Last updated 27 August 2026.
CasinAudit is a site you read, not a service you sign up to. No account is created here, no payment passes through, and there is no newsletter. The data processed is therefore limited, and this page says exactly what it is, why we hold it, and what you can demand about it.
What this document covers, and what it does not
It applies to casinaudit.com alone. As soon as you follow a link to a casino, you leave our scope: the operator’s own policy then applies, and it alone is answerable for the processing of your data.
The framework is the General Data Protection Regulation and the Belgian law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
Who processes your data
The data controller is the site’s publisher, whose status is set out in our legal notice. For any question about this policy, or to exercise your rights, write to contact@casinaudit.com. Every request receives a reply, and exercising your rights is free of charge.
What is collected when you visit
We ask for no name, no postal address and no telephone number. Three categories of data circulate nonetheless.
- Connection data, sent automatically by your browser: IP address, browser type and version, operating system, language, date and time of the request. They are essential to displaying a page.
- Browsing data: pages viewed, time spent, where you came from, device type. These are collected only after you agree.
- Data you send us, namely the content of your message and the email address needed to reply, if you write to us.
One point worth stating: your IP address is personal data under the GDPR, even where it does not identify you by name.
What we do not do
No advertising profile is built, no data is sold or rented, and no player profile is created. The site runs neither targeted advertising nor retargeting.
Why this data, and on what legal basis
- Displaying the site. Serving pages and the correct language version. Legal basis: legitimate interest in providing a working site.
- Measuring the audience. Knowing which pages are read and where visitors come from. Legal basis: your consent.
- Replying to your messages. Handling a question, an error report or a correction request. Legal basis: legitimate interest in corresponding with our readers.
- Protecting the site. Detecting intrusion attempts and automated submissions. Legal basis: legitimate interest in securing the infrastructure.
Cookies and consent
A cookie is a small file placed on your device by the site you visit. Some are necessary for pages to work, others serve audience measurement.
On your first visit, a banner lets you accept or refuse non-essential cookies. Until you accept, no measurement cookie is placed. Your choice is kept for around twelve months and remains changeable at any time through the cookie management link in the footer. You can also delete them from your browser settings.
Who else accesses this data
We rely on three providers, each for a specific function.
- Automattic Inc. hosts the site through WordPress.com and supplies the Jetpack statistics tool.
- Google Ireland Limited supplies Google Analytics, integrated through Google Site Kit, for audience measurement.
- Complianz manages the collection and storage of your cookie choice.
These providers act on our behalf and on our instructions. No data is passed to third parties for commercial purposes.
Transfers outside the European Union
Hosting and audience measurement involve companies established in the United States. Those transfers rely on the safeguards provided by the GDPR, including standard contractual clauses and the applicable adequacy frameworks. If this concerns you, refusing measurement cookies limits the data transferred to what is strictly needed to display the site.
How long this data is kept
- Traffic statistics: kept in aggregated form, generally fourteen months.
- Consent cookie: around twelve months, after which you are asked again.
- Email exchanges: kept for as long as your request is being handled, then deleted, unless a legal obligation requires otherwise.
- Technical logs: a short period, set by the host for security purposes.
Your rights
The GDPR gives you the right to access your data, to have it corrected or erased, to restrict its processing, to object to it, to request its portability, and to withdraw your consent at any time.
To exercise them, one address: contact@casinaudit.com. We reply within one month. If the reply does not satisfy you, you may refer the matter to the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be.
Affiliate links
Some links to operators are commercial. When you follow one, the operator or its technical intermediary may record where you came from in order to attribute the commission. That mechanism falls under their policy, not ours. Our methodology page explains how this funding is kept away from our assessments.
Security
The site is served over HTTPS, which encrypts traffic between your browser and our pages. Access to the administration area is protected by two-factor authentication. Since no system is infallible, we cannot guarantee absolute security, but no sensitive data is stored on this site.
Changes
This policy evolves alongside the site and the tools it uses. The date at the top of the page indicates the latest version. Substantial changes are flagged in the text.