Privacy Policy

How this affiliate review site handles your personal data under UK GDPR and the Data Protection Act 2018.

Last updated: 16 April 2026

This website is an independent affiliate review site that publishes information about Duelz Casino, an online gambling brand operated by SuprPlay Limited under UK Gambling Commission licence number 054743. We are not the casino operator and do not hold your gambling account; this policy explains only how the affiliate review site itself handles personal data.

We collect the minimum personal data needed to keep the site operational: standard server access logs, a single cookie-consent preference, and any information you voluntarily send us by email. We do not require registration, we do not run account systems, and we do not sell or rent personal data to third parties.

Our legal bases for processing are set out in Article 6 UK GDPR. We rely on legitimate interests for security logging and measuring affiliate traffic, on consent for any non-essential cookies (withdrawable at any time through the cookie banner), and on legal obligation where retention of records is required by UK law.

Retention periods are kept short. Server access logs are typically stored for up to 90 days before rotation; the cookie-consent value is stored in your browser for up to 180 days; email correspondence is retained only for as long as is necessary to handle your enquiry and comply with applicable law.

As a data subject in the UK or EEA you have the right to submit a Subject Access Request (SAR), to request erasure, rectification, restriction, portability of your data and to object to processing. Requests can be sent to the contact address below and are handled free of charge within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority.

Duelz Casino affiliate review site privacy policy illustration

1. Data we collect

We collect only what is strictly necessary to operate and secure the site:

  • Server logs: IP address, user-agent string, referring URL, requested URL and timestamp.
  • Cookie preference: a single value recording whether you accepted or declined non-essential cookies.
  • Voluntary communications: any name, email address or message you include when contacting us.

We do not ask for, and do not process, identity documents, payment details or gambling-account information on this site.

2. Legal basis under UK GDPR

Processing is carried out on one of the following Article 6 legal bases:

  • Legitimate interests (Art. 6(1)(f)): security logging, fraud prevention and measuring aggregate affiliate traffic.
  • Consent (Art. 6(1)(a)): any non-essential cookies or analytics are only set after you accept the cookie banner; consent can be withdrawn at any time.
  • Legal obligation (Art. 6(1)(c)): where UK law requires us to retain certain records (for example to comply with tax or regulatory requests).

3. Cookies

We use cookies and similar technologies sparingly:

  • Strictly necessary: a cookie-consent preference cookie, stored for up to 180 days.
  • Affiliate attribution: when you click through to Duelz Casino, the destination operator may set its own cookies for conversion tracking, subject to its own privacy policy.
  • Analytics: only loaded after you give consent; you can change or withdraw consent at any time via your browser settings.

4. Third parties

We do not sell or rent personal data. Limited, strictly necessary data may be processed by:

  • Our hosting provider (EU/UK region), which stores server logs on our behalf.
  • Public CDNs that deliver fonts, icons and front-end libraries and may log standard request data.
  • The licensed operator of Duelz Casino (SuprPlay Limited, UKGC 054743) if you follow an outbound affiliate link — their own privacy policy then applies.
  • Responsible-gambling partners such as BeGambleAware, GamCare and GAMSTOP if you click through to their external resources.

5. Your rights

Under UK GDPR and the Data Protection Act 2018 you have the right to:

  • Request a copy of the personal data we hold about you (Subject Access Request / SAR).
  • Ask us to correct inaccurate or incomplete data (rectification).
  • Ask us to delete data that is no longer necessary (erasure / "right to be forgotten").
  • Request that we restrict or stop processing, or object to it on legitimate-interests grounds.
  • Receive your data in a portable, machine-readable format (portability).
  • Withdraw consent at any time for any processing that relies on consent.
  • Lodge a complaint with the Information Commissioner's Office (ico.org.uk).

Requests are handled free of charge and answered within one calendar month, as required by Article 12 UK GDPR.

6. Contact

For any privacy question or to exercise the rights listed above, please email [email protected]. Include enough detail to let us identify the relevant data (for example the approximate date and nature of your interaction with the site) without sending sensitive information you don't need to disclose.

We may update this policy from time to time; the "Last updated" date above always reflects the most recent change.