Tombola Privacy Policy

Handing over your details to a bingo site should never feel like a leap into the unknown — and with Tombola, it doesn’t have to! This independent review breaks down exactly how the operator collects, uses and protects your personal data, so you can play with total confidence. Tombola operates under full UK Gambling Commission licensing (licence no. 38613), which means strict data-handling obligations come baked into everything the brand does.

Data Collection

Tombola collects the personal information needed to verify your identity, process your deposits and withdrawals, and keep your account secure — nothing more, nothing shady. Because the operator holds UK Gambling Commission licence 38613 (plus Gibraltar RGL 052 for international play), every category of data it gathers must map to a genuine regulatory or service purpose.

What personal information we collect

When you register and play, the operator gathers a clearly defined set of details:

• Identity details: full name, date of birth (to confirm you are 18 or over) and home address
• Contact details: email address and phone number
• Payment data: card details linked to Visa debit card, Mastercard debit card, Visa Electron or Apple Pay, processed with 3-D Secure 2.0
• Account activity: login history, deposit and withdrawal records, ticket purchases and game play on titles like Bingo90, Bingo75 Lines, Bingo80, Pulse, Burst, Blocks and Paper
• Responsible gambling settings: your net spend limits, deposit and loss caps, session reminders and any self-exclusion status

How we collect your data

Most of it comes straight from you during sign-up and deposit, which is brilliantly transparent. The rest is generated automatically as you play: every ticket bought, every win, every login from the iOS app, Android app or the HTML5 web client leaves a record the operator uses to run your account properly. Support interactions — whether through the 24/7 live chat, email to support@tombola.co.uk or the freephone line 0800 29 888 73 — are also logged so issues can be followed up properly.

Cookies and tracking technologies

Like virtually every UK gaming site, Tombola uses cookies to keep you logged in, remember your preferences and understand how the site performs. Essential cookies power the core experience, while functional and analytics cookies help the operator refine its in-house platform. You can manage or block non-essential cookies through your browser settings at any time.

Data Usage

Tombola uses your information to run your account, pay out your winnings and meet its legal duties as a licensed UK operator. That’s the heart of it — your data works for your gameplay, your security and your regulatory protections.

How we use your information

• Verifying your identity and age, a legal requirement under UK Gambling Commission licence 38613
• Processing deposits and withdrawals on debit cards and Apple Pay, all fee-free
• Enforcing deposit controls, including the £300 maximum balance and weekly net-deposit ceiling
• Paying winnings as withdrawable cash — the welcome bonus (100% bonus match up to £50, minimum £10 deposit, 1 Free Play awarded for every £1 up to 50 Free Plays) carries no wagering requirements, so your payout records reflect real money
• Detecting fraud, money laundering and problem gambling patterns
• Improving the in-house proprietary Tombola software that powers every game on the site

Marketing communications

Opt in, and you’ll hear about promotions such as the occasional £5 FREE code offers and the Playmates referral programme — opt out, and you won’t. It’s genuinely that simple. Marketing consent is separate from your account itself, so saying no to emails never affects your ability to play, deposit or withdraw. You can flip your preferences in your account settings whenever you like.

Third-party sharing policies

Tombola shares data only where it has a legitimate reason: payment processors handling your Visa, Mastercard, Visa Electron or Apple Pay transactions; identity-verification services confirming who you are; regulators including the UK Gambling Commission; and, since 2022, group entities within Flutter Entertainment under equivalent data-protection standards. The operator does not sell your personal data to advertisers — a policy worth celebrating.

Data Protection & Your Rights

You hold serious power over your own data here. As a UK-licensed operator, Tombola must honour every GDPR right you exercise, and it backs that obligation with real technical muscle.

Security measures

The site runs full SSL encryption across every page, and card payments are shielded by 3-D Secure 2.0 authentication. Account-level protections pair with responsible gambling tools — net spend limits, deposit and loss caps, session reminders and self-exclusion — plus links to BeGambleAware for anyone who needs extra support. Flutter Entertainment’s ownership since 2022 adds the infrastructure of one of the biggest names in regulated gaming behind these safeguards.

Your rights under GDPR

UK GDPR grants you a full toolkit of rights over the data Tombola holds:

• Access: request a copy of everything the operator stores about you
• Rectification: correct inaccurate or out-of-date details
• Erasure: ask for your data to be deleted where retention isn’t legally required
• Restriction and objection: limit or challenge certain processing, including marketing
• Portability: receive your data in a usable format

Licensing rules mean some records — transaction history, identity checks — must be retained for regulatory periods even after closure, but everything else is fair game for deletion.

How to request data deletion

Email support@tombola.co.uk or use the 24/7 live chat and state clearly that you’re exercising your right to erasure. The support team will verify your identity first, then process the request within the statutory timeframe. If you’re unhappy with the outcome, you can escalate to the Information Commissioner’s Office — a proper safety net for UK players.

For more on how this independent review site treats the operator overall, start here: Tombola review. The rules governing your account sit in the Tombola terms and conditions, and you can learn who writes these reviews on the about Tombola.

Frequently Asked Questions about Tombola

What personal data does Tombola collect?

Tombola collects your name, date of birth, address, contact details, payment information for debit cards and Apple Pay, plus records of your gameplay, transactions and responsible gambling settings. Support conversations through live chat, email and the freephone line are also logged. Everything gathered maps to a regulatory or service purpose under UK Gambling Commission licence 38613.

How does Tombola protect my information?

The operator deploys full-site SSL encryption and 3-D Secure 2.0 on every card transaction, backed by the infrastructure of parent company Flutter Entertainment. As a UK Gambling Commission licensee (no. 38613), Tombola must meet strict security and data-handling standards, with responsible gambling tools adding another protective layer for players.

Can I request my data from Tombola?

Yes — UK GDPR gives you the right to access a full copy of the personal data Tombola holds about you. Simply contact support via the 24/7 live chat or email support@tombola.co.uk, verify your identity, and the operator must respond within the statutory timeframe. You can also request corrections or deletion.

Does Tombola share my data with third parties?

Tombola shares data only for legitimate purposes: payment processors, identity-verification services, regulators such as the UK Gambling Commission, and Flutter Entertainment group companies under equivalent protections. The operator does not sell personal data to advertisers, and marketing messages only ever reach players who have actively opted in.

Now that you know exactly how your data is handled, you can jump in with total peace of mind and grab that no-wagering welcome bonus!

Play at Tombola now