Privacy Policy and Cookie Policy

This policy explains what personal data gingacasino.info collects when you read these pages, why it is collected, how long it is kept and what you can require us to do with it. It applies to this website only. It does not cover the operator: once you follow a link and land on the casino's own site, its privacy policy governs everything from that point, including the identity documents you upload for verification and the payment details you enter in the cashier. We are an independent review portal and never see any of that.

What Personal Data We Collect

This site has no accounts, no login and no cashier, so the data footprint is small. On an ordinary visit the server and our analytics record technical information: your IP address, the type of device and operating system, the browser and its version, the pages you opened and how long you spent on them, the referring source that brought you here, screen resolution and approximate region derived from the IP address. IP addresses are truncated or anonymised for analytics purposes. If you write to us with a correction or a question, we hold what you sent — your message and the address you sent it from — for as long as it takes to deal with it.

We do not ask for or store names, postal addresses, dates of birth, identity documents or payment information, because nothing on this site requires them.

Data usage here is therefore narrow and easy to describe in one sentence: the technical records keep the site running and secure, the analytics tell us in aggregate which guides readers actually finish, and correspondence exists only for as long as the correspondence does. No other data usage takes place — no profiling of individual readers, no building of advertising audiences, no enrichment against third-party datasets, no scoring. If a purpose is not listed on this page, it is not happening.

Why We Process It, and on What Legal Basis

Under the GDPR (Regulation (EU) 2016/679) every processing operation needs a lawful basis, and ours are three. Legitimate interests cover keeping the site available and secure, preventing abuse, and understanding in aggregate which pages readers find useful so the editorial effort goes where it is needed. Consent covers all non-essential cookies, including analytics and any measurement of affiliate referrals — nothing in that category runs before you accept it, and consent can be withdrawn at any time without losing access to the content. Legal obligation covers the narrow cases where a record has to be retained or produced under applicable law.

We do not sell personal data, we do not license it to data brokers, and we do not share it with advertising networks or demand-side platforms for profiling.

Cookies and Analytics

Cookies are small files stored by your browser. On this site they fall into three groups. Strictly necessary cookies keep the site functioning and remember your cookie choice itself; these run without consent because the site cannot work otherwise. Functional cookies remember preferences such as the language version you are reading. Analytical cookies, set by a third-party web analytics provider, count page views and measure how readers move between pages in aggregate. A referral parameter may also be stored when you follow an affiliate link, so the operator can attribute the visit — that mechanism is described in full on our affiliate disclosure page.

You control all of it. Non-essential cookies can be refused in the consent banner, changed later from the same banner, or blocked wholesale in your browser settings, and the informational pages remain fully readable either way. Deleting cookies in the browser removes any stored preference and the banner will simply ask again.

Your Rights Under GDPR

If you are in the EU or the EEA you have the following rights over your personal data, and exercising them costs nothing:

Send a request through our contact page and we will respond within one month, as the Regulation requires. If you are unhappy with the outcome you may complain to the Portuguese data protection authority, the CNPD (Comissão Nacional de Proteção de Dados), or to the supervisory authority of the country you live in. One limit is worth stating clearly: a request about your casino account — your identity documents, your transaction history, your deposits — must go to the operator, because that data is held by the operator and we have no access to it.

Retention and Third Parties

Server logs are kept for a short operational period and then discarded. Analytics data is retained in aggregated form and personal identifiers within it are removed on the provider's standard schedule; correspondence is deleted once the matter it concerns is closed and no legal reason to keep it remains. Anonymised statistics that can no longer be linked to a person may be retained indefinitely for trend analysis.

A limited set of processors supports the site: a hosting and content-delivery provider that serves the pages, and a web analytics provider. Each is bound by a data-processing agreement. Where a processor operates infrastructure outside the EEA, transfers are covered by standard contractual clauses or an equivalent safeguard, and providers are reassessed when the arrangement changes.

Security: Encryption and Data Protection

Every connection to this site runs over SSL encryption — TLS, to give the modern protocol its accurate name, though the older label has stuck — and the padlock beside the address bar is how you confirm it, so anything transmitted between your browser and the server is unreadable to anyone intercepting the traffic on a shared or public network. Access to the small amount of data we do hold is restricted to the people who need it, infrastructure is patched on the provider's schedule, and there are no user accounts on this site to compromise in the first place.

Is it safe to use? On this site, the honest answer is that the attack surface is minimal because we ask for almost nothing. On the operator's side the same baseline applies — an encrypted connection is the minimum expected of a licensed casino — but there you also hand over identity documents and payment details, so the habits matter: a password reused nowhere else, two-factor authentication enabled in the account settings, and no logging in from a shared or public machine. The operator's own privacy policy sets out what it keeps and why, and it is worth opening once. Our view of the platform's overall security sits in the Ginga review.

What makes a secure casino, as opposed to one that merely says it is secure, comes down to things you can check in a couple of minutes. SSL encryption on every page including the cashier, not just the login screen. Two-factor authentication offered in the account settings. A published privacy policy naming the company that holds the data and a route for exercising GDPR rights. A licence number in the footer that resolves to an active entry in a regulator's public register. And payment rails run by regulated providers — Trustly, Skrill, Multibanco — rather than an anonymous processor nobody can name. Keeping your own account safe and secure is the other half of it, and the habits are unglamorous: a password used nowhere else, two-factor switched on the day you register, no logging in from a shared machine, and no document or card number ever sent to an address that contacted you first. An operator can encrypt the connection; it cannot protect an account whose password is reused from an email inbox.

Changes to This Policy

This policy is updated when data-processing practices, providers or legal requirements change. Material changes are announced on the site and the revision date at the top of the page is updated. Continuing to use gingacasino.info after a change means you have seen it; if you disagree with a revision, you can withdraw cookie consent and stop using the site at any time.

Play Now