Privacy policy – Casino Not on GamStop

An information site about online casinos, including the ones operating outside GamStop, needs very little personal data in order to run for its readers in Great Britain, and Casino Not on GamStop holds itself to that minimum. The UK GDPR and the Data Protection Act 2018 are the instruments that apply. Article 13 of the UK GDPR obliges a controller to inform, and this policy does so.

Controller

Responsibility for the processing rests with the body that operates Casino Not on GamStop, which is the controller under Article 4(7) UK GDPR. Its name, its address and an e-mail address sit at payoutnongamstop.com, and that same route serves any question about personal data.

What is processed

A log entry is created by the server whenever a page is fetched. It carries an IP address, a date and a time, the address asked for, the volume of data returned, the page that led there and the browser type. Security and the tracing of abuse are what the logs are for. Once 90 days have passed they are erased or trimmed so that no individual can be picked out of them. Correspondence is the other source: a name, an e-mail address and the message itself, kept solely for the purpose of replying. There are no reader accounts here, no deposits and no stakes, so no payment data and no identity paperwork is gathered.

Lawful bases and purposes

Two bases carry the processing. Logs and abuse prevention answer to the controller’s legitimate interest in a site that works and stays secure (Article 6(1)(f) UK GDPR), and replying to a message rests on that same interest. Everything else — the non-essential cookies and the measurement of readership — turns on consent (Article 6(1)(a) UK GDPR read with regulation 6 of PECR) and begins only once consent exists. Consent may be withdrawn whenever the visitor wishes, and Article 7(3) confirms that this does not undermine the lawfulness of what was done beforehand. No decision is automated, and nothing is profiled.

Retention

Nothing is held beyond what its purpose demands. Server logs go after no more than 90 days. Correspondence is kept until the matter is finished, and then for as long as is needed to answer any claim that might follow. A message may be sent or not, as the sender prefers, but a reply cannot be given without one.

Recipients and transfers outside the UK

Personal data is never sold. Those who receive it are processors carrying out the controller’s instructions in the areas of hosting, content delivery and e-mail (Article 28 UK GDPR), together with public authorities where the law demands disclosure. Data leaves the United Kingdom only for a country covered by adequacy regulations, or under appropriate safeguards of the kind found in the International Data Transfer Agreement or the UK Addendum (Article 44 onwards).

Rights

The rights available to every person are those of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20), along with the right to object to processing that rests on legitimate interests (Article 21). A request receives an answer without undue delay and inside one month of arriving; Article 12(3) allows that month to be stretched by two further months where the circumstances call for it.

Supervision and complaints

The Information Commissioner’s Office (ICO) acts as the supervisory authority. Where a person considers that their data has been processed in breach of data protection law, Article 77 UK GDPR gives them the right to complain to it.

Last updated: 12 November 2026.

Content created by the «Casino Not on GamStop» team