Privacy Policy

Last updated: June 10, 2026. This policy describes what data we collect, how we use it, and the rights you have over your data under US and EU law.

Reviewed by Jordan Reeves, Senior Casino Editor.
12 years covering online gambling. Tests every operator we publish with personal funds.

Who we are

Ace Casinos (the "Site," "we," "us") is an independent affiliate publisher reviewing US-facing online casinos. Contact: [email protected].

What we collect

We collect the minimum data necessary to run the Site:

Server logs. Your IP address, user agent, referring URL, requested URLs, and timestamps. Retained for 30 days for security and abuse-prevention purposes.
Cookies and similar. See our Cookie Policy for the full list. We use strictly-necessary cookies, analytics cookies (privacy-preserving), and affiliate-tracking cookies (set when you click a tracking link to an operator).
Contact form data. If you email us, we store your message, email address, and any context you provide for as long as needed to handle your inquiry — typically 12 months.
Newsletter data (if launched). Your email address and signup timestamp. Used only to send the newsletter you opted into.

We do not collect or process: payment information, gambling history, casino account credentials, or sensitive personal data (race, religion, health, sexual orientation, political views).

How we use it

To deliver and improve the Site
To respond to your inquiries
To send a newsletter if you opted in
To detect and prevent abuse, fraud, and security threats
To attribute affiliate referrals (which casino sent you to us, and which casino you went to from us)
To comply with legal obligations (tax, accounting, court orders)

Legal basis (for EU/UK readers)

We process most data under the legal basis of legitimate interest (running a publication). Newsletter signups are processed under consent. Affiliate-tracking cookies are processed under consent, with an opt-in cookie banner where required.

Who we share data with

We share limited data with the following service providers, under written data-processing agreements:

Hosting / CDN. Our static hosting provider receives the same server-log data you'd send to any web host.
Analytics. A privacy-preserving analytics tool aggregates pageview data. We do not feed analytics with your IP address or any identifier we could re-link to you.
Affiliate networks. When you click a tracking link to an operator, our affiliate network (Commission Kings, partner programs of individual brands) and the operator both receive a click-record with our affiliate ID and your visit metadata. This is how commissions are attributed.
Email provider. If you contact us or sign up to a newsletter, our email/CRM provider stores your message and email address.
Legal compliance. We may share data with law enforcement or regulators if required by valid US legal process.

We do not sell your personal data. We do not engage in "share for cross-context behavioral advertising" as defined by CPRA.

Cookies

See the dedicated Cookie Policy for a list of cookies set, their purpose, and how to opt out.

Your rights — US (CCPA / CPRA)

If you are a California resident, you have the right to:

Know what personal information we collect, use, disclose, and (if applicable) sell about you
Request deletion of your personal information
Request correction of inaccurate personal information
Opt out of "sale" or "sharing" — we do not sell or share for cross-context behavioral advertising, so there is nothing to opt out of, but the right is yours
Limit use of "sensitive personal information" — we don't collect any, so this does not apply
Be free from discrimination for exercising any of these rights

To exercise these rights, email [email protected]. We will verify your identity and respond within 45 days.

Your rights — EU/UK (GDPR / UK GDPR)

If you are in the EEA, the UK, or Switzerland, you have the right to access, rectify, erase, restrict processing of, port, and object to processing of your personal data. To exercise these rights, email [email protected]. You also have the right to lodge a complaint with your national supervisory authority.

Data retention

Server logs: 30 days
Contact-form data: 12 months from last activity
Newsletter signups: until you unsubscribe or 24 months of inactivity
Cookies: see Cookie Policy

Children

The Site is not directed to anyone under 21 (the minimum age for US-regulated online casinos). We do not knowingly collect data from minors. If we discover we have collected data from a minor we will delete it. Contact us if you believe a minor has provided us with data.

International transfers

We are a US-based publisher and process data in the United States. If you are outside the US, your data may be transferred to and processed in the US. Where required (EEA/UK), we use Standard Contractual Clauses or other lawful transfer mechanisms.

Security

We protect data with industry-standard measures: TLS encryption for all traffic, role-based access controls on internal systems, encryption at rest where applicable, and routine security reviews. No system is 100% secure. If you believe your data has been compromised, contact us immediately.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be highlighted on the homepage for at least 14 days before taking effect.

Contact

Privacy questions, data requests, or complaints: [email protected], or write to Ace Casinos Privacy, 1234 Example Avenue, Suite 500, Las Vegas, NV 89109, United States.