1. Who we are
GamingCompliance.io is an independent editorial reference for regulated-iGaming standards, operated by its founder from Vancouver, British Columbia, Canada. For the purposes of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia's Personal Information Protection Act, the EU and UK General Data Protection Regulations, and similar laws, the operator of GamingCompliance.io is the controller of any personal data described on this page.
Privacy questions, access requests and complaints: hello@gamingcompliance.io.
2. What we collect and why
The site is built to need as little as possible. It has no user accounts, no comment system, no newsletter, no contact form and no payment processing. The only data that reaches us is the technical minimum involved in delivering web pages and keeping the site secure.
| Data | Source | Purpose |
|---|---|---|
| IP address, requested URL, referrer, browser type, timestamp | Standard web-server access logs kept by our hosting provider | Delivering pages, diagnosing faults, measuring load. We do not build visitor profiles from these logs. |
| IP address, browser type, attempted username | Our security layer, recorded only when a request looks like an attack: a failed administrator login, or a probe for user names or vulnerable paths | Blocking automated attacks. Addresses that trigger these events are blocked from the site. |
| Your email address and message | Only if you choose to email us | Replying to you and, for corrections, fixing the page you wrote about. |
We do not collect names, postal addresses, payment details, precise location, device identifiers or anything about your gambling activity. Nothing on this site is personalised.
3. Cookies and local storage
The site sets two small first-party cookies, both purely functional. Neither is shared with anyone and neither can identify you.
| Name | What it stores | Lifetime |
|---|---|---|
igc_theme | Whether you chose the light or dark theme | 365 days |
igc_juris_view | Your preferred layout on the jurisdictions atlas | 365 days |
The standards search palette keeps your last six search terms in your browser's local storage (igc-pal-recent) so they can be offered again. This never leaves your device. Clearing your browser's site data removes it.
WordPress, the software the site runs on, sets its own cookies only for people who log in to administer the site. Ordinary visitors never receive them. Because none of these cookies are used for tracking, advertising or profiling, no cookie banner is shown.
4. Third parties that process data
We use a small number of service providers. Each processes data only on our instructions and only to the extent needed to run the site.
- Hostinger (hosting). Serves the site and keeps the access logs described above. Hostinger operates data centres in several countries; see section 8.
- Google Fonts. The site's typeface is loaded from Google's font servers. When your browser fetches it, Google receives your IP address and the page you are viewing. Google states it does not use this to profile users. If you prefer to avoid this, most browsers can be set to block third-party font requests; the site remains fully readable.
- Content delivery networks. A few interactive pages (charts on the Ontario market dashboard, some icons) load open-source JavaScript libraries from jsDelivr or unpkg. Those networks receive your IP address in order to serve the file, nothing more.
- Email. If you write to us, your message is handled by our email provider like any other email.
We do not use Google Analytics, Meta Pixel, LinkedIn Insight, session-recording tools, heat maps, A/B testing services or advertising networks. There are no embedded social-media widgets; the share links on articles simply open the relevant service in a new tab and nothing is loaded from that service until you click.
5. Legal bases
Where the EU or UK GDPR applies, we rely on legitimate interests (Article 6(1)(f)) for server logging and security monitoring: running a stable, secure website, in a way that does not override your interests, and without any tracking beyond what is technically required. Functional cookies are exempt from consent requirements because they are strictly necessary to provide a feature you chose. If you email us, we process your message because you asked us to respond.
In Canada, we collect and use personal information only for the purposes above, which a reasonable person would consider appropriate in the circumstances, as PIPEDA requires.
6. How long we keep data
- Hosting access logs are rotated by our hosting provider on its standard schedule, typically a matter of weeks. We do not export or archive them.
- Security event records are kept for as long as they are useful for recognising repeat abuse. Blocked addresses stay blocked until we clear them, which we do on request where the block was triggered in error.
- Email correspondence is kept for as long as needed to deal with your enquiry and, for corrections, as a record of what was changed and why.
7. Your rights
Depending on where you live, you may have the right to ask us what personal data we hold about you, to have it corrected or deleted, to object to or restrict its processing, to receive a copy in a portable format, and to complain to a supervisory authority. In practice, because we hold so little, most requests amount to checking security records for your IP address and removing them.
To exercise any of these rights, email hello@gamingcompliance.io. We will respond within 30 days. We may ask you to confirm the IP address concerned so that we act on the right record. There is no charge.
You can also complain to your regulator: in Canada the Office of the Privacy Commissioner of Canada; in the UK the Information Commissioner's Office; in the EU the data-protection authority of your member state. California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and we do not use it for cross-context behavioural advertising.
8. International transfers
The site is operated from Canada and hosted by Hostinger, whose servers may be located in the European Union, the United Kingdom, the United States or Asia depending on routing. Google Fonts and the CDNs named above are global services. Where data about EU or UK visitors leaves those territories, the transfer is covered by the provider's standard contractual clauses or an adequacy decision (Canada holds an EU adequacy decision for PIPEDA-covered organisations).
9. Security
All traffic is served over HTTPS with HSTS enabled. The site runs a hardened configuration with automated blocking of attack traffic, and administrative access is limited to the operator. Because we hold almost no personal data, the practical risk to you from a breach of this site is very low; if one ever affected data about identifiable people, we would tell the affected individuals and the relevant regulator as the law requires.
10. Children
This site is written for compliance, legal and product professionals in the regulated gambling industry. It is not directed at children and we do not knowingly collect information from anyone under 18 (or the age of majority where they live). It does not offer, promote or link to any gambling product.
11. External links and downloads
Almost every page links to regulators' own publications and other external sites. Those sites have their own privacy practices, which we do not control. PDF reports in the downloads library are served directly from this site with no registration and no tracking.
12. Changes to this policy
If the site ever adds a feature that changes what is collected, this page will be updated first and the effective date at the top will change. We do not retro-actively expand how existing data is used.
Not legal advice. As with everything on this site, this policy describes our own practices and is not advice about yours.