What personal data casinycasinoo.net collects, why it is collected, how long it is retained, who processes it, and the rights you hold over it under Australian law and, where applicable, EU law.
casinycasinoo.net is an independent online casino review platform operated from Sydney, Australia. We are not a casino. We do not run gambling services, accept deposits, issue bonuses, process withdrawals or hold player accounts of any kind. Our data processing is narrow in scope: we are an informational publisher, and our privacy obligations reflect that limited activity rather than the obligations of an operator handling financial transactions.
Casiny Casino — the operator reviewed on this site — is a separate legal entity operating under a Tobique licence. More about what this site is and is not can be found on the About page. Its privacy practices are governed by its own policy, published on its own platform, and are entirely outside our control or responsibility. This policy covers casinycasinoo.net only.
When you contact us by email or through an enquiry, we receive: your name (if you provide it), your email address, the subject and content of your message, and any files or screenshots you attach. We do not collect payment details, casino account credentials, identity documents or government identifiers through any contact channel.
When you visit any page on this site, our hosting infrastructure and analytics tools collect automatically: your IP address (truncated for analytics purposes; full address retained briefly in security logs), your browser user-agent string (browser type, operating system, device class), the page or pages you viewed, the time and duration of each page view, the URL that referred you to the site, your approximate geographic location inferred from IP (country, sometimes state or region), language preference as reported by your browser, and — when you click an affiliate link — a click identifier passed to the operator's affiliate network for commission attribution. We do not collect your full name, home address, phone number, financial information or government identifiers through any automatic mechanism, and we do not knowingly collect data from anyone under the age of 18.
| Purpose | Data used | Legal basis (where GDPR applies) |
|---|---|---|
| Responding to enquiries and corrections | Name, email, message content | Legitimate interest / consent |
| Aggregate site analytics | Anonymised IP, pages viewed, device type, session duration | Legitimate interest |
| Affiliate commission attribution | Click identifier passed to operator network | Legitimate interest |
| Security and abuse prevention | IP address, user-agent, request patterns | Legitimate interest |
| Compliance with legal obligations | Server access logs | Legal obligation |
We do not use your data to build advertising profiles, we do not run behavioural remarketing campaigns, and we do not sell, rent or share personal data with third parties for their marketing purposes. The affiliate click identifier serves commission attribution only — it is not used to profile individuals across other sites or services.
We rely on a small number of third-party processors to operate the site. Each maintains its own privacy policy that governs its specific processing activity:
Where these processors transfer data internationally — typically to the United States or within the EU — they do so under standard contractual clauses and adequacy mechanisms that each party documents in its own sub-processor list. For data subject rights requests related to a specific processor's activity, the request should be directed to that processor using the contact details in its own privacy policy.
| Data category | Retention period |
|---|---|
| Email correspondence and contact-form submissions | 12 months after last interaction, or longer if needed to resolve an open editorial or legal matter |
| Server access logs (full IP address) | 90 days |
| Aggregated analytics data (GA4, no personal identifiers) | Up to 26 months (GA4 default data retention setting) |
| Affiliate click events | Per the affiliate network's own retention policy — typically up to 24 months |
| Editorial records supporting the correction log | Retained for as long as the corresponding article remains published on the site (see the correction log in the editorial policy) |
At the end of the applicable retention period, data is deleted or irreversibly anonymised. Backup systems cycle on a shorter rotation and expire naturally within the periods above.
As an Australian resident, you have the right to know what personal information we hold about you, to access that information, to request correction of information that is inaccurate, out of date, incomplete or misleading, and to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have handled your personal information in breach of the Australian Privacy Principles.
If you are an EU or UK resident and the GDPR or UK GDPR applies to our processing of your data, you additionally hold rights of data portability, restriction of processing, objection to processing based on legitimate interest, and erasure (the right to be forgotten) — subject to the legal exceptions that apply to each right.
Email [email protected] with "Privacy" in the subject line. We will respond within 30 calendar days. We will verify your identity before releasing any personal data — typically by confirming the email address and any other identifiers associated with your enquiry. We do not charge for rights requests; if a request is manifestly unfounded or repetitive, we may charge a reasonable administrative fee or decline to act, as permitted by applicable law. The contact process is also described at the contact page.
We use cookies and similar tracking technologies for analytics, security and site functionality. A complete list of every cookie — the name, the provider, the purpose, the retention period and browser instructions for managing each — is on the cookie policy page. Non-essential cookies can be blocked or cleared at any time through your browser settings without breaking core site functionality.
Our primary processors — Cloudflare and Google Analytics — operate global infrastructure, which means personal data may be processed in or accessed from jurisdictions outside Australia, most commonly the United States and EU member states. These transfers occur under the processors' published standard contractual clauses and adequacy mechanisms, as detailed in their respective privacy policies. If you have the legal right to object to international transfer of your data, please exercise that right by contacting the privacy address above; in practice, an objection to international transfer typically requires us to delete the data rather than restrict its geographic processing location.
The site operates over TLS 1.3 with current cipher suites. The administrative side of the hosting and email systems uses two-factor authentication. Within the small team, access to personal data is limited to the person or persons who need it for the specific task in hand — there is no broad internal sharing of contact-form submissions or email correspondence. No online system is perfectly immune to breach. In the event of a breach that is likely to result in serious harm to any individual, we will notify those affected and the OAIC under the Notifiable Data Breaches scheme of the Privacy Act 1988, along with any equivalent notification obligations that apply under the GDPR where relevant.
This site and all content on it are intended for adults aged 18 or over. We do not knowingly collect personal information from anyone under 18. If a parent or guardian believes that a minor has submitted personal information to us, please email [email protected] and we will delete that submission promptly. Broader guidance on protecting minors from gambling content — including device-level blocking tools — is on the responsible gambling page.
We update this policy when our data processing practices change — a new processor added, a retention period revised, or a shift in our legal obligations. Material changes move the "last updated" date at the top of this page and are flagged with a short notice on both the homepage and this page for at least 30 days. Historic versions are available on request through the contact page.
This document is the current and authoritative version of our privacy practices. If you have questions about anything it does not address, email [email protected] with "Privacy" in the subject line. The review is written by Heath Sullivan under the methodology at how we test casinos, scored with the framework at how we rate casinos, with commercial relationships disclosed at the affiliate disclosure page. This policy forms part of the broader site terms and conditions.
