1. Who we are
NexaCasino is an independent editorial comparison website focused on UK-licensed casinos. We publish review content, comparison tables, responsible gambling information and legally required notices. We do not offer gambling services, hold player balances or operate casino accounts. For the purposes of applicable data protection law, including the UK GDPR and the Data Protection Act 2018, NexaCasino acts as the controller of personal data processed through this website unless a specific section of this notice says otherwise.
If you have questions about privacy or wish to exercise one of your data rights, you can contact us at privacy@nexacasinouk.com. We use that mailbox to manage data-related requests, correction notices and privacy complaints.
2. What data we may collect
Most visits to NexaCasino do not require you to provide your name or account details. Even so, some technical information is processed automatically when your browser connects to the site. That may include IP address, browser type, device category, operating system, referring page, pages viewed, approximate region derived from network information, timestamps and basic performance signals. If you contact us directly, we may also receive the information you choose to include in your email, such as your name, email address and the substance of your message.
We do not ask for payment card details, gambling account credentials or identity documents. Please do not send sensitive material unless it is necessary for a specific privacy request and we have asked you to do so.
3. How we use personal data
We process data to keep the site available, protect it from abuse, understand broad usage patterns, store consent choices, respond to messages and improve the clarity of our editorial material. Technical data helps us maintain performance, investigate errors and identify malicious traffic. Contact information is used to answer the reason you wrote to us and to keep a record of the discussion where needed for legal, compliance or quality purposes.
We may also use aggregate analytics to understand which articles are being read and how visitors move through the site. Those reports are used at a high level and are not intended to profile individual readers.
4. Lawful bases under UK GDPR
We rely on different lawful bases depending on the activity involved. Essential site security, fraud prevention, platform maintenance and response logging are generally processed on the basis of our legitimate interests in running a safe and stable editorial service. Where we use non-essential analytics or similar technologies that require consent, we rely on the consent choice you make through our cookie tools. When you contact us, we may process your message to take steps requested by you, to answer your enquiry or to comply with legal obligations.
Where legitimate interests apply, we consider the nature of the information, the reasonable expectations of users and the limited impact of the processing. We aim to keep data use proportionate to the editorial purpose of the site.
5. Cookies and consent records
NexaCasino uses cookies and comparable browser storage tools for a small set of purposes. Some are necessary for the site to remember that you have acknowledged the age gate or selected a cookie preference. Others may support aggregate analytics, depending on the consent options we present. The site stores your cookie decision locally in your browser so that we do not show the same banner repeatedly on every visit.
Our separate Cookie Policy explains the types of cookies in more detail, the difference between essential and optional use and the ways you can clear browser storage or update your preference later. You can view that document at any time from the footer of the site.
6. Email correspondence
If you send us an email, we will use the contents of that message to respond, investigate the matter raised and keep an internal record of the exchange where reasonable. That may include storing your name, email address, the subject line and any supporting details you choose to provide. We ask that you avoid sending special category data or information about gambling harm unless it is necessary for your request, because ordinary customer support questions about operators should normally be directed to the operator itself.
Where an email contains a legal request, correction request or privacy complaint, we may retain it for longer than routine correspondence so we can demonstrate how the issue was handled.
7. Data sharing
We do not sell personal data. We may share limited data with service providers that help us host the site, maintain security, process email or generate aggregated performance reports. Those providers are expected to process data only on our instructions, to keep it secure and to use it only to the extent necessary to provide the relevant service. We may also disclose information where required by law, regulation, court order or to establish, exercise or defend legal claims.
If business ownership changes in the future, data relevant to operating the site may form part of that transaction. Any such transfer would still need to respect applicable privacy law and the promises set out in this notice.
8. International transfers
Some technical providers may process data outside the UK or the European Economic Area. Where that happens, we aim to use recognised transfer mechanisms and appropriate safeguards, such as adequacy regulations, standard contractual clauses or equivalent legal measures. International transfers are assessed in light of the provider, the type of data involved and the security posture of the service.
Because the site is editorial in nature, the data normally involved is limited and low sensitivity, but we still take transfer protections seriously and review provider arrangements when practical.
9. Data retention
We retain personal data only for as long as needed for the purpose for which it was collected, subject to legal, accounting or dispute-resolution requirements. Technical logs are typically kept for a limited period consistent with security and maintenance needs. Cookie preference records remain in your browser until cleared by you or replaced by a later selection. Email correspondence may be retained for longer where it relates to compliance, legal obligations or repeated contact history that needs context.
Retention periods may vary according to the type of interaction, but our approach is to avoid holding information longer than a reasonable editorial or legal need demands.
10. Your data protection rights
Depending on your circumstances and the law that applies, you may have the right to request access to your personal data, ask for rectification of inaccurate information, seek erasure, request restriction of processing, object to certain processing based on legitimate interests and ask for portability where processing is based on consent or contract and carried out by automated means. You may also withdraw consent at any time where we rely on consent, although that does not affect the lawfulness of processing before withdrawal.
We may need to verify your identity before completing a request. That helps protect your information from unauthorised access by someone pretending to be you.
11. Complaints and supervisory authorities
If you are unhappy with the way we handle personal data, please contact us first so we have a fair chance to address the issue. You also have the right to complain to the Information Commissioner's Office in the UK or, where relevant, another supervisory authority in the place where you live or work. Raising a concern with a regulator does not remove your ability to contact us directly, and we would generally welcome the opportunity to correct a problem before it grows into a formal dispute.
Our privacy contact remains privacy@nexacasinouk.com.
12. Security measures
We use reasonable technical and organisational measures to protect the site and the information we control. Those measures may include access controls, basic logging, software maintenance, provider vetting and other practical safeguards suited to an editorial website. No internet transmission or storage system can be guaranteed as completely secure, so we cannot promise absolute security. What we can promise is that we aim to keep processing proportionate, limit unnecessary collection and respond to credible security issues without delay.
If a security incident affects personal data in a way that triggers legal notification duties, we will take the steps required by applicable law.
13. Children's data and age restriction
NexaCasino is intended for adults aged 18 and over. The site includes an age confirmation step because the subject matter relates to gambling and gambling-affiliate content. We do not knowingly seek to collect personal data from children. If you believe a person under 18 has provided us with personal information, contact us so we can review the issue and, where appropriate, delete the data.
Parents and guardians should also understand that operator-specific account issues need to be addressed with the operator concerned, not with this editorial website.
14. Changes to this notice
We may update this Privacy Policy when the site changes, when legal requirements change or when the tools we use to run the site are adjusted. When a change is material, we will revise the page accordingly and update the page records. Minor wording edits, formatting changes and clarifications may appear without a special announcement where the underlying practice has not changed.
You should review this page from time to time if privacy is important to you, especially before sending us personal information by email.
