes and processors handling Visa, Mastercard, Visa Electron and Apple Pay transactions. Identity data may be shared with verification agencies to satisfy licence conditions, and regulators such as the UK Gambling Commission can receive data where the law requires it. Within the Flutter Entertainment group, data may be processed for compliance and operational purposes. Tombola states that personal data is not sold to third parties for their own marketing.
Data Protection & Your Rights
Security measures
Tombola applies SSL encryption across the full site and 3-D Secure 2.0 authentication on card payments, protecting data in transit between the player’s device, the apps and the operator’s servers. Access to personal data is restricted to staff who need it, and account-level controls such as deposit and loss caps, session reminders and self-exclusion add a further layer of protection around player behaviour, supported by links to BeGambleAware. For the wider context of how this independent website assesses the brand, see our home page.
Your rights under GDPR
Because Tombola operates in the United Kingdom, players are protected by UK GDPR and the Data Protection Act 2018. The operator recognises the following rights:
- Access: obtain a copy of the personal data held about you.
- Rectification: correct inaccurate or incomplete details.
- Erasure: request deletion, subject to retention obligations under gambling law.
- Restriction and objection: limit or object to certain processing, including direct marketing.
- Portability: receive data in a structured, machine-readable format where processing is automated.
- Complaint: lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been mishandled.
How to request data deletion
A deletion request can be made by emailing support@tombola.co.uk or through live chat, quoting the registered account details so the team can verify the requester’s identity. The operator will action the request where it is legally able to; some records, such as transaction histories and self-exclusion entries, must be retained for defined periods to meet UK Gambling Commission and anti-money-laundering obligations. Any data that cannot be erased immediately is held securely and removed once the retention period expires. Questions about how these obligations sit alongside the operator’s general conditions are covered on our terms page.
Frequently Asked Questions about Tombola
What personal data does Tombola collect?
Tombola collects identity details (name, date of birth, address), contact information, payment data linked to debit cards and Apple Pay, and account activity such as deposits, withdrawals and gameplay. Verification documents may also be requested to confirm age and identity under its UK Gambling Commission licence (no. 38613).
How does Tombola protect my information?
The operator secures data with full-site SSL encryption and 3-D Secure 2.0 on card payments. Access to personal data is restricted to authorised staff, and account tools such as deposit caps, session reminders and self-exclusion protect players alongside the technical safeguards documented across the website and apps.
Can I request my data from Tombola?
Yes. Under UK GDPR, players can request a copy of their personal data by contacting support via live chat, email at support@tombola.co.uk or the freephone line 0800 29 888 73. The team will verify the account holder’s identity before releasing the information, as required by data protection law.
Does Tombola share my data with third parties?
Sharing is limited. Data goes to payment processors handling Visa, Mastercard, Visa Electron and Apple Pay transactions, to verification agencies, and to regulators where legally required. Some processing occurs within the Flutter Entertainment group. The operator states that personal data is never sold for third-party marketing.
For full details of the welcome offer — a 100% bonus match up to £50 with 1 Free Play for every £1 and no wagering requirements — visit Tombola directly and review the privacy terms before registering.