Comparing how fast a casino pays out, on GamStop or off it, is the purpose of this site, and running an information site for readers in Great Britain calls for very little personal data. The UK GDPR and the Data Protection Act 2018 are the rules that govern the handling of it. Article 13 of the UK GDPR obliges the site to inform, and this policy does that.
Controller
The controller, as Article 4(7) UK GDPR defines the term, is the body that runs britbetnorth.com. Its name, address and e-mail address are available at britbetnorth.com, and the same channel is used for every question about personal data.
Data that is processed
A log entry is written to the server each time a page is opened: IP address, date and time, the address requested, the amount of data sent, the referring page and the type of browser. Security and the detection of abuse are what these logs are for; after 90 days they are deleted or shortened so that they no longer point to a person. A name, an e-mail address and the text of the message are also provided by anyone who writes to the editors, and are used to answer and for nothing else. No reader accounts, no deposits and no stakes exist here, so no payment details and no identity documents are collected.
Purposes and lawful bases
The controller's legitimate interests in keeping the site working and secure (Article 6(1)(f) UK GDPR) carry server logs and the protection against abuse. The same interest carries the answering of a message. Everything beyond the strictly necessary cookies, audience measurement included, needs consent (Article 6(1)(a) UK GDPR together with regulation 6 of PECR) and does not run before it has been given; consent may be withdrawn at any point, and processing already carried out keeps its lawfulness (Article 7(3)). Profiling and automated decision-making do not take place.
Recipients, and transfers outside the UK
No data is sold. Those receiving it are processors acting on the controller's instructions that provide hosting, content delivery and e-mail (Article 28 UK GDPR), and public authorities where the law requires it. A transfer outside the United Kingdom takes place only to a country covered by adequacy regulations or with appropriate safeguards, such as the International Data Transfer Agreement or the UK Addendum (Article 44 onwards).
The rights of the person concerned
Access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection to processing resting on legitimate interests (Article 21) are all available to every person. A request is answered without undue delay and within one month of receipt; where needed that period can be extended by a further two months under Article 12(3).
How long data is kept
Only as long as its purpose requires: server logs for no more than 90 days, correspondence until the matter is closed and for the period needed to defend against possible claims. Giving data in a message is voluntary, but without it no reply is possible.
Supervision and complaints
The supervisory authority is the Information Commissioner's Office (ICO). Anyone who believes that the processing of their data breaches data protection law has the right to complain to it (Article 77 UK GDPR).
Last updated: 13.11.2026.