Privacy Policy – Winz

Start playing

Winz
Winz Privacy

How winzkasino-suomi.fi handles your information

This privacy policy explains what personal data winzkasino-suomi.fi collects when you visit our independent review portal, how we use it, who else might see it, and what control you have over it. We are not a casino operator – we publish informational and promotional content about Winz and other brands. The operator runs its own platform at its own domain and has its own privacy policy covering what happens once you register there. This policy covers only what takes place on our site.

If you're under 18, you must not use this site. Access is restricted to adults (18+) in line with UK law.

Who is responsible for your data

The data controller for winzkasino-suomi.fi is the entity operating this portal. Questions about how we handle your information should be sent to [email protected]. We respond within 48 hours on working days.

This policy was last updated on 23 October 2026.

What information reaches us

We collect two broad categories of data: information you give us directly, and technical information your browser sends automatically when you visit.

Information you provide: When you fill in our contact form, we collect your email address and whatever you write in the message field. We need this to answer your question – we cannot respond without it. Providing this information is voluntary; you're not obliged to contact us.

Technical information we observe: Like most websites, we log IP addresses, browser type and version, device type, operating system, pages you visit, time spent on each page, referrer (the site you came from), and timestamps. We use this to understand how people use the portal, which sections get read, and where improvements are needed. None of this identifies you by name, but an IP address is classed as personal data under UK GDPR because it can be linked to a household or device.

We also set cookies – small text files stored by your browser. Some are essential for the site to work (session cookies, consent preferences); others help us measure traffic through Google Analytics. You can read the full breakdown on our cookie policy page. The consent banner you saw when you first arrived lets you accept or decline the non-essential ones.

Why we process your data and the lawful basis

Under the UK General Data Protection Regulation and the Data Protection Act 2018, we must have a lawful reason to process personal information. Here's what applies to each category:

Purpose	Lawful basis
Answering contact-form enquiries	Legitimate interest (responding to your request)
Technical logs and site functionality	Legitimate interest (running and securing the site)
Analytics (Google Analytics)	Consent (you accept non-essential cookies)
Marketing and advertising cookies	Consent (you accept non-essential cookies)

Legitimate interest means we have a valid business reason for the processing, and your rights are not outweighed by that reason. Consent means you gave explicit permission through the banner or your browser settings, and you can withdraw it at any time.

Who else sees your information

We share data with a small number of third parties, always for a specific purpose and under contract:

Hosting provider: The server that stores this site processes your IP address and technical logs as part of delivering the pages you request.
Analytics services: Google Analytics receives anonymised usage data (pages visited, time on site, device type) to help us understand traffic patterns. Google processes this under its own terms, and we've configured Analytics to anonymise IP addresses.
Advertising networks: If you've accepted marketing cookies, ad platforms may collect data about your visit to show relevant ads later. Each network operates under its own privacy policy – links to the main ones are available in our cookie policy.

We never sell your data to anyone. We do not pass email addresses or contact-form content to third parties for marketing. If we're legally required to disclose information – for example, in response to a court order or to prevent fraud – we'll comply with that obligation, but this is rare and we'll notify you when permitted by law.

Transfers outside the UK

Some of the processors listed above operate servers in other countries, including the United States. When data leaves the UK, we ensure the recipient is covered by an adequacy decision or uses standard contractual clauses approved by the ICO. Google and most major hosting providers have these safeguards in place.

You have the following rights over your personal data. Each one is real and enforceable – we do not make them conditional on anything beyond confirming your identity.

Right of access: You can ask for a copy of everything we hold about you. We'll provide it in a common electronic format within one month.
Right to rectification: If something we've recorded is wrong, you can ask us to correct it.
Right to erasure ("right to be forgotten"): You can ask us to delete your data when there's no legal reason for us to keep it. This doesn't apply if we need it to comply with a legal obligation.
Right to restriction: You can ask us to stop processing your data while we resolve a dispute or verify its accuracy.
Right to data portability: Where we process data by automated means and with your consent (or under a contract), you can ask for a machine-readable copy to take elsewhere.
Right to object: You can object to processing based on legitimate interest or for direct marketing. We must stop unless we have compelling grounds that override your interests.
Right to withdraw consent: Where we rely on consent (analytics, marketing cookies), you can withdraw it at any time by changing your cookie preferences or contacting us. Withdrawal does not affect any processing that happened before you withdrew consent.

How to exercise your rights

Send any request to [email protected]. Include enough detail for us to identify you – usually your email address and a description of what you're asking for. We'll respond within one month. If the request is complex or we receive several at once, we may extend that by two months and we'll tell you why.

You do not need to pay a fee unless your request is clearly unfounded or excessive (for example, asking for the same information repeatedly without good reason). In that case we can charge a reasonable administrative fee or refuse the request, and we'll explain why.

If you're not happy with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority. You can contact them at ico.org.uk or call 0303 123 1113. The ICO can investigate and order us to take action if we've breached the law.

How long we keep your data

We hold different categories of data for different periods, based on how long we need them:

Contact-form submissions: We keep your email and message for two years from the date you sent it, in case there's a follow-up question or a dispute. After that, we delete it.
Server logs: Technical logs (IP addresses, timestamps, pages visited) are kept for 12 months, then automatically purged. We need this window to spot abuse, diagnose technical problems, and understand usage trends.
Analytics data: Google Analytics retains aggregated, anonymised data for 26 months by default. You can read Google's own retention policy at their privacy centre.
Cookie data: Session cookies expire when you close your browser. Preference and analytics cookies last for up to 12 months, then your browser deletes them (or you can clear them manually at any time).

If you exercise your right to erasure, we'll delete your data within one month unless a legal obligation requires us to keep it longer (for example, a tax record or a valid court order).

Protection of minors

This site is aimed at adults and concerns gambling products. You must be 18 or over to use it (18+). We do not knowingly collect personal data from anyone under 18. If you're a parent or guardian and you believe your child has sent us information, contact [email protected] and we'll delete it immediately.

Gambling operators enforce their own age checks once you register with them – that is outside our control. If you share a device with someone under 18, consider using parental-control software such as Net Nanny or Qustodio to restrict access to gambling-related sites.

Security measures

We take reasonable technical and organisational steps to protect your data from unauthorised access, loss, or misuse. The site is served over HTTPS (encrypted connection), and access to contact-form submissions is restricted to authorised personnel. That said, no internet transmission is completely secure – if you send us sensitive information by email, be aware that email is not encrypted by default.

Changes to this policy

We may update this privacy policy from time to time – for example, if we add a new feature or a new processor, or if the law changes. When we make a material change, we'll update the date at the top of this page and, where appropriate, notify regular users by email or a banner on the site. Continued use after a change means you accept the updated terms.

Questions and contact

For anything about this privacy policy or how we handle your data, write to [email protected]. We aim to reply within 48 hours on working days. If your question is about your account with Winz – deposits, withdrawals, verification – contact the operator's own support team directly; we're an information portal and have no access to player accounts.

This page is provided for information and marketing purposes only. We are not a casino operator, bookmaker, or organiser of gambling activity. Access is restricted to persons aged 18 and over (18+). If gambling ever stops feeling like entertainment, free and confidential support is available at BeGambleAware.org.