online-casinos.io collects three kinds of personal information: emails you send, server and security logs, and a click identifier when you follow a /go link. It sells none of it, builds no advertising profiles, and any reader can ask to see, correct or delete what it holds.
This version of the privacy policy took effect on October 29, 2026.
online-casinos.io is an independent information site for adult US readers. It is not a casino: it runs no gambling services, takes no purchases, pays no prizes and keeps no player accounts, so it handles far less personal information than a casino does.
The five casinos covered on the safe online casinos page are run by their own companies, from B-Two Operations Limited at SpinBlitz to Nickle Tech LLC at Coinz. Anything you give a casino, including ID documents and payment details, falls under that operator's own privacy policy, which this site does not control.
Personal information reaches the site in two ways: you send it, or servers record it while you browse.
An email to the site gives us whatever it contains:
Each page request leaves a technical record with the site's hosting and with Cloudflare, which delivers and protects the pages:
As of October 29, 2026, the site's pages load no analytics scripts, no advertising tags and no tracking pixels of any kind. Nothing on the site asks for your home address, phone number, payment details or government identifiers, and the site does not knowingly collect information from anyone under 18.
Each use below has a stated purpose, and for visitors covered by the GDPR or UK GDPR a stated legal basis.
| Purpose | Information involved | Legal basis |
|---|---|---|
| Answering your message | Your email address, the message text and any attachments you chose to send. | Consent or legitimate interest |
| Crediting affiliate referrals | The click identifier passed to a casino's affiliate program after a /go link. | Legitimate interest |
| Keeping the site secure | Request patterns, IP addresses and user-agent strings logged by servers and Cloudflare. | Legitimate interest |
| Meeting legal duties | Server logs and correspondence the site may be required by law to keep. | Legal obligation |
online-casinos.io does not sell, rent or trade personal information, runs no remarketing lists and does not use your data to target advertising.
A few outside services keep the site running, and each one handles data under its own privacy policy:
When these providers move data across borders, they rely on standard contractual clauses or similar safeguards, and each publishes its own list of sub-processors.
Retention depends on the type of record, and each period below is the longest the site keeps it.
| Record | Retention period |
|---|---|
| Emails and attachments | Kept for 12 months after the last message, or longer only while a matter is still open. |
| Server logs with full IP addresses | Kept for 90 days, then deleted or reduced to anonymous totals. |
| Affiliate click records | Held by each casino's affiliate program for as long as its own policy sets. |
| Editorial and correction records | Kept while the related page stays live, so every correction can be audited. |
Expired records are deleted or made anonymous. Backups rotate on a shorter cycle than these periods, so they do not keep data beyond the main schedule.
Every reader gets the same core rights, wherever they live, and the site honors the stronger set where a local law adds more.
You can ask the site to:
Residents of the EU or the UK also have rights to data portability, restriction of processing and objection to processing, subject to the exemptions in those laws, and can complain to their local data protection authority.
Email [email protected] with "Privacy" in the subject. Replies go out within 30 days, and your identity is confirmed before any personal information is released. Requests are free, although a manifestly unfounded or excessive one, such as the same request sent again and again, may be refused where the law allows. The contact page lists what to include.
Cloudflare and email providers run infrastructure in many countries, so your information may be processed outside the country you live in. Such transfers are covered by standard contractual clauses or comparable safeguards that each provider publishes.
If the law gives you a right to object to a cross-border transfer, write to the privacy address. The workable option is usually deletion of the data rather than a different transfer route.
All pages are served over HTTPS. Hosting and email accounts are protected with two-factor authentication, and only the editorial team reads the inbox.
No system is completely secure. If a data breach is likely to cause serious harm, the affected people will be told without undue delay, together with any regulator the law requires to be notified.
online-casinos.io is meant for readers aged 18 or older, and it does not knowingly collect information from anyone younger. A parent or guardian who believes a child has sent personal information can email the privacy address, and it will be deleted promptly.
The policy is revised when the site's practices change, for example when a service provider is added or dropped or a retention period moves. Any material revision moves the effective date shown above, while small wording edits leave it alone.
Past versions can be requested through the contact page.
Also on online-casinos.io: best safe online casinos, about this site, Cooper Hayes author profile, how we test casinos, and sitemap.