Privacy policy
Explore what are the types of data we gather from our users. Discover how our team of experts at CasinoAlpha UK uses the data and how your personal information is protected.
1. INTRODUCTION
Welcome to CasinoAlpha’s Privacy Policy. This notice explains, in clear terms, how CasinoAlpha (“we,” “us,” or “our”) collects, uses, discloses, and safeguards your personal information when you access or use casinoalpha.com (the “Website”). CasinoAlpha operates as an independent casino review and information platform, and we handle personal data in line with applicable laws, including the General Data Protection Regulation (GDPR).
Data Controller:
Extremoo Marketing SRL
Romania, Dobroesti, Ilfov, Mesteacanului 4
Email: legal@casinoalpha.com
If you have questions about this Policy or about how we process your data, please get in touch via the form available on our contact page.
2. INFORMATION WE COLLECT
2.1. Information You Provide Directly
There are a few ways you may choose to share personal information with us. When subscribing to the newsletter, the only mandatory field is your email address; you may also provide your name, country or region, and language preferences if you wish.
If you reach us via a Website contact form, we process the name and email address you submit, the subject of your message, the content of your inquiry, and any other details you add voluntarily. Where comments or reviews are enabled, we process your name or username, email address, the comment or review content, and any rating scores you decide to post.
2.2. Information Collected Automatically
When you use the Website, certain information is collected automatically through cookies or similar technologies. This includes technical data such as your IP address, browser type and version, device type (desktop, mobile, or tablet), operating system, screen resolution, referring and exit pages, together with the date and time of your visits.
We also collect usage data, for example, the pages you view, how long you stay, click patterns and navigation paths, on-site search queries, links you click (including affiliate links), scroll depth, and other interactions with our content. In addition, we infer general location at country or city level from your IP address; we do not collect precise geolocation. Information stored via cookies and similar tools is treated as cookie data and is explained further in Section 5.
2.3. Information From Third Parties
To operate responsibly, we occasionally receive limited information from other sources. Casino operators we review may provide verification details, such as confirmation of licence validity or game providers, used solely for accuracy checks.
Analytics providers may supply aggregated, anonymised performance metrics, and advertising partners may share ad performance information that does not identify you (non-PII). We do not purchase or obtain personal data from data brokers.
3. HOW WE USE YOUR INFORMATION
We process personal data for the purposes below.
3.1. Purpose Table
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Sending you newsletters | Your email, name, and preferences | Your consent |
| Answering your questions | Information you share in contact forms | Fulfilling our agreement with you or our legitimate interest |
| Making our website work better | How you use our site and technical information | Our legitimate interest |
| Understanding site performance | Cookies, usage patterns, and IP addresses | Our legitimate interest |
| Keeping your data safe | IP addresses, technical details, and access records | Our legitimate interest |
| Meeting legal requirements | Whatever data the law requires us to keep | Legal requirement |
| Tracking affiliate referrals | Click on information and referral sources | Our legitimate interest |
3.2. Detailed Purposes
We may send you information from our Newsletter on casino reviews, bonus recommendations, industry news, and insights about our platform. We will get in touch with you to offer you answers to your questions or to other requests you’ve made
If our team completes an action on our website, it should be because of one of these reasons:
- Our team is fixing how the website works
- We shall offer you a better experience personalised to your preferences
- We need to update your sessions based on your cookie setting preferences
- We need to run an update for security reasons to maintain the safety of our platform
The information and data we gather from you and sort for Analytics has the purpose of us understanding the visitors who benefit from our service, their traffic patterns, and to identify popular content.
Our team also gathers data from users in order to:
- Avoid and detect fraudulent activity
- Verify whether or not the site is safe from security threats
- Protects the service and users from spam
- Enforce the rules
We also collect your data for affiliate marketing purposes, as explained extensively in our Advertiser Disclosure page.
We do this in order to:
- Be able to minimize the referral of each casino company
- To calculate our commission in the right way
- To be able to evaluate if your suggestions match your preferences
Note: If you wish to partner with us, see more details on our Advertise with us page.
3.3. Legitimate Interests
We reserve the right to collect data from you in the legitimate interest. Such cases include, but are not limited to:
- Improving our business model
- Offering free content for our users
- Maintaining the security of our platform in order to prevent fraudulent activities
- Gaining knowledge on user behavior to deliver helpful content
- Analysing performance to optimise user experience
4. LEGAL BASIS FOR PROCESSING UNDER GDPR
For EU/EEA residents, we process personal data under GDPR Article 6. The applicable legal basis depends on the context.
4.1. Consent (Art. 6(1)(a))
We rely on consent where you actively agree to specific processing. This covers newsletter subscriptions, the use of marketing cookies (for example, Google Analytics for EEA users), advertising and marketing communications, and optional data collection such as surveys or preference fields.
You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal. To withdraw, use the Unsubscribe link in any newsletter or adjust your choices in Cookie Settings for cookies.
4.2. Legitimate Interests (Art. 6(1)(f))
We process data on the basis of legitimate interests for website analytics (Matomo), fraud prevention and security, site functionality and improvements, affiliate tracking, responding to enquiries, and general business operations. We have assessed these interests and concluded that they do not override your fundamental rights and freedoms. You may object at any time, see Section 9.6.
4.3. Legal Obligation (Art. 6(1)(c))
Some processing is necessary to comply with legal requirements. This includes complying with court orders or legal processes, tax and financial record-keeping, regulatory compliance, and responding to lawful government requests.
4.4. Contract (Art. 6(1)(b))
We also process data where it is necessary to perform a contract or to take steps at your request before entering into one. This covers providing services you request, processing enquiries and support requests, and fulfilling our obligations under the Terms and Conditions.
5. COOKIES AND TRACKING TECHNOLOGIES
5.1. What Are Cookies?
Cookies are small text files stored on your device. They help us remember preferences and understand how you use the Website.
5.2. Types of Cookies We Use
A. Strictly Necessary Cookies
These are essential for the Website to function and cannot be disabled.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| CookieCarousel | CasinoAlpha | Manages cookie consent banner display | 12 months |
| CookieConsent | CasinoAlpha | Stores your cookie consent preferences | 12 months |
| g_state | CasinoAlpha | Maintains application state and user session | Session |
| Secure-wp-show-GLOBAL ES | CasinoAlpha | WordPress security token for CSRF protection | Session |
Legal Basis: Necessary for site operation / Legitimate interests (GDPR Art. 6(1)(f)); no consent required for strictly necessary cookies.
B. Analytics and Performance Cookies
Help us understand how visitors interact with the Website.
1. Matomo Analytics (Self-Hosted, Privacy-Focused)
| Cookie Name | Purpose | Duration | Data Collected |
|---|---|---|---|
| _pk_id.* | Recognises returning visitors | 13 months | Anonymised visitor ID |
| _pk_ses.* | Tracks pages in current session | 30 minutes | Page views, time on site |
| _pk_ref.* | Stores referral information | 6 months | Traffic source |
What is Matomo?
Matomo (formerly Piwik) is an open-source, privacy-focused analytics platform hosted on our EU servers.
Privacy features:
- EU hosting (data does not leave the EU/EEA)
- No data sharing with third parties
- Automated data deletion after 24 months
- Respects “Do Not Track” (DNT) signals
- GDPR-compliant by design
Data not collected:
- Personally identifiable information (PII)
- Cross-site tracking data
- Advertising profiles
Purpose:
- Understand visitor behaviour and preferences
- Improve content and navigation
- Identify technical issues
- Measure performance
Legal Basis: Legitimate interests (Art. 6(1)(f))—supported by an LIA.
Opt-out:
- Update Cookie Settings
- Enable DNT in your browser (Matomo respects DNT)
More info: https://matomo.org/privacy/
2. Google Analytics 4 (GA4)
| Cookie Name | Purpose | Duration | Data Collected |
|---|---|---|---|
| _ga | Distinguishes unique users | 2 years | Anonymised user ID |
| ga* | Maintains session state | 2 years | Page views, events, session data |
| _gid | Distinguishes users | 24 hours | Short-term user ID |
| _gat | Throttles request rate | 1 minute | Rate limiting |
Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Configuration:
- IP anonymisation enabled
- Data sharing with Google disabled (no advertising features)
- User-ID tracking disabled
- Advertising features disabled (no remarketing)
- Google Signals disabled (no cross-device tracking)
- Data retention: 14 months (auto-deletion)
- Cookie timeout: up to 24 months
Purpose:
- Comprehensive analytics
- Behaviour and content analysis
- Traffic sources
- Conversion tracking (e.g., newsletter signups, affiliate clicks)
- Benchmarking and performance monitoring
Legal Basis:
- EEA/UK users: Consent (Art. 6(1)(a))—explicit opt-in before activation
- Non-EEA users: Legitimate interests (Art. 6(1)(f))
International data transfer: Data may be processed in the USA.
Transfer safeguards:
- EU-US Data Privacy Framework: Google LLC certified (verify at https://www.dataprivacyframework.gov/s/)
- Stndard Contractual Clauses (SCCs): EU Commission-approved
- Additional measures: Encryption, access controls, security audits
Data Processing Agreement: In place with Google (GDPR Art. 28).
Policies and opt-out:
- Privacy: https://policies.google.com/privacy
- Terms: https://marketingplatform.google.com/about/analytics/terms/
- How Google uses data: https://policies.google.com/technologies/partner-sites
- Opt-out add-on: https://tools.google.com/dlpage/gaoptout
- Or use our Cookie Settings to refuse analytics cookies
C. Marketing and Advertising Cookies
Track activity for campaign measurement and relevant advertising.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| utm_* | CasinoAlpha | Tracks marketing campaigns | Session |
Legal Basis: Consent (GDPR Art. 6(1)(a)).
D. Notification Cookies
| Cookie Name | Purpose | Duration |
|---|---|---|
| _webpushEndPoint | Stores web push notification endpoint | 12 months |
| _webpushLastVisit | Tracks last visit for notification timing | 12 months |
Purpose: Enable optional web push notifications for promotions and updates.
Legal Basis: Consent (Art. 6(1)(a)).
5.3. Cookie Consent Management
When you first visit, a cookie banner (CookieCarousel) appears with options to:
- Accept All Cookies (all categories), or
- Reject All non-essential cookies.
Consent must be freely given and is revocable at any time. Your choices are stored in CookieConsent for 12 months, after which we will ask again.
5.4. Managing and Controlling Cookies
You have several options:
Browser settings
- Chrome: https://support.google.com/chrome/answer/95647
- Firefox: https://support.mozilla.org/kb/enhanced-tracking-protection-firefox-desktop
- Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac
- Edge: https://support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge-63947406
Blocking all cookies may affect site functionality.
Analytics-specific opt-out
- Google Analytics: install the opt-out add-on (link above)
- Matomo: use Cookie Settings to reject analytics; enable DNT (honoured by Matomo)
Do Not Track (DNT) signals
- Matomo respects DNT
- Google Analytics does not by default (use the add-on)
- Marketing cookies follow your consent choices regardless of DNT
Industry opt-out tools
- EDAA (EU): https://www.youronlinechoices.com/
- NAI (US): https://optout.networkadvertising.org/
- DAA (US): https://optout.aboutads.info/
5.5. Withdrawing Consent
- Click Cookie Settings (footer) to switch to “Necessary Only” or customise; then Save Preferences
- Or email privacy@casinoalpha.com with subject “Withdraw Cookie Consent” and include approximate visit dates
Effects are immediate and do not affect earlier lawful processing. Some features may be limited.
5.6. Consequences of Disabling Cookies
| Category | Impact |
|---|---|
| Strictly Necessary | Banner may reappear; some security/session features may fail |
| Analytics | No functionality loss; our ability to improve UX is reduced |
| Marketing | Fewer relevant ads; affiliate attribution may be affected |
| Preference | Language/region/currency must be re-selected each visit |
| Notifications | Web push disabled; you may miss updates |
5.7. Third-Party Cookies
Some services place cookies:
Embedded Content
- YouTube videos: Google cookies
- Social share buttons: Facebook, Twitter/X, LinkedIn cookies
- Affiliate tracking: casino operator cookies when you click links
Policies
- YouTube: https://policies.google.com/privacy
- Facebook: https://www.facebook.com/privacy/
- Twitter/X: https://twitter.com/privacy
5.8. Cookie Lifespan and Deletion
- Session cookies: deleted when you close your browser
- Persistent cookies: expire as specified (maximum 24 months)
- You can manually delete cookies via browser settings at any time
5.9. Technical Cookie Implementation
WordPress Integration
- Security cookies (e.g., Secure-wp-show-)
- Application state via g_state
Cookie Security
- Secure flag where HTTPS is available
- SameSite attributes for CSRF protection
- HttpOnly for security-sensitive cookies
5.10. Cookie Audit and Monitoring
We audit cookies regularly to keep this policy accurate.
- Last audit: 14.10.2025
- Next scheduled audit: 11.2026
6. THIRD-PARTY SERVICES AND DATA SHARING
We share data with trusted third parties only where necessary.
6.1. Analytics Services
A. Matomo Analytics (Self-Hosted)
Provider: Self-hosted on our EU servers (no external processor)
Location: Germany
Relationship: We act as Data Controller; Matomo is our tool (not a separate processor)
Data Collected:
- IP addresses
- Pages visited/time spent
- Referral source
- Device type, browser (anonymised)
- Geographic location (country/city from IP)
- Click events and interactions
Data Not Collected:
- PII
- Cross-site tracking
- Data shared with advertisers
Privacy Features:
- EU-hosted (no international transfers)
- No third-party sharing
- Respects DNT
- GDPR-compliant by design
Purpose: Behaviour insights, UX improvements, performance monitoring
Legal Basis: Legitimate interests (Art. 6(1)(f)) — LIA conducted
Retention: 24 months
Opt-Out: Cookie Settings or enable DNT
More Info: https://matomo.org/privacy/
B. Google Analytics 4 (GA4)
Provider: Google LLC
Address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Relationship: Processor under GDPR Art. 28 (DPA in place)
Data Collected:
- IP addresses
- Pages viewed, user journeys
- Session duration, bounce rate
- Traffic sources/referrals
- Device info (type, OS, browser)
- Approximate location (city level)
- Custom events/interactions
- Conversion tracking
Data Not Collected (disabled):
- Advertising features
- Google Signals (cross-device)
- Enhanced advertising measurement
Privacy Configuration:
- Data sharing with Google disabled
- Advertising features disabled
- Google Signals disabled
- Data retention: 14 months
- Cookie timeout: max 24 months
Purpose: Analytics, behaviour insights, traffic sources, conversions, benchmarking, performance monitoring
Legal Basis:
- EEA/UK: Consent (Art. 6(1)(a)) — explicit opt-in
- Non-EEA: Legitimate interests (Art. 6(1)(f))
International Data Transfer: USA
Transfer Safeguards:
- EU-US Data Privacy Framework (Google certified)
- SCCs (EU Commission-approved)
- Additional safeguards (encryption, access controls, audits)
Google Policies:
- Privacy: https://policies.google.com/privacy
- Terms: https://marketingplatform.google.com/about/analytics/terms/
- DPA: https://privacy.google.com/businesses/processorterms/
- Partner sites: https://policies.google.com/technologies/partner-sites
Opt-Out:
- Add-on: https://tools.google.com/dlpage/gaoptout
- Cookie Settings: reject analytics cookies
- Browser: block cookies manually
Your Rights: Access, opt-out, withdraw consent, request deletion
6.2. Comparison: Matomo vs. Google Analytics
| Feature | Matomo | Google Analytics |
|---|---|---|
| Hosting | Self-hosted EU | Google USA |
| Data Ownership | 100% ours | Shared with Google |
| Privacy Focus | Very high | Moderate (configured) |
| GDPR Built-in | Yes | Requires config + consent |
| International Transfer | None (EU only) | Yes (EU → USA) |
| Third-Party Access | None | Google (no ad use) |
| IP Anonymisation | 2 bytes | 1 byte |
| DNT Respect | Yes | No |
| Data Retention | 24 months | 14 months |
| Legal Basis | Legitimate interests | Consent (EEA) |
Why both: Matomo for privacy-first analytics; Google for benchmarking/advanced features.
Your choice: Consent to both, Matomo only, or neither via Cookie Settings.
6.3. Casino Operators (Affiliate Relationships)
Important affiliate disclosure: CasinoAlpha earns commissions when you register/play at casinos through our links.
How affiliate tracking works:
- You click an affiliate link on our site
- The casino places a tracking cookie (typically 30–90 days)
- You register and/or deposit
- The casino attributes the referral to CasinoAlpha
- We receive commission (e.g., €20–€150 CPA or 20%–40% revenue share)
Data shared with the casino: referral source (casinoalpha.com), click timestamp, our affiliate ID, click ID (session).
Data shared back to us: aggregate conversion info and commission due.
We do not receive: your name, email, address, deposit amounts, balances, payment details, or gameplay data.
Once you visit a casino, you are subject to their Terms and Privacy Policy. Review those before registering.
Editorial independence: See our Editorial Policy
Legal Basis: Legitimate interests for affiliate tracking (Art. 6(1)(f)); consent (Art. 6(1)(a)) if required by the operator.
Opt-Out: Reject Marketing Cookies in Cookie Settings (may affect referral attribution).
6.4. Email Service Provider
Provider: Aweber
Purpose: Newsletter delivery and email marketing
Data shared: email address, name (if provided), subscription preferences, engagement (opens/clicks)
Legal Basis: Consent (Art. 6(1)(a))
Privacy Policy: https://www.aweber.com/privacy.htm
6.5. Hosting and Infrastructure
Provider: Google Cloud
Location: EU/EEA
Services: Website hosting, CDN, DDoS protection, SSL/TLS, database management, backups
DPA: GDPR-compliant DPA in place
Data transferred: Operational website data as necessary
Legal Basis: Legitimate interests (Art. 6(1)(f))
6.6. When We Must Disclose Data
We may disclose personal data when legally required:
Legal obligations: court orders, subpoenas, legal processes; compliance with laws/regulations; lawful requests from authorities; tax/financial reporting.
Protection of rights: enforce Terms and Conditions; detect/prevent fraud and security issues; protect our rights, property, safety; protect users and the public.
Business transfers: merger, acquisition, bankruptcy, or sale of assets. We will notify via email and Website notice. Any acquirer must honour this Privacy Policy or seek fresh consent.
With your consent: any other disclosure with explicit consent.
Data minimisation: we disclose only the minimum necessary.
6.7. We Do Not Sell Your Personal Data
CasinoAlpha does not sell, rent, or trade personal data.
Affiliate commissions are not a “sale” under GDPR/CCPA/CPRA because we do not transfer PII to operators.
6.8. Third-Party Links
The Website contains links to casino/third-party sites.
Once you click, their terms and privacy policies apply. We do not control their practices and are not responsible for their content, security, or data handling.
Your responsibility: review third-party privacy policies and use caution when sharing personal information.
6.9. List of Third-Party Data Recipients
| Recipient | Purpose | Location | Data Shared | Legal Basis |
|---|---|---|---|---|
| Matomo | Analytics (self-hosted) | EU (our servers) | IP/usage | Legitimate interests |
| Google Analytics | Analytics | USA | IP/usage | Consent (EEA); Legitimate interests (non-EEA) |
| Casino Operators | Affiliate tracking | Various | Referral info (non-PII) | Legitimate interests |
| [Email Provider] | Newsletter | [Location] | Email, name, preferences | Consent |
| [Hosting Provider] | Website hosting | EU | Operational data | Legitimate interests |
| [CDN Provider] | Content delivery | Global | IP, pages requested | Legitimate interests |
Full details: see subsections above.
7. INTERNATIONAL DATA TRANSFERS
We process the data we gather from you within the EU/EEA area, since the infrastructure of our platform is EU-based. CasinoAlpha’s services are currently hosted in Germany and the UK. Matomo is also hosted on EU servers, using data centres from the EU.
As a consequence, all your data is handled according to the principles and the directives of the GDPR law.
7.2. Transfers Outside EU/EEA
Part of the data we use is transferred internationally, primarily to the United States through Google Analytics. Google LLC, USA, processes analytics data on US servers to provide its service.
Google LLC is certified under the EU-US Data Privacy Framework. You can find more information on it at https://www.dataprivacyframework.gov/s/.
Google also keeps additional security measures, including:
-
TLS 1.3 encryption during the transmission of data
-
Encryption of data at rest, strict access to the controls that limit who can access your data
-
Standard third-party security audits
-
Transparency reports about government data requests
-
Legal mechanisms to challenge illegal data access attempts
You can install Google’s opt-out browser add-on from https://tools.google.com/dlpage/gaoptout in order to block GA tracking completely, remove your consent through your Cookies settings in order to immediately cease data transfers, or opt to use only Matomo analytics, which is EU-hosted and involves no internal transfers whatsoever.
The casino brands present on our platform are all licensed by the UKGC authority.
Keep in mind that when you access a casino site from our platform, you enter a direct relationship with them, and their privacy policies decide how your data is used. This is also valid for different situations when you interact with social media sharing buttons. Platforms like X, Facebook, and LinkedIn may transfer data between the UE and the US under their own Standard Contractual Clauses or Data Privacy Framework certifications.
7.3. Adequacy Decisions
The EU Commission admits some countries as offering adequate protection, such as Japan, New Zealand, the UK, and the USA, for entities certified under the DPF.
7.4. Your Rights Regarding International Transfers
- You are entitled to be fully informed about how we use your data
- You are entitled to object and withdraw your consent
- You are entitled to ask for details about SCCs and DPF certifications
- You are entitled to opt out via Cookie Settings
7.5. No Transfer to High-Risk Jurisdictions
We don’t transfer data to countries or organisations subject to international sanctions, known for mass surveillance without safeguards, or lacking adequate protection measures.
7.6. Monitoring Legal Changes
CasinoAlpha’s team monitors developments about Schrems II, DPF updates, etc., and modifies our approach. Any change in the material will be seen in our Privacy Policy.
We keep track of developments about Schrems II, DPF updates, etc., and adjust our approach.
8. DATA RETENTION
8.1. Retention Periods
| Data Type | Retention Period | Reason |
|---|---|---|
| Newsletter subscribers | Until unsubscribe + 30 days | Processing unsubscribe requests |
| Contact form inquiries | 2 years from last contact | Support history/legal requirements |
| Analytics data | 24 months | Performance analysis |
| Analytics data | 14 months | Performance analysis |
| Cookies | As specified in Section 5 | Session to 24 months |
| User accounts | Until deletion + legal requirements | Account management |
| Aggregate/anonymised data | Indefinitely | Not personal data |
8.2. Retention Criteria
CasinoAlpha believes the goal has been met once we meet the specific goal for which we gathered your data. Afterwards, we don’t need to keep hold of them anymore.
8.3. Secure Deletion
Your sensitive data is safely erased or anonymized. The backup of this said data is removed in 90 days or less. The same pattern and instructions follow for third-party services associated with or involved.
8.4. Exceptions
CasinoAlpha only makes exceptions when the law requires us. Usually, these are separate cases of legal claims or specific legal requests. Any piece of data collected cannot immediately or obviously identify you or your address. It is usually used for statistics.
9. YOUR RIGHTS UNDER GDPR
For UK residents, the following rights apply.
9.1. Right to Access
You have the right to request a copy of the personal data we have and a reason for how we will use it. Please fill out the form on our Contact page with your full name, email, and the reason for your request. Our team of experts will get back to you with an answer between 30 and 60 days
CasinoAlpha’s service is free unless there are too many or unreasonable requests.
9.2. Right to Rectification
If your personal data is inaccurate or incomplete, you need to get in touch with us in order to have us correct it. Our team will get back to you in up to 30 days. If we decide not to make a change, we will still keep a record of your request.
9.3. Right to Erasure / Right to be Forgotten
You are entitled to ask us to delete your personal data where this is possible – for instance, when the data is no longer helpful for the aim for which it was gathered or when you remove your consent, and there is no other legal reason for processing. To request erasure, you can submit your request using the contact page form on our dedicated page.
Our team of experts will respond to every valid request within 30 days.
9.4. Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in specific cases, such as when processing is unlawful but you prefer restrictions rather than erasure, or when we no longer need the data for processing. If our team of experts agrees to restrict the procession, we shall continue to store data but shall limit any further processing to what is necessary.
9.5. Right to Data Portability
Since the processing of your personal information is based on your consent or on a contract with you and is a process carried out by automated means, you have the right to receive the personal information you have provided us in a structured, commonly used, and machine-readable format, such as CSV, JSON, or XML.
9.6. Right to Object
You can object at any time to the processing of your personal data that is based on our interests, and you also have the right to object to the processing of your data for direct marketing purposes.
If you opt to object to processing data on legitimate interests, we will cease that processing of data unless we can argue compelling legitimate reasons for the processing that override your interests and rights.
9.7. Rights Related to Automated Decision-Making
You have the right not to be subject to a decision based exclusively on automated processing, including profiling, if that option produces legal effects that affect you. Currently, we do not make such exclusively automated decisions or engage in profiling that has legal or similar effects.
9.8. Right to Withdraw Consent
You can withdraw your consent at any time. As far as the newsletter subscription goes, you can withdraw your consent simply by clicking the Unsubscribe link in one of the emails we have sent you. In order to edit cookie permissions, you can do so by updating your Cookie Settings.
9.9. How to Exercise Your Rights
In order for you to exercise data protection rights, you simply need to get in touch with our team by email at legal@casinoalpha.com, or preferably by using the contact form on our dedicated page.
When you contact us, please include your full name, email address, and a clear description of the right you wish to exercise.
It usually takes up to 30 days for us to respond, but some elaborate situations may require 60 days.
9.10. Right to Lodge a Complaint
If you believe that our processing of your personal data infringes applicable data protection law, you are entitled to file a complaint with your local data protection authority.
10. DATA SECURITY
We always take the right technical and organizational measures to keep your personal data secure.
10.1. Technical Measures
The TLS 1.3 protocol automatically encrypts all the information it receives. CasinoAlpha’s hosting company has ISO 27001 certification. Our team uses firewalls to block access that we do not authorise.
CasinoAlpha’s team monitors systems in real time with intrusion detection alerts and quickly applies security patches. Any saved passwords will be hashed under bcrypt, and we use role-based access control to make sure that only authorized individuals are able to access information.
Admin accounts require two-factor authentication, and all backups are encrypted and stored in a secure manner.
10.2. Organisational Measures
- Company policies for keeping data safe
- Providing employees with constant training
- Restricted access to encrypted data
- NDAs
- Verifying a vendor’s plans and actions for incidents
- Regular security verifications
10.3. No Absolute Security
No platform can offer 100% safe navigation sessions. Hence, our team recommends that you use unique and strong passwords and always make sure to log out of shared devices or networks when you suspect any strange activity.
10.4. Data Breach Notification
If our team believes there’s any danger to your rights and freedoms, CasinoAlpha feels responsible to tell the supervisory authority within 72 hours of a personal data breach. We will let our visitors know right away if we believe the risk is significant.
CasinoAlpha shall share the reason for the breach, what the potential consequences are, mesaures than can be taken, contact point for more information, and recommendations for taking precautionary measures.
10.5. Phishing and Security Warnings
CasinoAlpha won’t ever ask for your password or payment details through email, nor send you urgent “account problem” links.
If you happen to receive a suspicious message about an entity claiming to represent CasinoAlpha, we strongly recommend that you don’t click any link or download any included files.
11. CHILDREN’S PRIVACY
CasinoAlpha is a platform meant solely for adults. We never knowingly collect data from minors, and this, we are not liable for unauthorized use by minors.
Parental Controls:
- Net Nanny (https://www.netnanny.com),
- Qustodio (https://www.qustodio.com),
- Norton Family (https://family.norton.com),
- Kaspersky Safe Kids (https://www.kaspersky.com/safe-kids), and built-in OS controls (Windows Family Safety, macOS/iOS Screen Time, Android Family Link)
Organisations:
- GamCare: https://www.gamcare.org.uk
- BeGambleAware:mhttps://www.begambleaware.org
- NCPG (US): https://www.ncpgambling.org
12. AFFILIATE MARKETING DISCLOSURE
12.1. Transparency Notice
Even though we are an affiliate marketing platform and may earn commissions when you use our links from the site to sign up or play at casino sites, this doesn’t change the terms of the bonus or the costs required from you.
12.2. How Affiliate Marketing Functions
- You should visit CasinoAlpha at the posted link
- The casino adds a cookie that lasts up to 90 days
- You need to sign up and make a payment at the casino
- The casino brand attributes the referral to CasinoAlpha
- Our company earns the commission
Commission types:
- CPA that can be between £20 to £150 per eligible player
- Revenue Share, which can range between 20%-40% of net gaming revenue
- A hybrid, which is a combination of CPA and revenue share
We receive a confirmation of your registration and payment, the commissions the company owes us, and aggregated data, such as a player from CasinoAlpha deposited.
We are not allowed access to players’ personal data, such as you name, email, payment amount, or gameplay data
We don’t receive access to your personal data, such as name, email, deposit amount, or gameplay data.
12.3. Impact on Your Experience
When you’re a user, you need to know that affiliate tracking won’t affect signup, promotions, rollover rules, or other details, such as odds and payouts.
12.4. Editorial Independence
The commissions received by CasinoAlpha won’t influence our ratings. We apply our 47-factor methodology, only post licensed platforms, and adjust ratings based on player feedback and testing.
12.5. Sponsored and Featured Content
CasinoAlpha’s team always adds tags for content that is paid for on our website, even if these cases are not common. You will come across tags like “Featured Partner/Featured Partnership”, “Exclusive Offer(s)”, “Sponsored Post”, and “Ad/Advertisement”, etc.
However, if the content isn’t labelled, or even if it is, it will follow the standard editorial processes.
Any instance of non-labelled content follows standard editorial processes (it can still contain affiliate links)
13. CONTACT INFORMATION & DATA PROTECTION OFFICER
13.1. General Contact
If one of our visitors has a question or a request regarding this policy, they can access our Contact page and send us a message with the issue in the contact form. We will provide an answer in 30 days or even less in minor cases. Still, if one has a more complex inquiry, we shall be able to extend this timeframe to 60 days, but we shall notify you of any delay.
13.2. Company Information
Our legal name and registration details are the following:
- Registration Number J23/6289/2017
- Our registered address in Romania is at Dobroesti, Ilfov, Mesteacanului 4
- Our VAT Number is RO38630895
14. CHANGES TO THIS PRIVACY POLICY
14.1. Right to Modify
CasinoAlpha’s team reserves the right to modify our Privacy Policy from time to time. When we edit this page, it is commonly due to us making a change in our practices, we have prepared and shared a new service, a law has been updated, or we have updated it according to the recommendations received from other users.
14.2. How We Notify You
CasinoAlpha will announce all the major changes that took place regarding our Privacy Policy before they take effect. Readers who are subscribed to our newsletter will receive an email from our team, and we shall display a prominent notice or banner on our website. Whenever possible, CasinoAlpha will offer you at least a 30-day notice before the changes take effect so you have actual time to review them.
As far as minor updates go, such as adding extra clarifications or fixing typos, our team will only change the Last Update date at the top of this page. As soon as we update the page with the minor changes, they go into effect.
15. YOUR PRIVACY RIGHTS SUMMARY
| Right | What It Means | How to Exercise |
|---|---|---|
| Access | Get a copy of your data | By using the form on our Contact page |
| Rectification | Correct inaccurate data | By using the form on our Contact page |
| Erasure | Request deletion | By using the form on our Contact page |
| Restrict | Limit processing | By using the form on our Contact page |
| Portability | Export your data | By using the form on our Contact page |
| Object | Object to legitimate-interest processing | By using the form on our Contact page |
| Withdraw Consent | Revoke consent | Cookie Settings or Unsubscribe |
| Complain | Contact your DPA/ICO | Links in Section 9.10 |
ACKNOWLEDGMENT
BY USING THIS WEBSITE, YOU ACKNOWLEDGE THAT:
- You have read and understood this Privacy Policy
- You agree to the collection, use, and disclosure of your personal information as described
- You consent to cookies according to your Cookie Settings
If you do not agree, please do not use the Website.
Why You Should Trust Us
Integrity
Objective reviews. Unbiased ratings. Transparent expert information.
Player Control
Empowering gamblers in the fight against addiction.
Safety
Safe online gambling. Casino sites with the latest encryption & security protocols.
Independency
Unique online casino database. Independent research. Authentic data analysis
Budgeting
Secure management guidance for online casino transactions
Progress
Evolving for players: adapting our practices to meet your needs!