Skip to the main text

18+ National Gambling Helpline 0808 8020 133 Help if gambling hurts

Privacy and your data

What Playvoralox learns when you read a page or write to us, who else touches it, how long it stays and how to have it corrected or removed. Last updated 8 November 2026.

Updated

The data controller

Playvoralox and playvoralox.com are operated by SOCIALWAY ESERVICES LTD, a private company incorporated in the Republic of Cyprus with registration number HE 294870; its registered office is at Omirou 20, Floor 4, Flat 402, 1097 Nicosia, Cyprus.

Questions, corrections, company matters, personal data and partnerships
contacts@playvoralox.com

The company in charge of your data

The site belongs to SOCIALWAY ESERVICES LTD, entered on the Republic of Cyprus register of companies as HE 294870, with a registered office at Omirou 20, Floor 4, Flat 402, 1097 Nicosia, Cyprus. In data protection language that company is the controller: it decides what this site gathers and for which purpose.

Because the company is set up inside the European Union, the EU General Data Protection Regulation (GDPR) sets the rules it follows. Most people who read Playvoralox live in the United Kingdom, and for them the UK version of the regulation, the UK GDPR, sits alongside the Data Protection Act 2018.

Anything about your data can go to contacts@playvoralox.com. The form on Send us a message works too: choose “personal data” as the topic and it lands with the same people.

What reaches us, and how

Playvoralox has no accounts, logins, newsletters or comment boxes. Details about you arrive by three routes and no others.

When you write through the form

The form needs your email address, a topic and your message. A name, the operator you are writing about and the page you were reading are up to you. Pressing send turns all of it into an email for the site’s mailbox; no copy is saved in a database on the web server.

To keep automated spam away, the server briefly notes a one-way hash of your IP address, rather than the address itself, plus the moment the form was sent. Both are wiped after one hour.

When your browser requests a page

Every page request carries technical details: your IP address, the browser and device description your software sends (the user-agent), the page address and the time. The hosting server and Cloudflare, which stands in front of it to filter attacks, write these into their logs.

When you agree to measurement

Only after a yes in the cookie banner do Google tools note how pages are used and whether a visit began with one of our adverts. The next section explains them.

Google Analytics, Google Ads and Consent Mode

Playvoralox is set up for three Google services: Google Analytics 4, which counts visits and shows which pages get read; Google Ads, which tells us whether someone who saw one of our adverts went on to open the site; and the Google tag, the script that carries both. The tag may be delivered through Google Tag Manager.

Nothing from Google loads before you decide. The site runs Google Consent Mode v2 with every storage signal set to “denied” from the start, so a first visit writes no analytics or advertising cookies. Press “Accept everything”, or switch on a single category in the detailed settings, and the matching signal moves to “granted”; only then does the Google tag start.

Analytics reaches us as totals: visits, pages, broad location, type of device. We do not join these figures to form messages or try to work out who a single visitor is.

Your answer is kept in your own browser under the key sx-consent-state, so the banner does not come back on every page. Each cookie is described on Cookie preferences.

There is no 18+ pop-up on Playvoralox. The age notice sits in the strip at the top and in the footer, so no answer about your age is asked for or stored.

Why we are allowed to use it

Data protection law asks for a reason, a lawful basis, behind each use of personal data. Ours are these.

Each use and the basis behind it
What happensLawful basis
Google Analytics and Google Ads measurementYour consent, which you can take back whenever you like
Server and Cloudflare logs; the one-hour spam checkOur legitimate interest in a safe, working site
Reading and replying to a message you chose to sendOur legitimate interest in answering readers, or steps you asked us to take
Notes on how a data rights request was handledA legal obligation to be able to show our reply

Where legitimate interests are the basis, we have weighed them against your privacy, and you can object to that use at any point (see the rights below).

Who else handles it

We do not sell reader data, and casino operators receive none of it from us. A short list of service providers works on it for us under written terms:

  • the company hosting the website’s server;
  • Cloudflare, for security filtering and page delivery;
  • the email provider whose mailbox collects form messages;
  • a support company that sorts that mailbox for us;
  • Google, for Google Analytics and Google Ads, and only once you have agreed.

If a court or a public authority lawfully demands information, we may have to hand it over.

An Advertising link to an operator takes you to that company’s site. From that point its own privacy notice applies, not this one.

Data that travels beyond the UK and the EEA

Google and Cloudflare are based in the United States, so part of the information above may be processed there. When the recipient holds a certification under the EU–US Data Privacy Framework, that framework covers data from the EU, and its UK Extension covers data from UK readers.

If a transfer falls outside a certification, it rests instead on Standard Contractual Clauses issued by the European Commission, with the UK Addendum attached for UK data. Ask contacts@playvoralox.com and we will describe the safeguard used for a given provider.

How long each item stays

Keeping periods
InformationKept for
Form messages and our answersUp to 12 months
Server and Cloudflare logsUp to 30 days
Hashed IP and time for the spam checkOne hour
Your cookie choice (sx-consent-state)12 months, then the banner asks again
Google Analytics 4 data14 months at most
Letters about a data rights requestUp to 6 years

At the end of a period the information is deleted, or boiled down to totals that no longer point to anyone. The six-year period lets us show, if ever asked, how a request was dealt with.

What you can ask us to do

Both the GDPR and the UK GDPR let you ask us to:

  • confirm if any of your data is with us, and let you have a copy (access);
  • fix anything wrong or incomplete (rectification);
  • delete it (erasure);
  • pause its use while a disagreement about it is sorted out (restriction);
  • stop a use that relies on legitimate interests (objection);
  • give you, or an organisation you name, the data you supplied in a common machine-readable file (portability);
  • drop your consent for Google Analytics or Google Ads, through the Cookie preferences link in the footer of any page.

Write to contacts@playvoralox.com or use the form. Before releasing anything we may ask a question that confirms the request is really yours. You will hear back within one month; for a complicated request the law allows two more months, and we would explain the delay inside the first month.

Using these rights normally costs you nothing.

If you are unhappy with how we used your data

Tell us first at contacts@playvoralox.com, since most problems can be settled by email. You do not have to, though: complaining straight to a data protection authority is your right.

The authority that supervises our company is the Cypriot Commissioner for Personal Data Protection, acting through its office in Nicosia. Readers living in the United Kingdom can also turn to the Information Commissioner’s Office (ICO), and anyone may approach the authority in the EU country where they live or work.

Children, security and updates to this page

Playvoralox is meant for readers who are 18 or older, and we never set out to gather anything from anyone younger. Should a message prove to come from someone under 18, it is deleted.

Pages travel over an encrypted connection (HTTPS), the mailbox is open only to the people who handle it, and the form leaves nothing behind on the server.

When this notice changes, the new text appears here under a fresh date, and a change that matters, such as a new tool or recipient, is pointed out near the top.

Data protection authorities

  • Commissioner for Personal Data Protection (Republic of Cyprus) — the supervisory authority for SOCIALWAY ESERVICES LTD: dataprotection.gov.cy
  • Information Commissioner's Office, for readers in the United Kingdom: ico.org.uk

Cookies and similar storage

One small record is kept in your browser without asking: the choice you make in this panel. Two optional tools need your agreement first. Google Analytics 4 would tally how many people visit and which pages they open, without singling anyone out, and Google Ads would tell us whether people arrive from our own adverts. The Google tag loads them only after a yes. You can change this whenever you like through “Cookie preferences” at the bottom of every page. How cookies are used here