Privacy policy

This policy explains what personal data thecasinopick.com collects, why, on what lawful basis, how long we keep it, and the rights you have under the UK GDPR and the Data Protection Act 2018.

1. Who is the controller

The controller for personal data collected through this site is the operator of thecasinopick.com. Replace this paragraph with your registered company name, company number, registered office and, if you have appointed one, your data protection contact.

You can reach us using the address on our contact page.

2. What we collect

• Contact data you choose to send us: your name, email address and the content of your message
• Technical data: IP address, device and browser type, operating system, referring page, and the pages you view
• Consent data: the cookie choices you make and the date you made them
• Analytics data, only if you consent: anonymous or pseudonymous usage measurement such as page views and session duration
• Marketing and attribution data, only if you consent: which page sent a click to an operator, and whether that click led to a registration reported back to us in aggregate

3. What we do not collect

We do not operate gambling accounts and we never receive your casino login details, payment details, identity documents or gambling history. Those stay with the licensed operator.

We do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.

4. Lawful bases

• Consent (UK GDPR Article 6(1)(a)) — analytics and marketing cookies and similar technologies, and any marketing email you opt into. You may withdraw consent at any time via the privacy choices link in our footer
• Legitimate interests (Article 6(1)(f)) — operating and securing the site, preventing abuse, and understanding aggregate performance where that does not require consent. Our assessment is that this does not override your rights; you may object
• Legal obligation (Article 6(1)(c)) — where we must retain records or respond to a lawful request
• Contract (Article 6(1)(b)) — where you enter into an arrangement with us, for example a commercial agreement

5. Cookies and consent

Non-essential cookies are set to denied by default and run only after you allow them. Our cookie policy lists every cookie, its purpose, duration and category. Consent signals are passed to any tag manager using Google Consent Mode v2 so that measurement respects your choice.

6. Processors and recipients

• Hosting and content delivery provider — serves the site and keeps security logs
• Analytics provider — usage measurement, only with your consent
• Affiliate network and tracking providers — click attribution, only with your consent
• Email provider — delivery of messages you send us or newsletters you request
• Replace this list with the actual named providers you use, and record the transfer safeguards for each

7. International transfers

Some processors may store or access data outside the UK. Where they do, we rely on UK adequacy regulations or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, with a transfer risk assessment where required.

8. How long we keep it

• Cookie consent record — 6 months, then you are asked again
• Server and security logs — up to 12 months
• Analytics data — up to 14 months, or your provider's shorter setting
• Contact and enquiry correspondence — 24 months from the last message, unless a longer period is needed for a legal claim
• Marketing subscription data — until you unsubscribe, plus a suppression record so we do not contact you again

9. Your rights

• Access — a copy of the personal data we hold about you
• Rectification — correction of inaccurate data
• Erasure — deletion where there is no overriding reason to keep it
• Restriction — a pause on our processing while a matter is resolved
• Objection — to processing based on legitimate interests, and to direct marketing at any time
• Portability — a machine-readable copy of data you provided under consent or contract
• Withdrawal of consent — at any time, without affecting processing already carried out

10. Exercising your rights, and complaints

Email us using the address on our contact page. We respond within one month, and will tell you if we need longer because a request is complex.

If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk, by calling 0303 123 1113, or by writing to the ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. You may also seek a remedy through the courts.

11. Security

The site is served over HTTPS. Access to any personal data we hold is restricted to those who need it, and we keep the number of systems holding it as small as possible.

12. Changes to this policy

We will update this page when our processing changes and will note the date of the last revision. Material changes affecting consent will be brought to your attention.