Privacy and Cookies Policy

Last updated: 26 October 2026

Draft policy for launch — confirmation required.This local preview has no analytics, affiliate tracking or cookie banner installed. The provider, retention and security arrangements described below have not been verified. Reconcile this policy with the actual site before publication.

About This Policy

Winners Lobby (winnerslobby.co.uk) is a casino review site. It publishes reviews, ratings and guides about online casinos licensed by the Gambling Commission, and links to them. This policy explains what data the site collects when you visit, why it's collected and what control you have over it.

Winners Lobby isn't a casino. It doesn't hold your money, run games or take bets, so it handles very little personal data compared with the casinos it reviews. This policy covers winnerslobby.co.uk only. Once you click through to another site, whether that's a casino, the Gambling Commission or a support service such as GamCare, that site's own privacy policy applies.

What Data Is Collected

How much data the site holds depends on what you do. If you read a review and leave, it holds only the technical data every website collects. Sending an email adds a little more.

Information You Send

There are no accounts, logins or passwords on Winners Lobby, and there's no newsletter. The only time the site receives personal information directly from you is when you email it. That email contains your email address, your name if you include it and whatever you write in the message.

Winners Lobby never collects payment details, identity documents or anything about your gambling activity. Those are handled by the casinos you choose to join.

Data Collected Automatically

Like almost every website, Winners Lobby collects some technical data when you visit. This includes your IP address, browser and device type, operating system, the pages you view and in what order, the date and time of your visit, the page that referred you and your approximate location at country or city level. None of it identifies you by name, but some of it, your IP address in particular, counts as personal data under UK law. It comes from cookies and from server logs kept by the hosting provider.

Information From Affiliate Partners

When you click a casino link on Winners Lobby and go on to register, the casino's affiliate programme reports that a referral happened. That's how the site earns commission. The report contains a transaction reference and a status, and sometimes a commission amount. It doesn't include your name, email, account details, deposits or anything about how you play, and Winners Lobby can't identify you from it.

The site doesn't buy data from brokers or collect personal information about you from any other source.

Why the Data Is Used

DataWhy It's UsedExample
Your email and messageTo reply to you and correct the siteAnswering a report that a welcome offer has changed
IP address and device dataKeeping the site secureBlocking bot traffic and attacks
Pages visited and session dataUnderstanding which content helps readersSpotting a review that readers leave early and rewriting it
Affiliate referral reportsCrediting the commission that funds the siteConfirming a click on a casino link led to a sign-up
Approximate locationChecking the site reaches the UK readers it's written forConfirming most visitors are in the UK

On smaller screens, scroll the table sideways to see every column.

Your data isn't used for automated decision-making or profiling.

Cookies

Cookies are small files stored on your device when you visit a website. Some keep the site working. Others show which pages are read, or record that a casino visit came from this site so the referral can be credited.

TypeWhat It DoesExamplesHow Long It LastsNeeds Your Consent
Strictly necessaryKeeps the site working and remembers your cookie choicesCookie consent setting, security checksSession to 12 monthsNo
AnalyticsShows how visitors use the siteGoogle Analytics 4 (_ga and ga cookies)Up to 2 yearsYes
Affiliate trackingRecords that a casino visit came from Winners LobbyCookies set by each casino's affiliate programmeUsually 30 to 90 days, set by each programmeYes

On smaller screens, scroll the table sideways to see every column.

Who Data Is Shared With

Personal data is never sold. It's shared only where that's needed to run the site, credit affiliate commission or comply with the law.

Casinos and Their Affiliate Programmes

When you click a casino link, the casino's affiliate platform may place a tracking cookie on your device, if you've allowed affiliate cookies. Everything after that click, including your registration, deposits, play and identity checks, is handled by the casino under its own privacy policy. Winners Lobby never sees any of it. Casinos licensed by the Gambling Commission also have to follow UK data protection law, and it's worth reading a casino's privacy policy before you register.

Service Providers

A small number of providers keep the site running. Cloudflare hosts the site and keeps its server logs, Google provides analytics through Google Analytics 4 and Google Workspace handles email. Each one processes data on the site's behalf under a data processing agreement, and none of them can use it for their own purposes.

International Transfers

Some providers, including Cloudflare and Google, may process data outside the UK. Where that happens, transfers go only to countries with a UK adequacy decision or are protected by the UK International Data Transfer Agreement, or by standard contractual clauses with the UK Addendum.

How Long Data Is Kept

DataHow Long It's KeptWhat Happens Then
Emails you send12 months after the last replyDeleted
Analytics data14 monthsDeleted automatically by Google Analytics
Server and security logsUp to 90 daysDeleted automatically by the hosting provider
Affiliate referral reports6 years, the period UK tax law requires for financial recordsDeleted
Cookie consent choice12 monthsThe cookie banner asks again

On smaller screens, scroll the table sideways to see every column.

You can ask for your data to be deleted sooner. That request is handled within 1 month, unless the law requires the data to be kept.

Your Rights

UK data protection law gives you the following rights over your personal data. Every request gets a reply within 1 calendar month, and reasonable requests are free.

RightWhat It Means
AccessYou can ask for a copy of the personal data held about you. With no accounts on the site, this is usually limited to your emails and any analytics identifiers
CorrectionYou can ask for inaccurate data to be corrected
ErasureYou can ask for your data to be deleted, unless the law requires it to be kept
RestrictionYou can ask for the use of your data to be limited while a request or dispute is settled
PortabilityYou can ask for your data in a structured, machine-readable format
ObjectionYou can object to uses based on legitimate interests, and they stop unless there are compelling grounds to continue
Withdrawing consentYou can withdraw consent for cookies at any time through the Cookie settings link in the footer

On smaller screens, scroll the table sideways to see every column.

To use any of these rights, email ask@winnerslobby.co.uk.

Under 18s

Gambling is restricted to people aged 18 and over in the UK, and Winners Lobby isn't designed for or aimed at anyone younger. Data from under 18s is never knowingly collected. If it turns out someone under 18 has sent personal data, it's deleted straight away.

Parents and guardians worried about a child seeing gambling content can use network-level parental controls and blocking software such as BetBlocker, which work on the devices your children use. Adults who want to block gambling sites for themselves can register with GAMSTOP.

How Your Data Is Protected

The site uses SSL/TLS encryption, so data passing between your browser and the site is encrypted in transit. Access to email and hosting accounts is protected by strong passwords and two-factor authentication, and limited to the people who need it.

No system is completely safe from a breach. If a breach happens that puts your rights at high risk, you'll be told without undue delay, and the Information Commissioner's Office will be told within 72 hours, as UK GDPR requires.

Changes to This Policy

This policy may change to reflect new practices, new legal requirements or changes to the site. When it does, the date at the top of the page changes too. Significant changes are shown on the site before they take effect, and earlier versions are available on request.

Who Runs This Site and How to Get in Touch

Winners Lobby is the controller of the personal data described in this policy, which means it decides how and why that data is used. For questions about this policy, requests about your data or a data protection concern, email ask@winnerslobby.co.uk. If you're unhappy with how your data has been handled, you can complain to the Information Commissioner's Office.