Privacy policy

Who we are

CasinoAPI Tech Solutions LTD, of 4 Riga Fereou Street, 3095 Limassol, Cyprus, is the controller for personal data collected through this website.

You can reach us about anything in this policy at business@casinoapi.tech.

What this policy covers

This policy covers the casinoapi.tech website and nothing else.

It does not cover the platform we supply to operators. Where an operator runs a brand on our software, that operator decides what player data is collected and why, and their own policy governs it. If you are a player of a sweepstakes casino, this is not the policy you are looking for — contact the brand you play with.

What we collect and why

Information you send us

Two forms on this site collect anything: the enquiry form on the API pages and the demo request form. Between them they ask for a work email address, a company name, your role, where you are today, an existing platform or provider, the markets you plan to operate in, what you would like to see, and preferred times. Only the email address and the company name are required; the rest are optional and several forms ask for none of them.

We use it to reply to you and to prepare the conversation. Submissions are stored in the website’s own database and emailed to us. There is no marketing platform behind either form and nothing is added to a sequence.

Information collected automatically

Ordinary web server logs: the requesting IP address, the page requested, the time, and the browser’s user-agent string. Every website has these and they are what makes it possible to diagnose a fault or notice an attack.

These are held by the company that hosts the site, as part of running the server. We do not build a profile from them, we do not combine them with anything you send through a form, and there is no analytics software on this site to feed them into. If you want to know how long they are retained, ask us at business@casinoapi.tech and we will tell you.

What we do not collect

This section was measured rather than asserted. In a clean browser, across every page of this site including a form submission:

• No cookies are set. None, of any kind.
• No analytics. There is no Google Analytics, no tag manager, no heat-mapping and no advertising or tracking pixel.
• Nothing is loaded from another company’s servers. Fonts, stylesheets and scripts are all served from this domain, so no third party sees that you visited.

We also do not add you to a marketing sequence, and we do not sell, rent or share your details with anyone for their own purposes. We do not ask for personal data about your players and do not want it.

Lawful basis

We rely on two of the grounds the GDPR sets out, for different parts of the same enquiry:

Steps taken at your request before a contract

Article 6(1)(b). If you ask us for sandbox access, a demo or commercial terms, handling that request is a step towards an agreement you have started.

Our legitimate interests

Article 6(1)(f). Replying to someone who has written to us, and keeping a record of what was asked and what we answered, is what a business has to be able to do. The interest is ours, the data is a work email address and a company name, and you can object at any time — see Your rights below.

We do not rely on consent for either form, because neither is a subscription: nothing you send us adds you to a mailing list. We do not process special category data and we do not make automated decisions about you.

Who else sees it

Two suppliers, and no others: the company that hosts this website and the database behind it, and the provider of the mailbox your enquiry arrives in. Both are within the European Economic Area.

Nobody else sees it. There is no CRM, no marketing platform, no analytics provider and no advertising network involved, because none of them is installed on this site. We do not sell, rent or share your details with anyone for their own purposes.

How long we keep it

An enquiry is kept while we are dealing with it, and for six months after it is closed. After that the record is deleted, from the website’s database and from the mailbox.

Where it is stored

Within the European Economic Area, on both the hosting and the email side. We do not transfer enquiry data outside the EEA.

Your rights

If we hold personal data about you, you can ask for a copy of it, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to us holding it, and ask for it in a portable form.

Write to business@casinoapi.tech and say which. We do not charge for this and we will not ask you why.

We answer within one month of receiving the request, which is the limit the GDPR sets. In practice a request about a website enquiry is a small piece of work and is usually done in a few business days. If a request is complex enough to need longer, the GDPR allows a further two months and we will tell you inside the first month that we are using it, and why.

If you are not satisfied with how we handle it, you can complain to the Cypriot supervisory authority, the Office of the Commissioner for Personal Data Protection — dataprotection.gov.cy.

Cookies and local storage

This site sets no cookies, and stores one thing in your browser: the light or dark preference, if you set one. The cookie policy covers it in full.

Changes to this policy

When this policy changes, the date at the top of the page changes with it. Material changes to what we collect or why will be described here rather than folded in quietly.

How to reach us

Email business@casinoapi.tech.

For anything that has to be in writing, write to CasinoAPI Tech Solutions LTD, 4 Riga Fereou Street, 3095 Limassol, Cyprus.