Privacy: what a visit here leaves behind, and for how long

01

The publisher, and the one address that reaches it

The Bonus Press publishes this site and decides what happens to the information described below, which makes it the controller for data protection purposes. It can be reached at post@bingonodepositbonus.uk, and that address is also where a request about personal data should go.

Nothing here is built to identify a reader. No account exists to register, no newsletter is run, there is no comment box and no form of any kind is published. A person who writes an email supplies their address and whatever they put in the message, and that is the whole of it. Nothing further is asked for, and a reply needs nothing further.

02

What asking for a page leaves in a log

Every web server records the requests made to it, and this one is no exception. A request leaves the network address it came from, the moment it arrived, the page asked for, the browser string the software sent, and the page the reader came from if the browser passed one.

Those lines exist for two reasons and no others. They show whether the site is working, and they show when something is attacking it. A log line is not matched against a name, is not combined with anything else and is not used to build a picture of a person. The lawful basis is legitimate interests: keeping a published site available and defended is a plain interest, and reading a server log is the ordinary way to do it.

03

Counting readers, and what the counting avoids

Visits are counted so that a page nobody reads can be rewritten or removed. The count records which pages were opened, roughly where in the world the request came from, and whether a phone or a desktop machine asked for it.

Three things the counting does not do. It does not follow a reader from this site to another one. It does not match a visit to an identity. It does not feed an advertising profile anywhere, because no advertising network is loaded on these pages at all. Where counting needs anything stored on a reader’s own device it runs on consent, and consent is covered on cookies.

04

What goes along when a reader follows a ranking link

A link in the ranking carries a reference identifying this site as the source of the visit. That reference is how a fee is attributed when somebody registers at the far end, and it is the mechanism the whole site is funded by. It is described in full on how we are paid.

What the reference carries is this site’s identity, not the reader’s. No name, no email address and no browsing history crosses with it, because none of those exist here to send. What happens after the click is governed by the operator’s own privacy notice rather than by this one, and an operator licensed in Britain carries its own duties here. Permission for direct electronic marketing must be specific and informed before anything is sent, must be capable of being taken back, and must be evidenced by the licensee. Since 1 May 2025 it also has to be offered one product type and one channel at a time.

05

No marketing is sent, and the rules are why

This publication sends no marketing email, runs no mailing list and passes nobody’s details to an operator. That is a decision rather than an oversight, and the rules it avoids are worth setting out, because they are the rules a reader should expect of anybody who does collect an address.

• A pre-ticked box is not consent. Neither is silence, and neither is a person simply not objecting.
• Consent has to be separated out. It cannot be bundled with something else, and a choice has to be offered by channel instead of all or nothing.
• Third parties have to be named. Where details would be passed on for marketing, that permission has to be asked for on its own and the recipients identified in enough detail for a real choice.
• A group cannot share consent between its brands. A business running several has to know which one obtained the permission.

06

How long each record stays

Nothing is kept because it might be useful one day. Each record has a period attached and is deleted at the end of it.

A request to delete something sooner is dealt with on its own terms, and the next part says what such a request can ask for.

07

Your rights, and what each one actually produces

The rights below apply to the little this site holds. Each is answered within one month, and the answer is free.

• A copy. Ask what is held and a copy comes back. In most cases that is an email thread and nothing else.
• A correction. Anything recorded wrongly is put right.
• Deletion. Correspondence is deleted on request unless there is a reason in law to keep it, and that reason would be given.
• An objection. Processing that rests on legitimate interests can be objected to, and it stops unless the grounds for it outweigh the objection.
• Withdrawal of consent. Anything running on consent can be switched off, with no effect on what was lawful before the switch.
• A complaint. The Information Commissioner’s Office takes complaints about any of this, and going there first is allowed.

Who else sees any of it is a short list. A hosting provider processes what is necessary to serve the pages, under contract. Nobody else receives anything, nothing is sold, and no record leaves the United Kingdom except where a supplier’s own infrastructure requires it under a transfer mechanism recognised in British law.

08

Adults only, and that is not a formality here

This site is published for adults and is not directed at children. Where a reader goes next, the age rule is enforced by law rather than by a notice: an operator has to establish who a customer is before letting them gamble at all, taking as a minimum the name, the address and the birth date. That duty dates from 7 May 2019. It reaches past money, too: the check comes before a bonus or a free bet is played, and before a reader is let near a version of a gambling game that costs nothing to play.

Any change to this notice is published on this page with the printed date at the head of it moved on. Older versions are not kept online, so the page as it stands is the notice that applies.