Privacy Policy
This policy explains what information Casiny Online collects when you read pages on this site, why it is collected, how long it is kept, and the rights you have over it. The technical companion is the Cookie Policy, which describes the specific cookies and similar technologies behind some of this collection.
1. Who is responsible for this site
Casiny is operated as an independent informational publication. The operator of this domain is the data controller for any personal information collected on the site. Contact for privacy matters is available through the Contact page; messages identifying themselves as relating to privacy are routed to the responsible person and acknowledged within five working days. The wider mission of the site is described on the About page.
2. What information this site collects
Casiny does not run user accounts and does not require registration to read any page. The categories of information that are collected during ordinary use are limited to the following.
- Server log data. Standard web-server logs capture IP address, user-agent string, the URL requested, the referring URL, and the timestamp of the request. These are used to diagnose technical problems, prevent abuse, and produce aggregate traffic statistics.
- Analytics events. If you accept the analytics category in the cookie consent banner, Google Analytics 4 records page views and a small set of interaction events (scroll depth, outbound-link click) under an anonymised identifier. Without consent, no analytics events are recorded.
- Affiliate-tracking events. If you accept the affiliate category in the consent banner and click an outbound link to an operator, the click is logged on Casiny's server with a timestamp and the destination operator. This is how Casiny is paid; the Affiliate Disclosure page describes the arrangement in full.
- Information you provide voluntarily. If you contact us through the channels listed on the Contact page, the message itself, the email address it came from, and any context you choose to share are stored only as long as needed to handle the message and any follow-up.
3. Why this information is collected
Each category of information has a single, narrow purpose. Server logs exist for security and reliability. Analytics exists to understand which content is read so that editorial effort can be directed at what readers actually find useful. Affiliate-tracking exists so that the site can be paid by operators when readers register on partner platforms. Voluntary contact information exists to let us reply to you. None of this information is used for advertising, profile-building, or commercial purposes outside of those described. Editorial standards governing how content is produced are set out on the Editorial Policy page.
4. Legal basis for processing
Australian privacy law is the primary framework that applies to data Casiny holds about Australian residents. Where readers from other jurisdictions visit, additional rules may apply (for example the GDPR for EU/EEA residents, the UK GDPR for UK residents, or the LGPD for Brazilian residents). The legal bases used by Casiny are:
- Legitimate interest for server-log data — necessary for security, abuse prevention, and core technical operation of the site.
- Consent for analytics and affiliate-tracking cookies — collection happens only after you accept the relevant category in the consent banner.
- Contractual / pre-contractual interest for messages you send through the contact channels — necessary to respond to your enquiry.
5. Sharing with third parties
Casiny does not sell personal information and does not share it with third parties for advertising. The narrow set of third parties who do touch any data are listed below, with the role each plays.
- Hosting provider. The server that delivers the site processes server-log data on Casiny's behalf. The provider operates under a written data-processing agreement.
- Google Analytics. Aggregate traffic statistics, only with consent. IP-anonymisation is enabled and Google Signals (ad-targeting) is disabled.
- Operator destinations on outbound clicks. When you click an outbound link to a casino, you arrive on the operator's site; from that point the operator's privacy policy applies. Casiny does not pass any personal information across the link beyond the standard HTTP referer that any browser sends. The methodology behind operator reviews is documented on the How We Test page, and the scoring framework on the How We Rate page.
- Regulators or legal authorities. Where required by Australian law, information may be disclosed in response to a valid legal request.
6. International transfers
The hosting provider's data centres and the analytics provider's servers may be located outside Australia. Where transfer is to a country with privacy protections lower than Australia's, the relevant provider operates under contractual safeguards (the EU's Standard Contractual Clauses or equivalents) so that data subjects retain comparable protection.
7. How long information is kept
Different categories are retained for different windows.
- Server logs: 90 days from the date of the request, then deleted.
- Analytics data: 13 months at the most-detailed level, longer in aggregate-only form.
- Affiliate-tracking events: 24 months, after which they are aggregated and the per-event records are deleted.
- Contact correspondence: as long as the matter is open, plus 12 months for audit purposes, then deleted unless you ask us to retain it longer.
8. Your rights
Under Australian privacy law and analogous overseas regimes you have a set of rights over personal information held about you. These include the right to ask what we hold, to correct anything inaccurate, to delete information no longer needed, to object to specific processing, and to lodge a complaint with the supervisory authority for your jurisdiction. To exercise any of these, use the channels on the Contact page; we will respond within 30 days, and faster where the request is straightforward. The Australian supervisory authority is the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
9. Security
Casiny uses HTTPS across the whole site so that data in transit between your browser and our server is encrypted. The hosting provider operates standard physical and network security measures, and access to administrative tooling is restricted with two-factor authentication. No internet-facing service can be made absolutely secure; in the unlikely event of a breach affecting personal information, affected users will be notified within the timeframe required by Australian law and the breach will be reported to the OAIC where the legal threshold is met.
10. Children
Casiny is intended for adult Australian readers (18+). Online gambling content is not appropriate for minors and the site is not designed to attract them; safer-play resources for adult readers are gathered on the Responsible Gambling page. We do not knowingly collect personal information from anyone under 18; if a parent or guardian becomes aware that a minor has provided information, please contact us through the Contact page and the information will be deleted.
11. Changes to this policy
This policy is reviewed at least annually, and whenever a material change is made to the site that affects what data is collected or how it is processed. The "Last updated" date at the top of the page reflects the most recent substantive change. Where a change is material — adding a new third-party service, broadening the purposes for which data is used — existing visitors will be prompted to re-confirm consent through the cookie banner before the change takes effect.