Last updated: 9 October 2026
This Privacy Policy explains how OtherPlay collects, uses, shares and protects personal data when a visitor uses the website. It applies to everyone who visits, wherever they are based. The policy is written in plain English. A visitor who finds anything unclear can email privacy@otherplay.co.uk for an explanation.
Who We Are
OtherPlay is a casino sister-sites research publication. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, OtherPlay is the data controller for personal data collected through this website.
Questions about this policy or about how data is handled go to the privacy team at privacy@otherplay.co.uk.
Information We Collect
OtherPlay collects 3 categories of personal data.
- Information provided directly. A visitor who emails the site provides an email address and whatever the message contains. OtherPlay has no user accounts and does not ask visitors to register.
- Information collected automatically. Hosting infrastructure and analytics tools log technical details of each visit. These include the IP address, device and browser type, pages viewed, date and time, referring website and time spent on each page. Server logs and cookies collect this information.
- Information from affiliate partners. When a visitor clicks an affiliate link to an operator and registers, the operator's affiliate network may return limited, aggregated information to confirm the registration or deposit. This information supports commission calculation. OtherPlay does not receive the visitor's name, email address, account details or activity on the operator's site.
OtherPlay does not collect special category data, such as health, ethnicity, political opinions or biometric data. Visitors are asked not to include any in an email.
How We Use Information
Personal data is used for the following purposes.
- To respond to enquiries. An email is used to reply to the sender.
- To run and improve the research. Aggregated, anonymised analytics show which pages are useful and which have technical problems.
- To track affiliate referrals. The operator's affiliate network records a referral so that commission can be paid. Commission funds the research.
- To protect the site. Server logs and security tools detect, investigate and block fraud, scraping and automated abuse.
- To meet legal obligations. Data may be used or retained where the law requires it, for example to respond to a regulator, keep tax records or defend a legal claim.
OtherPlay does not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.
Legal Bases for Processing
UK GDPR requires every use of personal data to rely on a specific legal basis. OtherPlay relies on the following.
- Consent. Consent covers non-essential cookies, set through the cookie banner. A visitor can withdraw consent at any time by changing the cookie settings.
- Legitimate interests. This covers operating the research index, measuring how visitors use the site, tracking affiliate referrals and protecting the site from abuse. Each interest has been weighed against visitors' rights and freedoms and judged proportionate. A visitor has the right to object, as set out under Your Rights.
- Legal obligation. This applies where data is retained or disclosed because the law requires it.
Cookies and Tracking
OtherPlay uses cookies and similar technologies. The Cookie Policy lists each category, its purpose and how to manage it. Non-essential cookies are set only after consent.
Affiliate Links and Commercial Relationships
OtherPlay earns revenue from affiliate partnerships with casino operators. A visitor who clicks certain links and registers with the operator may generate a commission for OtherPlay.
The relationship is disclosed throughout the site. It does not influence editorial judgement, research methodology or the factual accuracy of operator profiles.
A visitor who clicks an affiliate link moves to the operator's site. The operator becomes a separate data controller for any personal data it collects. OtherPlay does not see that data, and the operator does not see data provided to OtherPlay.
How We Share Information
OtherPlay does not sell personal data and does not share it with casino operators for marketing. Data is shared only in the following circumstances.
- Service providers. A small number of third parties host the site, deliver email and provide analytics. They process data under contract and only on OtherPlay's instructions.
- Affiliate networks. A click ID and timestamp pass to the operator's affiliate network so that a registration is attributed correctly.
- Legal and regulatory disclosure. Data is disclosed where the law requires it, for example in response to a court order or a lawful regulator request.
- Corporate transactions. If OtherPlay is sold, restructured or merged, data may transfer to the new owner, who must honour this policy.
OtherPlay does not transfer personal data to advertising networks, data brokers or any party seeking to use it for unrelated commercial purposes.
International Data Transfers
Some service providers are located outside the United Kingdom. Where data is transferred abroad, OtherPlay relies on one of the following safeguards.
- A UK adequacy decision, where the UK government recognises the destination country as providing equivalent protection.
- An International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, where no adequacy decision exists.
- A narrow exemption, such as where the transfer is necessary to perform a contract with the visitor.
A visitor who wants details of a specific transfer, or a copy of the safeguards, can email privacy@otherplay.co.uk.
Data Retention
Personal data is kept only as long as it is needed. The periods are as follows.
- Server logs containing IP addresses and request data: up to 90 days, then deleted.
- Email correspondence: up to 24 months after the conversation closes, then deleted.
- Affiliate referral records: as long as the operator's commission reconciliation requires, typically up to 24 months after the referral.
- Records the law requires, such as accounting records under UK tax law: for the required period and no longer.
Your Rights Under UK GDPR
UK GDPR gives visitors the following rights over personal data.
- The right to be informed about how data is collected and used, which is the purpose of this policy.
- The right of access to a copy of the data held.
- The right to rectification of inaccurate or incomplete data.
- The right to erasure in certain circumstances, for example where the data is no longer necessary or consent is withdrawn and no other basis applies.
- The right to restrict processing in certain circumstances, for example while a rectification request is checked.
- The right to data portability, meaning a copy of the data provided in a structured, machine-readable format.
- The right to object to processing based on legitimate interests, including direct marketing. Processing for marketing stops on receipt of an objection. For other legitimate-interest processing, it stops unless OtherPlay shows compelling grounds or needs the data to establish, exercise or defend a legal claim.
- The right to withdraw consent at any time. Withdrawal does not affect processing carried out before it.
- The right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, on 0303 123 1113. Raising the concern with OtherPlay first is welcome but not required.
To exercise a right, email privacy@otherplay.co.uk. OtherPlay responds within 1 calendar month. Identity may need to be verified first, particularly for access and erasure requests, so that data is not disclosed to the wrong person. There is no fee. A reasonable administrative fee may apply, or a request may be refused, where it is manifestly unfounded or excessive, for example repeated identical requests.
How We Protect Information
The technical and organisational measures in use include the following.
- Encrypted connections (HTTPS/TLS) on every page, so that data in transit cannot be read by third parties.
- Access controls, so that only authorised team members can reach internal systems and correspondence.
- Regular review of third-party services, including their security measures.
- Prompt patching of vulnerabilities in the hosting platform, content management tools and dependencies.
- Logging and monitoring to detect unauthorised access and unusual activity.
No security measure is perfect, and data sent over the internet cannot be guaranteed fully secure. If a personal data breach presents a risk to rights and freedoms, OtherPlay notifies the ICO within 72 hours and contacts affected visitors without undue delay, as UK GDPR requires.
Children and Age Restrictions
OtherPlay covers gambling operators, and UK law requires gambling participants to be aged 18 or over. The site does not knowingly collect personal data from anyone under 18, and its content is not directed at children.
A parent or guardian who believes a child has sent personal data to OtherPlay can email privacy@otherplay.co.uk, and the data is deleted promptly. Support for anyone struggling with gambling is available from GamCare, BeGambleAware and GamStop.
Third-Party Websites
OtherPlay links to third-party websites, including casino operators, regulator registers, Companies House and responsible gambling organisations. This policy applies only to OtherPlay. A click on an outbound link leads to a separate website with its own privacy practices.
OtherPlay is not responsible for the content or data handling of third-party sites. Reading the privacy policy of any site before submitting personal data or registering is advisable.
Changes to This Policy
The policy may be updated to reflect changes in operations, the law or the services in use. The last-updated date at the top shows the most recent revision.
Minor changes, such as clarifications, typo fixes and updated contact details, are made without notice. Significant changes, such as new categories of data, new purposes or new categories of recipient, are announced on the homepage at least 30 days before they take effect. Continued use of the site after a change takes effect constitutes acceptance of the updated policy.
Contact and Complaints
Privacy questions, requests and complaints go to privacy@otherplay.co.uk. OtherPlay acknowledges a message within 5 working days and responds in full within 1 calendar month. A visitor who is not satisfied with the response can complain to the Information Commissioner's Office or call 0303 123 1113.