What we collect
Thothbet collects a small amount of personal data, most of which is generated automatically as you browse. This includes your device's IP address, the browser and operating system it reports, the pages you visit on this site, the referring page that sent you here, and general geolocation derived from IP (country and, for larger cities, region). If you send us an email through the contact form or address listed on our contact page, we also process the message body, your email address and any attachments you choose to include. We do not collect payment details, government identity documents, or any of the information a gambling operator would require for account verification — none of that data is needed to read the site.
Security
The site is served over HTTPS with modern cipher suites, and administrative access to the underlying servers is restricted to named editors using key-based authentication. Backups are encrypted at rest and stored in a separate physical region from the live data. Email correspondence is stored inside an encrypted mailbox with two-factor authentication required on every login. We do not store credit card numbers, national identity documents, or any operator-specific credential — if we do not need it, we do not accept it.
Third parties
We use a small number of third-party services to run the site: a content delivery network that caches HTML and images, a hosting provider that runs the origin server, and an email provider for editorial correspondence. These processors receive the data they need to deliver their service and nothing else, and each is bound by a written processing agreement. We do not sell personal data to marketing brokers, and we do not participate in behavioural advertising exchanges. Analytics is limited to server-side aggregate counters — we do not deploy any third-party tracking pixel or fingerprinting script.
Your rights
Under UK GDPR you have the right to ask what personal data we hold about you, to correct any inaccuracies, to have data erased where we no longer have a legal basis to hold it, and to complain to the Information Commissioner's Office if you believe we have mishandled a request. Because we hold so little data about most readers, most subject access requests can be answered in a single reply. If you have an editorial email in our system, we will send you a copy of the thread and any related notes on request. Requests can be sent to the editorial email in the site footer.
How we use it
Automatic browsing data is used for two purposes. First, to keep the site running: caching, delivering the correct language and geo-appropriate content, and blocking abusive traffic patterns like scraping or credential-stuffing attempts. Second, to improve editorial priorities: knowing which pages readers actually visit tells us which reviews and reference articles are worth updating first. Email correspondence is used solely to reply to your message and to keep a record of any correction we make on your request, so that we can point to the exchange if the same question comes up again later.
Retention
Server logs containing IP addresses and browsing metadata are kept for thirty days for security and abuse-response purposes, after which they are deleted. Editorial email correspondence is retained for two years to allow us to answer follow-up questions and to demonstrate that a correction request was actually acted on. If you would like an earlier deletion of email you have sent us, ask in writing and we will delete the thread within a month, keeping only a minimal record that the request was made.
Contact
For privacy-specific questions, please email the address printed in the site footer with the word Privacy in the subject line so that it reaches the right editor quickly. Formal notices — for example subject access requests, right-to-be-forgotten notices, or complaints escalated after our reply — can also be sent to the postal address of the editorial operator listed in the footer. We aim to acknowledge every privacy request within five business days and to complete the response within the statutory one-month window.