An information site about casinos outside GamStop and their withdrawal times needs very little personal data to run, and ukinstantpayouts.com processes no more than that. The UK GDPR and the Data Protection Act 2018 are the rules that apply. With this policy the site meets the duty to inform under Article 13 of the UK GDPR.
What is processed
A log entry is recorded by the server each time a page is opened: IP address, date and time, the address requested, the amount of data sent, the referring page and the type of browser. Security and the detection of abuse are what these logs serve, and after 90 days they are deleted or shortened so that they no longer point to a person. A name, an e-mail address and the text of the message are also provided by anyone who writes to the editors, and these are used only to answer. Reader accounts, deposits and stakes do not exist on this site, so no payment details and no identity documents are collected.
Lawful bases and purposes
The controller's legitimate interests in keeping the site working and secure carry server logs and protection against abuse (Article 6(1)(f) UK GDPR), and answering a message rests on that same interest. Consent is what cookies other than the strictly necessary ones, and audience measurement, need (Article 6(1)(a) UK GDPR together with regulation 6 of PECR), and they run only once it has been given; at any time it can be withdrawn, which leaves the lawfulness of earlier processing untouched (Article 7(3)). Automated decision-making there is none, and no profiling.
Recipients and transfers outside the UK
No data is sold. Processors acting on the controller's instructions, providing hosting, content delivery and e-mail, are the recipients (Article 28 UK GDPR), together with public authorities where the law requires it. Only to a country covered by adequacy regulations, or with appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum, does a transfer outside the United Kingdom take place (Article 44 onwards).
Rights
The right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and the right to object to processing based on legitimate interests (Article 21) belong to every person. Without undue delay and within one month of receipt a request is answered; under Article 12(3) that period can be extended by a further two months where needed.
Retention
Only as long as its purpose requires is data kept: server logs for no more than 90 days, correspondence until the matter is closed and for the period needed to defend against possible claims. Data given in a message is voluntary, but without it no reply is possible.
Controller
The body that runs ukinstantpayouts.com is the controller within the meaning of Article 4(7) UK GDPR. Its name, address and e-mail address are available at ukinstantpayouts.com, and the same channel is used for every question about personal data.
Supervision and complaints
The Information Commissioner's Office (ICO) is the supervisory authority. Where the processing of their data is believed to breach data protection law, every person has the right to complain to it (Article 77 UK GDPR).
Last updated: 12.11.2026.