Privacy Policy

This Privacy Policy describes how GGSPIN8 (the Website) handles the personal data of visitors, newsletter subscribers, and users who submit reviews. The Website processes personal data in accordance with the EU General Data Protection Regulation 2016/679 (GDPR), the ePrivacy Directive (2002/58/EC), and the national laws of the operator's member state.

This policy applies to all visitors, regardless of whether they access the Website from inside or outside the European Economic Area (EEA).

The data controller (GDPR Art. 4(7)) is the operator of the Website.

• Website: GGSPIN8 — https://ggspin8.com
• Operator type: small-scale, private operation
• Contact: via reply to a Website newsletter, or via the contact channel currently published on the Website

The controller has not appointed a Data Protection Officer, because GDPR Art. 37(1) does not require one for the Website's scope of activities.

The Website relies on the following legal bases under GDPR Art. 6(1):

• (a) consent — newsletter signup, review submission, non-essential cookies
• (b) performance of a contract — newsletter relationship, storage of user content
• (f) legitimate interest — abuse prevention, anonymized campaign analytics

The Website relies on the following third-party processors (GDPR Art. 28):

• Google Ireland Limited — Google Analytics 4 (anonymized stats).
• Google LLC (Gmail SMTP) — newsletter delivery provider.
• Telegram FZ-LLC — internal admin notifications.
• Cloudflare, Inc. — proxy / CDN.
• Hosting infrastructure provider — server environment operator.
• Affiliate partners — only when you actively click an outbound link.

The Website is in affiliate (partner) relationship with the gambling operators it features. If you click an outbound link on the Website and subsequently register or deposit at a third party, that operator may pay a commission to the Website operator. This does not affect you financially.

The Website is not a gambling operator. It does not accept payments and does not organize any form of gambling.

Certain technical data may be transferred outside the EEA. Such transfers rely on:

• the EU–US Data Privacy Framework (Commission adequacy decision 2023/1795), and/or
• the Standard Contractual Clauses (SCCs) adopted by the European Commission

Google Analytics 4 anonymizes IP addresses by default.

Under the GDPR every visitor and user of the Website has the following rights:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure / „right to be forgotten" (Art. 17)
• Right to restrict processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to withdraw consent (Art. 7)
• Right to lodge a complaint (Art. 77) — with the supervisory authority of your member state of habitual residence

You may exercise these rights by replying to any Website newsletter or via the current Website contact channel. We will provide a substantive response within 30 days.

You can unsubscribe from the newsletter at any time:

• Reply to a newsletter email with the word „Unsubscribe"
• Use the current contact channel published on the Website

Requests are processed within 7 days.

• HTTPS/TLS encryption for all network communication
• Admin panel protected with brute-force defence (max 5 failed attempts per 15 minutes)
• Passwords stored as bcrypt hashes with salt (not reversible)
• Database accessible only on a private network
• No data shared with third parties for marketing purposes

Under GDPR Art. 77 you can lodge a complaint with the EU data protection supervisory authority of your habitual residence, workplace, or the place of the alleged infringement. Full EU list:

The controller reserves the right to amend this Privacy Policy unilaterally. Amendments take effect upon publication on the Website.