Privacy Policy

This Privacy Policy describes how Cocoa Casino (cocoa-casino-official.co.uk) collects, uses, stores, and protects personal data in connection with your use of this website. It applies to all visitors and registered users. By using this site, you acknowledge that you have read and understood this policy.

Who Is Responsible for Your Data

The data controller for personal information collected through this website is the operator of Cocoa Casino, whose registered details appear in the footer of this website. If you have questions about how we handle your data, please use the contact information provided there rather than any address that may appear in editorial content.

What Information We Collect

We collect personal data in the following circumstances:

  • Contact form submissions: name, email address, and the content of your message
  • Newsletter or notification sign-ups: email address and, optionally, preferences
  • Technical logs: IP address, browser type, operating system, referring URL, and pages visited — collected automatically when you access the site
  • Cookie-based data: session identifiers, analytics identifiers, and preference data (see the Cookies section below)

We do not collect payment card information, national insurance numbers, or government-issued identity documents. We are not a financial services provider.

Why We Process Your Data

Personal data collected through this website is used for the following purposes:

  • Service delivery: responding to contact form enquiries and newsletter distributions
  • Site security and fraud prevention: identifying abusive access patterns and protecting the integrity of the site
  • Performance analytics: understanding how visitors navigate content so we can improve it — this is carried out using aggregated data where possible
  • Legal compliance: retaining records where required by applicable law

We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Legal Basis for Processing

Where the UK General Data Protection Regulation (UK GDPR) applies, our processing relies on one or more of the following bases: your consent (for example, for optional newsletters or non-essential cookies), the performance of a contract or pre-contractual steps, our legitimate interests (for example, security monitoring and analytics), and compliance with a legal obligation. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Cookies and Similar Technologies

This website uses cookies — small text files stored in your browser. We use:

  • Strictly necessary cookies: required for the site to function; no consent required
  • Analytics cookies: used to measure traffic and page performance (for example, via Google Analytics in anonymised mode); consent is requested on first visit
  • Preference cookies: store display or language settings if applicable

You can manage or withdraw cookie consent at any time through your browser settings or our cookie banner. Disabling analytics cookies does not affect access to content.

How Long We Keep Your Data

Contact form data is retained for as long as necessary to resolve the enquiry and for a reasonable period thereafter in case of follow-up, generally not exceeding 12 months. Technical logs are retained for up to 90 days in standard configurations. Data subject to a legal retention obligation is kept for the period specified by that obligation.

Third-Party Processors

We use a limited number of third-party service providers to operate this website. These may include analytics platforms, email delivery services, and hosting infrastructure providers. Each processor is bound by a data processing agreement and is not permitted to use your data for their own independent purposes. A current list of processors is available on request via the contact channels in the site footer.

This site contains links to third-party casino platforms. Once you leave this site, their own privacy policies apply and we have no responsibility for their data practices.

International Transfers

If any of our processors transfer personal data outside the United Kingdom, we ensure that appropriate safeguards are in place — such as the UK International Data Transfer Agreement or adequacy decisions recognised by the Information Commissioner's Office (ICO) — before any transfer takes place.

Your Rights Under UK GDPR

As a UK data subject, you have the right to:

  • Access the personal data we hold about you
  • Rectification of inaccurate or incomplete data
  • Erasure of data we are not legally required to retain
  • Restriction of processing in certain circumstances
  • Data portability where processing is based on consent or contract
  • Objection to processing based on legitimate interests

To exercise any of these rights, please contact us using the details in the site footer. We will respond within one calendar month as required by law. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.

Changes to This Policy

We may revise this Privacy Policy to reflect changes in our practices, technology, or legal requirements. The updated version will be published on this page with a revised effective date. We encourage periodic review. Continued use of the site after a revision constitutes acknowledgement of the updated policy.

Final Note

We have sought to make this policy clear and accurate. If any section is unclear or if you wish to raise a concern about your personal data, please reach out through the official contact channels listed in the website footer. We take data protection obligations seriously and will respond to all legitimate enquiries.