Privacy Policy

Version: 1.0  |  Last Updated: 29 October 2026

1. Introduction

Welcome to Best Online Casinos in Ireland, accessible at iwta.ie (hereinafter referred to as "we", "us", "our", or "the Website"). We are committed to protecting your personal data and respecting your privacy in full accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and any applicable Irish data protection legislation, including the Data Protection Act 2018.

This Privacy Policy explains what personal information we collect when you visit or interact with our Website, how we use it, the legal bases on which we process it, how long we retain it, and what rights you hold over your data. It also explains how we use cookies and other tracking technologies, and how we may share your information with third parties.

By using iwta.ie, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming page, which together form the full legal framework governing your use of this Website. If you do not agree with any part of this Policy, please discontinue use of the Website immediately.

2. Data We Collect

We collect personal data only to the extent necessary for the purposes described in this Policy. The categories of data we may collect are set out below.

2.1 Data You Provide Directly

When you interact with us—for example, by submitting a contact form, subscribing to a newsletter, or requesting information—you may voluntarily provide the following:

• Identity data: first name, last name, username or display name.
• Contact data: email address, phone number, and postal address.
• Communication data: the content of messages, enquiries, or feedback you send us.
• Preferences data: your stated interests, preferred casino types, or content preferences submitted through any preference centre or survey.

2.2 Data Collected Automatically

When you visit iwta.ie, our servers and analytics tools automatically collect certain technical information, including:

• Device and browser data: IP address, browser type and version, operating system, screen resolution, and device identifiers.
• Usage data: pages viewed, time spent on each page, links clicked, referring URL, exit pages, and navigation paths.
• Location data: approximate geographic location derived from your IP address (typically to country or city level).
• Cookie and tracker data: data collected via cookies, pixel tags, and similar technologies as described in Section 6 of this Policy.

2.3 Data from Third-Party Sources

We may receive personal data about you from third-party sources, including:

• Affiliate and referral partners: who may share anonymised or aggregated click-through data when you navigate to the Website from their platforms.
• Analytics providers: who may supply enriched behavioural or demographic insights derived from aggregated data sets.
• Advertising networks: which may provide audience segment data in connection with targeted advertising campaigns.

We do not purchase or acquire personal data from data brokers for direct marketing purposes without your explicit consent.

3. How We Use Your Data

We use the personal data we collect for the following purposes. Each purpose is tied to a specific legal basis, which is detailed further in Section 4.

3.1 Operating and Improving the Website

We use technical and usage data to deliver, maintain, and improve our Website's functionality. This includes diagnosing errors, optimising page load performance, ensuring compatibility across devices, and enhancing the user experience. Analysis of aggregated usage patterns helps us understand which content is most valuable to our visitors so we can develop better resources for Irish players seeking information about online casinos.

3.2 Communications and Enquiries

When you contact us via email or a contact form, we use your identity and contact data to respond to your enquiry accurately and promptly. We may retain a record of correspondence to handle any follow-up questions and to maintain service quality standards.

3.3 Marketing and Newsletter Communications

With your explicit consent, we may send you periodic newsletters, promotional content, or updates about new casino reviews, bonus offers, or responsible gaming information relevant to players in Ireland. You may withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us at support@iwta.ie. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

3.4 Analytics and Research

We process usage data to conduct internal analytics and audience research. This helps us understand broad trends in how visitors interact with casino-related content and improves the accuracy and relevance of our reviews, comparisons, and responsible gambling resources.

3.5 Compliance and Legal Obligations

We may process certain data where required to comply with a legal obligation, respond to lawful requests from regulatory authorities or courts, enforce our Terms & Conditions, or protect the rights, property, and safety of our Website, its users, and the public.

4. Legal Bases for Processing

Under the GDPR, we must have a valid legal basis for every processing activity. The following table sets out the primary legal bases we rely upon:

Where we rely on legitimate interests as our legal basis, we have conducted a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You may request further information about this balancing test by contacting our Data Protection contact at privacy@iwta.ie. Where we rely on consent, you have the right to withdraw that consent at any time without penalty.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. However, we may share it with the following categories of third parties under appropriate safeguards:

5.1 Service Providers and Processors

We engage trusted third-party service providers who process data on our behalf under written data processing agreements. These include hosting providers, email delivery platforms, analytics service providers (such as Google Analytics), content delivery networks, and IT maintenance providers. All processors are contractually required to handle your data solely in accordance with our documented instructions and to implement appropriate security measures.

5.2 Affiliate and Advertising Partners

As a casino comparison and review website, we maintain affiliate relationships with licensed online casino operators. When you click an outbound affiliate link and navigate to a third-party casino platform, that operator becomes an independent data controller and their own privacy policy governs any data collected from that point forward. We are not responsible for the data practices of third-party casino websites. We encourage you to review their privacy policies before registering an account or making any payment using methods such as Visa Debit, Mastercard Debit, PayPal, Skrill, Neteller, Trustly, Revolut, Paysafecard, Apple Pay, Google Pay, MuchBetter, or bank transfer.

5.3 Legal and Regulatory Disclosures

We may disclose personal data to competent authorities, law enforcement agencies, or courts where we are legally required to do so, or where such disclosure is necessary to protect our legal rights, prevent fraud, or ensure the safety of users.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of our business, personal data held by us may be transferred to the acquiring entity. We will notify affected users and ensure that equivalent data protection standards are maintained by any successor entity.

6. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate and enhance your experience on iwta.ie. A cookie is a small text file stored on your device when you visit a website.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Website to function correctly. These cannot be disabled without impairing core site functionality.
• Analytical / Performance Cookies: Help us understand how visitors use the Website by collecting anonymised or aggregated information about page visits, session durations, and traffic sources (e.g., Google Analytics).
• Functional Cookies: Remember your preferences and settings to personalise your experience on return visits, such as language or region preferences.
• Targeting / Advertising Cookies: Used to deliver relevant advertising and to track the effectiveness of affiliate campaigns. These may be set by our advertising network partners.

6.2 Managing Your Cookie Preferences

When you first visit the Website, you will be presented with a cookie consent banner that allows you to accept or decline non-essential cookies. You may also manage, update, or withdraw your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the Website. Most browsers allow you to refuse new cookies, delete existing cookies, or receive warnings before a cookie is stored. For further guidance, visit aboutcookies.org.

We comply with the ePrivacy Directive (as transposed into Irish law) and the GDPR in relation to all cookie-based processing.

7. Data Security

We take the security of your personal data seriously and implement a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, disclosure, or destruction.

7.1 Technical Measures

• Encryption of data in transit using TLS (Transport Layer Security) protocols across all pages of the Website.
• Restricted access controls ensuring that only authorised personnel can access personal data systems.
• Regular security patching and vulnerability assessments of our hosting infrastructure.
• Firewall protection and intrusion detection systems deployed at the network level.

7.2 Organisational Measures

• Data minimisation principles applied at every stage of collection and processing.
• Internal privacy training for all staff who handle personal data.
• Documented data processing procedures and a formal incident response plan.
• Contractual data protection obligations imposed on all third-party processors.

Despite our best efforts, no method of electronic transmission or storage is entirely secure. If you believe your data has been compromised or if you discover a security vulnerability on our Website, please contact us immediately at privacy@iwta.ie. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission (DPC) within 72 hours and will communicate with affected individuals as required by GDPR Article 34.

8. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The following general retention principles apply:

• Contact and enquiry data: Retained for up to 24 months from the date of last correspondence, after which it is securely deleted or anonymised.
• Marketing and newsletter subscriber data: Retained for as long as you maintain an active subscription. Upon unsubscribing, your marketing data is removed from active mailing lists within 30 days. A suppression record may be kept to honour your opt-out preference.
• Analytical and usage data: Typically retained in identifiable form for up to 26 months (the default Google Analytics retention window), after which data is aggregated or deleted.
• Legal and compliance records: Retained for the period required under applicable Irish law, which may be up to 7 years in certain cases involving financial or regulatory obligations.

Upon expiry of the applicable retention period, personal data is securely destroyed or anonymised so that it can no longer be attributed to an identified or identifiable individual.

9. Your Rights

As a data subject located in Ireland or the European Economic Area, you have significant rights under the GDPR. We are committed to upholding these rights and to responding to all valid requests within one calendar month of receipt, extendable by a further two months where requests are complex or numerous (with prior notice to you).

9.1 Right of Access (Article 15)

You have the right to request a copy of the personal data we hold about you, along with supplementary information about how it is processed. This is commonly referred to as a Subject Access Request (SAR). We will provide this information free of charge unless requests are manifestly unfounded, excessive, or repetitive.

9.2 Right to Rectification (Article 16)

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay. Please include as much detail as possible so we can process your request efficiently.

9.3 Right to Erasure (Article 17)

Also known as the "right to be forgotten", this right allows you to request the deletion of your personal data where: it is no longer necessary for the purposes for which it was collected; you withdraw consent on which processing was based; you object to processing and there are no overriding legitimate grounds; or the data has been unlawfully processed. Certain exemptions apply, including where retention is required by law.

9.4 Right to Restriction of Processing (Article 18)

You may request that we restrict processing of your data in circumstances where: you contest the accuracy of the data; the processing is unlawful but you prefer restriction over erasure; we no longer need the data but you require it for the establishment, exercise, or defence of legal claims; or you have objected to processing pending verification of whether our legitimate grounds override yours.

9.5 Right to Data Portability (Article 20)

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.

9.6 Right to Object (Article 21)

You have the right to object at any time to processing of your personal data that is based on our legitimate interests, including profiling based on those interests. You also have an unconditional right to object to processing for direct marketing purposes. Upon receipt of such an objection, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your rights.

9.7 Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal or similarly significant effects concerning you. We do not currently engage in fully automated decision-making with such effects, but if this changes, we will update this Policy and implement the required safeguards.

9.8 Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Data Protection Commission (DPC), the supervisory authority for Ireland:

• Website: www.dataprotection.ie
• Phone: +353 (0)761 104 800
• Address: 21–25 Canal Road, Dublin, D06 W4E3, Ireland

We would, however, appreciate the opportunity to address your concerns directly before you contact the DPC. Please reach out to us at privacy@iwta.ie in the first instance.

9.9 Exercising Your Rights

To exercise any of the rights listed above, please submit a written request to privacy@iwta.ie. We may ask you to verify your identity before processing your request. There is no fee for exercising your rights in ordinary circumstances. We will respond within one month and will clearly explain our decision and any steps taken in response to your request.

10. International Data Transfers

As we use third-party service providers who may be based outside the European Economic Area (EEA), your personal data may in some circumstances be transferred to, stored in, or processed in countries that do not offer the same level of data protection as Ireland and the EEA.

10.1 Safeguards for Transfers

Whenever we transfer personal data outside the EEA, we ensure that at least one of the following appropriate safeguards is in place:

• The recipient country has been granted an adequacy decision by the European Commission (e.g., the United Kingdom under the current adequacy arrangement).
• We have put in place Standard Contractual Clauses (SCCs) approved by the European Commission with the data recipient.
• The transfer is covered by another approved mechanism, such as Binding Corporate Rules (BCRs), where applicable.

You may request further information about the specific safeguards applied to any international transfer of your data by contacting us at privacy@iwta.ie. We monitor developments in international data transfer law and will update our practices promptly in response to any changes in applicable adequacy decisions or approved transfer mechanisms.

11. Minors

Our Website is intended for use by adults aged 18 years or older. We do not knowingly collect, use, or retain personal data from individuals under the age of 18. All content on iwta.ie, including casino reviews, bonus comparisons, and responsible gaming information, is directed exclusively at adults of legal gambling age in Ireland.

If you are a parent or guardian and you believe that your child has provided personal data to us without your knowledge or consent, please contact us immediately at support@iwta.ie. We will take prompt steps to investigate and, where confirmed, to delete the relevant information from our systems. We encourage parents and guardians to monitor their children's online activities and to make use of available parental control tools. For further guidance on responsible gambling and protecting minors, please visit our Responsible Gaming page.

12. Changes to This Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the Website. When we make material changes, we will revise the version number and Last Updated date at the top of this page. Where the changes are significant and affect how we process your personal data in a way that may impact your rights, we will make reasonable efforts to notify you directly—for example, by email (if you have subscribed to our newsletter) or by displaying a prominent notice on the Website.

Your continued use of iwta.ie after the effective date of any revised Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically to stay informed about how we protect your information. If you have any questions about any updates, please contact us at privacy@iwta.ie.

13. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us using the details below:

We aim to respond to all data protection enquiries within 5 business days and to fully resolve Subject Access Requests and other formal rights requests within the statutory period of one calendar month. All communications should be sent in English to ensure the most accurate and timely response from our team. For urgent matters, please include the word "URGENT" in the subject line of your email.

This Privacy Policy is governed by and construed in accordance with the laws of Ireland. For further information about your data protection rights, you may also consult the official guidance published by the Data Protection Commission at www.dataprotection.ie.

This document forms part of the full legal suite for Best Online Casinos in Ireland (iwta.ie), alongside our Terms & Conditions and our Responsible Gaming policy. We encourage all users to read each document carefully.