Privacy Policy
What follows is a plain-English account of which personal information MagicWin Casino review hub gathers from visitors, the reasons behind it, the places it gets stored, the parties it travels to and the channels through which you can use your statutory rights under UK privacy legislation. The technical sibling document — covering cookies, analytics and browser-side storage — lives on the Cookie Policy page; this page is essentially the human-friendly translation of the same arrangement.
The MagicWin Casino review hub runs as an independent informational platform; the wider context is on the About page. This privacy policy applies to the MagicWin website only. Once a reader clicks through to an operator's site, that operator's own privacy policy takes over; the review hub doesn't share data with operators except in the limited form described below.
1. What MagicWin is
This review hub publishes assessments and guides about online casinos available to UK players. The flagship operator review is the MagicWin Casino homepage. The site doesn't host games, run player accounts, accept deposits, hold funds or process withdrawals. There's no signup. There's no login. The default visit involves no data exchange beyond standard web traffic. Where the site does collect personal data — for example, when you write to us through the contact channels — this page sets out exactly what happens to it.
2. UK privacy law context
Personal data on this site is processed in compliance with the UK GDPR and Data Protection Act 2018, along with the thirteen UK GDPR principles overseen by the Information Commissioner's Office (ICO). Visitors based in the EU enjoy the EU GDPR rights set alongside this. Californian residents receive CCPA rights to the extent the statute applies to them. Wherever any of these frameworks imposes a stricter rule, that stricter rule wins.
3. What data MagicWin collects
Three categories: technical traffic data, voluntarily submitted contact data and aggregated analytics.
| Category | What is collected | Why | Legal basis |
|---|---|---|---|
| Technical traffic data | IP address (anonymised after 24h), browser type, device type, page URL requested, timestamp, referrer. | Serve pages, prevent abuse, debug performance issues. | Legitimate interest under UK GDPR Article 6 legitimate interest. |
| Voluntary contact data | Name, email address, message content, supporting documents you choose to attach. Submitted only if you write to us. | Reply to your enquiry. | Consent under UK GDPR consent basis (you provide the data; we use it for the stated purpose). |
| Aggregated analytics | Pseudonymous traffic statistics generated by Google Analytics 4 with IP anonymisation enabled. | Understand which pages are useful and which are not. | Consent (you can decline analytics cookies on first visit). |
The MagicWin Casino review hub does not collect: financial data (no payment processing happens on this domain), gambling-account credentials (we don't run accounts), biometric data, location beyond country level (derived from anonymised IP) or special-category data (race, religion, health, sexual orientation, political opinion). Targeted advertising and remarketing aren't used; the funding model that supports the site sits on the Affiliate Disclosure page.
4. Cookies and similar technologies
A detailed inventory of the cookies in use across this review hub, the third-party services that drop them and the available controls sits on the Cookie Policy page. Quick version: strictly-necessary cookies (page rendering, consent-banner state, anti-abuse routing) are always set; analytics and affiliate-tracking cookies fire only after you opt in through the consent banner; the selection can be revised at any later point through the footer link.
5. Affiliate links and operator-side tracking
Clicking an outbound operator link on the site triggers a three-stage sequence. Stage one — an internal redirect through /go logs the click for our own analytics, regardless of whether you proceed. Stage two — your browser is sent on to the operator's site. Stage three — the operator is free to drop its own cookies and treat the arrival as a referral attribution. No name, email or other identifying personal data flows from this review hub to the operator. All the operator learns is "a visitor arrived from MagicWin". If you subsequently open an account on the operator's platform, that account is governed by the operator's own privacy policy, not this one.
6. How long data is retained
- IP addresses: raw addresses are retained for a maximum of 24 hours for abuse-prevention purposes, then anonymised by stripping the final octet (IPv4) or the last 80 bits (IPv6). The anonymised form is held for up to 14 months to support traffic statistics.
- Contact correspondence: inbound emails and any attachments are stored for 24 months to support follow-up and audit, after which they are deleted unless still under active discussion.
- Analytics events: Google Analytics 4 data is retained for 14 months under the current configuration, after which it is automatically purged.
- Cookie consent record: the consent decision itself sits in local browser storage for 12 months; once that window closes, the consent banner is shown again.
In cases where statute mandates a longer retention period — HMRC record-keeping requirements covering affiliate-related accounting being the typical example — the affected data is held only for the duration the law actually requires, and is not repurposed for any other use.
7. Who MagicWin shares data with
Three controlled categories of recipient. Service providers running parts of the underlying infrastructure — web hosting, content delivery, email transport — each one bound by a written data-processing agreement that restricts their use of the data to actually delivering the service. Analytics providers (specifically Google Analytics 4): IP-anonymised traffic data only, with no personally identifying information attached. Law-enforcement bodies and regulators: data is released only against a valid legal demand, and only the precise records the demand covers. Personal data is never sold, rented or traded to anyone, under any circumstance.
8. Where data is stored
This site's infrastructure runs on cloud providers based in the United Kingdom and across the European Economic Area. A handful of service providers — Google Analytics 4 being the obvious one — handle data inside the United States instead. Whenever data crosses the UK border, the receiving party is held to either Standard Contractual Clauses or an equivalent regime that the ICO has already assessed as offering protection at least as strong as UK law itself.
9. Your rights
Under the UK GDPR and equivalent international laws, you have the following rights with respect to any personal data the MagicWin Casino review hub holds about you.
- Access: request confirmation of what is held about you, plus a copy of it.
- Correction: request that inaccurate or out-of-date data is amended.
- Deletion: request the erasure of your data, subject to any statutory retention requirements that override the request.
- Withdrawal of consent: where the lawful basis is consent, that consent can be pulled at any moment, with no impact on any processing already lawfully carried out before withdrawal.
- Complaint: where you suspect your data has been mishandled on this site, the formal route runs through the ICO at ico.org.uk. As a courtesy step, UK readers are usually asked to raise the matter with us first so we have an opportunity to address the issue directly.
To exercise any of these rights, write through the privacy channel listed on the Contact page. The MagicWin Casino review team will respond within 30 days, the timeframe required by the UK GDPR.
10. Children's privacy
The MagicWin Casino review hub is written for adult British audiences. The site is not aimed at, nor intended for, anyone below the age of 18. No personal data is knowingly collected from minors. In any case where it later emerges that data has been submitted by an under-18, that record is deleted and, where the situation makes it appropriate, the parent or guardian is informed.
11. Security
Security on this site relies on industry-standard controls: TLS 1.2 or higher protects every byte in transit; internal systems operate under access controls and least-privilege rules; audits of who can access what are run regularly; administrative actions are logged; the public-facing site is put through periodic third-party penetration testing. No system can be considered unbreakable, so in the event of a personal-data breach assessed as likely to cause serious harm, affected individuals receive direct notification and the ICO is informed in line with its breach-notification regime under the UK GDPR.
12. Changes to this policy
If this policy changes, the "Last updated" date at the top is revised. Material changes — new categories of data collected, new third-party processors, changed retention periods — come with a banner on the home page for at least 30 days. Minor housekeeping changes (rewording, link updates) don't trigger a banner.
13. Contact
Privacy-specific queries are best directed to the privacy contact on the Contact page. Editorial questions concerning the MagicWin Casino review hub content travel via the editorial route instead; corrections are handled under the procedure documented on the Editorial Policy page. Player-safety material applicable to anyone reading the site lives on the Responsible Gambling page.