Publishing on casinos outside GamStop, and on how fast a withdrawal actually clears, is what oddscompassuk.com does for readers in Great Britain, and no more personal data is processed than an information site of this kind requires. The UK GDPR and the Data Protection Act 2018 set the applicable rules, and this policy discharges the duty to inform under Article 13 of the UK GDPR.
Controller
The body running oddscompassuk.com is the controller within the meaning of Article 4(7) UK GDPR. Its name, address and e-mail address are available at oddscompassuk.com, and every question about personal data goes through that same channel.
What is processed
Opening a page generates a server log entry. Logged are the IP address, the date and time, the address requested, the volume of data sent, the referring page and the browser type. Such logs exist for security and for spotting abuse; at 90 days they are removed or truncated so that no individual can be traced through them. A person writing to the editors supplies a name, an e-mail address and the message itself, and these serve the reply alone. Reader accounts, deposits and stakes do not exist on this site, and accordingly no payment details and no identity documents are gathered.
Lawful bases and purposes
Server logs and anti-abuse measures are carried by the controller's legitimate interests in a site that works and stays secure (Article 6(1)(f) UK GDPR). The same interest carries a reply to a message. Audience measurement, and all cookies beyond the strictly necessary ones, require consent (Article 6(1)(a) UK GDPR read with regulation 6 of PECR) and load only once that consent exists; it may be withdrawn at any point without disturbing the lawfulness of processing already carried out (Article 7(3)). Profiling there is none, and no decisions are automated.
Recipients and transfers outside the UK
No data is sold. Those receiving it are processors working to the controller's instructions in hosting, content delivery and e-mail (Article 28 UK GDPR), plus public authorities where the law demands it. A destination outside the United Kingdom is used only where adequacy regulations cover the country or appropriate safeguards are in place, the International Data Transfer Agreement and the UK Addendum being examples (Article 44 onwards).
Retention
Nothing is held past the point its purpose requires: server logs no longer than 90 days, correspondence until the matter concludes and for whatever period is needed to answer possible claims. A message may be sent or not as the sender prefers, though no reply can follow without one.
Rights
The rights held by every person are access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), and objection to processing resting on legitimate interests (Article 21). Answers to a request come without undue delay and no later than one month from receipt; where the case calls for it, Article 12(3) allows that month to be stretched by a further two.
Supervision and complaints
The Information Commissioner's Office (ICO) is the supervisory authority. Where a person considers that their data has been processed in breach of data protection law, the right to complain to it is theirs (Article 77 UK GDPR).
Last updated: 13.11.2026.