This site deals with the cashout side of online casinos, those outside GamStop included, and its readers sit in Great Britain. Only the personal data an information site genuinely needs is handled, under the UK GDPR and the Data Protection Act 2018. The policy below does what Article 13 of the UK GDPR asks of a controller: it informs the reader plainly.
Who answers for the data
The body that runs ukplaylookout.com is the controller in the sense of Article 4(7) UK GDPR. Its name, address and e-mail address are available at ukplaylookout.com, and that same route serves for every question touching personal data.
What the server and the postbox see
Every visit leaves a log line: the IP address, the date and the time, the page asked for, how much data went out, where the reader arrived from, and which browser was used. Such lines exist to keep the site safe and to catch misuse; once 90 days have passed they are erased or trimmed until they no longer single out a person. A reader who writes in supplies a name, an e-mail address and the wording of the message, and these serve only to compose a reply. Since the site keeps no reader accounts, takes no deposits and holds no stakes, neither payment details nor identity documents ever reach it.
Why the data is held, and on what footing
Keeping the site running and secure is a legitimate interest of the controller, and it covers the log lines and the measures against misuse (Article 6(1)(f) UK GDPR); a reply to a message rests on the same footing. Everything beyond the strictly necessary cookies, audience measurement included, waits for consent (Article 6(1)(a) UK GDPR read with regulation 6 of PECR), and that consent may be taken back at any moment without touching the lawfulness of what was done before (Article 7(3)). Decisions about readers are never automated, and no profiles are drawn.
Where data goes
Nothing is sold. Processors working on the controller's instructions handle hosting, content delivery and e-mail (Article 28 UK GDPR), and public authorities receive data where the law demands it. Data leaves the United Kingdom only for a country covered by adequacy regulations, or under appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum (Article 44 onwards).
What a reader may ask for
Access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection to processing that rests on legitimate interests (Article 21) are open to every person. A reply follows without undue delay and inside one month of receipt; Article 12(3) allows that month to be stretched by two more where the request calls for it.
How long the data stays
No longer than its purpose needs: log lines go after at most 90 days, and correspondence stays until the matter is closed plus the stretch required to answer possible claims. A message may be sent or withheld freely, but with nothing sent there is nothing to answer.
The watchdog, and complaints
The Information Commissioner's Office (ICO) supervises data protection in the United Kingdom. Should the handling of personal data break the law, the person concerned may complain to it (Article 77 UK GDPR).
Last updated: 13.11.2026.