Privacy Policy
This page sets out what personal information Vegas Spins gathers from visitors, why, where it is kept, who it is shared with, and how to use your rights under UK privacy law. Its technical companion — cookies, analytics, browser storage — lives on the Cookie Policy page; this page is the plain-English version of the same arrangement.
Vegas Spins runs as an independent informational platform; the broader context is on the About page. This privacy policy covers the Vegas Spins website alone. The moment a reader clicks through to an operator's site, that operator's own privacy policy takes over; Vegas Spins shares no data with operators beyond the limited form described below.
1. What Vegas Spins is
Vegas Spins publishes reviews and guides on online casinos open to UK players. The flagship operator review is the Vegas Spins Casino homepage. The site hosts no games, runs no player accounts, takes no deposits, holds no funds and processes no withdrawals. There is no signup, and no login. A default visit involves no data exchange beyond ordinary web traffic. Where Vegas Spins does collect personal data — for instance when you write to us through the contact channels — this page spells out exactly what becomes of it.
2. UK privacy law context
Vegas Spins handles personal information in keeping with the UK GDPR and Data Protection Act 2018 and the thirteen UK GDPR principles overseen by the Information Commissioner's Office (ICO). European visitors have their GDPR rights honoured too. Californian visitors have their CCPA rights honoured so far as they apply. Wherever a stricter rule applies under any of these frameworks, the stricter rule prevails.
3. What data Vegas Spins collects
Three categories. Technical traffic data, voluntarily submitted contact data, and aggregated analytics.
| Category | What is collected | Why | Legal basis |
|---|---|---|---|
| Technical traffic data | IP address (anonymised after 24h), browser type, device type, page URL requested, timestamp, referrer. | Serve pages, prevent abuse, debug performance issues. | Legitimate interest under UK GDPR Article 6 legitimate interest. |
| Voluntary contact data | Name, email address, message content, supporting documents you choose to attach. Submitted only if you write to us. | Reply to your enquiry. | Consent under UK GDPR consent basis (you provide the data; we use it for the stated purpose). |
| Aggregated analytics | Pseudonymous traffic statistics generated by Google Analytics 4 with IP anonymisation enabled. | Understand which pages are useful and which are not. | Consent (you can decline analytics cookies on first visit). |
There are several things Vegas Spins deliberately does not gather. No financial data, since payments are never processed on this domain; no gambling-account log-ins, since the site runs no accounts; nothing biometric; no location finer than the country level, which is merely inferred from an anonymised IP; and none of the special categories such as race, religion, health, sexual orientation or political opinion. Behavioural ad targeting and remarketing have no place on the site either; for how it actually pays its way, see the Affiliate Disclosure page.
4. Cookies and similar technologies
The cookies Vegas Spins relies on, the third-party services that set them, and the ways to control them are detailed on the Cookie Policy page. In short: strictly necessary cookies (page loading, consent-banner state, abuse prevention) are always set; analytics and affiliate-tracking cookies are set only once you consent through the cookie banner; and you can revise that choice at any time via the link in the footer.
5. Affiliate links and operator-side tracking
Clicking an outbound operator link on Vegas Spins sets off three things. First, an internal redirect at /go logs the click for our analytics (whether or not you carry on). Second, your browser is forwarded to the operator's site. Third, the operator may set its own cookies and count the visit as a referral attribution. Vegas Spins passes the operator no name, no email and no other identifying personal data. All the operator learns is that "a visitor arrived from Vegas Spins". Should you go on to open an account on the operator's site, that registration falls under the operator's own privacy policy, not this one.
6. How long data is retained
- IP addresses: a raw IP is retained for no more than 24 hours to guard against abuse, after which it is anonymised by stripping the final octet on IPv4 or the last 80 bits on IPv6. The anonymised version is then held for up to 14 months to support traffic statistics.
- Contact correspondence: emails and any attachments are kept for 24 months for follow-up and audit purposes, then deleted unless still under active discussion.
- Analytics events: Google Analytics 4 data is kept for 14 months under our configuration, then automatically deleted.
- Cookie consent record: the consent record itself is stored locally in your browser for 12 months, after which the consent banner reappears.
Where the law requires longer retention — tax records under the HMRC record-keeping requirements for affiliate-related accounting, say — the relevant data is held only for the period the law demands and is put to no other use.
7. Who Vegas Spins shares data with
Three controlled categories. Service providers that run parts of the Vegas Spins infrastructure — web hosting, content delivery, email — each working under a written data-processing agreement that confines their use of the data to delivering the service. Analytics providers (Google Analytics 4): IP-anonymised traffic data only, with no personally identifying information. Law-enforcement bodies and regulators: solely in response to a valid legal demand, and only for the data that demand covers. Vegas Spins never sells, rents or trades personal data to anyone.
8. Where data is stored
Vegas Spins infrastructure is hosted with cloud providers in the UK and the European Economic Area. A few service providers — Google Analytics 4 in particular — process data in the United States. Where data leaves the UK, the recipient is bound either by Standard Contractual Clauses or by an equivalent regime the ICO has judged to offer protection at least as strong as UK law.
9. Your rights
Under the UK GDPR and equivalent international laws, you have the following rights with respect to any personal data Vegas Spins holds about you.
- Access: ask what we hold and receive a copy.
- Correction: ask for inaccurate data to be corrected.
- Deletion: ask for your data to be deleted, subject to legal retention requirements.
- Withdrawal of consent: if processing is based on consent, you can withdraw it at any time without affecting prior lawful processing.
- Complaint: should you feel Vegas Spins has mishandled your data, a complaint can be lodged with the ICO at ico.org.uk. As a rule, UK readers are encouraged to reach out to us first so we get the opportunity to put things right.
To use any of these rights, write to the privacy address given on the Contact page. Vegas Spins will reply within 30 days, the window the UK GDPR sets.
10. Children's privacy
Vegas Spins content is written for adult UK readers. The site is neither directed at nor intended for anyone under 18. We do not knowingly gather personal data from minors. Should we learn that data has been submitted by someone under 18, that data is deleted and, where it applies, the parent or guardian is told.
11. Security
A layered set of safeguards protects the data Vegas Spins handles. Everything moving across the network is encrypted with TLS 1.2 or higher; internal systems run on tight access controls built around least-privilege principles; permissions are audited at intervals to confirm who can reach which records; administrative activity is logged; and an outside firm runs penetration tests against the public site from time to time. Nothing is ever fully immune, so if a breach of personal data occurs that is likely to cause serious harm, those affected will hear from us directly and the ICO will be notified, as the ICO breach notification regime under the UK GDPR requires.
12. Changes to this policy
When this policy changes, the "Last updated" date at the top is revised. Material changes — fresh categories of data collected, new third-party processors, altered retention periods — come with a banner on the home page for at least 30 days. Minor housekeeping (rewording, link updates) sets off no banner.
13. Contact
Privacy-related questions are best sent through the privacy contact listed on the Contact page. Editorial questions about Vegas Spins content go via the editorial channel; correction requests follow the procedure on the Editorial Policy page. Player-safety guidance relevant to anyone reading this site sits on the Responsible Gambling page.