Privacy Policy

This policy explains how CASINOTUTOR ("CasinoTutor", "we", "us"), registered at [REGISTERED ADDRESS] under company number [COMPANY REGISTRATION NUMBER], handles personal data collected through casinotutor.com.

For the purposes of applicable data protection law, including the EU and UK GDPR, we are the data controller for the data described here.

Privacy contact: [LEGAL/PRIVACY EMAIL] [Data Protection Officer / EU or UK representative, if appointed: [NAME AND CONTACT]]

2. Scope

This policy covers our website only. It does not cover Operators or other third-party sites reached through our links. Once you leave CasinoTutor, that site's policy applies — read it before you submit identity documents or payment details to any gambling operator.

3. Personal Data We Collect

3.1 Data you give us

Newsletter: email address, plus date and source of consent.
Contact forms and email: name, email address, and whatever you include in your message.
Player reviews and comments: display name, email address, review content, and the Operator concerned.
Job and partnership enquiries: the contact and professional details you send.

3.2 Complaint submissions

When you submit a complaint against an Operator, you may provide: your name, email, country, the Operator concerned, your account username with that Operator, the amount in dispute, a narrative of events, and supporting evidence such as screenshots of transactions, bet slips, game history and correspondence with the Operator.

This information may include financial details and, if you choose to upload them, identity or verification documents.

Please redact what is not needed. We ask you not to upload full card numbers, bank account numbers, passwords or identity documents unless they are genuinely central to your case. Where you do provide them, they are used solely to pursue your complaint, are stored with restricted access, and are deleted on the schedule in section 11.

We will share your complaint and its evidence with the Operator concerned, and where appropriate with a regulator or ADR body, because that is the only way the complaint can be pursued. You consent to this when you submit. If you do not want your case shared with the Operator, do not submit it.

3.3 Data collected automatically

Technical: IP address, browser type and version, operating system, device type, screen resolution, language.
Usage: pages viewed, time on page, scroll depth, referring URL, outbound Operator links clicked, approximate country-level location from IP.
Cookies and identifiers: as described in section 4.

3.4 Data from third parties

Analytics and advertising platforms, in aggregated or pseudonymised form.
Affiliate networks and Operators, confirming that a click from our site resulted in a registration or deposit. This is normally reported as aggregated or pseudonymised conversion data, not as your name, balance or betting history.
Social platforms, where you interact with our pages or embedded content.

3.5 What we never ask for

We never ask for your casino or sportsbook passwords, and we never ask for payment "to release winnings", "to verify your account" or "to process a complaint". Our complaint service is free. Any message asking otherwise is fraudulent — report it to [LEGAL/PRIVACY EMAIL].

4. Cookies and Similar Technologies

Category	Purpose	Consent required
Strictly necessary	Core functions, security, load balancing, storing cookie choices	No
Preferences	Language, region and display settings	Yes
Analytics	Understanding site usage to improve it	Yes
Affiliate tracking	Attributing an Operator registration to a click from our site	Yes
Marketing	Campaign measurement and, where applicable, relevant advertising	Yes

[INSERT FULL COOKIE TABLE FROM A CURRENT SCAN: name, provider, purpose, type, duration.]

Non-essential cookies are set only after consent through our cookie banner. You can change or withdraw consent at any time at [COOKIE SETTINGS LINK], or block and delete cookies in your browser - though parts of the site may then not work as intended.

5. Why We Use Your Data, and Our Legal Basis

Purpose	Legal basis (GDPR)
Operating, securing and maintaining the Site	Legitimate interests
Responding to enquiries	Legitimate interests
Handling and mediating your complaint, including disclosure to the Operator	Consent, and legitimate interests
Publishing anonymised complaint outcomes and player reviews	Consent, and legitimate interests
Sending the newsletter	Consent
Analytics and site improvement	Consent (where cookie-based)
Affiliate attribution and commission reconciliation	Consent (where cookie-based), and legitimate interests
Preventing fraud, spam, astroturfing and abuse	Legitimate interests
Complying with legal and tax obligations	Legal obligation
Establishing or defending legal claims	Legitimate interests

Where we rely on legitimate interests, we have assessed that our interest in running a free, ad-supported information and consumer-protection service does not override your rights. You may object — see section 10.

6. Marketing Communications

Newsletter subscribers receive casino and sportsbook news, guides and offers. Every email has a one-click unsubscribe, and you can also email [LEGAL/PRIVACY EMAIL]. Unsubscribing does not affect the lawfulness of processing before withdrawal.

We do not sell your email address and do not rent our list to Operators.

7. How Affiliate Tracking Works

Clicking an Operator link attaches a tracking parameter or cookie identifying CasinoTutor as the referring source. If you register, the Operator or network reports the conversion so commission can be calculated.

This funds the site. It does not give us access to your gambling account, balance, bet history, transactions or identity documents. What we receive is commercial reporting data, not your player file.

8. Sharing Your Data

We share personal data with:

Operators, where you have submitted a complaint against them — limited to what is necessary to pursue your case (see section 3.2).
Regulators and ADR bodies, where escalation of your complaint is appropriate or where we are legally required to disclose.
Service providers acting as processors on our instructions — hosting, email delivery, analytics, security, form and file-upload tooling, support systems.
Affiliate networks and Operators, limited to the click and conversion data in section 7.
Professional advisers — lawyers, accountants, auditors — where necessary.
A purchaser or successor entity in a merger, acquisition or asset sale, subject to this policy.

We do not sell your personal data.

9. International Transfers

Some providers, and many Operators involved in complaints, are located outside your country, including outside the EEA and UK. Where that is the case, transfers are made under an approved safeguard — an adequacy decision, or Standard Contractual Clauses with any supplementary measures required. Details are available on request at [email protected] .

10. Your Rights

You may have the right to: access the data we hold about you; correct inaccurate data; have data deleted; restrict or object to processing, including direct marketing; receive your data in a portable format; and withdraw consent at any time.

Note on complaints: once your case has been disclosed to an Operator, we cannot retrieve it from them. Withdrawing consent stops our further processing but will normally also end our mediation.

If you are in California, you may also have rights to know what categories of personal information are collected and disclosed, to request deletion or correction, and not to be discriminated against for exercising those rights.

To exercise a right, email [email protected] with enough detail for us to locate your data. We respond within the statutory time limit — one month under GDPR, extendable for complex requests. We may verify your identity first and will not charge a fee unless a request is manifestly unfounded or excessive.

If you are unhappy with our response you may complain to your supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the authority where you live.

11. Data Retention

Data	Retention period
Newsletter subscription	Until you unsubscribe, plus [12] months for suppression purposes
Contact enquiries	[24] months from last correspondence
Complaint case files	[24] months after the case is closed, then deleted or anonymised
Identity or financial documents uploaded with a complaint	Deleted within [30] days of the case closing
Published player reviews and anonymised complaint outcomes	Until removed by you or by us
Analytics data	[14–26] months per platform settings
Records required for tax or legal reasons	As required by law in [JURISDICTION]

12. Security

We use technical and organisational measures appropriate to the risk, including HTTPS/TLS in transit, access controls restricting complaint files to the case-handling team, and vendor due diligence. No system is completely secure, and we cannot guarantee absolute security of data transmitted over the internet.

13. Children

The Site is for adults of legal gambling age. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, contact [email protected] and we will delete it.

14. Automated Decision-Making

We do not use personal data for automated decision-making producing legal or similarly significant effects concerning you. Operator ratings are editorial assessments made by people.

15. Do Not Track and Global Privacy Control

[State your actual position — e.g.: "Browser Do Not Track signals have no common standard. Where we receive a recognised Global Privacy Control (GPC) signal, we treat it as an opt-out of the sale or sharing of personal information where applicable law requires."]

16. Third-Party Links

We link to Operators and other third parties and are not responsible for their privacy practices. Review their policies before providing personal data — this matters most at the point a gambling operator asks for your identity documents and payment details.

17. Changes to This Policy

We may update this policy. The "Last updated" date will change, and material changes will be notified on the Site or by email where appropriate.

18. Contact

Email: [email protected]