This policy describes what this independent review site collects from the people who visit it, why, and what can be demanded back. It covers three things and nothing else: cookies, analytics and the contact form. There is no account to register, no deposit to make and no document to upload here, which keeps the list of collected data short by design rather than by omission.
It applies to this site alone. The casino reviewed on these pages, Winum, is a separate company with its own privacy policy, its own purposes and its own retention periods, and none of them are described here. Anything entered on the operator's platform is governed by that operator's policy, not by this one.
Who This Policy Covers
The policy governs the relationship between this site, acting as the party that decides why and how visitor data is handled, and the visitor, whose data it is.
It is written with reference to India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, which were notified on 14 November 2025 and carry an eighteen-month phased compliance period. Because that period is still running, this document should be read as a statement of current practice written against that framework rather than as a certificate of completed compliance.
Visitors outside India may have additional rights under their own local law. Those rights are not removed by this policy, and requests made under them are treated the same way as the requests described below.
What Data This Site Collects
Three mechanisms collect data, and the table sets out what each one actually involves.
| Mechanism | What it involves |
|---|---|
| Cookies | Small files placed in the browser so the site functions correctly and so visits can be counted |
| Analytics | Aggregated measurement of how pages are used, with the exact set of measurements available on request through the contact form |
| Contact form | Whatever a visitor chooses to type into it, together with the technical data that accompanies any web submission |
Everything collected falls into one of those three. No other collection mechanism operates on this site.
Just as important is what is not collected here. There are three categories, and their absence is structural rather than promised.
- No payment data. This site processes no transactions, holds no card or wallet details and has no payment page.
- No identity documents. There is no verification procedure here, so passports, identity cards, address proofs and selfies are never requested or received.
- No account. There is nothing to register for, so there is no login, no password and no profile held on this site.
A visitor can therefore read every page here without creating any record beyond a browser cookie and an anonymous entry in a visit count.
Why the Data Is Processed
Three purposes cover the whole of it.
- To operate the site. Strictly necessary cookies make pages load correctly, remember display preferences within a session and keep navigation working.
- To measure how the site is used. Aggregated analytics show which pages are read, how visitors arrive and where they leave, which is what determines which material gets updated.
- To respond to enquiries. Data submitted through the contact form is used to answer the message it came with.
No profiling for advertising is carried out on this site, no automated decision with legal effect is made about any visitor, and personal data is neither sold nor rented to anyone.
Cookies and Analytics
Cookies fall into two categories here, and the distinction determines whether consent applies.
| Category | Purpose and basis |
|---|---|
| Strictly necessary | Required for pages to load and navigation to work. These cannot be switched off without breaking the site, and they carry no advertising function |
| Analytics | Used to produce aggregated statistics about page use. These are optional and depend on consent where consent is required |
Consent is treated as the Rules require it to be treated: as a separate, plainly worded request that states what the data will be used for, given freely and withdrawable at any time. Withdrawing consent stops future optional processing and does not affect what was already lawfully done before the withdrawal.
Cookies can also be controlled from the browser. Every major browser allows cookies to be blocked, limited to first-party only, or deleted after each session, and doing so affects this site in the ordinary way: strictly necessary cookies being blocked may break navigation, while analytics cookies being blocked has no effect on what a visitor can read.
Analytics processing involves a third-party measurement provider that receives the aggregated usage data described above. The identity of that provider is available on request through the contact form.
The Contact Form
The contact form collects only what the sender types into it, plus the technical data that accompanies any submission over the internet, such as the time of sending and the originating network address.
There is no hidden field and no enrichment step. A message containing only a first name and a question creates a record of a first name and a question, and nothing is added to it from other sources.
Anyone who prefers not to submit personal data through the form can simply not use it. Every page on this site is fully readable without it, and no content is gated behind a submission.
Your Rights Under Indian Law
The DPDP framework gives eight rights to the person whose data is processed, and all eight apply to data held by this site.
- Control over consent, meaning the choice to allow or refuse the use of personal data.
- Information about processing, meaning the right to know what data is held and why.
- Access to the data, including obtaining a copy of it.
- Correction of inaccurate details.
- Updating of information that has changed, such as an address.
- Erasure of personal data where the conditions for it are met.
- Nomination of another person to exercise these rights on the holder's behalf.
- Notification of a data breach, delivered without delay and in plain language if an incident affects the data held.
Rights are exercised by asking, not by proving a reason. A request to delete a contact form message does not need to be justified, and refusing to justify it is not a ground for declining the request.
How to Exercise Your Rights
Requests are made in writing through the contact form on this site, stating what is being asked for. Two things govern what happens next.
- A response is due within ninety days of the request, which is the maximum period the Rules allow a data fiduciary for handling such requests.
- An unresolved complaint can be escalated to the Data Protection Board of India, which operates as a fully digital body of four members and accepts complaints filed online, with case status trackable through its portal and mobile application.
Escalation is a right rather than a last resort, and using it costs the complainant nothing.
Retention and Third Parties
Data is kept for no longer than is necessary for the purpose it was collected for. A contact form message is kept while the enquiry it relates to is open and for a reasonable period afterwards; aggregated analytics are retained in the measurement provider's system according to that provider's configuration. The specific retention period applied is available on request through the contact form, and a request for erasure can be made at any point regardless of it.
Data is shared only with the service providers that make the site work, meaning hosting and the analytics provider, and with anyone else only where the law requires it. Nothing is shared with the casino reviewed on these pages. A visitor who follows a link from this site to the operator's platform enters that operator's environment, where the operator's own privacy policy applies from that point onward, and this site receives no personal data back from it.
Changes to This Policy
This policy is updated when the site's data practices change or when the legal framework does, and the version published on this page is the one in force. The DPDP Rules carry a phased implementation timetable running into 2027, so amendments over that period should be expected rather than treated as unusual.
Continuing to use the site after an update means the current version applies to that use. Rights already exercised are not affected by any later amendment.
FAQ
Does this site collect payment or identity documents?No. There is no payment page, no verification procedure and no account on this site, so card details, wallet credentials, passports, identity cards and address proofs are never requested or received here. Those are collected by the gambling operator on its own platform under its own policy.
Can cookies be refused?Yes, for the optional ones. Analytics cookies depend on consent and can be declined or withdrawn at any time without affecting access to any page. Strictly necessary cookies keep navigation working, so blocking them through browser settings may prevent parts of the site from functioning, but that choice remains entirely with the visitor.
How long are contact form messages kept?For as long as the enquiry remains open and a reasonable period afterwards, and no longer than the purpose requires. The specific period in use is available on request through the contact form, and erasure can be requested at any time without waiting for that period to expire.
Is data shared with the casino this site reviews?No. Personal data collected here is not passed to the operator. Clicking through to the operator's platform takes the visitor into a separate environment governed by that operator's privacy policy, and no personal data travels back from it to this site.
How is a request to delete personal data made?Through the contact form, stating what should be deleted. No reason has to be given. A response is due within ninety days, and an unresolved case can be taken to the Data Protection Board of India, which accepts complaints online.