This policy explains what personal data casinotrust.org ("CasinoTrust", "we") processes, why, and what rights you have. It is written to meet the EU and UK General Data Protection Regulation (GDPR) and applies to all visitors wherever they are located. Browser storage specifically is covered in the Cookies Policy.
Who is the data controller
The data controller for casinotrust.org is CasinoTrust, reachable at compliance@casinotrust.org. We have not appointed a formal data protection officer because the scale and nature of our processing does not require one; data-protection enquiries sent to that address are handled by the site administrator.
What we collect and why
| Category | What it contains | Source | Purpose | Legal basis (GDPR Art. 6) | Retention |
|---|---|---|---|---|---|
| Emails you send us | Your email address, name if given, message content, any attachments such as screenshots of operator accounts | You, when you write to talk@, support@ or admin@ | Answering your enquiry, investigating operator complaints, correcting errors | Legitimate interests (Art. 6(1)(f)); consent where you ask us to publish your report | Up to 24 months after the last exchange, then deleted; complaint evidence may be kept anonymised |
| Server and CDN logs | IP address, timestamp, requested URL, referrer, user-agent string, response code | Automatically, from your browser's requests, via our hosting and content-delivery provider | Security, abuse and bot detection, debugging, capacity planning | Legitimate interests (Art. 6(1)(f)) | Up to 30 days in raw form; aggregated statistics kept indefinitely |
| Optional analytics | Page URL, referrer, country derived from truncated IP, browser and device class, a random identifier | Analytics provider, only after you click Accept on the consent bar | Understanding which content is read and improving the Site | Consent (Art. 6(1)(a)), withdrawable at any time | Provider-defined, up to 26 months; you can delete the identifier by clearing site data |
| Browser preferences | Theme choice and consent choice (ct-theme, ct-consent) | Stored in your browser's localStorage | Honouring your display and consent choices | Not transmitted to us; strictly necessary storage | Until you clear site data |
We do not collect payment details, identity documents, gambling history or any special-category data. If you include sensitive information in an email, for example about gambling-related harm, we use it only to respond to you and delete it on request.
Who we share data with
We use a small number of processors who act on our instructions under data-processing agreements: our hosting and CDN provider (server logs), our email provider (correspondence) and, only where you have consented, our analytics provider. When you report a problem with an operator, we may share the substance of the report with that operator or its regulator to verify it; we remove your name and contact details first unless you explicitly ask us to pass them on. We do not sell personal data, and we do not share it with advertisers or gambling operators for marketing. We may disclose data where required by law or to protect our legal rights.
International transfers
Our hosting, CDN and email providers may process data in countries outside the European Economic Area and the United Kingdom, including the United States. Where that happens we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum) together with supplementary measures such as encryption in transit and at rest. You can request a copy of the relevant safeguards from compliance@casinotrust.org.
Your rights
Under the GDPR and equivalent laws you have the right to:
- Access — obtain confirmation of whether we process your data and receive a copy of it;
- Rectification — have inaccurate data corrected and incomplete data completed;
- Erasure — have your data deleted where there is no overriding reason to keep it;
- Restriction — ask us to pause processing while a dispute about accuracy or lawfulness is resolved;
- Portability — receive the data you provided to us in a structured, machine-readable format;
- Objection — object to processing based on legitimate interests, including log analysis, on grounds relating to your situation;
- Withdraw consent — for analytics, at any time, without affecting processing already carried out (see the Cookies Policy for how).
Send your request
Email compliance@casinotrust.org from the address your data relates to, stating which right you are exercising. Because we hold no accounts, the sending address is usually sufficient to identify your data; we may ask a follow-up question if necessary to avoid disclosing data to the wrong person.
We respond within one month
We will confirm receipt and answer within 30 days. For complex requests we may extend by up to two further months and will tell you why.
Escalate if unsatisfied
You may lodge a complaint with your national supervisory authority, for example the Irish Data Protection Commission, the UK Information Commissioner's Office, or the authority in your EU member state of residence.
Children
The Site is about gambling and is intended only for adults aged 18 or over (or the higher legal age where you live). We do not knowingly collect personal data from anyone under 18. If you believe a minor has sent us personal data, contact compliance@casinotrust.org and we will delete it promptly. Our Disclaimer and Terms of Use set out the age requirement in full.
Security
The Site is served only over HTTPS, with HSTS enabled. We hold no databases of user accounts, which removes the most common target for breaches. Email is stored with a provider that encrypts data at rest and in transit, access is limited to the editorial and administrative staff who need it, and we use two-factor authentication on all administrative systems. No method of transmission is completely secure; if we become aware of a breach affecting your data we will notify you and the relevant authority as the law requires.
Changes to this policy
We will post any revision on this page with a new "updated" date. If a change materially affects how your data is used, for example a new category of processing or a new analytics provider, we will highlight it here for at least 30 days and, where consent is required, ask for it again through the consent bar.
How to contact us
- Data-protection requests and the controller: compliance@casinotrust.org
- Technical questions about the Site, cookies or the consent bar: support@casinotrust.org
- Editorial matters, corrections and operator reports: contact@casinotrust.org
If gambling is causing you harm, the confidential helplines listed on our responsible gaming page are independent of us and do not require you to share any data with CasinoTrust.