Privacy Policy

In short: this privacy policy covers ignicasino.co, a review site with no accounts and no cashier. We never see a name, a document or a card number — the only data here is anonymous traffic measurement.

Whose data this policy covers

Two different companies handle data when you read a review and then click through to play. This document covers only the first one: the pages you are reading now. The operator runs its own registration, its own cashier and its own privacy policy, and any request about an account, a verification document or a transaction has to go to the operator, not to us. We are a review desk and hold none of it.

Personal data collected on this site

Personal data means anything that could identify a person. On ignicasino.co the collection is deliberately thin: device type, browser version, a truncated IP address, the pages opened, how long a session lasted and the referring source. There is no login, no newsletter form, no comment box and no payment field, so no name, address, date of birth or financial detail is ever entered here in the first place.

Data usage: what it is for

The data usage is measurement and nothing more — which guides get read, where readers drop off, whether a page loads properly on a Finnish mobile network. It informs which pages get rewritten next. It is never sold, rented or traded, it is not passed to advertising networks or data brokers, and it is not used to build a profile of an individual reader.

GDPR legal basis

Finland is inside the EU, so the General Data Protection Regulation applies here in full. Two GDPR bases are used. Strictly necessary cookies and basic server logs rest on legitimate interest — a site cannot be delivered or kept secure without them. Analytics and any non-essential cookie rest on consent, which is asked for in the banner and can be withdrawn at any time in your browser settings without losing access to a single page of this site.

Cookie policy

The cookie policy in one paragraph: essential cookies keep the interface working and remember your consent choice; analytics cookies count visits in aggregate; no advertising or retargeting cookies are set by us. A partner click stores an attribution parameter on the operator side so the referral can be credited — that is how the site is funded, as described in the affiliate disclosure. Clearing cookies in your browser removes all of them, and blocking them costs you no functionality here.

Retention

Aggregated analytics are kept for a maximum of 14 months and then roll off. Raw server logs are discarded much sooner, within weeks, since their only job is diagnostics and abuse prevention. Nothing is archived indefinitely on the theory that it might be useful later.

Third parties

Three categories of processor touch this site: an analytics provider, a hosting and CDN provider that serves the pages, and the affiliate tracking system that records a referral click. Each receives the minimum needed to do its job, each is bound by a data processing agreement, and transfers outside the EEA rely on the standard contractual clauses. No fourth category exists.

Your rights under GDPR

• Access — ask what is held about you.
• Rectification — have inaccurate data corrected.
• Erasure — the right to be forgotten.
• Restriction and objection — including objecting to analytics processing.
• Portability — receive your data in a machine-readable form.
• Complaint — take the matter to the Finnish data protection authority.

Requests reach us through the support page and are answered inside the one-month GDPR window. For anything held by the operator instead — KYC scans, transaction history, account records — send the same request to the operator support desk, because we cannot forward it for you.

Security: encryption, SSL and 2FA

SSL encryption on the connection

Every page here is served over HTTPS with SSL and TLS encryption, so a reader on café or airport Wi-Fi is not broadcasting the pages they open. The same test applies to the operator: before a single field of the cashier is filled in, check the padlock in the address bar. An encrypted connection is the floor, not the ceiling — encryption protects data in transit and says nothing about who is on the other end.

Two-factor authentication on your own casino account

If the operator offers 2FA in the account settings, switch it on the day you register. With two-factor authentication enabled, a stolen or reused password is no longer enough to reach a balance, because the second factor lives on your phone. Pair it with a password used nowhere else and avoid logging in on a shared machine.

Is it safe — and what a secure casino actually means

Readers ask is it safe, and the honest version is that a secure casino is defined by verifiable things rather than by badges: a named regulator and licence number in the operator footer that you can look up in the public register, SSL encryption on every page of the cashier, a published data protection policy that lists what is stored and for how long, and working responsible gambling limits. Data protection on the operator side covers identity documents for verification, transaction history that financial regulation requires it to keep, and login records. Get those four right and a session is safe and secure in the only sense that matters; skip the licence check and no amount of encryption compensates.

Changes to this policy

This policy is revised when the tooling behind the site changes. Material changes are flagged on the page and the revision date updated. Continued use after publication counts as acceptance; if you disagree, stop using the site and send an erasure request.

What this means in practice

Reading ignicasino.co leaves an anonymous line in an analytics table and nothing else. The moment you register with an operator, a different and much larger privacy relationship begins — read that policy too. The terms governing this site are on the terms of use page, and the tested facts start on the Igni Casino homepage.