Privacy Policy
Privacy policy and information about how we handle your data
Responsible for data processing on this website:
Theodoros FabischWölsauerhammer 22 95615, Marktredwitz Germany
Email: [email protected]
We only collect data that you actively provide to us:
- Contact Form: Name, email address, subject, message
Your data is used exclusively for:
- Answering your contact requests
- Improving our website and services
- Protection against abuse and spam
Our website uses cookies to provide you with the best experience. We distinguish between essential and optional cookies.
Essential Cookies
These cookies are essential for the website to function. These cookies are required and are set without your consent.
- Session Cookie: For managing your session and security
- CSRF Token: Protection against Cross-Site-Request-Forgery attacks
- Locale Cookie: Storing your language preference
Analytics Cookies (Matomo)
We use Matomo, a privacy-friendly analytics tool, to analyze the usage of our website. Matomo is hosted on our own servers (no third-party tracking). The data is used to improve the user experience and is not shared with third parties. You can opt out of analytics cookies at any time.
- _pk_id: Unique visitor ID (13 months validity)
- _pk_ses: Session-based data (30 minutes validity)
- _pk_ref: Referrer information
- _pk_cvar: Custom Variables
- _pk_hsr: Heatmap & Session Recording (if activated)
Privacy-First Analytics
- Self-Hosted: Matomo runs on our own servers in Germany
- No data transfer to third parties
- IP Anonymization: The last 2 bytes of your IP are anonymized
- DoNotTrack is respected
- GDPR compliant
Video Cookies (YouTube)
When you play videos on our website, cookies are set by YouTube (Google). These cookies are only loaded after your consent.
- VISITOR_INFO1_LIVE: Tries to estimate available bandwidth (6 months validity)
- YSC: Session ID, stores unique ID for statistics (Session)
- yt-remote-*: Various cookies for playing and storing video settings
Important Notice
- We use youtube-nocookie.com for enhanced privacy
- Videos are only loaded after your consent via the cookie banner
- During playback, data is transferred to Google (USA)
This website is hosted on servers in Germany. When you access our website, technical data is automatically stored in server log files.
Server Logs:
The following data is automatically collected:
- IP address
- Browser type and version
- Date and time of access
- Referrer URL (from which page you came)
Purpose:
Technical provision and security of the website, detection and defense against attacks (e.g., DDoS).
Legal Basis:
Legitimate interest (Art. 6 Para. 1 lit. f GDPR) to ensure IT security and safe operation of the website.
Storage Duration:
Server logs are deleted after a maximum of 7 days (IP addresses are anonymized after 7 days).
We use the service “Cloudflare”. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Cloudflare”). Cloudflare offers a globally distributed content delivery network with DNS. Technically, the transfer of information between your browser and our website is routed through Cloudflare's network. This enables Cloudflare to analyse the data traffic between your browser and our website and to act as a filter between our servers and potentially malicious traffic from the internet. In doing so, Cloudflare may also use cookies or other technologies for recognising internet users, which are however used solely for the purpose described here. The use of Cloudflare is based on our legitimate interest in providing our website as error-free and securely as possible (Art. 6 (1) lit. f GDPR). The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. Details and further information on security and data protection at Cloudflare can be found here:
https://www.cloudflare.com/privacypolicy/ (opens in a new tab)The company holds a certification under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. You can obtain further information on this from the provider at the following link:
https://www.dataprivacyframework.gov/participant/5666 (opens in a new tab)Data processing agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from 'http://' to 'https://' and by the lock symbol in your browser line.
Recognizable by the 🔒 symbol and 'https://' in the address bar
We engage the following external service providers who process personal data on our behalf (data processors according to Art. 28 GDPR):
Web Hosting
Our hosting provider (servers in Germany)
Provision and operation of website infrastructure
Matomo Analytics
Matomo (Self-Hosted on our servers)
Web analytics to improve user experience (only with your consent)
You have the right to:
- Information about your stored data
- Correction of incorrect data
- Deletion of your data
- Restriction of processing
- Data portability
- Objection to processing
How can you exercise your rights?
Simply send us an email at [email protected] or use our contact form.
Your data is stored only as long as necessary for the respective purpose or as required by legal retention periods.
- Contact Requests: Maximum 3 years after the last communication.
- Session Cookies: Until the end of the browser session.
We do not share your data with third parties. For embedded services (YouTube), your browser establishes a direct connection to the provider after your consent.
We offer the option to log in or register using your Google account. Use of this feature is entirely optional.
- Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data transmitted by Google:
- Name (first and last name)
- Email address
- Profile picture (avatar URL)
- Google User ID (for unique identification)
Purpose:
The transmitted data is used exclusively to create or link your account on GamblingWins. No data is passed on to third parties.
Legal basis:
Your voluntary consent by clicking "Sign in with Google" (Art. 6 Para. 1 lit. a GDPR).
Google Privacy Policy:
More information: Google Privacy Policy (opens in a new tab)
On our slot pages you can start a free demo version of the game. The demo is loaded inside an embedded frame directly from the game's maker. Until you press the start button, no connection to that maker is opened and no data is transmitted.
Provider
The respective game maker, whose name is shown in the demo area before you start, for example Pragmatic Play, Play'n GO, Nolimit City, Relax Gaming or BGaming. The demo runs on the maker's servers, not on ours.
Data processed
IP address, browser and device information, and details of your play within the demo. To run the game, the maker may store data in your browser, such as the state of the demo session.
Legal basis
Your consent (Art. 6(1)(a) GDPR), given by actively starting the demo. Nothing is transmitted before that click.
Transfer to third countries
Depending on the maker, the servers may be located outside the EU. Which provider supplies the demo is shown to you before you start.
No real money
The demo runs on play money only. There is no registration, no deposit and no payout.
On our website, we use affiliate links to online casinos and gambling providers. Here we transparently explain what this means and how your data is handled.
What are affiliate links?
Affiliate links are special referral links through which we receive a commission when you register at a casino or make a deposit.
- Affiliate links are marked with an asterisk (*) on our website.
- Using these links does not incur any additional costs or disadvantages for you.
- The commission is paid by the respective casino provider and does not influence our editorial reviews.
Privacy & Affiliate Links
When clicking an affiliate link, you are redirected through our server. Please note the following:
- The click is routed through our domain (gamblingwins.com/go/…) before you reach the casino website.
- The destination provider may set their own cookies to track the referral. This is subject to the respective provider's privacy policy.
- We do not store any personal data in connection with affiliate clicks.
Streamers can run draws in their own Kick chat on gamblingwins.com. Doing so means we process chat messages from that channel's viewers. Those people are usually not registered with us, which is why this is explained separately here.
What chat data is processed
While a giveaway is running we read the public chat messages of that channel and check whether they contain the keyword the streamer set. For an entry we store the platform identifier, the display name, the message identifier and subscription details where the platform provides them.
- Only channels the streamer has proven belong to them, verified by signing in with Kick.
- The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is running the draw the streamer announced, which the person joins actively by typing the keyword.
- Entry data is deleted automatically 30 days after the giveaway ends. Winner records are kept longer so the draw remains checkable.
What is publicly visible
So that anyone can recompute a draw, we publish the entry list. It deliberately contains no real names and no platform identifiers.
- Each entry appears only as a cryptographic pseudonym. The secret value used to produce it is generated per giveaway and never published, so individuals cannot be recovered from the list.
- For drawn winners the display name is published as well. That is an inherent part of a public giveaway and is announced on stream anyway.
- The streamer's own view shows display names and platform identifiers, because they have to pay the winner out. That view is not public.
Objection and erasure
You may object to this processing and request erasure of your entry data at any time, even without an account here. An informal message to the address given under Controller, naming the channel and roughly when the giveaway took place, is enough. If you have already been published as a winner, we assess case by case what can be removed without destroying the verifiability of draws that already happened.
Right to Complain
You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.
Responsible supervisory authority in Germany:
List of supervisory authorities: Federal Commissioner for Data Protection and Freedom of Information (BfDI) (opens in a new tab)
For questions about data protection or to exercise your rights, please contact: