Privacy Policy
This notice explains how Castle collects, uses and protects your personal information when you visit castlecasino.es. We take your privacy seriously and handle your data in line with UK GDPR and the Data Protection Act 2018.
Who controls your data
The data controller for this site is castlecasino.es. We are responsible for deciding how your personal information is processed and for what purpose. For questions about your data, contact us at [email protected].
What information we collect
We gather information in two ways: what you give us directly and what we observe automatically.
Information you provide: When you submit a contact form or reach out via email, we collect your name, email address and the content of your message. We do not ask for payment details, account credentials or identity documents — those belong to the operator, not to this portal.
Information we collect automatically: Like most websites, we log technical data when you visit: your IP address, browser type, device information, pages viewed, time spent on the site and referral source. This helps us understand how the site is used and where we can improve it.
We also use cookies and similar tracking technologies. For a full breakdown of which cookies we set and how to manage them, see our Cookie Policy.
How we use your data
We process your information for the following purposes:
- To respond to your enquiries and provide the information you requested.
- To operate and maintain the site — monitoring performance, fixing technical issues and preventing misuse.
- To analyse traffic patterns and improve the content and structure of our pages.
- To comply with legal obligations, including tax and record-keeping requirements.
We do not use your data to build marketing profiles, send promotional emails or target advertising unless you have explicitly opted in to receive updates from us.
Lawful basis for processing
Under UK GDPR, we must have a legal ground for every use of your personal data. We rely on:
- Legitimate interests — running the site, understanding how it is used, and responding to questions falls within our legitimate business interests, provided this does not override your own rights.
- Consent — where we use analytics or advertising cookies, we ask for your permission first through the cookie banner.
- Legal obligation — where we are required by law to retain records or cooperate with authorities.
Who we share your data with
We do not sell your personal information to third parties. We share data only in the following circumstances:
| Recipient | Purpose |
|---|---|
| Hosting provider | Stores the site's files and delivers pages to your browser |
| Analytics service | Processes anonymised usage data to generate traffic reports |
| Email service | Handles contact form submissions and our replies |
| Legal authorities | We may disclose data if required by law or to protect our rights |
These processors act on our instructions and are bound by data protection agreements. Some of them operate outside the UK, but transfers are protected by standard contractual clauses or other safeguards approved under UK law.
Your rights under UK GDPR
You have the following rights over your personal data:
- Access — request a copy of the personal information we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — request deletion of your information when we no longer need it.
- Restriction — limit how we use your data in certain situations.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests or for direct marketing.
- Withdraw consent — where processing relies on consent, you can withdraw it at any time.
To exercise any of these rights, email [email protected] with details of your request. We will respond within one month. If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
How long we keep your data
We retain personal information only as long as necessary for the purposes set out above. Contact form submissions and email correspondence are kept for up to two years, after which they are securely deleted. Technical logs and analytics data are anonymised or deleted after 12 months. Where we are required by law to keep records longer — for example, tax or legal reasons — we will do so and then delete the data once the obligation ends.
Protection of minors
This site is intended for users aged 18 and over (18+). We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, contact [email protected] and we will delete it promptly.
Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the date at the bottom of this page and, where appropriate, notify you by email or through a notice on the site. Continued use of the site after changes take effect means you accept the updated terms.
Last updated: 6 January 2026
This site is for players aged 18 and over (18+). If gambling ever stops feeling like entertainment, free and confidential help is available at BeGambleAware.org.
Last updated:
Game Providers
