Privacy & cookie policy
Last updated: 11 June 2026
Who we are
Check.casino (check.casino) is an independent review site for licensed online casinos, operated by Red Sea Media Ltd, Palazzo Villa Rosa, Triq in-Nemes, Swieqi SWQ 3302, Malta (Co. No. C-94440, VAT MT 2688-1535) — the data controller for this site. For anything in this policy, contact us via the contact form.
What we collect — and when
- Browsing: nothing personal by default. Our hosting and CDN keep short-lived technical server logs (IP address, user agent) for security and abuse prevention.
- Account (optional): email address, display name and a securely hashed password — only if you register to write reviews.
- Reviews: the review text and rating you choose to publish, shown with your display name.
- Reviewer verification (optional): if you choose to verify as a real player, the proof document you upload is stored for that check.
- Contact form: your name, email and message, used only to reply.
- AI advisor:the questions you type are processed by Anthropic (the Claude API) to generate the answer. We do not use them to build profiles, and API inputs are not used to train Anthropic's models.
Cookies
We set as few cookies as we can get away with:
| Cookie | Type | Purpose |
|---|---|---|
| payload-token | Strictly necessary | Keeps you signed in to your account. Only set when you log in. |
| cc_consent | Strictly necessary | Remembers your cookie choice for 12 months, so we don't keep asking. |
| _ga, _ga_* | Analytics — consent only | Google Analytics, used to understand which pages help readers. Not loaded at all unless you click Accept on the cookie banner. Declining loads nothing. |
| __cf_bm & similar | Strictly necessary | Set by Cloudflare, our CDN, for bot and abuse protection. |
Changed your mind? Delete the cc_consent cookie for check.casino in your browser and the banner will ask again on your next visit.
Who processes data for us
We don't sell personal data, run advertising trackers, or share data with the casinos we review. The services that process data on our behalf: Render (hosting), Neon (database), Cloudflare (CDN & security), Google Analytics (only after consent) and Anthropic (AI advisor answers).
Your rights
Under UK GDPR you can request access, correction, deletion, restriction or portability of your data, and object to processing. Account holders can delete their account themselves at any time from the Privacy tab in your account — published reviews are anonymised, personal data is removed. For anything else, use the contact form. You can also complain to the ICO (ico.org.uk).
Retention
Account data is kept while the account exists. Verification uploads are kept only as long as needed for the check. Contact messages are kept while the conversation is live. Technical logs rotate on short cycles set by our hosting providers.