Privacy Policy

Version: 1.0  |  Last Updated: 29 October 2026

This Privacy Policy applies to Best Online Casinos in Ireland, operated via the website insidecraft.ie (referred to herein as "we", "us", or "our"). It describes how we collect, use, store, share, and protect personal data belonging to visitors and users of our website (referred to as "you" or "your"). Please read this document carefully alongside our Terms & Conditions and Responsible Gaming policy, which together govern your relationship with this website.

By accessing or using insidecraft.ie, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, you should discontinue use of the website immediately.

1. Introduction

insidecraft.ie is an independent informational and comparison website focused on online casino content for users located in Ireland. We are committed to protecting your privacy and handling your personal data with transparency, integrity, and full compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Irish Data Protection Act 2018.

As a data controller, we determine the purposes and means by which personal data is processed on this website. We do not operate an online casino, accept wagers, or process financial transactions on behalf of any gambling operator. Our role is limited to providing information, reviews, comparisons, and responsible gaming guidance to users who are 18 years of age or older and who reside in Ireland.

This policy covers all personal data collected through your use of insidecraft.ie, including data gathered via contact forms, cookies, analytics tools, and any communication you initiate with us.

2. Data We Collect

We collect personal data through several different channels and mechanisms. The categories below outline what types of information we may collect, the specific data points within each category, and the circumstances under which collection occurs.

2.1 Data You Provide Directly

When you voluntarily contact us — for example, by submitting an enquiry form, subscribing to a newsletter, or sending an email — we may collect:

• Full name — to address you appropriately in correspondence.
• Email address — to respond to your enquiry or deliver requested communications.
• Message content — the substance of any query or feedback you submit.
• Subscription preferences — if you opt in to marketing emails or content alerts.

You are never obliged to provide this information; however, failure to do so may prevent us from responding to your request effectively.

2.2 Data Collected Automatically

When you visit insidecraft.ie, certain technical data is collected automatically by our servers and third-party analytics services:

• IP address — used for security monitoring and approximate geographic location.
• Browser type and version — for compatibility and optimisation purposes.
• Operating system — to understand device usage trends.
• Pages visited and time spent — to analyse content performance and user journeys.
• Referral URLs — to understand how users arrive at our website.
• Device identifiers and screen resolution — for responsive design improvement.
• Click-through data on outbound links — including links to third-party casino operators.

2.3 Data Collected via Cookies and Tracking Technologies

We use cookies and similar technologies (described in detail in Section 6) to collect preference data, session information, and aggregated behavioural analytics. Cookie-derived data may include page interaction patterns, session duration, and returning visitor status. No personally identifiable information is extracted from cookies alone without your active provision of it.

2.4 Data from Third Parties

We may receive limited data from third-party services we integrate, such as analytics platforms (e.g., Google Analytics) and affiliate network providers. This data is typically aggregated or pseudonymised and is used solely for performance measurement and content improvement. We do not purchase personal data from data brokers.

3. How We Use Your Data

We process your personal data only for clearly defined, legitimate purposes. We do not use your data in any manner that is incompatible with the purposes stated at the time of collection. The primary uses of your data are as follows:

3.1 Providing and Improving Our Services

• To operate and maintain the insidecraft.ie website in a functional and user-friendly manner.
• To respond to your enquiries, feedback, or support requests promptly and accurately.
• To analyse website traffic patterns and improve the structure, content, and usability of our pages.
• To identify and fix technical errors, security vulnerabilities, or performance issues.

3.2 Communications and Marketing

• To send newsletters, content updates, or promotional communications — but only where you have given explicit prior consent.
• To personalise the content or recommendations displayed to you based on your browsing behaviour on our site.
• To contact you regarding changes to this Privacy Policy, our Terms & Conditions, or our Responsible Gaming policy.

3.3 Legal Compliance and Security

• To detect and prevent fraud, abuse, or any other harmful activity directed at our website or its users.
• To comply with applicable legal obligations under Irish and EU law, including responding to lawful requests from public authorities.
• To enforce our Terms & Conditions and assert or defend legal claims where necessary.

3.4 Affiliate and Partner Tracking

As a comparison and review website, insidecraft.ie participates in affiliate programmes with online casino operators. When you click on a tracked outbound link to a third-party operator, we may record that click for commission-reporting purposes. We do not receive or store any personal data you subsequently provide to those third-party operators. Please review the privacy policy of any casino you choose to register with directly.

4. Legal Bases for Processing

Under the GDPR, every processing activity must rest on a lawful legal basis. The following table maps our main processing activities to their corresponding legal bases:

Where we rely on legitimate interests as our legal basis, we carry out a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You may request details of any such balancing assessment by contacting us at the address provided in Section 13.

Where we rely on consent, you have the right to withdraw that consent at any time without detriment. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to any third party for commercial purposes. However, in certain limited and clearly defined circumstances, we share data with trusted third parties:

5.1 Service Providers and Data Processors

We engage third-party service providers who process personal data on our behalf, strictly in accordance with our written instructions and under Data Processing Agreements that comply with GDPR Article 28. These include:

• Web hosting and infrastructure providers — to host and deliver the insidecraft.ie website.
• Analytics platforms — such as Google Analytics, to measure audience behaviour in aggregated form.
• Email service providers — to deliver newsletters or transactional email communications to users who have opted in.
• Content delivery networks (CDNs) — to ensure fast and reliable page loading across Ireland and the EU.

5.2 Affiliate Partners and Casino Operators

When you click a referral link to a third-party online casino operator featured on insidecraft.ie, a unique tracking token may be passed to that operator's affiliate system. This token does not contain your name, email address, or any other directly identifying information. The casino operator's own privacy policy governs any data they collect from you upon registration or thereafter. We strongly encourage you to read those policies before creating an account with any operator.

5.3 Legal and Regulatory Disclosures

We may disclose personal data to law enforcement agencies, regulatory bodies, or other public authorities where we are legally required to do so, or where we reasonably believe disclosure is necessary to prevent serious harm, detect crime, or comply with a court order. We will notify you of any such disclosure to the extent permitted by law.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business assets, personal data held by us may be transferred to the successor entity. We will notify affected users prior to any such transfer and ensure that the receiving entity provides equivalent privacy protections.

6. Cookies & Tracking Technologies

insidecraft.ie uses cookies and similar technologies to enhance your browsing experience and gather analytical data. A cookie is a small text file placed on your device by our server when you visit the website. Cookies do not give us access to your device beyond the information they themselves contain.

6.1 Types of Cookies We Use

• Strictly necessary cookies — essential for the website to function correctly, such as session management and security tokens. These cannot be disabled.
• Analytics cookies — used to collect anonymised data about how visitors interact with the site (e.g., pages viewed, time on site). We use Google Analytics for this purpose.
• Preference cookies — used to remember your settings and preferences (e.g., cookie consent status, language settings).
• Marketing and affiliate cookies — used to track referral clicks and affiliate conversions when users navigate to third-party casino operators via links on our site.

6.2 Managing Your Cookie Preferences

Upon your first visit to insidecraft.ie, a cookie consent banner will be displayed. You may accept all cookies, reject non-essential cookies, or customise your preferences. You may also manage or delete cookies at any time through your browser settings. Please note that disabling analytics or preference cookies may affect the functionality or personalisation of certain site features. For guidance on managing cookies in your browser, visit the help section of your browser provider's website.

7. Data Security

We implement a range of appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption — all data transmitted between your browser and our servers is encrypted using industry-standard Transport Layer Security protocols.
• Access controls — personal data is accessible only to authorised personnel who require it for legitimate operational purposes, and all such staff are bound by confidentiality obligations.
• Regular security audits — we conduct periodic reviews of our systems, processes, and third-party processors to identify and address potential vulnerabilities.
• Data minimisation — we collect only the minimum data necessary for each stated purpose and avoid retaining unnecessary personal information.
• Incident response procedures — in the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Irish Data Protection Commission (DPC) within 72 hours of becoming aware of the breach, and will inform affected individuals without undue delay where required by law.

No method of electronic transmission or storage is completely secure. While we strive to apply best-practice safeguards, we cannot guarantee absolute security of data transmitted over the internet. You are encouraged to use strong, unique passwords for any account you create with third-party operators and to keep your devices secure.

8. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. Our general retention approach is as follows:

• Enquiry and contact form data — retained for up to 24 months from the date of your last interaction with us, after which it is securely deleted or anonymised.
• Newsletter subscription data — retained for the duration of your subscription. If you unsubscribe, your email address is removed from our active mailing list within 30 days and permanently deleted within 90 days, unless retention is required for legal purposes.
• Analytics data — aggregated and pseudonymised analytics data may be retained for up to 26 months in line with standard Google Analytics retention settings.
• Legal compliance records — where we are required by law to retain records (e.g., for tax, audit, or regulatory purposes), data will be held for the period required under the applicable legal obligation, typically six years under Irish law.

When data is no longer required, we ensure it is securely deleted, anonymised, or disposed of in a manner that renders re-identification impossible.

9. Your Rights

As a data subject under the GDPR and the Irish Data Protection Act 2018, you hold a comprehensive set of rights with respect to your personal data. We are committed to honouring these rights promptly and without undue delay. In most cases, we will respond to a verified request within 30 calendar days, extendable by a further two months in complex cases (with prior notice to you).

9.1 Right of Access (Article 15)

You have the right to obtain confirmation of whether we hold personal data about you and, if so, to receive a copy of that data along with supplementary information about how it is processed. This is commonly referred to as a Subject Access Request (SAR). We will provide this free of charge, unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

9.2 Right to Rectification (Article 16)

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. Where we have shared the inaccurate data with third parties, we will notify them of the rectification to the extent reasonably practicable.

9.3 Right to Erasure (Article 17)

Also known as the "right to be forgotten", this right allows you to request deletion of your personal data where one of the following conditions applies: the data is no longer necessary for the purpose for which it was collected; you withdraw your consent and no other lawful basis applies; you object to processing and there are no overriding legitimate grounds; or the data has been unlawfully processed. This right is not absolute and may be restricted where processing is necessary for legal claims, compliance with a legal obligation, or public interest purposes.

9.4 Right to Restriction of Processing (Article 18)

You may request that we restrict the processing of your data — meaning we store it but do not actively use it — in certain circumstances, such as while the accuracy of the data is contested or while an objection to processing is being assessed.

9.5 Right to Data Portability (Article 20)

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another controller where technically feasible.

9.6 Right to Object (Article 21)

You have the right to object at any time to the processing of your personal data where that processing is based on our legitimate interests. Upon receiving such an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for legal claims. You may also object to direct marketing processing at any time, without restriction or justification, and we will act on such objections immediately.

9.7 Rights Related to Automated Decision-Making (Article 22)

We do not currently engage in fully automated decision-making or profiling that produces legal or similarly significant effects on individuals. Should this change in the future, we will update this Policy and ensure appropriate safeguards are in place.

9.8 Right to Lodge a Complaint

If you believe we have processed your personal data in violation of the GDPR or applicable Irish law, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC). The DPC can be contacted at:

• Website: dataprotection.ie
• Telephone: +353 57 868 4800
• Address: 21–25 Canal Road, Dublin 6, D06 W8DC, Ireland

We encourage you to contact us directly in the first instance so that we may address your concern promptly before escalation to the supervisory authority.

10. International Data Transfers

insidecraft.ie is directed at users in Ireland and operates primarily within the European Economic Area (EEA). However, some of our third-party service providers — including analytics and hosting platforms — may process personal data in countries outside the EEA, such as the United States. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data at the same level afforded within the EU.

10.1 Transfer Mechanisms

For transfers to countries not recognised by the European Commission as providing an adequate level of data protection, we rely on one or more of the following transfer mechanisms:

• Standard Contractual Clauses (SCCs) — the European Commission-approved contractual clauses that bind the recipient to GDPR-equivalent data protection standards.
• Adequacy decisions — where the European Commission has determined that a non-EEA country offers an adequate level of protection (e.g., the EU–US Data Privacy Framework for qualifying US entities).
• Binding Corporate Rules (BCRs) — where applicable for multinational groups of companies.

You may request details of the specific transfer mechanisms applicable to any given third-party processor by contacting our Privacy team at [email protected].

11. Minors

insidecraft.ie is an adult-only website. All content published on this website — including casino reviews, game guides, bonus comparisons, and responsible gaming information — is intended exclusively for individuals who are 18 years of age or older. This minimum age threshold reflects the legal gambling age in Ireland under the Gaming and Lotteries Acts and is consistent with our Responsible Gaming policy.

We do not knowingly collect, process, or store personal data from individuals under the age of 18. If we become aware that personal data has been submitted by a minor, we will delete that data from our systems immediately and without notice. If you believe that a minor has provided us with personal data, please contact us without delay at [email protected] so that we can take the appropriate remedial action. Parents and guardians are encouraged to use parental control tools and internet filtering software to prevent minors from accessing gambling-related content online.

12. Changes to This Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing activities, or the services we provide. When material changes are made, we will take reasonable steps to notify you — which may include displaying a prominent notice on insidecraft.ie, updating the "Last Updated" date at the top of this document, or, where we hold your email address, sending a direct notification.

We encourage you to review this Privacy Policy periodically to remain informed about how we protect your personal data. The version number and effective date at the top of this page will always indicate the current version. Your continued use of insidecraft.ie after any revised policy has been published constitutes your acknowledgement of the updated terms. If you object to any changes, you should cease using the website and contact us to exercise any applicable data subject rights. Prior versions of this Policy are available on request by contacting [email protected].

13. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we process your personal data, please contact us using the details below. We are committed to responding to all legitimate enquiries in a timely and transparent manner.

13.1 General Support & Privacy Enquiries

• General Support Email: [email protected]
• Privacy & Data Protection Email: [email protected]
• Website: insidecraft.ie

13.2 Data Subject Rights Requests

To exercise any of the rights described in Section 9 (access, rectification, erasure, restriction, portability, or objection), please submit your request in writing to [email protected]. To help us process your request efficiently, please include your full name, a description of your request, and any details that will help us identify the data held about you. We may need to verify your identity before processing your request to prevent unauthorised disclosure.

13.3 Responsible Gaming Support Organisations in Ireland

If you or someone you know is experiencing difficulties related to gambling, the following free and confidential support services are available in Ireland:

• Problem Gambling Ireland (Gambling Care Helpline): 1800 936 725 — free, 24/7 — gamblingcare.ie
• Extern Problem Gambling: Free counselling and support — problemgambling.ie
• Gamblers Anonymous Ireland: Peer-support meetings across Ireland — gamblersanonymous.ie
• MABS (Money Advice & Budgeting Service): 0818 072000 — mabs.ie
• Samaritans Ireland: 116 123 — free, 24/7 — samaritans.org
• Pieta (Crisis Counselling): 1800 247 247 — free, 24/7 — pieta.ie

For additional guidance on staying in control of your gambling, please visit our dedicated Responsible Gaming page.