Privacy

Rolletto Casino Privacy Policy

A clear explanation of what personal data we collect, how we use it, who we share it with and the rights UK visitors have under UK GDPR.

What information do we collect when you use this site?

When you visit the Rolletto Casino information site we collect a small amount of technical data automatically. This includes your IP address, your device type, the browser you are using, the operating system, the pages you visit, the time you spend on each page and the site that referred you to ours. This data is collected through standard server logs and through analytics cookies if you accept them. None of it identifies you personally on its own. We use it to understand how visitors interact with the site so we can improve content and structure.

If you contact us through email or a form we collect the information you choose to share. That usually means your email address and the contents of your message. We use this only to respond to your enquiry. We do not add your email to any marketing list without your explicit consent. The Cookie Policy covers every type of cookie used on the site in detail.

What are the legal bases for processing your data?

Under UK GDPR we must rely on a specific legal basis for every type of processing we carry out. The bases we use are legitimate interests for analytics and site improvement, consent for non-essential cookies and marketing communications, contractual necessity for responding to your enquiries and legal obligation for data we are required to retain by law. We do not rely on any other basis and we do not process special category data such as health information or political views.

If you want to know the legal basis for any specific use of your data, write to us using the contact address below and we will explain. We will also provide a free copy of all personal data we hold about you if you submit a Subject Access Request. The standard turnaround is 30 days from the date we verify your identity.

Who do we share your data with?

We use a small number of trusted third party services to operate the site. These currently include our hosting provider, our analytics provider, our email delivery provider for service messages and a customer support tool. Each of these processors has signed a data processing agreement that meets UK GDPR standards. None of them is permitted to use your data for their own purposes. We never sell your data to anyone for any reason. The Rolletto Casino information site does not place advertising trackers from third party ad networks.

If you click through to the operator at rolletto.com you leave this site and enter the operator's own platform, which is subject to a separate privacy policy. We are not responsible for the privacy practices of the operator although they apply UK GDPR equivalent protections for UK and EU residents under their own licence terms.

What we collect

Technical site usage data plus anything you submit voluntarily through a contact form.

How we protect it

SSL encryption in transit, access controls on stored data and regular review of supplier contracts.

Your rights

Access, rectification, erasure, restriction, portability and the right to object to processing.

No selling

We never sell your data and we never share it with ad networks.

How long do we keep your data and what are your rights?

Server logs are retained for 90 days. Analytics data is retained for 14 months in aggregate form. Contact form submissions are retained for as long as the matter is open plus 12 months for reference. If a legal obligation requires longer retention we apply that period and document the reason. UK GDPR gives you the right to access your personal data, to ask us to correct any errors, to request erasure, to restrict or object to processing, to data portability and to lodge a complaint with the Information Commissioner's Office.

To exercise any of these rights, email us at privacy@rolletto.com with the subject line "Privacy request" and a description of what you want. We will reply within five working days to confirm next steps and complete the request within 30 days. If you are not satisfied with our response you can contact the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. For wider context on how this site treats UK visitors, see the Cookie Policy and the Responsible Gambling page.

How do we protect data when it crosses borders?

Some of the processors we use are based outside the UK and the European Economic Area. Where that is the case, we rely on the safeguards permitted under UK GDPR. These include the UK International Data Transfer Agreement, the European Commission's Standard Contractual Clauses and recognised adequacy decisions where the destination country has equivalent protections to UK law. Every cross-border transfer is documented, including the safeguard relied on, the purpose of the transfer and the security measures applied to the data during transit and at rest. We review these arrangements at least annually and we update them when the regulatory landscape changes.

Within the UK and EEA, data is processed in data centres that meet ISO 27001 or equivalent standards. Encryption in transit is enforced through TLS 1.2 or higher on every page. Encryption at rest is applied to all stored databases. Administrative access to systems holding personal data is restricted by role and protected by multi-factor authentication. Activity logs are reviewed regularly and any unusual access pattern triggers an alert that is investigated within working hours.

How do we handle data breaches if one occurs?

No system is perfect and we take the possibility of a breach seriously. If a security incident affects personal data, we follow the steps required by UK GDPR. The first 72 hours after detection are dedicated to containment, investigation and notification. Where a breach is likely to result in a risk to your rights and freedoms, we report it to the Information Commissioner's Office within the statutory 72-hour window. Where the risk is high, we contact affected individuals directly with a clear description of what happened, what data was involved and the steps we are taking in response.

In addition to the regulatory steps, every incident triggers a post-mortem review. The findings feed back into our security posture, including changes to access controls, employee training and supplier audits where applicable. We treat every near-miss as a learning opportunity even when no data was exposed. Transparency is part of how we earn and keep trust, so we publish a summary of any reportable incidents on this page within 30 days of resolution.

What about children and special category data?

The Rolletto Casino information site is intended for adults aged 18 and over. We do not knowingly collect data from children. If a parent or guardian becomes aware that a child has submitted personal data through our contact form, please contact us at privacy@rolletto.com and we will delete the data without delay. We do not run advertising aimed at children and we do not use data to profile or target minors.

We do not process special category data, which includes health, ethnicity, religion, political views, trade union membership, genetic and biometric data, sex life or sexual orientation. If we ever need to process special category data for a specific purpose, we will update this policy and seek your explicit consent before collecting any such information. The Cookie Policy covers the technical mechanisms we use for analytics and how to control them.

Contact

Email privacy@rolletto.com for any privacy related question. We answer every message and we do not pass enquiries to marketing teams.