Articles here on online casinos, including those not on GamStop, are written for readers in Great Britain, and only the personal data needed to run an information site is processed by wagerwatchuk.com. The rules that apply are the UK GDPR and the Data Protection Act 2018. This policy meets the duty to inform under Article 13 of the UK GDPR.
What is processed
Each time a page is opened, the server records a log entry: IP address, date and time, the address requested, the amount of data sent, the referring page and the type of browser. Security and the detection of abuse are what the logs serve, and after 90 days they are deleted or shortened so that they no longer point to a person. A name, an e-mail address and the text of the message are also provided by anyone who writes to the editors, and they are used only to answer. No reader accounts, deposits or stakes exist on the site, so payment details and identity documents are not collected.
Controller
The controller within the meaning of Article 4(7) UK GDPR is the body that runs wagerwatchuk.com. Its name, address and e-mail address are available at wagerwatchuk.com, and the same channel is used for every question about personal data.
Lawful bases and purposes
The controller's legitimate interests in keeping the site working and secure (Article 6(1)(f) UK GDPR) are the ground for server logs and protection against abuse. Answering a message rests on the same interest. Cookies other than the strictly necessary ones, and audience measurement, need consent (Article 6(1)(a) UK GDPR together with regulation 6 of PECR) and run only once it has been given; consent can be withdrawn at any time, which does not affect the lawfulness of earlier processing (Article 7(3)). No automated decision-making and no profiling take place.
Retention
Data is kept only as long as its purpose requires: server logs for no more than 90 days, correspondence until the matter is closed and for the period needed to defend against possible claims. Giving data in a message is voluntary, but without it no reply is possible.
Recipients and transfers outside the UK
Data is not sold. Processors acting on the controller's instructions that provide hosting, content delivery and e-mail (Article 28 UK GDPR) are the recipients, along with public authorities where the law requires it. A transfer outside the United Kingdom takes place only to a country covered by adequacy regulations or with appropriate safeguards, such as the International Data Transfer Agreement or the UK Addendum (Article 44 onwards).
Rights
Every person has the right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and the right to object to processing based on legitimate interests (Article 21). A request is answered without undue delay and within one month of receipt; where needed that period can be extended by a further two months under Article 12(3).
Supervision and complaints
The Information Commissioner's Office (ICO) is the supervisory authority. Anyone who believes that the processing of their data breaches data protection law has the right to complain to it (Article 77 UK GDPR).
Last updated: 13.11.2026. </answer_shape>