Privacy Policy
This page explains what personal data CasinoReview collects when you visit offshorecasinosuk.com, how we use it, who we share it with and what rights you have under the UK GDPR and the Data Protection Act 2018. We do not run a casino: we review them. The data we handle on this site is the data a reader generates while browsing editorial content.
Who runs this site
CasinoReview is the editorial brand responsible for offshorecasinosuk.com. For data protection questions use the contact form in the footer; we respond within 30 days to any request covered by UK GDPR Articles 15 to 22.
What we collect
- Standard server logs: IP address, user agent, referrer, timestamp and the URL requested. Used for debugging, abuse prevention and traffic analysis. Logs rotate every 30 days.
- Analytics events: page views, scroll depth, outbound click destination, device class, approximate city derived from IP. We use a privacy-oriented analytics setup that does not place persistent cross-site cookies and does not share pseudonymous data with ad networks.
- Cookies: a small session cookie that remembers your cookie-banner choice, and optional analytics cookies that only run if you consent. No cross-site tracking cookies are set by us.
- Affiliate click metadata: when you click a casino link we pass a referral tag to the destination casino so that the operator can attribute your sign-up to our site. We do not receive your account details, deposit amounts or play history from the casino.
- Correspondence: if you write to us, we keep your message and reply as long as the matter is open plus up to 24 months for audit.
Legal bases we rely on
- Legitimate interest for server logs, basic analytics and anti-abuse.
- Consent for optional analytics and marketing cookies.
- Legal obligation for records retained for tax, consumer protection or statutory audit.
- Contract for responding to a message you sent us.
Cookies
The cookie banner on your first visit offers three choices: accept all, essential only, or customise. Essential cookies remember your consent choice and the state of the mobile menu, they always run. Analytics cookies measure anonymous usage and only run after you accept. Marketing cookies are not used on this site. You can withdraw consent at any time by clearing site data in your browser; the banner will appear again on the next visit.
Third parties
- Hosting and content delivery providers, which process traffic logs on our behalf under a data-processing agreement.
- Analytics provider, which processes anonymised event data under a UK GDPR-compliant contract.
- Affiliate networks, which receive your click so they can attribute a sign-up to this site. We do not share identifiable account data; the destination casino operates its own privacy policy that governs the relationship from the moment you register.
We do not sell personal data. We do not pass contact details to third parties for marketing.
International transfers
Some service providers process data outside the United Kingdom. Where transfers happen, we rely on adequacy decisions or on standard contractual clauses supplemented with additional safeguards. On request we can describe the current providers and the country where they operate.
Retention
- Server logs: up to 30 days.
- Analytics events: aggregated and anonymised beyond 14 months.
- Affiliate click metadata: up to 12 months.
- Correspondence: up to 24 months after resolution.
Your rights
Under UK GDPR you can request access to the data we hold, correct it, delete it, object to processing, restrict processing, or ask for it to be transferred to another provider. Send the request through the contact form; please include enough detail for us to locate the records. You can also complain to the Information Commissioner's Office at ico.org.uk.
Children
The site is intended for adults aged 18 and over. We do not knowingly collect data from minors. If a parent or guardian believes a child has interacted with the site, write to us and we will remove the data promptly.
Security
Traffic is served over TLS 1.3. Access to internal systems is restricted to the editorial team and tied to two-factor authentication. Backups are encrypted at rest. We review our configuration at least once per quarter.
Changes to this policy
This policy is dated at the bottom of the page. Material changes are highlighted in the footer update line for at least 30 days after publication.
Last reviewed: 02 November 2026.