How this site remembers you
This privacy policy covers candycasino.org.pl — an independent information portal about Candy. We are not the casino operator. The operator runs its own platform at candy.casino and maintains its own privacy policy for player accounts, deposits and gameplay. What you read here describes only the data we collect when you visit our review site.
We collect a small amount of technical information to keep the site running and to understand which pages are useful. That means server logs (your IP address, browser type, the page you visited and when), cookies for session management and analytics, and anything you choose to send us through a contact form. We don't ask for payment details, identity documents or account credentials — we have no access to those, because we don't operate player accounts.
Data controller: candycasino.org.pl is responsible for the personal data this portal collects. For questions about how we handle your information, write to [email protected].
The analytics question
We use third-party analytics to see which articles are read and where visitors arrive from. Those services — typically Google Analytics or similar platforms — set their own cookies and process your IP address and browsing behaviour under their own terms. The data is aggregated and anonymised before we see it. You can opt out of analytics tracking in your browser settings or through tools like uBlock Origin.
We do not sell, rent or trade your data to anyone. We don't run targeted advertising campaigns that follow you around the web. The information we collect stays with us and the handful of processors we need to keep the site online — hosting providers, CDN services and analytics platforms.
Scripts we do not control
Some pages embed content from third parties: YouTube videos, social-media share buttons, or widgets that pull live bonus figures from affiliate networks. Each of those services may set cookies or track your interaction under its own privacy policy. We list the ones we use — YouTube (Google), Twitter/X, Facebook — but we don't control what they collect or how they use it. Check their own policies if you want the detail.
Where possible, we use privacy-enhanced embed modes (YouTube's no-cookie domain, for instance) to limit what reaches those platforms before you click play. Once you interact with an embedded element, that platform's tracking kicks in.
Your options
Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the following rights regarding any personal data we hold about you:
- Access: request a copy of the data we've collected.
- Rectification: ask us to correct information that's inaccurate or incomplete.
- Erasure: request deletion of your data where we no longer have a legitimate reason to keep it.
- Restriction: ask us to stop processing your data in certain circumstances.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests or direct marketing.
- Withdraw consent: where processing relies on consent, you can withdraw it at any time.
To exercise any of these rights, email [email protected] with your request. We'll respond within 30 days. If you're not satisfied with how we've handled your data, you can lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk, the UK's supervisory authority for data protection.
Retention and security
Server logs are kept for up to 90 days, then rotated out. Contact-form submissions are held for as long as the enquiry remains open, then archived or deleted. Analytics data is retained according to the platform's own schedule — usually 26 months for Google Analytics. We don't hold data longer than we need it.
We take reasonable technical and organisational measures to protect your information: HTTPS encryption for data in transit, access controls for our hosting environment, regular backups stored securely. No system is completely immune to breach, but we do what we can to keep your data safe and will notify you and the ICO within 72 hours if a breach occurs that's likely to result in a risk to your rights.
Protection of minors
This site is intended for adults aged 18 and over (18+). We do not knowingly collect personal data from anyone under that age. Gambling services are prohibited for minors in the United Kingdom, and our content is aimed solely at those legally permitted to access it. If you believe we've inadvertently collected information from someone underage, contact us at [email protected] and we'll delete it promptly.
Parents and guardians can use software like Net Nanny or Qustodio to restrict access to gambling-related content on shared devices.
Changes and updates
We may update this privacy policy from time to time to reflect changes in how we operate or to comply with legal requirements. When we do, we'll update the date below and post the revised version on this page. Significant changes — anything that materially affects your rights — will be highlighted at the top of the policy for 30 days.
Check back occasionally if you want to stay informed. Continued use of the site after an update means you accept the revised terms.
Last updated: 6 January 2026
Contact
For questions about this privacy policy, to exercise your data rights, or to raise a concern about how we've handled your information, write to [email protected]. We'll reply within 48 hours during business days.
Remember: we are an information portal about Candy, not the operator itself. If you're a registered player with an account at candy.casino and need help with a deposit, withdrawal, bonus or technical issue, contact the operator's own support team directly through the platform. We have no access to player accounts and can't assist with casino-specific requests.
This content is published for information and marketing purposes only. We are not a casino operator, a bookmaker or an organiser of gambling. This site is restricted to visitors aged 18 and over (18+). If gambling is causing you difficulty, free and confidential support is available at BeGambleAware.org.