Describing online casinos, including those not on GamStop and the speed at which they pay, is the work of playbriefuk.com, and it takes only the personal data needed to run an information site. The rules that apply are the UK GDPR and the Data Protection Act 2018. Article 13 of the UK GDPR imposes the duty to inform, which this policy meets.
Controller
The body that runs playbriefuk.com is the controller within the meaning of Article 4(7) UK GDPR. Its name, address and e-mail address are available at playbriefuk.com, and the same channel is used for every question about personal data.
What is processed
A log entry is recorded by the server each time a page is opened: IP address, date and time, the address requested, the amount of data sent, the referring page and the type of browser. Security and the detection of abuse are the purposes those logs serve, and after 90 days they are deleted or shortened so that they no longer point to a person. A name, an e-mail address and the text of the message are also provided by anyone who writes to the editors, and these are used only to answer. Reader accounts, deposits and stakes do not exist on this site, so payment details and identity documents are not collected.
Lawful bases and purposes
Keeping the site working and secure is a legitimate interest of the controller, and that interest is the basis for server logs and protection against abuse under Article 6(1)(f) UK GDPR. Answering a message rests on the same interest. Consent is needed for cookies other than the strictly necessary ones and for audience measurement (Article 6(1)(a) UK GDPR together with regulation 6 of PECR), and those run only once it has been given; withdrawal is possible at any time and does not affect the lawfulness of earlier processing (Article 7(3)). Neither automated decision-making nor profiling takes place.
Rights
Access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection to processing based on legitimate interests (Article 21) are the rights every person holds. Without undue delay and within one month of receipt a request is answered; where needed, Article 12(3) allows that period to be extended by a further two months.
Recipients and transfers outside the UK
Data is not sold. Processors that provide hosting, content delivery and e-mail and act on the controller's instructions are the recipients (Article 28 UK GDPR), along with public authorities where the law requires it. Only a country covered by adequacy regulations, or a transfer with appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum, is a destination outside the United Kingdom (Article 44 onwards).
Retention
No longer than its purpose requires is data kept: server logs for no more than 90 days, correspondence until the matter is closed and for the period needed to defend against possible claims. Data sent in a message is given voluntarily, but without it no reply is possible.
Supervision and complaints
The Information Commissioner's Office (ICO) is the supervisory authority. A right to complain to it under Article 77 UK GDPR is held by anyone who believes that the processing of their data breaches data protection law.
Last updated: 13.11.2026.