Privacy policy

This policy explains what data fireballcasino-hungary.com collects, why, how we use it, who we share it with, and what rights you have under GDPR. The site is editorial — we do not run gambling games and we do not store player accounts. Our data footprint is intentionally minimal.

1. What data we collect

Most visitors never give us any personal data at all — they simply read the pages. The minor categories of data we do process:

• Server log data. IP address, browser user agent, referring URL and timestamp. Logs are retained for 30 days, after which they are automatically deleted.
• Cookie identifiers. A session cookie sustains your visit; analytics cookies (only if you accept them in the consent banner) track aggregate page popularity.
• Email correspondence. When you write to editor@, privacy@ or partners@, we keep the thread for up to 24 months to maintain context for follow-up.
• Affiliate referral identifiers. When you click an outbound affiliate link, the destination operator may set its own tracking cookie. That cookie is the operator's, not ours.

2. What we do not collect

For absolute clarity, we do not collect any of the following on this site:

• No payment data. We do not process payments and have no card or bank details about you.
• No gambling activity data. Your deposits, bets and wins at Fireball Casino are visible only to the operator — never to us.
• No identity documents. We do not run KYC. ID and proof of address are handled by the operator on its own platform.
• No sensitive personal data. No data on health, ethnicity, religion, sexual orientation or political opinion.

3. Legal basis for processing

Under GDPR Article 6, every processing activity needs a legal basis. Ours are:

4. Cookies — exactly what is stored

On a first visit, you see a consent banner. Three categories of cookies:

• Strictly necessary. Session cookie keeping your visit consistent across pages. Cannot be disabled — required for the site to work.
• Analytics (optional, opt-in). Aggregate page view counts via a privacy-respecting analytics tool. No cross-site tracking, no IP storage. Active only if you accept.
• Affiliate (operator-set). When you click a "Play" button, the operator sets its own cookie. This is governed by the operator's privacy policy at fireball.casino.

You can change your cookie preferences anytime by clicking the "Cookie settings" link in the footer. Clearing browser cookies revokes consent until you renew it on your next visit.

5. Your rights under GDPR

If you are in the EU or the EEA, you have the following rights regarding any personal data we hold:

• Right of access. Ask what we have on you. We respond with a complete export within 30 days.
• Right to rectification. Correct any inaccurate data we hold.
• Right to erasure. Demand deletion of your data. We will delete unless legally required to retain (we are usually not).
• Right to restrict processing. Limit what we do with your data while a dispute is resolved.
• Right to data portability. Receive your data in a structured, machine-readable format.
• Right to object. Object to processing based on legitimate interest. We assess and respond within 30 days.
• Right to complain. Lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or the data protection authority in your country.

6. How to exercise your rights

Send any GDPR request to [email protected] from the email address linked to the data (so we can verify the request). We respond within the 30 days required by Article 12. There is no charge for the first request in any 12-month period.

7. Data sharing

We do not sell personal data. We do not share it with third-party marketers. The only entities that ever see your data:

• Our hosting provider. Server logs reside on the hosting infrastructure. The hosting provider is GDPR-compliant and signed under a data processing agreement.
• Our email provider. Email correspondence is processed by a standard EU-based email service.
• The analytics provider. Only if you opted in. Aggregate data only — no personal identifiers.
• Authorities under court order. If legally compelled, but we will challenge any overbroad request.

8. Data transfers outside the EU/EEA

Where any of our processors operate servers outside the EU/EEA, the transfer is covered either by an EU adequacy decision or by Standard Contractual Clauses. We do not knowingly transfer data to jurisdictions without an adequate level of data protection.

9. Changes to this policy

If we change this policy, the "Effective from" date at the top of the page changes too. Material changes will be flagged on the site for at least 14 days before they take effect. We do not silently shift practices — your continued use after the new policy takes effect counts as acceptance.

10. Contact for privacy matters

Write to [email protected] for any privacy-related request — access, deletion, complaint, clarification. We respond within 30 days as required by GDPR. For matters outside privacy, see the contact page.