Casino withdrawals, the terms behind them, and the position of casinos not on GamStop are what playvectoruk.com writes about for readers in Great Britain, and only the personal data required to run an information site is processed. The UK GDPR and the Data Protection Act 2018 are the rules in force. The duty to inform under Article 13 of the UK GDPR is met by this policy.
What is processed
A log entry is written by the server whenever a page is opened: IP address, date and time, the address requested, the volume of data sent, the referring page and the browser type. Security and the detection of abuse are the purposes served, and at 90 days the entries are either deleted or shortened so that they no longer identify a person. A name, an e-mail address and the text of the message are also supplied by anyone writing to the editors, and these serve only to produce an answer. Reader accounts, deposits and stakes do not exist here, so neither payment details nor identity documents are gathered.
Controller
The body running playvectoruk.com is the controller within the meaning of Article 4(7) UK GDPR. Its name, address and e-mail address are available at playvectoruk.com, and that same channel serves every question about personal data.
Lawful bases and purposes
Server logs and protection against abuse rest on the controller's legitimate interests in keeping the site working and secure (Article 6(1)(f) UK GDPR). Answering a message rests on the same interest. Cookies other than the strictly necessary ones, and audience measurement, need consent (Article 6(1)(a) UK GDPR together with regulation 6 of PECR) and run only once it has been given; consent can be withdrawn at any time, which does not affect the lawfulness of earlier processing (Article 7(3)). There is no automated decision-making and no profiling.
Recipients and transfers outside the UK
Data is not sold. Processors acting on the controller's instructions — hosting, content delivery and e-mail providers — are the recipients (Article 28 UK GDPR), along with public authorities where the law demands it. Transfer outside the United Kingdom happens only to a country covered by adequacy regulations, or with appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum (Article 44 onwards).
Retention
Nothing is held beyond what its purpose requires: server logs for no more than 90 days, correspondence until the matter is closed and for the period needed to defend against possible claims. Data given in a message is voluntary, though no reply can follow without it.
Rights
Access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection to processing based on legitimate interests (Article 21) are rights held by every person. A request is answered without undue delay and within one month of receipt; a further two months can be added where needed under Article 12(3).
Supervision and complaints
The Information Commissioner's Office (ICO) is the supervisory authority. Where processing of personal data appears to breach data protection law, the right to complain to it is held under Article 77 UK GDPR.
Last updated: 13.11.2026.