Scope of this policy
This policy describes how alawin-review.com handles information about the people who read it. It covers this website only, and not the casino we write about, its cashier, or any other destination you reach by clicking away from here; each of those runs under its own policy.
Readers come mainly from New Zealand and Finland, so two regimes are relevant: the Privacy Act 2020 and its information privacy principles for New Zealand readers, and the General Data Protection Regulation for readers in Finland and elsewhere in the European Union. Where the two set different expectations, the site works to the stricter of them.
What is measured
A first-party script records how pages perform. Its measurements are deliberately coarse:
- which page address was viewed, and in which language version;
- how long the visit to that page lasted, and roughly how far down it scrolled;
- which internal or outbound links were clicked;
- whether the visit looked like a verified search-engine crawler rather than a person.
Those counts are aggregated per page, and the purpose is editorial rather than commercial: a reference section nobody finishes is usually badly written, and a guide read twice as long as its neighbours shows where next week should go.
What is never collected here
There are no reader accounts, no registration, no login and no newsletter list. Nothing asks for a name, a date of birth, an address or a telephone number, and no payment detail is requested, handled or stored, because the site sells nothing to readers. Mail sent to [email protected] sits in a mailbox with the address it came from until the exchange is over. None of it is sold, rented or passed to the operator.
Cookies and similar storage
Analytics cookies are set. Saying so matters, because plenty of sites in this niche claim otherwise while setting them anyway. A session identifier stops one person refreshing a page from counting as five readers, and a small browser value may distinguish a returning visit from a first one.
A consent layer that would let you refuse those cookies before they are written is not yet deployed here, and we would rather admit that than imply a mechanism nobody has built. Every current browser can block or clear cookies for a single domain, and doing so costs you nothing, since no feature on these pages depends on one.
Affiliate tracking when you leave for the operator
Buttons and some in-text links to the casino pass through a redirect on this domain first. That redirect logs which page the click came from and when, then appends a parameter identifying this publication as the referrer. It carries no identity of yours, because it holds none.
From the moment the forward completes, you are on the operator’s infrastructure and inside its privacy terms, not ours. Anything you then enter, including registration details, identity documents and payment information, goes to the casino. If the operator later credits a commission against that referral, what reaches this side is a count and an amount, never a reader’s name or account. The commercial arrangement that produces those commissions is described on the affiliate disclosure.
Processors and where the data sits
Analytics sit in a database on the same server that hosts these pages rather than going to an advertising network. The site uses no Google Analytics property, no advertising pixel, no social tracker and no remarketing tag. Hosting, the security layer in front of it and the mail provider behind the editorial address are third parties, and each processes technical data such as IP addresses and request logs in order to serve a page or deliver a message. Some of them run servers outside New Zealand and outside the European Economic Area, so for European readers those transfers rely on the safeguards the providers publish.
How long anything is kept
Aggregated page statistics are retained while they remain useful for editorial comparison rather than pruned on a fixed calendar date. Click records and crawler logs are short-lived operational data, and hosting logs rotate on the provider’s own schedule. Correspondence stays until a correction or a query is closed, then for a limited period in case the same question returns.
Your rights, and how to use them
Under the Privacy Act 2020 you may ask what personal information the site holds about you and ask for it to be corrected if it is wrong. Readers covered by the GDPR additionally have rights of access, rectification, erasure, restriction, objection and portability, and may complain to their national supervisory authority. In Finland that authority is the Office of the Data Protection Ombudsman.
Because the analytics here are aggregated and no account exists, a request will often find that there is nothing held about you individually beyond any email you have sent. That answer is given honestly rather than dressed up. A request can be made at [email protected], free of charge. If this policy changes materially, the revised version replaces this one on the same address, and the terms of use cover how changes to the site’s documents take effect.
A closing note for anyone weighing up registration: what a gambling site gets to know about you is part of the same decision as whether to play, and the help services guide is there if the habit has stopped feeling like a choice.