Privacy Policy
This Privacy Policy explains how Smash Casino Review (the "Site") collects, uses and safeguards information about visitors. We are an independent affiliate publisher and do not operate the casino itself. By using the Site you agree to the practices described here.
1. Information We Collect
We collect two categories of data:
- Automatically collected: IP address, approximate location, browser type, device, referrer URL, pages viewed, time on page.
- Voluntarily provided: any details you submit if you contact us by email — name, email address, message contents.
2. Cookies and Similar Technologies
We use first-party cookies for session state (e.g. closing the exit overlay once per session) and third-party cookies for affiliate attribution and aggregate analytics. Cookies are typed-in by the browser and can be cleared at any time from the browser settings.
3. Legal Bases (GDPR)
For visitors in the EU/UK we process data under the following lawful bases of GDPR (Regulation 2016/679): legitimate interests (security, fraud prevention, basic analytics), consent (non-essential cookies), and contract performance (responding to direct enquiries).
4. AU and AEDT Notes
For Australian visitors, this Site is operated under the Australian Privacy Principles (APPs) of the Privacy Act 1988 (Cth). We do not collect Tax File Numbers, government identifiers or sensitive health data. The Site is not directed at minors and we do not knowingly collect data from anyone under 18.
5. CCPA Notice (California)
California residents may request access, deletion, or opt-out of the "sale" of personal information. We do not sell personal information in the traditional sense; we share aggregated, anonymised analytics only.
6. LGPD Notice (Brazil)
For Brazilian visitors, the controller respects the rights granted under Lei Geral de Proteção de Dados (Lei 13.709/2018) — access, correction, deletion, portability and revocation of consent.
7. Affiliate Tracking
When you click an outbound link to the casino, an affiliate cookie may be set by the operator's tracking partner. This is how the Site earns commissions. We do not control or store the data captured by the operator after you leave this Site.
8. Data Retention
Server log entries are retained for up to 12 months for security purposes. Email correspondence is retained for the duration needed to handle the request, then archived for an additional 24 months unless deletion is requested.
9. Your Rights
You may request access, correction, deletion or portability of any personal data we hold about you, and you may withdraw consent at any time. Contact us via the email address listed in the Terms and Conditions.
10. Security
The Site is served over HTTPS with HSTS, and sensitive transmissions are encrypted with TLS. No method of internet transmission is 100% secure, but we apply industry-standard safeguards.
11. Changes
We may update this Policy. The "Last updated" date at the top reflects the latest revision. Continued use of the Site after changes constitutes acceptance.
12. Contact
For privacy questions, contact us via the email listed on the Terms and Conditions page.