An information site about casinos not on GamStop and their withdrawal claims needs no more personal data than the running of a website requires, and no more is taken by britwagerhub.com. The rules that apply are the UK GDPR and the Data Protection Act 2018. This policy meets the duty to inform under Article 13 of the UK GDPR.
Controller
The controller within the meaning of Article 4(7) UK GDPR is the body that runs britwagerhub.com. Its name, address and e-mail address are available at britwagerhub.com, and the same channel is used for every question about personal data.
What is processed
Every page opened leaves a log entry on the server: IP address, date and time, the address requested, the volume of data sent, the referring page and the browser type. Security and the detection of abuse are what such logs are for, and they are erased or truncated after 90 days so that no link to a person remains. Whoever writes to the editors supplies a name, an e-mail address and the message text as well, used for answering and nothing else. Reader accounts, deposits and stakes do not exist here, so payment details and identity documents are never gathered.
Lawful bases and purposes
Keeping the site working and secure is the controller's legitimate interest, and on it rest the server logs and the protection against abuse (Article 6(1)(f) UK GDPR). The same interest covers the answering of a message. Consent is required for cookies other than the strictly necessary ones and for audience measurement (Article 6(1)(a) UK GDPR together with regulation 6 of PECR), and nothing of the kind runs before it is given; withdrawal is possible whenever the reader wishes and leaves the lawfulness of earlier processing unaffected (Article 7(3)). Profiling and automated decision-making play no part here.
Recipients and transfers outside the UK
No sale of data takes place. Processors carrying out the controller's instructions in hosting, content delivery and e-mail receive it (Article 28 UK GDPR), as do public authorities where the law demands. Only a country covered by adequacy regulations, or one benefiting from appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum, may receive a transfer outside the United Kingdom (Article 44 onwards).
Rights
Access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection to processing based on legitimate interests (Article 21) belong to every person. An answer follows without undue delay and within one month of receipt; a further two months may be added to that period where necessary, under Article 12(3).
Retention
Only for as long as the purpose demands is data retained: server logs no longer than 90 days, correspondence until the matter is closed and for the span needed to defend against possible claims. Data in a message is given voluntarily, yet no reply can follow without it.
Supervision and complaints
The supervisory authority is the Information Commissioner's Office (ICO). Anyone who believes that the processing of their data breaches data protection law has the right to complain to it (Article 77 UK GDPR).
Last updated: 13.11.2026.