The short version
- We have no user accounts, comments or newsletter.
- We use no analytics, no advertising and no tracking pixels, and we set no cookies of our own.
- Our server keeps basic access logs for security and fixing errors. They are deleted after 14 days.
- If you email us, we keep the message for as long as we need to deal with it, and delete it within 12 months of our last reply.
- Cloudflare sits in front of the site to deliver pages and block attacks, so it processes your IP address.
- When you click through to a casino, that casino or its affiliate network collects data under its own privacy policy, not ours.
The rest of this page gives the detail.
Who we are
The data controller for this website is TallyBet, the operator of tallybet.co.uk. TallyBet is a casino review and comparison site. We are not a gambling operator, we take no bets and we hold no player money.
You can reach us about anything in this policy at [email protected]. Please use the subject line “Privacy request” so your message reaches the right place quickly. We handle all requests by email and aim to reply within 5 working days.
This notice is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What personal data we collect
We only collect personal data in two ways.
Server access logs
Like almost every website, our web server records each request it receives. A log entry contains:
- your IP address
- the date and time of the request
- the page you asked for
- the page you came from (the referring page), if your browser sends it
- your browser’s user agent, which describes the browser and operating system
We use these logs only to keep the site secure and to find and fix errors. Logs rotate daily and are deleted after 14 days. We do not use them to build profiles, and we do not combine them with any other data.
Emails you send us
Our contact form at /contact/ does not send anything to our server. It opens your own email app with your message filled in, and you choose whether to send it. We receive only what you email us: normally your email address, your name if you include it, and whatever you write.
We use that information to read and answer your message, for example to correct an error, deal with a complaint or reply to a partnership enquiry.
What we do not collect
We do not run user accounts, comments or a newsletter. We do not use analytics tools, advertising networks, tracking pixels or local storage. Our fonts are hosted on our own server, so loading a page does not send your data to a font provider.
Purposes, lawful bases and retention
| Data | Purpose | Lawful basis (UK GDPR) | Retention |
|---|---|---|---|
| Server access logs (IP address, date and time, page, referrer, user agent) | Keeping the site secure and fixing errors | Legitimate interests | Rotated daily, deleted after 14 days |
| Request data processed by Cloudflare | Delivering pages and blocking attacks | Legitimate interests | Under Cloudflare’s own retention terms |
| Emails and contact form messages | Reading and replying to your message | Legitimate interests, or steps taken at your request | As long as needed, deleted within 12 months of our last reply |
Where we rely on legitimate interests, our interest is running a secure, working website and answering the people who write to us. We think this has a minimal effect on your privacy, because the data is limited and kept for a short time.
Who we share data with
We do not sell personal data, and we do not share it with casinos or advertisers. A small number of service providers process data on our behalf so the site can work:
- Cloudflare, Inc. (USA). Cloudflare acts as our content delivery network and security proxy. Every visit passes through it, so it processes your IP address and request data to deliver pages and block automated attacks.
- Our hosting provider. The site runs on a virtual server in Germany, inside the EU. The server logs described above are stored there.
- Our email provider. Messages you send to [email protected] are stored by the provider that hosts our mailbox.
We may also disclose data if the law requires it, for example in response to a valid request from a court or regulator.
Casino links and affiliate redirects
TallyBet earns commission when a visitor signs up at a casino, and usually deposits, through one of our links. Not every casino we review has an agreement with us.
Links covered by an agreement go through a redirect page at /go/<casino>/. That page forwards you to the casino’s tracking link, which carries the sub-ID “tallybet” so the casino knows the visit came from us. The redirect itself does not set a cookie or record anything beyond the normal server log entry.
Once you reach the casino, the casino or its affiliate network may set its own tracking cookies and collect data, including anything you enter when you register. That happens under their privacy policy, not ours, so please read it before you sign up.
The reports we receive from casinos and affiliate networks contain counts only, such as the number of registrations, depositing players and commission earned. They do not include names or contact details, so we cannot identify you from them.
International transfers
Our hosting provider stores data in Germany, which the UK recognises as giving adequate protection.
Cloudflare is based in the USA and may process data there. Where this happens, the transfer is covered by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses and, where applicable, the UK-US data bridge.
Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you
- rectification of data that is wrong or incomplete
- erasure of your data in certain circumstances
- restriction of how we use your data
- object to processing based on legitimate interests
- portability, meaning a copy of data you gave us in a common format
To use any of these rights, email [email protected] with the subject line “Privacy request”. Tell us what you want and give enough detail for us to find the data, for example the email address you wrote from or the date and approximate time of your visit. We may ask for more information to confirm the request comes from you. There is normally no charge.
Because server logs are deleted after 14 days and we hold no accounts, we may simply have no data about you. If so, we will tell you.
Complaining to the ICO
If you are unhappy with how we have handled your data, please tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, at any time:
- Website: ico.org.uk
- Helpline: 0303 123 1113
Children
This site is for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has sent us personal data, email us and we will delete it.
Security
We keep the amount of data we hold small, which is itself a strong protection. Cloudflare filters out automated attacks before they reach our server, server logs are deleted after 14 days, and emails are deleted within 12 months of our last reply. No system is completely secure, so we keep only what we need.
Changes to this policy
We will update this page if the way we handle data changes, for example if we add a new service provider. If a change is significant, we will make that clear at the top of the page.
If you have a question about anything here, email [email protected].