Privacy notice: how Beyond GamStop Casino handles personal data

Last reviewed: 12 May 2026

Beyond GamStop Casino is committed to handling personal data lawfully, transparently, and only where there is a defined need. This notice explains what data we process, why we process it, the legal basis on which we rely, how long we retain it, who we share it with, and the rights you can exercise as a data subject under the UK GDPR and the Data Protection Act 2018.

Who is the data controller?

The data controller for Beyond GamStop Casino is the operating entity identified on the terms and legal notice page; contact channels for data protection enquiries are published on the contact page.

Where the volume or sensitivity of processing requires it, a Data Protection Officer is appointed and named on the contact page. At present the data protection function is held by the editorial team and reachable through the dedicated privacy channel.

What do we mean by “personal data” and related terms?

The definitions used in this notice follow Article 4 of the UK GDPR. “Personal data” means any information relating to an identified or identifiable natural person. “Processing” means any operation performed on personal data, including collection, storage, use, transmission, and deletion. “Controller” means the entity that determines the purposes and means of processing — in the context of this site, the operator named above. “Processor” means a third party that processes personal data on the controller’s behalf — for example, a hosting provider or analytics provider.

What categories of personal data do we process?

Beyond GamStop Casino is a publishing site without user accounts, registration, or commercial transactions. The categories of personal data we process are deliberately limited.Server log dataIP address, user agent, request URL, response status, request time. Collected automatically by the hosting infrastructure when any visitor loads a page.Cookie and analytics dataAnonymised or pseudonymised browsing data collected via cookies and analytics scripts described in the cookie policy. Only set on the basis of your consent where the cookie is non-essential.Contact form dataWhere you write to us via the form on the contact page or by email: your name, email address, message subject, and message content.Correspondence recordsAny subsequent emails exchanged with the editorial team, retained for the purposes of replying and for editorial record-keeping.

We do not collect special category data (Article 9 UK GDPR) intentionally. We ask readers not to volunteer health, religious, political, or other special category data through the contact form.

On what legal basis do we process this data?

Each processing activity is grounded in a lawful basis under Article 6(1) of the UK GDPR.

  • Server logs and essential cookies — Article 6(1)(f), legitimate interests. The interest is the secure, reliable operation of the website. We have weighed this against the limited intrusion and consider it proportionate.
  • Non-essential cookies (analytics, marketing if any) — Article 6(1)(a), consent. Consent is captured via the cookie banner and can be withdrawn at any time via the consent management interface.
  • Contact form and correspondence — Article 6(1)(a), consent (you choose to write to us) and Article 6(1)(f), legitimate interest in replying and keeping editorial records.
  • Compliance with legal obligations — Article 6(1)(c), where applicable — for example, responding to a lawful request from a competent UK authority.

How long do we keep your data?

Retention periods are set to the minimum that meets the operational and legal need.Server logsUp to 30 days for routine logs, longer only where required for security investigation.Analytics dataUp to 26 months in aggregated or pseudonymised form, depending on the analytics provider’s configuration; see the cookie policy for the current setting per cookie.Contact form correspondenceUp to 24 months from the last interaction, then deleted unless an active editorial reason requires longer retention. Specific correspondence may be retained longer where it forms part of a published correction.

Who do we share your data with?

Personal data is not sold, traded, or shared for marketing purposes. We use a small number of standard processors to operate the site:

  • Hosting provider — to store and serve the website. Processes server log data.
  • Email provider — to deliver and store correspondence with the editorial team.
  • Analytics provider (if enabled) — to produce aggregated audience reports. Configured to anonymise where the provider supports it.

The current list of processors and their jurisdiction is published on the contact page. Where any processor sits outside the United Kingdom, transfers are made under an appropriate transfer mechanism recognised by the UK data protection regime (UK adequacy decision, International Data Transfer Agreement, or UK Addendum to the EU Standard Contractual Clauses, as applicable).

We may also disclose personal data where required to do so by UK law, by a court order, or by a competent regulator.

What are your rights as a data subject?

Under the UK GDPR you have the following rights in relation to personal data we hold about you:

  • Right of access (Article 15) — to obtain confirmation that we process your data and a copy of it.
  • Right to rectification (Article 16) — to have inaccurate data corrected without undue delay.
  • Right to erasure (Article 17) — to have personal data deleted in defined circumstances.
  • Right to restriction of processing (Article 18) — to limit how we use your data in defined circumstances.
  • Right to data portability (Article 20) — to receive your data in a structured, machine-readable format.
  • Right to object (Article 21) — to object to processing carried out on the basis of legitimate interests.
  • Right to withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, contact the data protection email above. We aim to respond within one month, as required by the UK GDPR. If you are not satisfied with our handling of a request, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

How is this notice updated?

This notice is reviewed each editorial cycle and updated where processing activities, processors, or applicable law change. The “last reviewed” date at the top of the page reflects the most recent material update. Significant changes will be flagged on the home page for a reasonable period after the update.

If gambling is causing harm to you or someone close to you, free confidential UK support is available from GamCare on 0808 8020 133 (24/7).

This privacy notice should be read alongside the cookie policy and the terms and legal notice.