Join NowPrivacy Policy – Nolimit City
This Policy covers how Nolimit City Stockholm AB handles personal data on nolimitcity.uk.com. Reading it in full helps you understand what we collect, why we collect it, and what control you hold over your own information.
Our Role as Data Controller
Nolimit City Stockholm AB sits at the centre of every data decision made on this site. We determine the purposes and methods of personal data processing, which makes us the Data Controller under applicable privacy law.
Our registered address is Kungsgatan 49, 111 22 Stockholm, Sweden. We operate as a wholly owned subsidiary of Evolution AB, and certain data processing activities connect to wider Evolution Group operations. Any questions about how we handle your data go to [email protected]. Account closure requests go to [email protected].
The Legal Ground Behind Every Data Decision
We do not process personal data without a lawful reason. Every processing activity we carry out rests on one of four foundations:
- Consent. You gave us explicit permission for a specific use of your data;
- Contract. Processing is necessary to deliver the service you signed up for;
- Legal obligation. A law or regulation requires us to process certain data;
- Legitimate interests. We have a valid business reason that does not override your rights or freedoms.
The foundation we rely on varies depending on the purpose. The table in the next section shows which basis applies to each activity.
Why We Process Your Data
The table below maps every processing activity to the data it uses and the legal ground behind it.
| Processing Activity | Data Categories Used | Legal Foundation |
| Responding to your questions, comments, and support requests | Name, email address, and content of your message | Legitimate interests |
| Sending product news, release updates, and promotional content | Name, email address | Consent |
| Running contests, polls, lotteries, and prize promotions | Name, email address, phone number | Consent |
| Defending or pursuing legal claims | Name, email address, phone number, other relevant data | Legitimate interests |
| Detecting fraud and protecting platform security | IP address, log data, device information | Legitimate interests |
| Site analytics, product research, and campaign measurement | IP address, location, device data, activity data | Legitimate interests |
| Compliance with gambling licences and regulatory requirements | Name, company name, other required data | Legal obligation |
| Connecting your account to social sharing features | Social profile data, User ID | Legitimate interests |
| Account registration and game access on the Playin site | Email address, social account data | Consent |
| Sharing data within Evolution Group for service delivery | Name, email address, company name | Legitimate interests |
This table reflects the primary purposes and is not exhaustive. We update it when business needs or legal requirements change.
Where Your Data Comes From
Two channels feed our data collection process. You should check them, so that you can know how your data is collected:
- The first is information you give us directly. Registration forms, support requests, contest entries, and account edits all involve you entering data that we then store and process. The accuracy of this data depends entirely on what you submit;
- The second is data our systems collect passively. Every visit to nolimitcity.uk.com generates technical signals: your IP address, the device and browser you use, how you navigate pages, and how long sessions last. Cookies and similar tools capture this information automatically. Our Cookie Policy covers the specific technologies involved and explains how to manage them.
Where Your Data Goes
We keep personal data within the boundaries of legitimate business operations. Transfers happen in three situations. Here they are:
- Within the Evolution Group. We share data with other group entities to maintain service continuity, run anti-fraud programs, meet responsible gaming requirements, and support marketing activities. An Intra-Group data processing agreement, including Standard Contractual Clauses, governs all transfers between group companies;
- To third-party processors. We pass data to vendors who act under our instructions. Cloud storage providers, marketing platforms, and security auditors fall into this category. Every processor signs a contract that holds them to our data protection standards. They cannot use your data for their own purposes;
- To authorities and courts. We disclose data when law or regulation requires it. This includes responses to official investigations, anti-money laundering obligations, and court orders. We disclose only what the specific legal requirement demands.
Any transfer outside the EU/EEA uses Standard Contractual Clauses or equivalent legal safeguards. We do not sell your data to unrelated commercial parties.
How We Protect What We Hold
Security measures run across the full data lifecycle at Nolimit City Stockholm AB. Technical controls include encryption in transit and at rest, role-based access restrictions that limit who sees which data, and session protections that block unauthorised access during active use. Physical controls govern the facilities where our servers operate. Organisational controls include staff training, internal protocols, and regular security reviews.
We update these measures continuously to reflect evolving threats and regulatory expectations. No system offers absolute guarantees, but our approach follows industry standards for data protection at every layer.
How Long Do We Store Your Data
Retention periods depend on two factors: the purpose for which the data was collected, and the legal or regulatory minimum that applies in your jurisdiction.
Active account data stays with us for as long as your account remains open. Closed account records stay on file for the period required by gambling regulations, anti-money laundering rules, and tax obligations, typically between five and seven years, depending on the jurisdiction. Data collected solely for marketing purposes disappears when you withdraw consent or close your account.
When neither a business purpose nor a legal requirement justifies continued storage, we delete or anonymise the data.
Rights You Can Exercise
You hold a set of enforceable rights over your personal data. Send any request to [email protected]. We may ask you to verify your identity before we act on the request, to protect your data from third-party misuse. We respond to all valid requests within the timeframe required by applicable law. Below is what each right covers in practice:
- Access. Ask us whether we hold your data and request a copy of what we have on file;
- Correction. Point out inaccuracies or gaps in your data and ask us to fix them;
- Deletion. Ask us to remove your data where it is no longer needed, subject to legal retention rules that may prevent full erasure;
- Objection. Push back against processing based on legitimate interests, including any direct marketing we send you;
- Restriction. Ask us to pause processing while a dispute or accuracy check resolves, rather than deleting the data outright;
- Consent Withdrawal. Pull back any consent you previously gave. Withdrawal takes effect going forward and does not undo lawful processing already completed;
- Portability. Request your data in a structured, machine-readable format and ask us to transfer it to another controller where technically possible;
- Supervisory Complaint. Take a complaint directly to the data protection authority in your country.
Some rights carry limitations under specific legal frameworks. Where a limitation applies to your request, we explain the reason at the time we respond.
One important note: if your rights concern data from games you played at an online casino rather than directly on nolimitcity.uk.com, contact that casino. Licensed operators control player data independently from us and handle those requests themselves.
Policy Updates
We revise this Policy when our data practices change or when legal and regulatory requirements shift. The version number and effective date at the top of this page always reflect the current text. Continued use of nolimitcity.uk.com after a revision takes effect constitutes acceptance of the updated terms. If a revision affects your rights in a material way, we will take steps to notify you before the change applies.