Privacy Policy

1. Introduction & Controller

This Privacy Policy describes how inGamble LLC ("we," "us," or "our") collects, uses, discloses, and protects Personal Data when you visit or use inGamble at ingamble.com (the "Website" or "Services").

inGamble is an independent online casino and sportsbook review platform and is not owned or operated by any gambling operator. All reviews, guides, and information published on this website are provided for informational and entertainment purposes only, based on the independent opinions and research of our editorial team. Nothing on this website constitutes legal advice or professional advice of any kind.

This Privacy Policy applies worldwide to all Users, regardless of their location. We are the data controller responsible for your Personal Data under Applicable Law.

Contact Information

For all privacy-related matters, including exercising your rights or submitting complaints, please contact us at:

Email: [email protected]

Who This Policy Applies To

"User" or "you" means any individual who visits or uses the Website, without distinction or segmentation by user type.

2. Key Definitions

• Personal Data / Personal Information: Information that identifies, relates to, describes, or could reasonably be linked with a particular individual or household.
• Processing: Any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• Controller: The entity that determines the purposes and means of processing Personal Data (inGamble LLC).
• Processor: A third party that processes Personal Data on behalf of the Controller.
• Applicable Law: Any data protection, privacy, or related law that applies to the processing of Personal Data, including but not limited to the General Data Protection Regulation (GDPR), UK GDPR, California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other comparable legislation.
• Services / Website: inGamble and all features, content, and functionality available at ingamble.com.
• Third Party: Any natural or legal person, public authority, agency, or body other than the User, Controller, Processor, or persons authorized to process data under the direct authority of the Controller or Processor.

3. Information We Collect

We collect and process the following categories of Personal Data:

Identity & Contact Data

• Name (if voluntarily provided).
• Username or display name (if you create an account).
• Email address.
• Phone number (optional, if provided).

Technical & Usage Data

• IP address.
• Device identifiers and characteristics.
• Browser type and version.
• Operating system.
• Time zone setting.
• Approximate geographic location derived from IP address.
• Pages visited, navigation paths, and clickstream data.
• Time spent on pages and exit pages.
• Referral sources and URLs.
• Date and time stamps.
• Other diagnostic and usage data collected via Google Analytics.

Communications Data

• Content of emails, contact form submissions, support messages, and other communications you send to us.
• Associated metadata (timestamps, sender information).

Affiliate & Referral Data

• Referral URLs and campaign parameters.
• Performance metrics such as clicks and conversions.
• Marketing channel attribution data.

Note: We do not collect or process payment details, transaction amounts, or financial account information.

Derived & Inferred Data

• Non-sensitive preferences or interest profiles inferred from your usage patterns.
• Content recommendations based on browsing behavior.
• Analytics-derived insights for Website improvement.

What We Do NOT Collect

• Sensitive / Special Category Data: We do not intentionally collect sensitive or special categories of Personal Data, including data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sex life or sexual orientation.
• Payment & Financial Data: We do not collect, store, or process payment card details, bank account information, or transaction-level financial data.
• Voluntary Submission: If you voluntarily submit sensitive data in free-text fields (such as contact forms or emails), we will handle such information with heightened care and may delete or limit its processing unless a lawful basis exists under Applicable Law.

4. Legal Bases & Purposes of Processing

We process your Personal Data based on the following lawful grounds under GDPR, UK GDPR, and equivalent concepts under other Applicable Laws:

Legal Bases

• Consent: Where you have given clear consent for us to process your Personal Data for specific purposes, such as receiving marketing emails or non-essential tracking where required by law.
• Contractual Necessity: Where processing is necessary to provide the Services you have requested, operate any user accounts, and fulfill our contractual obligations.
• Legitimate Interests: Where processing is necessary for our legitimate business interests (or those of a third party) and your interests and fundamental rights do not override those interests. This includes basic analytics (in jurisdictions not requiring consent), security and fraud prevention, improvement of the Website, enforcement of terms, and handling support queries.
• Legal Obligation: Where processing is necessary to comply with legal obligations, such as responding to lawful requests from authorities or maintaining records as required by law.

Purposes of Processing

• To operate, maintain, and improve the Website and Services.
• To create and manage user accounts (if applicable).
• To communicate with you regarding the Services, respond to inquiries, and provide customer support.
• To send marketing communications where permitted by law and with appropriate consent or opt-out mechanisms.
• To perform analytics and measure Website performance via Google Analytics.
• To maintain security, detect and prevent fraud, abuse, and unauthorized access.
• To enforce our terms of service and other legal rights.
• To comply with legal obligations and respond to lawful requests from authorities.
• To protect the rights, property, and safety of inGamble LLC, our Users, and the public.

5. Third-Party Disclosure

We may share your Personal Data with the following categories of recipients:

Service Providers & Processors

• Hosting and infrastructure providers: Cloud hosting services, content delivery networks (CDNs), and server management providers.
• Email and communication services: Providers that facilitate email delivery, contact form management, and customer support communications.
• Analytics providers: Google Analytics, which helps us understand how Users interact with the Website and improve our Services.

Professional Advisers

Lawyers, accountants, auditors, and other professional advisers who assist us in operating our business and complying with legal obligations.

Legal & Regulatory Authorities

Government authorities, courts, law enforcement agencies, and regulators when required by law or necessary to protect our legal rights.

Business Transfers

Potential acquirers, investors, or other parties involved in mergers, acquisitions, asset sales, or similar corporate transactions, subject to appropriate confidentiality obligations.

Explicit Exclusions

• No advertising networks or data brokers: We do not share your Personal Data with advertising networks, data brokers, or retargeting providers.
• No sale of Personal Data: We do not "sell" Personal Data in the ordinary commercial sense.
• CCPA/CPRA considerations: If Applicable Law (such as the CCPA/CPRA) treats certain analytics or data sharing as "selling" or "sharing" for cross-context behavioral advertising, you have the right to opt out. You may exercise this right through available mechanisms on the Website or by contacting us at [email protected].

All third-party processors are contractually obligated to implement appropriate technical and organizational measures to protect your Personal Data and process it only in accordance with our instructions and Applicable Law.

6. International Data Transfers

Your Personal Data may be transferred to, processed, and stored in countries other than your country of residence, including but not limited to the European Economic Area (EEA), United Kingdom, United States, and other jurisdictions where our hosting providers, service providers (including Google Analytics), and business partners operate.

Data Protection Safeguards

When we transfer Personal Data from the EEA or UK to countries that do not provide an "adequate" level of data protection as determined by the European Commission or UK authorities, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission.
• UK International Data Transfer Agreement (UK IDTA) or UK Addendum to Standard Contractual Clauses.
• Other transfer mechanisms permitted under Applicable Law.

No Financial Transfers

Because we do not process payment or transaction data, there are no international money transfers associated with our Services.

Additional Information

If you would like more information about the safeguards we use for international data transfers, please contact us at [email protected].

7. Data Retention

We retain your Personal Data only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention Periods

The following retention periods serve as concrete examples and best-practice baselines:

• Account data: Retained for the life of your account plus 3 years after account closure or last activity.
• Contact and communications data: Retained for 3 years after the last meaningful interaction.
• Marketing data: Retained until consent is withdrawn, plus up to 2 years from the last interaction to honor opt-out requests and maintain suppression lists.
• Technical and usage data (including Google Analytics): Retained in identifiable form for 14 months, after which it is aggregated or anonymized.
• Security logs: Retained for 6 to 24 months, depending on security and operational needs.

Deletion & Anonymization

When Personal Data is no longer needed for the purposes for which it was collected, we will delete it or irreversibly anonymize it, unless we are required to retain it for legal, regulatory, or legitimate business purposes (such as litigation holds, audits, or compliance obligations).

If you request deletion of your Personal Data, we will comply with your request in accordance with Applicable Law, subject to any legal obligations to retain certain information.

8. Your Rights

Depending on your location and Applicable Law, you may have certain rights regarding your Personal Data. We are committed to facilitating the exercise of these rights.

Core Rights Under Applicable Law

You may have the following rights:

• Right of access: Obtain confirmation of whether we process your Personal Data and request a copy of that data.
• Right to rectification / correction: Request correction of inaccurate or incomplete Personal Data.
• Right to erasure / deletion: Request deletion of your Personal Data under certain circumstances.
• Right to restriction of processing: Request that we limit how we process your Personal Data in certain situations.
• Right to object: Object to our processing of your Personal Data based on legitimate interests or for direct marketing purposes.
• Right to data portability: Receive your Personal Data in a structured, commonly used, and machine-readable format and transmit it to another controller.
• Right to withdraw consent: Withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
• Right to complain: Lodge a complaint with a supervisory authority or data protection authority.

Jurisdiction-Specific Rights

EEA & United Kingdom (GDPR / UK GDPR)

If you are located in the EEA or UK, you have all the rights listed above under the GDPR or UK GDPR. You also have the right to lodge a complaint with your local supervisory authority if you believe our processing of your Personal Data violates applicable data protection law.

California (CCPA / CPRA)

If you are a California resident, you have the following rights under the CCPA and CPRA:

• Right to know: Request disclosure of the categories and specific pieces of Personal Information we have collected about you, the categories of sources, the business or commercial purposes for collection, and the categories of third parties with whom we share Personal Information.
• Right to delete: Request deletion of your Personal Information, subject to certain exceptions.
• Right to correct: Request correction of inaccurate Personal Information.
• Right to opt out: Opt out of the "sale" or "sharing" of Personal Information (if applicable under the CCPA/CPRA's definitions).
• Right to limit use of sensitive Personal Information: Request that we limit the use and disclosure of sensitive Personal Information (if applicable).
• Right to non-discrimination: Exercise your privacy rights without receiving discriminatory treatment.

Other Regions

If you are located in other jurisdictions (such as Canada, Australia, Brazil, or Nevada), you may have additional rights under local privacy laws. Please contact us at [email protected] for information about your specific rights.

How to Exercise Your Rights

To exercise any of the rights described above, please submit a request by:

• Email: [email protected]
• Web form: If available on the Website.

We may need to verify your identity before processing your request to protect your Personal Data from unauthorized access. Verification may involve requesting additional information or documentation.

We will respond to your request within the timeframes required by Applicable Law, typically within 30 to 45 days, with extensions where permitted by law. If we cannot fulfill your request, we will explain why.

9. Security

We implement and maintain appropriate technical and organizational measures designed to protect your Personal Data against unauthorized or unlawful processing, accidental loss, destruction, damage, alteration, or disclosure.

Security Measures

Our security measures include, but are not limited to:

• Encryption: Encryption of data in transit using industry-standard protocols (such as TLS/SSL).
• Access controls: Role-based access controls and authentication mechanisms to limit access to Personal Data to authorized personnel only.
• Logging and monitoring: Security logging, monitoring, and incident detection systems to identify and respond to potential threats.
• Staff training: Confidentiality obligations and data protection training for employees and contractors.
• Vendor due diligence: Assessment and ongoing monitoring of third-party service providers to ensure they meet our security and privacy standards.
• Regular reviews: Periodic security assessments, audits, and updates to our security practices.

Limitations

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your Personal Data using commercially reasonable means, we cannot guarantee absolute security. We encourage you to take reasonable precautions, such as using strong passwords and keeping your login credentials confidential.

Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected Users and, where required by Applicable Law, notify the relevant supervisory authorities within the timeframes prescribed by law.

10. Children's Privacy

The Website is not directed to, and we do not knowingly collect Personal Data from, children. The definition of "child" depends on the Applicable Law in your jurisdiction (for example, individuals under 13 in the United States, under 16 in the EEA, or other ages elsewhere).

No Intentional Collection

We do not knowingly collect Personal Data from children without proper parental or guardian consent as required by Applicable Law. If we learn that we have collected Personal Data from a child without appropriate consent, we will take steps to delete or anonymize that information as quickly as possible.

Parental or Guardian Notice

If you are a parent or legal guardian and believe that your child has provided us with Personal Data without your consent, please contact us immediately at [email protected] so we can take appropriate action.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons.

Notice of Changes

When we make changes to this Privacy Policy, we will update the "Last Updated" date at the top of this page. Material changes may be communicated through prominent notice on the Website, email notification (for registered Users), or other appropriate means.

Acceptance of Changes

Your continued use of the Website after changes to this Privacy Policy become effective constitutes your acceptance of the revised policy, subject to any requirements under Applicable Law. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your Personal Data.

12. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy, our privacy practices, or how we handle your Personal Data, please contact us at:

Email: [email protected]

We are committed to resolving complaints and concerns in a timely and transparent manner. We will investigate your complaint and respond within a reasonable timeframe in accordance with Applicable Law.

Supervisory Authority Complaints

If you are not satisfied with our response or believe that we are processing your Personal Data in violation of Applicable Law, you have the right to lodge a complaint with your local data protection authority or supervisory authority. You do not need to contact us before lodging a complaint with a supervisory authority, although we welcome the opportunity to address your concerns directly.

For EEA residents, you can find your local supervisory authority through the European Data Protection Board website. For UK residents, you can contact the Information Commissioner's Office (ICO). For other jurisdictions, please consult your local data protection authority's website for contact information.