Last updated: 11 August 2026
Introduction
Top Rank Non GamStop Casino assesses operators against a fixed checklist and publishes what that assessment finds. The same principle applies to this notice: it states what is processed, on what legal footing, and for how long, rather than gesturing at “your privacy matters to us”.
It covers topranknongamstopcasino.com only. Operators reached through our links are separate businesses with separate obligations, and their notices govern anything that happens after you leave here.
Route for all privacy correspondence: the Contact Us page.
Information We Collect
Processing on this site divides cleanly into two streams.
Technical data, collected automatically. Each request generates a log entry: originating IP address, date and time, requested URL, referring URL, and the user-agent string identifying browser and operating system. Approximate location may be inferred from the IP address at country or region level, and no finer.
Correspondence, supplied voluntarily. If you contact us, we hold the content of that message and the reply address attached to it.
There is no account system, no payment processing and no identity verification anywhere on this site, so the categories above are exhaustive. We hold no special category data as defined by Article 9 of the UK GDPR, and we do not seek any.
Cookies and Similar Technologies
Cookies, local storage entries and tracking pixels are treated as one category, since they perform the same function by different means. Three types are in use, and the distinction between them is the consent position rather than the technology.
Essential entries support delivery of the site and the recording of your own cookie preference; these operate without consent because the service cannot be provided without them. Measurement entries support the analytics described below. Attribution entries record that a visit to an operator originated here, which is the mechanism by which commission is calculated.
Measurement and attribution require your consent and are not set before it is given. Consent may be revised in your browser at any point, and refusing every optional cookie leaves the published content fully accessible.
Analytics and Advertising
Analytics output is reviewed in aggregate: page-level readership, entry and exit points, device class, country. The purpose is editorial — establishing which assessments are read and which are ignored, so that effort is directed accordingly. Individual-level identification is neither performed nor attempted, and the reporting we receive does not support it.
Commercially, this site is funded by affiliate commission. Where a reader registers with an operator after following a link from these pages, that operator or its affiliate network attributes the referral and pays accordingly. The data flow is one-directional and coarse: we learn that a referral converted. Account identity, deposit amounts and betting activity are never disclosed to us, and we have no facility to request them.
No third-party display advertising is served on this site and no advertising profiles are constructed from reader behaviour.
How We Use Information
Each processing purpose is stated below with the lawful basis relied upon, because a purpose without a basis is not a justification.
Maintaining availability, investigating faults and preventing abuse — legitimate interests, being the interest in operating a functioning and secure website. Responding to enquiries — legitimate interests, being the interest in dealing with people who approach us. Measuring readership and attributing referrals — consent. Meeting legal or regulatory obligations, where they apply — legal obligation.
Retention follows the same discipline. Technical logs are held only while they remain useful for security and diagnostics. Correspondence is held for the duration of the matter and a reasonable period afterwards, then deleted.
Data Sharing
Personal data is not sold, rented or exchanged, under any arrangement.
Disclosure occurs in three defined situations. Processors acting on our documented instructions — hosting, content delivery, analytics, affiliate attribution — receive what their function requires and may not repurpose it. Professional advisers receive information where a specific matter demands it. Courts, regulators and law enforcement receive information where a legal obligation compels disclosure.
Certain processors operate outside the United Kingdom. Any such transfer is made under a mechanism recognised by UK data protection law, whether an adequacy determination or standard contractual clauses with supplementary measures where required.
Data Security
Controls in place include encryption in transit across the whole site, restricted and authenticated administrative access, routine patching of the underlying software, and deletion of diagnostic records once their purpose has expired.
These reduce risk; they do not eliminate it. Transmission over the internet carries residual risk in all cases, and any assurance to the contrary should be read sceptically.
Your Rights
The UK GDPR and the Data Protection Act 2018 confer the following, exercisable free of charge in ordinary circumstances:
Access to a copy of your data. Rectification of inaccurate records. Erasure where the conditions for it are met. Restriction of processing while a dispute is resolved. Objection to processing founded on legitimate interests. Portability of data you supplied to us. Withdrawal of consent, effective from the point of withdrawal and without disturbing the lawfulness of what preceded it.
Requests go to the Contact Us page and receive a substantive response within one calendar month. Where the outcome is unsatisfactory, the Information Commissioner’s Office is the competent supervisory authority for the United Kingdom and may be approached directly at ico.org.uk.
Third-Party Links
Outbound links to operators, licensing registers and support services appear throughout this site. They lead to independently controlled destinations whose data practices are outside our authority and are not assessed by our checklist. Reviewing the destination’s own notice before disclosing anything is the sensible course.
Age Restriction
Access is intended for persons aged 18 or over. The content is not directed at minors, and information relating to minors is not knowingly held. Any such data identified to us will be deleted without delay.
Changes to this Privacy Policy
Amendments are made when legislation, guidance or the operation of the site requires them. The effective date recorded at the head of this notice identifies the current version, and substantive amendments are signposted rather than made silently.
Contact Information
Enquiries, rights requests and complaints under this notice should be directed to the Contact Us page. Stating clearly what you are asking for will allow the request to be handled without avoidable correspondence.