Privacy Notice

1. Who We Are

CasinoKineto operates as an independent editorial and comparison publication for UK casino information. We are not a gambling operator and we do not hold player balances, process bets, or run gaming services. For privacy law purposes, CasinoKineto acts as a data controller for personal data described in this notice. If you have questions about this policy or the way your information is processed, you can contact our data protection mailbox at dataprotection@casinokineto.uk. Postal contact details can be provided on request for formal rights submissions.

2. Scope of This Policy

This policy applies to data collected through casinokineto.uk and related communication channels used for editorial support. It covers visitors, readers, people who submit correction requests, and individuals contacting us about compliance or affiliate transparency. It does not apply to third-party casino websites reached through links on our pages. When you click an external operator link, that destination controls its own data handling. We recommend reading each third-party privacy notice because identity checks, payment processing, and account controls happen under that operator's policies.

3. Data We Collect

We collect limited categories of data to keep the site functioning and to maintain editorial quality. Technical data may include IP address, browser type, device characteristics, referring pages, and timestamps. Consent data includes your age-gate confirmation and cookie preference setting stored locally in your browser. Communication data includes your name, email address, and message content if you contact us directly. We may also keep internal notes connected to a complaint or correction request so we can verify what changed and when. We do not intentionally collect special category data and ask users not to send unnecessary sensitive information.

4. Lawful Bases Under GDPR and UK GDPR

Our processing is based on lawful grounds set out in Article 6 GDPR and corresponding UK GDPR provisions. We rely on legitimate interests for maintaining site security, troubleshooting technical errors, and improving readability of editorial pages. We rely on consent for non-essential cookies where required. We rely on contractual necessity or pre-contract steps when responding to requests that require a direct exchange of information, such as a correction workflow you initiate. We rely on legal obligation when records must be retained for compliance, fraud prevention, or regulator-facing enquiries.

5. How We Use Data

Information is used to run and improve the editorial platform, monitor site reliability, answer reader enquiries, and document changes in published casino comparisons. We use aggregated metrics to understand which pages are most useful and where readers abandon long-form content. We also use communication history to avoid duplicate responses and keep a clear audit trail when a factual correction is requested. We do not sell personal data. We do not profile users for gambling behaviour prediction. We do not send unsolicited marketing newsletters unless a user explicitly opts in through a separate mechanism.

6. Cookies and Local Storage

CasinoKineto uses cookie and local storage controls for core functionality. The age gate state and cookie preference are saved locally using browser storage keys. Essential tools may remember language, rendering preferences, and consent selections. Where analytics scripts are used, they operate under consent choices and may collect pseudonymised interaction signals. Full cookie details are explained in our dedicated cookie policy. You can change preferences at any time through browser controls or by clearing site data. Blocking essential storage may affect age-gate persistence and certain accessibility features.

7. Data Sharing and Processors

We share data only when necessary with trusted service providers that support hosting, security monitoring, analytics, email routing, and technical maintenance. These partners act under written instructions and are not permitted to use data for unrelated purposes. We may disclose limited information where required by law, court order, or legitimate regulatory request. If the website structure changes through merger or asset transfer, personal data may move as part of that transaction, but recipients must continue to honour rights and safeguards aligned with this policy.

8. International Transfers

Some processors may handle data outside the UK or EEA. Where transfers occur, we use recognised safeguards such as adequacy regulations, standard contractual clauses, and supplementary controls where appropriate. We assess transfer risk in relation to the type of data processed and the service involved. If we cannot apply suitable safeguards, we do not proceed with that processor for personal data tasks. Individuals can request high-level information about transfer mechanisms by contacting our data protection mailbox.

9. Retention Periods

We keep personal data only for as long as needed for the original purpose and compliance duties. Server logs are typically retained for short operational windows unless a security event requires longer analysis. Reader emails and correction requests may be retained for up to two years to preserve decision history and avoid repeating verification work. Legal or fraud-related records may be kept longer when required by law or ongoing proceedings. At the end of retention, data is deleted, anonymised, or isolated under restricted access depending on technical constraints.

10. Your Rights

You may have the right to access your data, request correction, request erasure, restrict processing, object to certain processing, and request portability where technically feasible. You can also withdraw consent for consent-based processing without affecting prior lawful processing. We may need to verify identity before completing rights requests to protect against unauthorised disclosure. If you believe your request was not handled properly, you can complain to the Information Commissioner's Office in the UK. We encourage contacting us first so we can resolve the issue quickly and transparently.

11. Security Measures

We apply proportionate safeguards including access controls, software updates, encrypted transport protocols, and operational review of third-party integrations. Administrative access is limited to authorised staff and contractors with a clear need to know. We monitor for suspicious traffic and run periodic checks on link integrity and script behaviour. No system can guarantee absolute protection, but we maintain incident response steps to contain and investigate issues. If a breach creates a high risk to individuals, notifications will be made in line with applicable law.

12. Children's Data

This site is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If we learn that personal data from a child has been submitted, we will remove it as soon as reasonably possible and take steps to prevent repeat collection. Parents or guardians who believe their child has provided information to CasinoKineto should contact us immediately at dataprotection@casinokineto.uk.

13. Updates to This Notice

We may revise this privacy notice to reflect legal updates, operational changes, or new site features. Material updates will be posted on this page with a revised date. Where required, we will refresh consent prompts or provide additional notice before changes take effect. Continued use of the site after publication of changes means you acknowledge the updated policy, except where consent is required for specific processing activities.