This notice explains how Basswin Casino — the independent review portal at tomintoulgallery.co.uk — collects, uses and protects your personal information. We are the data controller for any information you provide through this site. This policy applies only to our own portal; it does not cover the operator's own practices, which are governed by their separate privacy terms.
What This Notice Covers
You are reading the privacy notice for tomintoulgallery.co.uk, an independent information site about Basswin. We do not process account registrations, deposits or gameplay data — those activities happen on the operator's own platform and are covered by their privacy policy. Our notice covers only the data we collect when you read our pages, submit a contact form or interact with our own services.
Who Controls Your Data
The data controller for this portal is the editorial team at tomintoulgallery.co.uk. You can reach us at [email protected] with any questions about how we handle your information. We are based in the United Kingdom and process your data in accordance with UK GDPR and the Data Protection Act 2018.
Information We Collect
We collect two kinds of information: data you give us directly, and data we observe as you use the site.
Data You Provide
When you write to us through the contact form, we collect your email address, your message and any other details you choose to include. We need this information to reply to your enquiry and to keep a record of our correspondence. You decide what to share — we ask only for an email address so we can respond.
Data We Observe
Like most websites, we collect technical information automatically when you visit. This includes your IP address, the pages you view, the time and date of your visit, your browser type and operating system, and the site that referred you to us. We use this data to understand how readers navigate our content, to identify technical problems and to improve the layout of our pages. The information is collected through cookies — small text files stored on your device — and is covered in more detail in our cookie policy.
Why We Process Your Information
We process your personal data for three purposes. First, to respond to your enquiries — when you contact us, we use your email address and message to provide the information you asked for. Second, to operate and improve the portal — we analyse usage patterns to see which topics readers find useful and where the site needs work. Third, to comply with legal obligations — we keep records where the law requires it and respond to lawful requests from regulators or law enforcement.
Our Lawful Basis
Under UK GDPR, every use of personal data must have a lawful basis. When you contact us, our basis is legitimate interest — we need your email to reply, and you expect a response when you write in. For technical and usage data, our basis is also legitimate interest — understanding how the site is used helps us serve readers better, and the data we collect is minimal. Where we rely on cookies for analytics or advertising, our basis is consent, which you grant through the cookie banner when you first visit.
Who Else Sees Your Data
We share your information with three categories of third party. Our hosting provider stores the site's files and databases, and therefore has access to any data we collect. Our analytics service — if we use one — processes usage data to generate reports on visitor behaviour. Advertising networks may place cookies to show you relevant ads based on your browsing. We do not sell your information to anyone, and we require every processor we work with to protect your data to the same standard we do.
Transfers Outside the UK
Some of the services we rely on store data on servers outside the United Kingdom. Where a transfer occurs, we ensure the recipient country offers adequate protection under UK law or we put contractual safeguards in place. You have the right to ask for details of any transfers that affect your data.
Your Rights Under UK GDPR
The UK General Data Protection Regulation gives you eight rights over your personal information. You have the right to access the data we hold about you — send a subject access request to [email protected] and we will provide a copy within one month. You have the right to correction — if something we hold is wrong or incomplete, ask us to fix it. You have the right to erasure — you can ask us to delete your information where we no longer need it or where you withdraw consent. You have the right to restrict processing — you can ask us to stop using your data while we resolve a dispute about its accuracy or lawfulness.
You have the right to data portability — where we process your information by automated means based on consent or contract, you can ask for a copy in a structured, commonly used format. You have the right to object — you can object to processing based on legitimate interest or direct marketing at any time, and we must stop unless we can show compelling grounds that override your interest. You have the right to withdraw consent — where processing is based on consent, you can withdraw it, though this does not affect anything we did lawfully before you withdrew. Finally, you have rights around automated decision-making — we do not use your data for automated decisions or profiling, but if we did, you would have the right to human review.
How to Exercise Your Rights
Write to [email protected] with your request. Tell us which right you are exercising and provide enough detail for us to locate your information — your email address is usually sufficient. We will respond within one month. If your request is complex or we receive several at once, we may extend this by two months, but we will let you know within the first month if we need more time. We do not charge a fee unless your request is clearly unfounded or excessive.
Your Right to Complain
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the supervisory authority. In the United Kingdom, this is the Information Commissioner's Office. You can contact them at ico.org.uk or by post at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. You also have the right to bring a claim in the courts if you believe we have breached data protection law and you have suffered damage as a result.
How Long We Keep Your Data
We keep your information only as long as we need it. Contact-form submissions are kept for two years, then deleted unless there is an ongoing enquiry or legal reason to retain them. Technical and usage data collected through cookies is typically kept for thirteen months, then anonymised or discarded. We review our retention periods annually and delete information that has outlived its purpose.
Protecting Children Online
This portal is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and you believe your child has sent us information, contact us at [email protected] and we will delete it immediately. Gambling content is restricted to adults, and we encourage parents to use parental-control software such as Net Nanny or Qustodio to prevent minors from accessing sites like ours.
Changes to This Notice
We may update this privacy notice from time to time to reflect changes in our practices or in the law. When we make significant changes, we will update the date below and, where appropriate, notify you by email or through a notice on the site. We encourage you to review this page periodically so you stay informed about how we protect your information.
Last updated: 6 January 2026
This site is for players aged 18 and over (18+). If gambling ever stops feeling like entertainment, free and confidential help is available at BeGambleAware.org.