playdigestuk.com writes about online casinos, the ones not on GamStop included, for readers in Great Britain, and it collects no more personal data than an information site needs to stay online. Two instruments fix the rules here: the UK GDPR and the Data Protection Act 2018. This page does what Article 13 of the UK GDPR asks of a controller and informs the reader.
Lawful bases and purposes
Two grounds carry the processing. Keeping the site running and secure is a legitimate interest of the controller, and abuse prevention sits on the same footing (Article 6(1)(f) UK GDPR); a reply to a message is written on that ground too. Everything beyond that — any cookie that is not strictly necessary, and audience measurement — waits for consent (Article 6(1)(a) UK GDPR read with regulation 6 of PECR) and starts only after it has been given. Consent may be taken back at any moment; earlier processing stays lawful regardless (Article 7(3)). Profiling does not happen, and no decision is ever made about a person by automated means alone.
Controller
Whoever operates playdigestuk.com is the controller in the sense of Article 4(7) UK GDPR. Name, address and e-mail address are available at playdigestuk.com, and every question touching personal data goes through that same channel.
When a page is opened, and when a message is sent
A log entry is written by the server on every page view: the IP address, the date and time, which address was requested, how much data was sent, the page that led there and the browser type. Those logs answer for security and for spotting abuse, and no later than 90 days on they are deleted or shortened until they point to nobody. A reader who writes to the editors supplies a name, an e-mail address and the message itself, and those three are used for the reply and nothing else. There are no reader accounts here, no deposits and no stakes, which is why no payment details and no identity documents are ever gathered.
Who receives the data, and where it may travel
Nothing is sold. On the controller's instructions, processors supply hosting, content delivery and e-mail (Article 28 UK GDPR); public authorities receive data only where the law commands it. Beyond the United Kingdom, data travels solely to a country covered by adequacy regulations or under appropriate safeguards, among them the International Data Transfer Agreement and the UK Addendum (Article 44 onwards).
How long data stays
A purpose sets the clock, and once it is served the data goes: no more than 90 days for server logs, while correspondence stays until the matter is closed and for as long afterwards as a possible claim might need. A message may be left unsent — the data is given freely — though no answer follows without it.
Rights of the person concerned
Six rights are open to everyone whose data is held: access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), and objection to processing that rests on legitimate interests (Article 21). The answer to a request comes without undue delay and inside one month of its receipt; if the matter calls for it, Article 12(3) allows a further two months.
Supervision and complaints
The Information Commissioner's Office (ICO) supervises. A person who holds that their data has been processed against data protection law may complain to it, a right granted by Article 77 UK GDPR.
Last updated: 13.11.2026.