Privacy Policy

Data controller

• Controller: REV Studio AB
• Org. nr.: 559414-7919
• Address: Erik Dahlbergsgatan 20B, 411 26 Gothenburg, Sweden
• Email: hello@bennycasino.com
• Site: https://bennycasino.com

1. What we collect

We collect only what we need to operate the site and understand traffic. There is no account system, no login, and no personal user data is stored by us beyond what is required for analytics and any email correspondence you initiate.

• Server logs from our hosting provider (IP address, user agent, timestamp, requested URL, referrer). Retained for 30 days for security and operational diagnosis.
• Privacy-respecting analytics events (page views, country, device class, referrer), collected via a tool configured to not store IP addresses or cookies that identify individuals.
• Email correspondence you send us via the contact channels (corrections, partnerships, press, general). Retained as long as needed to handle the matter, then archived for record-keeping where legally relevant.
• Affiliate referral identifiers passed by your browser to operators when you click an outbound link. We do not see who registers; we only see aggregate, anonymous click counts.

2. What we do not collect

We do not run the site as a profiling operation. The following categories are explicitly out of scope:

• No accounts, no signup, no stored login credentials.
• No payment data of any kind. We never process payments, operators do.
• No advertising cookies and no third-party tracking pixels.
• No data brokering, no resale of any user data to anyone, ever.
• No special-category data (health, biometric, political, religious, etc.). If a contact email contains such data, we delete it as soon as the matter is resolved.

3. Lawful basis for processing

Each category of processing relies on a specific lawful basis under GDPR Article 6:

• Server logs and analytics: legitimate interest (Art. 6(1)(f)) in operating and securing the site. Balancing test documented internally; the data is minimal and not used to identify individuals.
• Email correspondence: contractual necessity / legitimate interest in responding to enquiries (Art. 6(1)(b)/(f)). For partnership emails, processing necessary for entering into a contract.
• Affiliate click tracking: legitimate interest in earning commission on referred registrations. The processing happens on the operator's side after click; we do not see personal data of the user.

4. Who we share data with

We share the minimum necessary with the following service providers, all of whom are bound by data processing agreements:

• Hosting / CDN provider, required to serve the site.
• Analytics provider, privacy-respecting analytics tool, configured for anonymised data only.
• Email service provider, to receive incoming mail to the inboxes listed on the contact page.
• Operator partners, only when you click an affiliate link and visit the operator's site. We pass a referral identifier; the operator collects whatever data they collect on their own site under their own privacy policy.

5. International data transfers

Some of our service providers operate servers outside the EEA. Where this happens we rely on European Commission Standard Contractual Clauses (SCCs) and, where applicable, supplementary measures (encryption in transit, encryption at rest). We do not transfer personal data to providers in jurisdictions that do not offer adequate protection.

6. Security measures

Concrete technical and organisational measures in place:

• TLS 1.2+ on every page (HSTS preload).
• Strict Content-Type, X-Frame-Options, Referrer-Policy and Permissions-Policy headers.
• No cookies that store personal identifiers.
• Inboxes and admin tools protected by 2FA.
• Access principle: each contact inbox can be read only by the editor. Forwards to other parties are logged.

Your rights under GDPR

You have the rights below for any personal data we hold about you. To exercise any of them, email hello@bennycasino.com with the subject line "GDPR request". We respond within 30 days.

• Access. Get a copy of the personal data we hold about you.
• Rectification. Have inaccurate data corrected.
• Erasure ("right to be forgotten"). Have your data deleted, subject to overriding legal obligations.
• Restriction of processing. Ask us to limit what we do with your data while a dispute is resolved.
• Data portability. Receive your data in a structured, machine-readable format.
• Object to processing. Object to processing based on our legitimate interest.
• Lodge a complaint. You can complain to the Swedish data protection authority (Integritetsskyddsmyndigheten / IMY), the supervisory authority for the controller, or to the supervisory authority of your country of residence.

How long we keep data

Cookies

Bennycasino uses very few cookies. There is no advertising cookie, no third-party tracking cookie, and no behavioural-profiling cookie. See our dedicated Cookie Policy for the full inventory.

Strictly necessary

• Purpose: Page rendering and security headers; no personal data stored.
• Duration: Session
• Vendor: Bennycasino / hosting provider

Analytics (anonymous)

• Purpose: Aggregate page views and country distribution; IP not stored.
• Duration: Session
• Vendor: Privacy-respecting analytics tool

For privacy questions, GDPR requests or to challenge processing: hello@bennycasino.com. We respond within 30 days.

When we update this policy we change the "last updated" date at the top, and where the change is material we add a note in the Changelog.