Data retention after deletion request

Roedd y cais yn llwyddiannus.

Dear Gambling Commission,

Could you please let me know how long the maximum amount of time an online gambling company can legally retain personal data for after an account has been closed.
Also if possible, could you please point me in the direction of the legislation which specifically references the amount of time a company can retain personal data.
The company in question is an online bookmaker who have refused to delete personal data after an account has been closed by the customer and to which the customer did not agree to any of the updated terms and conditions from the company.

Yours faithfully,

Mark McNamara

Freedom of Information, Gambling Commission

Dear Sir/Madam

Thank you for your request for information relating to personal data rights.

I am writing to advise you that the information you requested is not held by the Gambling Commission.

Due to the nature of the information that you are seeking, your request would be more appropriately addressed to the Information Commissioners Office (ICO).

https://ico.org.uk/

If you have any queries about this email, please contact us.

Kind regards

Freedom of Information Team
Gambling Commission
Victoria Square House
Victoria Square
Birmingham B2 4BP

This email and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please return it to the address it came from indicating that you are not the intended recipient and delete it from your system. Do not copy, distribute or take action based on this email. Freedom of Information requests can be submitted either by email ([email address]) or by writing to: FOI request Gambling Commission Victoria Square House Victoria Square Birmingham B2 4BP Please clearly state that your request is under the Freedom of Information Act.

Dear Freedom of Information,

Thank you very much for your quick reply.

The online bookmaker in their response to the customer, which I have included here from the main part of their email below in quotations, they reference the Gambling Commission.
In that respect the online bookmaker have indicated that you have some form of guidance and regulations which prevents them from deleting customers data for 5 years and for the retention of the personal data.

----------
"The gambling industry is heavily regulated and as an operator we are required to comply with various laws, regulations and guidance. This of course includes the General Data Protection Regulation, however it also includes laws and regulations relating to gambling, tax, and anti-money laundering as well as guidance from regulatory bodies such as the British Gambling Commission.
In regards to customer data, our obligations in respect of all of the above require us to maintain customer data for a period of at least five years after the end of the customer relationship to ensure continued compliance. As such, we are unable to erase your data as requested".
----------

For clarification and to ensure I have not misunderstood you, the Gambling Commission do not hold any such guidance or regulations regarding the deletion of customers data or the retention of customers data and in that respect it would be safe to conclude that the online bookmaker in question is acting in a deceitful manner.

Yours sincerely,

Mark McNamara

Freedom of Information, Gambling Commission

Dear Sir/Madam

The Gambling Commission published the following guidance on its website to help Gambling businesses ensure they comply both with the GDPR and with our regulatory framework:

https://www.gamblingcommission.gov.uk/fo...

Any concerns about the way an organisation is handling your personal information should be directed to the ICO.

Kind regards

Freedom of Information Team
Gambling Commission
Victoria Square House
Victoria Square
Birmingham B2 4BP

This email and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please return it to the address it came from indicating that you are not the intended recipient and delete it from your system. Do not copy, distribute or take action based on this email. Freedom of Information requests can be submitted either by email ([email address]) or by writing to: FOI request Gambling Commission Victoria Square House Victoria Square Birmingham B2 4BP Please clearly state that your request is under the Freedom of Information Act.