Privacy policy

Last updated: 1 May 2026

This policy explains what personal data we collect on wingrabs, why we process it, the legal basis for doing so, and the rights you have under the GDPR (Regulation (EU) 2016/679).

1. Data controller

The data controller is the wingrabs editorial team. For any matter related to the processing of personal data, contact us at privacy@wingrabs.com.

2. What data we collect

We collect two categories of data:

  • Technical data collected automatically: IP address, browser type, operating system, country/region, pages visited, referrer.
  • Data you provide voluntarily: email address and message content when you use the contact form, or content of a complaint when you report an issue with a casino.

3. Purposes and legal basis

Technical data is processed to measure traffic, optimise the site and detect abuse — based on our legitimate interest (Art. 6(1)(f) GDPR).

Form data is processed solely to respond to your request — based on consent (Art. 6(1)(a) GDPR), which you give by sending the message. We do not use it for marketing.

4. Cookies

We use cookies only for session handling and aggregated traffic measurement. We do not use marketing cookies or advertising profiling. You can disable analytics cookies in your browser settings — the site will continue to function normally.

5. Your rights

Under the GDPR you have the following rights, exercisable by writing to privacy@wingrabs.com:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure — "right to be forgotten" (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to lodge a complaint with the supervisory authority in your country.

6. Retention period

We retain technical data for a maximum of 26 months. Email correspondence is kept no longer than 12 months from the last exchange — unless longer retention is required by law or to establish or defend a legal claim.

7. Recipients of data

We may share data with processors providing infrastructure services (hosting, CDN, analytics). All processors are bound by confidentiality and process data in compliance with the GDPR. We do not sell personal data to third parties.