Privacy Policy
This page sets out what personal information Jackpot City as a review hub collects from visitors, why, where the records sit, who they get shared with, and how to exercise your rights under UK privacy law. The technical companion — cookies, analytics, browser storage — is on the Cookie Policy page; this page is the plain-English version of the same arrangement.
This review hub runs as an independent informational platform; the wider context is laid out on the About page. The privacy policy here applies to the Jackpot City review website only. Once a reader clicks through to an operator's site, the operator's own privacy policy takes over; we do not share data with operators except in the limited form described further down.
1. What Jackpot City is
This review hub publishes assessments and guides about online casinos available to UK players. The flagship operator review is hosted on the Jackpot City Casino homepage. The site does not host games, run player accounts, accept deposits, hold funds, or process withdrawals. There is no signup. There is no login. A default visit involves no data exchange beyond standard web traffic. Where personal data is collected — for example, when you write in via the contact channels — this page describes exactly what happens to it.
2. UK privacy law context
Personal information is handled in line with the UK GDPR and Data Protection Act 2018 and the thirteen UK GDPR principles enforced by the Information Commissioner's Office (ICO). European visitors' GDPR rights are also honoured. Californian visitors' CCPA rights are honoured to the extent they apply. Where a stricter rule applies under any of these frameworks, the stricter rule takes precedence.
3. What data Jackpot City collects
Three categories. Technical traffic data, voluntarily provided contact data, and aggregated analytics.
| Category | What is collected | Why | Legal basis |
|---|---|---|---|
| Technical traffic data | IP address (anonymised after 24h), browser type, device type, page URL requested, timestamp, referrer. | Serve pages, prevent abuse, debug performance issues. | Legitimate interest under UK GDPR Article 6 legitimate interest. |
| Voluntary contact data | Name, email address, message content, supporting documents you choose to attach. Submitted only if you write to us. | Reply to your enquiry. | Consent under UK GDPR consent basis (you provide the data; we use it for the stated purpose). |
| Aggregated analytics | Pseudonymous traffic statistics generated by Google Analytics 4 with IP anonymisation enabled. | Understand which pages are useful and which are not. | Consent (you can decline analytics cookies on first visit). |
This review hub does not collect: financial data (no payment processing takes place on this domain), gambling-account credentials (no accounts are operated), biometric data, location beyond country level (derived from anonymised IP), or special-category data (race, religion, health, sexual orientation, political opinion). Targeted advertising and remarketing are not used; the funding model behind the site is laid out on the Affiliate Disclosure page.
4. Cookies and similar technologies
Detailed documentation of which cookies are deployed on this review hub, the third-party services responsible for them, and the methods to control them lives on the Cookie Policy page. Summary: strictly necessary cookies (handling page loading, consent banner state, abuse prevention) are always active; analytics and affiliate-tracking cookies activate only after you give explicit consent through the cookie banner; the choice can be revised at any moment via the link in the footer.
5. Affiliate links and operator-side tracking
Clicking an outbound operator link from this review hub triggers a three-step chain. To begin with, an internal redirect at /go records the click for analytics on our side (regardless of whether you go on to register). Next, the browser is forwarded onward to the operator's own site. Finally, the operator may drop its own cookies and treat the visit as a referral attribution. No name, email, or other identifying personal information is forwarded from this review hub to the operator. The operator simply registers that "a visitor arrived from Jackpot City". Any subsequent account registration on the operator's site is governed by that operator's privacy policy, not by ours.
6. How long data is retained
- IP addresses: raw IP records persist for a maximum of 24 hours to support abuse prevention, then get anonymised by stripping the final octet (IPv4) or the last 80 bits (IPv6). The anonymised remainder is then retained for up to 14 months purely for traffic statistics.
- Contact correspondence: emails and any attachments are kept for 24 months for follow-up and audit purposes, then deleted unless still under active discussion.
- Analytics events: Google Analytics 4 data is kept for 14 months under our configuration, then automatically deleted.
- Cookie consent record: the consent record itself is stored locally in your browser for 12 months, after which the consent banner reappears.
In situations where statute compels a longer hold — say, HMRC bookkeeping obligations covering affiliate-linked accounting — only the strictly necessary records are kept, only across the legally compelled window, and nothing from that retained set ever feeds another purpose downstream.
7. Who Jackpot City shares data with
Three controlled categories. Service providers running parts of the Jackpot City infrastructure — web hosting, content delivery, email — each working under a written data-processing agreement that restricts their use of the data to delivering the service. Analytics providers (Google Analytics 4): IP-anonymised traffic data only, no personally identifying information. Law-enforcement bodies and regulators: only in response to a valid legal demand, and only the data covered by that demand. Personal data is never sold, rented or traded to anyone.
8. Where data is stored
Cloud providers based in the UK and across the European Economic Area host the infrastructure behind this review hub. A small number of service providers — Google Analytics 4 being the most prominent — handle data in the United States. Whenever data leaves the UK, the recipient must be bound either by Standard Contractual Clauses or by an equivalent regime the ICO has judged to deliver protection at least as strong as UK law.
9. Your rights
Under the UK GDPR and equivalent international laws, you hold the following rights over any personal data this review hub keeps about you.
- Access: ask what we hold and receive a copy.
- Correction: ask for inaccurate data to be corrected.
- Deletion: ask for your data to be deleted, subject to legal retention requirements.
- Withdrawal of consent: if processing is based on consent, you can withdraw it at any time without affecting prior lawful processing.
- Complaint: where you believe data has been mishandled on Jackpot City, you can lodge a complaint with the ICO at ico.org.uk. UK readers are normally encouraged to reach out to us first, so the issue has a chance of being resolved directly.
To exercise any of these rights, write to the privacy address listed on the Contact page. Jackpot City will respond within 30 days, the timeframe required by the UK GDPR.
10. Children's privacy
Jackpot City content is written for adult UK readers. The site is neither directed at nor intended for anyone under 18 years old. Personal data is not knowingly collected from minors. Where we become aware that information was submitted by someone under 18, that data is deleted and (where applicable) the parent or guardian is informed.
11. Security
Industry-standard security controls are applied on Jackpot City: TLS 1.2+ across all data in transit; access controls and least-privilege rules layered onto internal systems; routine review of which staff hold access to which resources; logging of administrative actions; periodic third-party penetration testing of the public site. No system is genuinely unbreakable; in the event of a personal-data breach likely to cause serious harm, the affected individuals will be notified directly and the ICO informed in line with the ICO breach-notification regime under the UK GDPR.
12. Changes to this policy
Whenever this policy is amended, the "Last updated" date at the top of the page is revised. Material changes — fresh categories of data collected, additional third-party processors, altered retention periods — are paired with a banner displayed on the home page for at least 30 days. Minor housekeeping updates (wording tweaks, link refreshes) do not trigger such a banner.
13. Contact
Privacy-related queries should be routed via the privacy contact listed on the Contact page. Editorial queries about Jackpot City content go through the editorial channel; correction requests are handled under the procedure on the Editorial Policy page. Player-safety guidance applicable to anyone reading this review hub sits on the Responsible Gambling page.