Privacy policy

Who runs this site

Casino Atlas is an independent editorial project about casinos: reviews, country rankings and a reference library of slots and providers. We take no bets, run no games and move no money.

Any data question — a copy of your data, a correction, a deletion, a withdrawal of consent, a complaint — goes to info@llcasinoll.com. We answer requests sent from the address the account is registered to; otherwise we have no way to tell that the person asking owns the data.

What is collected automatically

Every request reaches a web server log that records the IP address, the browser string (User-Agent), the requested URL, the referring page, the date and time, the response code and the amount of data served. These records exist so that faults can be traced and automated attacks blocked.

Separately, the visitor’s country is derived from the IP address. It decides which version of the site is shown: an encyclopaedia without links to gambling sites for Russia and Belarus, the full guide everywhere else. The country is not stored in your profile and is not used for advertising — it is worked out afresh on each request.

Accounts

Registration is optional: the whole site can be read without it. An account exists so that you can post reviews and keep a shortlist of casinos.

Registering stores your e-mail address, a display name (optional — you may leave it empty), the date the account was created and its role. The password itself is never stored: the database holds only a bcrypt hash, from which the original password cannot be recovered — not by an attacker and not by us. Active session tokens are stored separately with an expiry date.

Reviews and shortlists

A review is a rating from 1 to 5, an optional text of up to 2000 characters, and the dates it was written and last edited. Reviews are visible to everyone reading that casino page. They appear next to the display name from your profile, or under a neutral label if you left that field empty. Your e-mail address is never published.

You have one review per casino: submitting again overwrites the previous one. You can edit or delete your own review at any time straight from the casino page — no request to us is needed.

The shortlist is the set of casinos you saved, tied to your account. Only you can see it.

Analytics: Yandex Metrica and Google Analytics 4

Two traffic counters may run on the site. They load only if their IDs are configured on the server; with no IDs, the scripts are not loaded at all.

Yandex Metrica is switched on with session recording (Webvisor), a click map and outbound link tracking. That means that beyond ordinary page statistics it records how you behave inside the browser window: pointer movement, scrolling, clicks, window resizing and typing into form fields. We use those recordings to find out where the interface confuses people. Google Analytics 4 collects ordinary statistics: pages, traffic sources, devices and approximate geography.

The analytics scripts load when the page opens. There is currently no consent banner on the site, and you should know that: in the European Union this kind of measurement requires your prior consent. Until a banner exists, you can opt out by the means below, which work independently of us.

• Block third-party scripts and cookies in your browser settings or with a content blocker.
• Use the official Yandex Metrica opt-out, which sets a marker in your browser that stops the counter from recording you.
• Install Google’s browser add-on that turns Google Analytics off.

Game demos

Demo games open in a frame inside our page, but the game itself is served by its provider. Launching one gives that provider your IP address, your browser details and the page address. From there their own privacy policy applies — we neither control it nor receive anything about you back.

In information mode (Russia, Belarus) demos do not run: the request is refused on the server even if the game address is opened directly.

Links to casino sites

The play button goes through an internal address of the form /go/{name}, which redirects to the operator’s site. Those links are marked as sponsored and kept out of search indexes. We do not pass operators your name, e-mail, reviews or shortlist. On arrival the operator sees what any website sees: your IP address, your browser, and the fact that you came from us.

In information mode the redirect is blocked on the server and takes you back to the review.

The legal grounds we rely on

• Accounts, reviews and shortlists — performance of a contract with you: without this data the service you chose to use cannot function (Art. 6(1)(b) GDPR).
• Server logs, attack protection and country detection for the legal mode — our legitimate interest in keeping the site available, secure and lawful in the countries it is read from (Art. 6(1)(f) GDPR).
• Traffic counters — consent (Art. 6(1)(a) GDPR). Consent can be withdrawn at any time; that does not affect the lawfulness of processing before the withdrawal.

How long data is kept

• A session token — 30 days from sign-in, after which it stops working. Signing out deletes it immediately.
• Account data, reviews and shortlists — for as long as the account exists. Deleting the account deletes the reviews, shortlist and sessions attached to it.
• Web server logs — as long as needed to operate the site and investigate incidents, then overwritten.
• Counter data — for the retention periods set by Yandex and Google, not by us.

Who else sees the data

We do not sell personal data, do not hand it to advertising brokers and do not build visitor profiles for resale.

• The hosting provider whose servers run the site and hold the database.
• Yandex Oy (Finland) as the operator of Yandex Metrica, if the counter is switched on.
• Google Ireland Limited and Google LLC as the operators of Google Analytics 4, if the counter is switched on.
• Demo game providers — only at the moment you start a demo yourself.
• A casino operator — only at the moment you press the play button yourself.

Transfers outside your country

Google LLC is based in the United States and participates in the EU-U.S. Data Privacy Framework, under which the European Commission recognises the level of protection in the United States as adequate for certified companies.

Yandex infrastructure includes data centres outside the European Economic Area, including in Russia. There is no European Commission adequacy decision for Russia: the transfer rests on the contractual safeguards in the Yandex Metrica data processing agreement. If that is unacceptable to you, use the opt-out in the analytics section or block the counter in your browser.

Your rights

There is currently no “delete my account” button in the account area — deletion is done by writing to info@llcasinoll.com. We handle such requests within a reasonable time and reply in writing. A single review can be deleted without writing to us, straight from the casino page.

• Confirm whether we process your data and obtain a copy of it.
• Correct inaccurate data — for example, change the name shown next to your review.
• Have your data erased: the account together with its reviews, shortlist and sessions.
• Restrict processing, or object to it where we rely on legitimate interest.
• Receive your data in a machine-readable form and pass it to another service.
• Withdraw consent to analytics at any time, without giving a reason.
• Complain to the data protection authority where you live.

Minors

This site is for people aged 18 and over. We do not knowingly collect children’s data or create accounts for them. If you believe an account was opened by a minor, write to us and we will delete it.

Changes

When the site changes — a new counter, a new form, a new way of signing in — this text changes with it. The date of the last update is shown at the foot of this page. We do not send out notifications about changes: watch the date.