Privacy Information
Version of 24 September 2026
Velwins Casino UK collects very little about its readers. There are no accounts, no forms and no newsletter. This page lists the few things that do reach us, why, how long they stay and what you can ask us to do about them.
We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where the law uses a technical term, we explain it the first time it appears.
1. Who is responsible for your data
The data controller, meaning the party that decides how personal data is used, is the editorial team that publishes this site. We are a separate business from Velwins Casino and from its operator, Fortuna Games N.V.. A postal address for formal requests is available on request by email.
For anything on this page, the quickest route is to write to the editors. One of us reads every message; there is no call centre and no ticket queue.
What we are not responsible for
When you follow a link to the casino, including the redirect to Velwins Casino, you leave our site. From that point the casino collects your data under its own privacy notice. Registration details, identity documents, deposits and gameplay records are held by the casino, never by us. We cannot see them, correct them or delete them.
2. What reaches us and why
Three kinds of data can end up with us. Nothing else is collected, and nothing is bought from data brokers.
| Data | Why we have it | Lawful basis | Kept for |
|---|---|---|---|
| Server log entries: IP address, date and time, page requested, browser type, referring page | Keeping the site running, spotting attacks, fixing broken links | Legitimate interests | Up to 30 days, then deleted automatically |
| Emails you send: your address, name if you give it, the message and any attachments | Answering your question, correcting the review, handling a rights request | Legitimate interests; legal obligation for rights requests | Up to 12 months after the conversation ends |
| Your cookie choice, saved in your own browser | Remembering whether you accepted or declined optional categories | Legal obligation under PECR | Until you clear it or change it |
Server logs
Every web server writes a short line for each request it receives. Ours is no exception. Those lines are processed by our hosting provider on our behalf and are read by a person only when something goes wrong, for example a sudden burst of traffic from one address or a page returning errors. They are not combined with any other data and are not used to build profiles of readers.
Email correspondence
Writing to us is the only way to send us personal data on purpose. Tell us only what you need to: a correction to the review rarely requires your full name, and we never need your casino password, card details or identity documents. If you send those by mistake, we delete them and tell you we have done so.
Messages are kept in a business mailbox with two-factor sign-in. If a reader tip leads to a change in the review, we quote the substance, never the sender, unless you ask to be credited.
What happens to an email, step by step
- Your message arrives in the editors' mailbox. The provider scans it for spam and malware, which is an automatic check and involves no person reading it.
- An editor reads it, usually within two working days, and replies from the same mailbox.
- Anything you attached that we did not need, such as a screenshot showing account details, is deleted once we have what we need from it.
- When a tip changes the review, the relevant facts are copied into our internal editing notes without your name or address.
- After the last reply in the thread, the conversation is kept for up to twelve months in case you follow up, then deleted from the mailbox and its bin.
Nothing from your email is added to a mailing list. Writing to us once does not mean you will hear from us again unless you write back.
Retention at a glance
| Item | Clock starts | How it is removed |
|---|---|---|
| Server log lines | The moment of the request | Rolled over automatically after 30 days |
| An email conversation | Our last reply in the thread | Deleted by an editor within 12 months, bin emptied |
| Unneeded attachments | When we open them | Deleted the same day |
| A note that a rights request was handled | The date we complete it | Kept two years as proof of compliance, holding only the date, the right used and the outcome |
| Your cookie choice | Your click on the banner | Stays in your browser until you clear it |
The cookie choice
When you respond to the cookie banner, your browser stores a small note of the decision in its local storage, together with the date you made it. That note stays on your device and is not sent to our server. Details are on the cookie information page.
3. Analytics and advertising
At the time of writing, no statistics or marketing tools are active on the site. The banner offers those categories so that, if we ever add a visitor counter or a similar tool, it can run only for readers who have said yes. Until you consent, nothing of that kind loads. Should that change, this page and the cookie page will name the provider, what it collects and where the data goes before the tool is switched on.
Nothing you send us is sold, and none of it is passed to the casino. The affiliate programme reports sign-ups to us as anonymous totals; it does not tell us who you are.
4. Who else handles the data
A short list of service providers act as processors, meaning they handle data only on our instructions and under a written contract:
- our hosting company, which stores the site and its server logs;
- the email provider that runs the editors' mailbox;
- a content delivery network, used to serve images and pages quickly, which sees the same basic request data as the server.
Some of these providers may store data outside the UK. Where that happens, the transfer relies on a UK adequacy decision or on the International Data Transfer Agreement approved by the Information Commissioner. Beyond processors, we would share data only if the law required it, for instance in response to a valid court order.
International transfers in practice
For a site this small, a transfer abroad usually means one of two things. A mail server or a backup copy may sit in a data centre in the European Economic Area, which the UK already recognises as giving adequate protection. Or a provider based in the United States may handle a request, in which case we check that it is certified under the UK Extension to the EU-US Data Privacy Framework or has signed the approved transfer clauses.
Ask us and we will tell you which providers sit where and which safeguard covers each one. A copy of the relevant safeguard can be sent to you, with commercial terms blacked out.
5. Your rights
UK data protection law gives you a set of rights over your personal data. Most of them are simple to use with a site like ours, because there is so little data to begin with.
- Access. Ask for a copy of what we hold about you.
- Rectification. Have inaccurate details corrected.
- Erasure. Ask us to delete your emails or any log entries we can link to you.
- Restriction. Ask us to stop using data while a disagreement is sorted out.
- Objection. Where we rely on legitimate interests, you can object, and we will stop unless we have a compelling reason.
- Portability. Receive data you gave us in a common, machine-readable format.
- Consent, where it applies, can be withdrawn at any time; for cookies that takes two clicks in the footer.
Making a request
- Email the editors and say which right you want to use.
- Give us enough to find your data: usually the address you wrote from, or the date and rough time of your visit if it concerns server logs.
- Expect a reply within one month. If the request is complex we may extend that by up to two more months, and we will tell you why within the first month.
How each right works on this site
| Right | What to put in your email | What you get back |
|---|---|---|
| Access | The address you wrote from, or the date and time of your visit | Copies of your messages and any log lines we can match to you, with an explanation of each |
| Rectification | The detail that is wrong and the correct version | Confirmation that the record has been changed |
| Erasure | What you want removed, or simply "everything" | Confirmation of deletion, plus a note of anything we must keep and the reason |
| Restriction | Which data, and the point you dispute | The data parked untouched until the question is settled |
| Objection | Which use you object to | Either we stop, or we explain the overriding reason in writing |
| Portability | The format you prefer | Your emails as standard message files, or a plain text export |
Log lines are the tricky case. They hold an IP address but no name, so we can match them to you only if you give us the address you used and a rough time window. Once the thirty days have passed they no longer exist, and we will say so plainly rather than search for nothing.
Requests are free. We may ask for a little extra information to confirm it is really you, but only what is needed for that purpose.
6. Your right to complain
If you think we have mishandled your data, please tell us first; most problems can be fixed in one exchange of emails. Separately, the Information Commissioner's Office, which oversees data protection in the UK, will take a complaint from you whenever you choose. Its website, ico.org.uk, explains how, and you do not need to contact us before going to it.
7. Children
This site reviews a gambling service and is meant for readers of 18 or older, and we make no attempt to gather details from children. If a parent or guardian believes a child has emailed us, get in touch and we will delete the message.
8. Security
The whole site is served over an encrypted connection. Only the editors can get into the hosting panel and the inbox, each behind a long password and a second sign-in step. Since the site stores no accounts or payment details, the data that could be exposed in a breach is limited to what is listed above. If a breach did affect you, we would tell you and, where the law requires it, report it to the ICO within 72 hours.
9. Automated decisions
We make no decisions about you by automated means, and we do not profile readers. The site shows the same review to everyone, apart from the cookie banner, which appears only until you have made a choice.
10. Related pages
How the review works, how the affiliate link pays for testing, and what you may reuse are all covered under using this site. Background on the team is on about this site, and email us explains what to include in a message so we can help quickly.
11. Updates to this notice
We review this page whenever we add a tool, change a provider or the law moves on. The date of the current version appears above the text. If a change affects data we already hold about you, and we have your email address because you wrote to us, we will let you know directly.
12. Writing on someone else's behalf
A relative, adviser or support worker may contact us for another person, for example to have an old email thread removed. That is fine, provided we can see the person agrees. A short signed note from them, or a reply sent from their own address confirming the request, is enough.
Money advisers and gambling support services sometimes ask what a casino holds about a client. Those questions have to go to Fortuna Games N.V., since this site never had that information.
13. The casino's data, briefly
Registering at Velwins Casino involves identity checks, payment records and a gameplay history. All of that sits with the operator under its Curaçao Gaming Authority licence, and UK data protection law may not reach it in the same way it reaches us. Read the casino's own privacy notice before you upload documents there, and keep copies of anything you send.
