Privacy policy

This privacy policy explains how the independent Gala Casino information portal on this domain may collect, use and store information about visitors. It applies only to our editorial site. It does not describe how the licensed gambling operator processes player account data on its own website or apps; that operator maintains a separate privacy notice for customers who register, deposit and bet with them.

Who is responsible for processing

The publisher responsible for this portal determines why and how personal data is processed in connection with these pages. For routine rights requests, use the contact details on our Contact page. If we appoint a Data Protection Officer or EU/UK representative for this project, their particulars will be added here. We do not sell personal information as a business model.

Categories of data we may process

When you load a page, hosting infrastructure and security tools may automatically process technical identifiers such as IP address, approximate location derived from that address, browser type and version, operating system, referring URL, timestamps and requested paths. If you email us, we process your address, the contents of your message and metadata generated by mail servers (for example delivery status codes). We do not ask you to create an account on this portal for reading guides, so we typically do not hold passwords or payment card numbers for portal visitors.

Purposes and lawful bases

We use technical data to deliver pages over HTTPS, to detect abuse such as credential-stuffing or scraping at harmful rates, to troubleshoot outages and to understand aggregated readership patterns. Where UK GDPR applies, we rely on legitimate interests for site operation, security and aggregated analytics, balanced against your rights. Where law requires consent for non-essential cookies or similar technologies, we will obtain it through a clear mechanism and you may withdraw consent without affecting lawful processing that does not depend on it.

Cookies and similar technologies

Strictly necessary cookies or storage may be used to maintain security tokens, remember lightweight preferences or route traffic across servers. Optional cookies for measurement, personalisation or advertising may be deployed only where permitted. You can manage many cookies through browser settings; blocking some categories may limit functionality. If we integrate third-party embeds, those providers may set their own cookies governed by their policies.

Retention

Server logs are kept only as long as needed for security, debugging and legal compliance, then deleted or aggregated so they no longer identify individuals. Email correspondence is retained for as long as necessary to finish a conversation, maintain a record of disputes or meet accounting or regulatory obligations, after which it is deleted or archived with restricted access. Aggregated analytics may be stored longer because it does not identify you directly.

Processors and international transfers

We use service providers such as hosting companies, content delivery networks, email providers and, where enabled, analytics platforms. They process data on our instructions under contract. If personal data is transferred outside the United Kingdom or European Economic Area, we implement appropriate safeguards such as standard contractual clauses or adequacy decisions where required by applicable law.

Your rights

Depending on where you live, you may have rights to access, rectify, erase, restrict or object to certain processing, and to data portability for information you supplied where processing is automated and contractually or consensually grounded. You may withdraw consent where processing is consent-based. You may lodge a complaint with the UK Information Commissioner’s Office or another supervisory authority. We will respond to valid requests within statutory timeframes, though we may need to verify your identity first.

Children

This portal discusses gambling-related topics and is not directed at children. We do not knowingly collect personal information from anyone under eighteen. If you believe a minor has contacted us with personal data, please inform us so we can delete it where appropriate.

Automated decision-making

We do not use personal data from this portal to make solely automated decisions that produce legal or similarly significant effects about you. Security systems may automatically block suspicious IP ranges without human review; that is a protective measure rather than a profile of your individual circumstances.

Changes

We will update this policy when our practices or the law changes. Material revisions will be reflected in the date below. Continued use of the site after an update constitutes notice of the new terms where regulators allow implied notice; for significant changes affecting consent-based processing, we will seek fresh consent if required.

Last updated: March 2026.