GDPR Notice
Last updated: August 2, 2026
This notice applies to visitors in the European Union, European Economic Area, United Kingdom and Switzerland, and explains your rights under the General Data Protection Regulation (GDPR) and UK GDPR.
It sits alongside our Privacy Policy, which describes in full what BitGamble collects. This page focuses on your rights and how to exercise them.
1. Who is responsible for your data
BitGamble (bitgamble.org) is the data controller for the personal data described in our Privacy Policy.
BitGamble is an independently operated publication without a public corporate registration or postal office. All privacy requests are handled by email at admin@bitgamble.org, which is monitored for exactly this purpose. We have not appointed a Data Protection Officer, as we are not required to: we do not carry out large-scale monitoring of individuals and we hold no special-category data.
2. What we process and why
We deliberately keep this minimal. There are no accounts on this site and no registration. The table below sets out each purpose and the legal basis we rely on under Article 6 GDPR.
| What | Why | Legal basis (Art. 6) |
|---|---|---|
| IP address, browser and device data | Serving the website, security, abuse and bot prevention | Legitimate interests (6(1)(f)) — operating a secure website |
| Country derived from IP | Showing whether a reviewed casino accepts players from your country | Legitimate interests (6(1)(f)) — providing the core function readers come for; no identifier is stored |
| Google Analytics data and cookies | Aggregate audience statistics | Consent (6(1)(a)) — see section 3 |
| Comment email, text, IP (no name is collected) | Publishing your comment and preventing spam | Consent (6(1)(a)) — you choose to submit it |
| Rating votes and IP | Recording your rating and preventing duplicate voting | Legitimate interests (6(1)(f)) — integrity of ratings |
| Emails you send us | Replying to you | Legitimate interests (6(1)(f)) — responding to enquiries |
3. Cookies and consent
Under the ePrivacy Directive, analytics cookies require your consent, while cookies strictly necessary to deliver the site do not.
- Strictly necessary — Cloudflare security cookies, and the
bg_geocountry cookie which exists solely to display the availability notice you came to read. - Requires consent — Google Analytics (
_ga,_ga_*).
You can withdraw consent at any time by clearing cookies in your browser, using Google's Analytics Opt-out Browser Add-on, or enabling a browser-level signal such as Global Privacy Control. Withdrawing consent does not affect processing that already took place.
4. Your rights
Under GDPR you have the following rights, free of charge:
- Access (Art. 15) — ask what personal data we hold about you and receive a copy.
- Rectification (Art. 16) — have inaccurate data corrected.
- Erasure (Art. 17) — the "right to be forgotten"; ask us to delete your data, for example a comment you posted.
- Restriction (Art. 18) — ask us to limit how we use your data while a dispute is resolved.
- Data portability (Art. 20) — receive data you provided in a structured, machine-readable format.
- Object (Art. 21) — object to processing based on legitimate interests, including at any time and for any reason connected to your situation.
- Withdraw consent (Art. 7(3)) — where we rely on consent, take it back at any time.
- Not be subject to automated decision-making (Art. 22) — we do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
5. How to exercise your rights
Email admin@bitgamble.org with "GDPR request" in the subject line, and tell us which right you want to exercise.
We will respond within one month, as Article 12(3) requires. If a request is unusually complex we may extend this by up to two further months and will tell you if so.
Please note a practical limitation: because this site has no accounts, we usually cannot connect an IP address or an analytics record to a named individual. Article 11 GDPR does not require us to collect extra information purely to identify you. In practice this means we can reliably act on requests about comments, ratings and emails, where an identifier exists. For anonymous analytics data, the fastest and most complete remedy is the browser-level opt-out described in section 3.
6. International transfers
Some of our providers process data outside the EEA and UK, including in the United States:
- Google (Analytics) — relies on EU Standard Contractual Clauses and the EU–US Data Privacy Framework.
- Cloudflare — relies on EU Standard Contractual Clauses.
7. Data retention
Analytics data is retained by Google for up to 14 months. Comments and ratings remain while the related content is published, unless you ask for removal. Server and security logs are typically kept for 30 days. Full detail is in the Privacy Policy.
8. Right to complain
If you believe we have handled your data unlawfully, you may lodge a complaint with your national supervisory authority. You can find yours through the European Data Protection Board, or if you are in the UK, the Information Commissioner's Office. We would appreciate the chance to resolve it with you first.
9. Gambling content and age
This site publishes information about gambling and is intended only for those aged 18 or over, or the legal gambling age in your jurisdiction if higher. We do not knowingly process the data of children.
Contact for GDPR requests
admin@bitgamble.org — subject line "GDPR request". We reply within one month.
