Privacy Policy
Casinos.org (“we”, “us”, “our”, the “Website”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what we collect, why we collect it, how we use and share it, and the rights you have over it. It applies to visitors from the United Kingdom, the European Union, South Africa, Nigeria, the United States, Canada and everywhere else we are read. Casinos.org is an independent casino and sportsbook review and comparison service for adults aged 18 and over (21+ where local law requires). We are not a gambling operator: we do not accept bets, hold funds, or process betting accounts. Last updated: 15 June 2026.
Privacy at a Glance
We know a privacy policy is a long read, so here is the short version. The detail follows below, and nothing in this summary replaces it.
- Who we are. Casinos.org is an independent gambling review and comparison website. We are the data controller for the information collected through this Website.
- We are not a casino. We do not take wagers, hold player funds, or handle identity, payment or account data for any gambling operator. When you click through to an operator, that company becomes responsible for your data under its own privacy policy.
- What we collect. Mostly anonymous analytics about how the site is used, plus anything you choose to send us (a newsletter sign-up, a contact message, or a user review).
- Cookies and tracking. We use cookies and similar tools, including Google Analytics. Non-essential cookies, including affiliate and analytics tracking, are only used where you have given consent.
- How we make money. Many of our outbound links are affiliate links. If you sign up with an operator through one of them we may earn a commission, at no extra cost to you. This never changes our editorial verdicts or rankings.
- Your rights. Depending on where you live, you can access, correct, delete or port your data, object to or restrict processing, opt out of the sale or sharing of your data, and complain to your data protection regulator. See “Your Privacy Rights” below.
- Contact. Email contact@casinos.org for anything to do with your data.
Who We Are and How to Contact Us
Casinos.org is operated by Performix Media (referred to in this policy as “we”, “us” or “our”). For the purposes of data protection law we are the “controller” (under the UK GDPR, EU GDPR and Nigeria Data Protection Act) and the “responsible party” (under South Africa’s POPIA) for personal information collected through this Website.
If you have any question about this policy or about how we handle your personal information, you can reach us at:
- Email: contact@casinos.org
- Post: Data Protection, Performix Media (full postal address available on request)
- Contact form: casinos.org/contact-us
If we are required to appoint a representative or data protection officer in your region, their contact details will be added here. Visitors in the European Union and the United Kingdom may contact our representative for those territories at the email address above, marked for the attention of our EU/UK Representative.
We Are a Review Site, Not a Gambling Operator
This point matters for your privacy, so we want to be completely clear about it. Casinos.org reviews, compares and rates online casinos and sportsbooks. We earn our living through advertising and affiliate commissions. We do not run any casino or betting site, we never accept or settle bets, and we do not hold money on anyone’s behalf.
Because of that, we do not collect or process the kind of sensitive gambling data an operator does. We do not receive your deposits, withdrawals, payment-card details, betting history, source-of-funds documents or identity verification (KYC) files. When you follow a link from our site to an operator, you leave Casinos.org and enter that operator’s own platform. From that moment the operator is the independent controller of your information and its own privacy policy applies, not ours. We encourage you to read it.
The Information We Collect
We collect personal information in three ways: information you give us directly, information we collect automatically as you use the site, and information we receive from third parties.
Information you give us
- Newsletter and marketing sign-ups: your email address, and any name or preferences you provide.
- Contact and enquiry forms: your name, email address and the content of your message.
- User reviews and comments: the display name, message and star rating you submit when you review an operator or a page.
- Surveys, competitions or feedback: any information you choose to share if you take part.
Information we collect automatically
Like almost every website, our servers and analytics tools record certain technical information when you visit. This includes your IP address, approximate location derived from it (we use this to show you content relevant to your country, such as our South Africa or Nigeria sections), browser type and version, device type and operating system, the pages you view and links you click, referring and exit pages, and the date and time of your visit. Some of this is collected through cookies and similar technologies, which are explained in the next section and in our Cookie Policy.
Information we receive from third parties
We may receive limited information from analytics providers, advertising and affiliate networks, and social media platforms, for example aggregated audience measurements or confirmation that a referral we sent to an operator resulted in a sign-up. We do not buy personal contact lists.
How and Why We Use Your Information
We only use your personal information for clear, specific purposes, and only where the law gives us a basis to do so. The table below sets out each purpose and the legal basis we rely on under the UK GDPR, EU GDPR, South Africa’s POPIA and Nigeria’s NDPA.
- To operate, maintain and secure the Website and keep it working properly. Legal basis: our legitimate interests in running a safe, functioning service.
- To show you relevant content for your region (for example our United States, South Africa, Nigeria or Canada sections). Legal basis: legitimate interests, and consent where location is derived from non-essential cookies.
- To measure and improve the site through analytics. Legal basis: consent for non-essential analytics cookies, supported by our legitimate interest in understanding our audience.
- To track affiliate referrals so our partners can attribute sign-ups to us and pay any commission due. Legal basis: consent (for the tracking cookies involved) and legitimate interests.
- To send you newsletters and marketing you have asked for. Legal basis: your consent, which you can withdraw at any time.
- To respond to your enquiries and publish or moderate the reviews you submit. Legal basis: legitimate interests, and consent where you have submitted content for publication.
- To prevent fraud, abuse and spam and to enforce our terms. Legal basis: legitimate interests.
- To comply with our legal obligations and respond to lawful requests. Legal basis: legal obligation.
Where we rely on legitimate interests, we have weighed those interests against your rights and freedoms, and we will not use your data where your interests override ours. You can object to this processing at any time (see “Your Privacy Rights”). We do not make decisions about you using solely automated processing that produces legal or similarly significant effects, and we do not carry out profiling of that kind.
Affiliate Links, Click Tracking and How We Make Money
We believe in being open about how we are funded. Casinos.org is free to use because we earn advertising and affiliate revenue. Many of the links to casinos and sportsbooks on our pages are affiliate links. If you click one and then register or deposit with that operator, we may receive a commission from the operator or its affiliate network. This comes at no additional cost to you, and the odds, bonuses or terms you receive are exactly the same as if you had gone to the operator directly.
When you click an affiliate link, the operator or its affiliate network may place or read a cookie, or pass a tracking parameter such as a click identifier, so that any sign-up can be attributed to us for payment. This may involve sharing limited technical data, such as the fact and time of the click, with that network. We use this information only to measure performance and reconcile commissions.
Crucially, our commercial relationships never decide our editorial opinions. Ratings, rankings and recommendations are produced independently by our editorial team according to our review process, and an operator cannot pay to improve its score or its position. For more detail see our advertising disclosure and our review process.
International Data Transfers
We operate across several countries, and our service providers (including Google) may be located outside your home country, including in the United Kingdom, the European Economic Area and the United States. When we transfer personal information across borders, we make sure it is protected by an appropriate safeguard:
- For transfers from the EEA and the United Kingdom, we rely on an adequacy decision where one exists, or otherwise on the European Commission’s Standard Contractual Clauses and, for UK transfers, the UK International Data Transfer Agreement or the UK Addendum.
- For transfers from South Africa, we comply with section 72 of POPIA, transferring personal information only where the recipient is subject to comparable protection, or where another lawful ground applies.
- For transfers from Nigeria, we comply with the cross-border rules in the Nigeria Data Protection Act 2023, relying on an adequacy assessment or an approved safeguard or derogation.
- For transfers from Canada, we remain accountable for your information and use contractual measures to ensure comparable protection, and you should be aware that information processed outside Canada may be accessible to foreign courts and authorities.
You can ask us for more detail about the safeguards we use by emailing contact@casinos.org.
How Long We Keep Your Information
We keep personal information only for as long as we need it for the purposes set out in this policy, and then we delete or anonymise it. In general:
- Analytics data is retained in an identifiable form for up to 14 months and is then aggregated or deleted.
- Newsletter and marketing data is kept until you unsubscribe, and for a short period afterwards to honour your opt-out.
- Contact and enquiry messages are kept for up to 24 months after your query is resolved.
- User reviews and comments remain published until you ask us to remove them or we remove them under our terms.
- Records we must keep by law (for example for tax or to defend legal claims) are kept for the period the relevant law requires.
Where a specific period is not listed, we decide how long to keep data by considering its purpose, the sensitivity of the data, and any legal or regulatory requirement.
How We Protect Your Information
We use appropriate technical and organisational measures to protect your personal information against loss, misuse, unauthorised access, disclosure or alteration. These include encryption in transit (HTTPS), access controls, and careful selection of the service providers we work with. No method of transmission over the internet or of electronic storage is completely secure, so while we work hard to protect your data we cannot guarantee absolute security. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the relevant regulator, and you where required, in line with the law that applies, including section 22 of POPIA in South Africa.
Your Privacy Rights
Your rights depend on where you live. We honour the rights available to you under the law that applies to you, and we will not discriminate against you for exercising them. To make a request, see “How to exercise your rights” at the end of this section.
Rights under the UK GDPR and EU GDPR
If you are in the United Kingdom or the European Union, you have the right to: be informed about how we use your data; access a copy of it; have inaccurate data corrected; have your data erased; restrict our processing; data portability; object to processing based on legitimate interests and to direct marketing; and withdraw consent at any time (which is as easy to do as it was to give). You also have the right to lodge a complaint with your supervisory authority. In the United Kingdom this is the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, telephone 0303 123 1113, ico.org.uk. In the EU you may contact the authority in your country of residence. We would, however, appreciate the chance to resolve your concern first.
Rights under POPIA (South Africa)
If you are in South Africa, you have the right to: be notified that we are collecting your information; request access to it; request that we correct or delete it; object to our processing; object to direct marketing; and not be subject to a decision based solely on automated processing. You may complain to the Information Regulator (South Africa). Complaints can be sent to POPIAComplaints@inforegulator.org.za, general enquiries to enquiries@inforegulator.org.za, telephone 010 023 5200 or toll-free 0800 017 160, website inforegulator.org.za. You also have the right to seek a civil remedy through the courts.
Rights under the NDPA (Nigeria)
If you are in Nigeria, you have the right to: be informed about our processing; access your data; have it rectified or erased; restrict or object to processing; data portability; withdraw consent; and not be subject to a decision based solely on automated processing. You may lodge a complaint with the Nigeria Data Protection Commission (NDPC) through its helpdesk at helpdesk.ndpc.gov.ng or website ndpc.gov.ng.
Your United States privacy rights
If you are a resident of California or another United States state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, Utah or Texas), you have the right to: know and access the personal information we have collected about you; delete it; correct it; and obtain it in a portable form. You also have the right to opt out of the “sale” or “sharing” of your personal information and of targeted advertising, and to limit the use of any sensitive personal information.
Under California law, “sale” and “sharing” are defined broadly and can include passing online identifiers and browsing activity to advertising and affiliate partners for cross-context behavioural advertising, even when no money changes hands. To exercise these choices, use our “Do Not Sell or Share My Personal Information” control linked in the site footer, or email contact@casinos.org. We honour Global Privacy Control (GPC) browser signals as a valid opt-out request. We will not discriminate against you for exercising any of these rights, and in states that allow it you may appeal a decision on your request, and ultimately complain to your state Attorney General or, in California, to the California Privacy Protection Agency (cppa.ca.gov) or the California Attorney General (oag.ca.gov/privacy/ccpa).
California “Shine the Light”: California residents may ask once a year whether we have shared personal information with third parties for their own direct marketing. We do not share your personal information with third parties for their own direct marketing, so there is nothing to disclose.
Rights under PIPEDA and Quebec Law 25 (Canada)
If you are in Canada, you have the right to access the personal information we hold about you and to ask us to correct it, and to withdraw consent to our use of it (subject to legal or contractual limits). You may complain to the Office of the Privacy Commissioner of Canada, 30 Victoria Street, Gatineau, Quebec, K1A 1H3, toll-free 1-800-282-1376, priv.gc.ca. If you are in Quebec, additional rights under Law 25 apply and you may also contact the Commission d’acces a l’information du Quebec.
How to exercise your rights
To make any request, email contact@casinos.org or write to us at the postal address above. We may need to verify your identity before we act, to protect your information. You can use an authorised agent to make a request where the law allows it. We will respond within the time limit set by the law that applies to you, which is normally one month under the GDPR and POPIA and 45 days under California law. There is no charge for a request unless it is manifestly unfounded or excessive.
Children and Under-18s
Gambling is strictly for adults. This Website is intended only for people aged 18 or over (or 21 or over where local law requires), and our content is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us at contact@casinos.org and we will delete it. We apply this position consistently with the protections for children under the UK and EU GDPR, sections 34 and 35 of POPIA, the Nigeria Data Protection Act, and the United States COPPA and state-law rules for minors.
Responsible Gambling
Because we write about gambling, we take responsible gambling seriously, even though we do not offer it. If gambling stops being fun, free and confidential help is available:
- United Kingdom: GamCare, 0808 8020 133, gamcare.org.uk.
- United States: 1-800-GAMBLER, or the National Problem Gambling Helpline 1-800-522-4700.
- South Africa: the South African Responsible Gambling Foundation / National Responsible Gambling Programme, 0800 006 008.
- Canada: ConnexOntario, 1-866-531-2600, and your provincial responsible gambling service.
- Nigeria: please gamble responsibly and seek support from a qualified local service if you need it.
You can read more on our Responsible Gambling page.
Links to Other Websites
Our site contains links to operators and other third-party websites, including affiliate links. We are not responsible for the privacy practices or content of those sites. When you follow a link and leave Casinos.org, this policy no longer applies and you should read the privacy policy of the site you visit.
Changes to This Privacy Policy
We may update this policy from time to time to reflect changes in our practices or in the law. When we do, we will revise the “Last updated” date at the top of this page, and where the changes are significant we will give a more prominent notice. We review this policy at least once every 12 months. Please check back periodically.
How to Contact Us and the Regulators
If you have any question, request or complaint about your personal information, please contact us first at contact@casinos.org or by post at Data Protection, Performix Media (full postal address available on request). We will always try to resolve your concern. You also have the right to complain to your data protection authority: the ICO in the United Kingdom, your national authority in the EU, the Information Regulator in South Africa, the NDPC in Nigeria, the relevant state Attorney General or the CPPA in the United States, and the Office of the Privacy Commissioner in Canada, using the contact details given above.
Trust & Transparency
The standards behind every Casinos.org review — our independence, testing, sourcing, and how we put mistakes right.
How we test and score online casinos and sportsbooks, step by step.
What we verify before publishing — licences, bonus terms, payments, and legal claims — and how we check it.
How we handle and label factual errors, updates, and reader-reported mistakes.
How Casinos.org makes money through advertising and affiliate links — and why it never buys a recommendation.
The terms that govern your use of the Casinos.org website.