This policy sets out what personal data casinotrust.org ("CasinoTrust", "we") processes, why we process it, and what rights you hold over it. It is written to meet the EU and UK General Data Protection Regulation (GDPR) and applies to every visitor wherever they are — readers in Nigeria also hold rights under the Nigeria Data Protection Act 2023, which we honour through the same request route below. Browser storage on its own is covered by the Cookies Policy.
Who controls your data
The data controller for casinotrust.org is CasinoTrust, contactable at compliance@casinotrust.org. We have not appointed a formal data protection officer, because the scale and nature of what we process does not call for one; anything sent to that address is dealt with by the site administrator.
What we collect, and what for
| Category | What it contains | Source | Purpose | Legal basis (GDPR Art. 6) | Retention |
|---|---|---|---|---|---|
| Emails you send us | Your email address, your name if you give it, the message itself, and any attachments such as screenshots of an operator account | You, when you write to talk@, support@ or admin@ | Answering your enquiry, investigating operator complaints, correcting errors | Legitimate interests (Art. 6(1)(f)); consent where you ask us to publish your report | Up to 24 months after the last exchange, then deleted; complaint evidence may be kept in anonymised form |
| Server and CDN logs | IP address, timestamp, requested URL, referrer, user-agent string, response code | Automatically, from your browser's requests, through our hosting and content-delivery provider | Security, abuse and bot detection, debugging, capacity planning | Legitimate interests (Art. 6(1)(f)) | Up to 30 days in raw form; aggregated statistics kept indefinitely |
| Optional analytics | Page URL, referrer, country derived from a truncated IP, browser and device class, a random identifier | Analytics provider, and only once you tap Accept on the consent bar | Seeing which content actually gets read, and improving the Site | Consent (Art. 6(1)(a)), withdrawable at any time | Provider-defined, up to 26 months; clearing site data deletes the identifier |
| Browser preferences | Your theme choice and your consent choice (ct-theme, ct-consent) | Stored in your browser's localStorage | Honouring the display and consent choices you made | Never transmitted to us; strictly necessary storage | Until you clear site data |
We collect no payment details, no identity documents, no BVN or NIN, no betting history and no special-category data. If an email you send happens to contain sensitive information — about gambling-related harm, for instance — we use it purely to reply to you, and delete it the moment you ask.
Who else sees it
A handful of processors act on our instructions under data-processing agreements: our hosting and CDN provider (server logs), our email provider (correspondence) and, only where you consented, our analytics provider. When you report a problem with an operator, we may pass the substance of that report to the operator or its regulator in order to verify it — with your name and contact details stripped out first, unless you expressly tell us to include them. We sell no personal data, and we hand none to advertisers or gambling operators for marketing. We may disclose data where the law compels us or where we need to protect our legal rights.
Data leaving your country
Our hosting, CDN and email providers may process data outside the European Economic Area and the United Kingdom, the United States included — and, for readers in Nigeria, outside Nigeria. Where that happens we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses (with the UK International Data Transfer Addendum), backed by supplementary measures such as encryption in transit and at rest. Ask compliance@casinotrust.org and we will send you a copy of the relevant safeguards.
The rights you hold
Under the GDPR, the Nigeria Data Protection Act 2023 and equivalent laws elsewhere, you have the right to:
- Access — confirm whether we process data about you and get a copy of it;
- Rectification — have anything inaccurate corrected and anything incomplete filled in;
- Erasure — have your data deleted where no overriding reason to keep it exists;
- Restriction — ask us to pause processing while a dispute over accuracy or lawfulness is sorted out;
- Portability — receive the data you gave us in a structured, machine-readable format;
- Objection — object to processing based on legitimate interests, log analysis included, on grounds relating to your situation;
- Withdraw consent — for analytics, at any moment, without unpicking processing already done (the Cookies Policy shows how).
Send the request
Email compliance@casinotrust.org from the address your data relates to and say which right you are exercising. Since we hold no accounts, the sending address is normally enough to locate your data; we may ask one follow-up question where we need to be sure we are not handing data to the wrong person.
We reply within a month
We acknowledge receipt and answer within 30 days. For a genuinely complex request we may extend by up to two further months, and we will tell you why.
Escalate if we fall short
You can complain to your supervisory authority — in Nigeria the Nigeria Data Protection Commission (NDPC), or elsewhere bodies such as the Irish Data Protection Commission, the UK Information Commissioner's Office, or the regulator in your EU member state.
Under-18s
This Site is about gambling and is meant only for adults of 18 or over — the legal age in Nigeria — or the higher age that applies where you live. We do not knowingly collect personal data from anyone under 18. If you think a minor has sent us personal data, write to compliance@casinotrust.org and we will delete it promptly. The age requirement is set out in full in our Disclaimer and Terms of Use.
Security
The Site is served over HTTPS only, with HSTS switched on. We keep no database of user accounts at all, which removes the single most common target in a breach. Email sits with a provider that encrypts data at rest and in transit, access is limited to the editorial and administrative staff who genuinely need it, and every administrative system is behind two-factor authentication. No method of transmission is ever completely secure; if we learn of a breach affecting your data we will notify you and the relevant authority as the law requires.
Changes to this policy
Any revision goes up on this page with a fresh "updated" date. Where a change materially affects how your data is used — a new category of processing, say, or a different analytics provider — we will highlight it here for at least 30 days and, where consent is needed, ask for it again through the consent bar.
Reaching us
- Data-protection requests and the controller: compliance@casinotrust.org
- Technical questions about the Site, cookies or the consent bar: support@casinotrust.org
- Editorial matters, corrections and operator reports: contact@casinotrust.org
If gambling is doing you harm, the confidential services listed on our responsible gaming page are independent of us, and none of them requires you to share any data with CasinoTrust.