Last updated: 30 June 2026
This privacy policy explains how tombolacasinouk.com collects, processes, stores and protects personal data when you use our website. We are committed to transparency about our data practices and to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and all applicable data protection legislation.
Data Controller
tombolacasinouk.com is the data controller for personal data collected through this website. If you have questions about how your data is handled, you can contact us through the details provided in the Contact section below.
What Data We Collect
We may collect and process the following categories of personal data:
Technical data: IP address, browser type, operating system, device type, screen resolution, referring URL and pages visited. This data is collected automatically when you access the website.
Usage data: information about how you interact with the website, including pages viewed, time spent on pages, scroll depth and click patterns. This data is collected through analytics tools and cookies.
Communication data: if you contact us via email or any contact method provided on the website, we collect the content of your message and any personal data you voluntarily provide.
We do not collect financial data, payment card details, gambling account credentials or any data related to your gambling activity on third-party platforms.
How We Use Your Data
We process personal data for the following purposes and on the following legal bases:
Website operation and improvement (legitimate interest): we use technical and usage data to maintain the website, diagnose technical issues, improve content and optimise user experience.
Analytics and audience measurement (legitimate interest or consent, depending on the tracking tool): we analyse aggregate usage patterns to understand which content is most useful to our audience and to inform editorial decisions.
Communication (contractual necessity or legitimate interest): if you contact us, we process your data to respond to your query.
Legal compliance (legal obligation): we may process data to comply with applicable legal requirements, including responding to lawful data access requests.
Cookies and Tracking Technologies
This website uses cookies and similar technologies. For detailed information about the specific cookies we use, their purposes and how to manage your preferences, please refer to our Cookie Policy.
Data Sharing
We do not sell personal data to third parties. We may share data with the following categories of recipients:
Analytics providers: we use third-party analytics services to understand website usage. These providers process data on our behalf under data processing agreements.
Hosting providers: our website is hosted by third-party infrastructure providers who may have access to technical data as part of providing hosting services.
Legal authorities: we may disclose data if required to do so by law or in response to a valid legal request from a public authority.
International Data Transfers
Some of our service providers may process data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner’s Office (ICO), to protect your data to the standards required by UK GDPR.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Technical and usage data is retained in aggregate, anonymised form for analytical purposes. Communication data is retained for up to 24 months after the last interaction, unless a longer retention period is required by law.
Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can request correction of inaccurate or incomplete data.
Right to erasure: you can request deletion of your personal data in certain circumstances.
Right to restrict processing: you can request that we limit how we use your data.
Right to data portability: you can request your data in a structured, machine-readable format.
Right to object: you can object to processing based on legitimate interest, including direct marketing.
Right to withdraw consent: where processing is based on consent, you can withdraw that consent at any time.
To exercise any of these rights, please contact us using the details in the Contact section. We will respond within one month of receiving your request, as required by UK GDPR.
Children’s Privacy
This website is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a person under 18, we will take steps to delete that data promptly.
Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These measures include encrypted data transmission (HTTPS), access controls and regular security reviews.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or applicable legislation. The “Last updated” date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.
Contact
If you have questions about this privacy policy or wish to exercise your data protection rights, you can contact us through the website. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.