LEGAL

Privacy Policy

Last updated: 21 August 2026

In short: we send an email newsletter about iGaming offers. We only email people who asked us to. We measure whether our emails are delivered, opened and clicked, and we use that to decide what to send you. You can unsubscribe from any email in one click, and you can ask us to delete everything we hold about you at any time.

1. Who We Are

VIPHOST ("we", "us", "our") operates the newsletter and website at viphost.io. For the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), VIPHOST is the data controller for the personal data described in this policy.

You can reach us about anything in this policy at privacy@viphost.io.

2. What We Collect

Details you give us. Your email address, and optionally your name. Nothing else is required to subscribe.

Details we derive. An approximate country, inferred either from your email domain or from the region your network connection arrives from. We do not store your IP address, and we do not determine your location more precisely than country level.

How you interact with our emails. Whether each email was delivered, bounced or failed; whether you opened it and when; which links you clicked and when; and the broad type of device and mail client used. This is explained in full in section 4.

Website usage. If analytics is enabled, pages visited and actions taken on viphost.io. See section 8.

Account data. If you hold a VIPHOST operator account, your email address, display name and authentication data. Passwords are stored only as salted hashes and are never visible to us.

3. Why We Use It, and Our Legal Basis

Purpose	Data	Legal basis (GDPR Art. 6)
Sending you the newsletter	Email, name	Consent — Art. 6(1)(a)
Making sure email actually arrives	Delivery and bounce records	Legitimate interests — Art. 6(1)(f)
Choosing what to send you, and how often	Opens, clicks, country, language	Consent — Art. 6(1)(a)
Honouring unsubscribes and suppression	Email, unsubscribe date	Legal obligation — Art. 6(1)(c)
Preventing abuse and securing the service	Account and request data	Legitimate interests — Art. 6(1)(f)

Where we rely on consent, you may withdraw it at any time — see section 9. Withdrawing consent does not affect processing carried out before you withdrew it.

4. Email Tracking — What We Actually Measure

We think you should know exactly how this works rather than find it in a footnote.

Open tracking.Our emails contain a single invisible 1×1 pixel image. When your mail client loads images, that request tells us the email was opened, roughly when, and the general device and client type. If your mail client blocks images — many do by default — we learn nothing.

Click tracking. Links in our emails point at viphost.io first and then redirect you to the destination. That records which link you clicked and when, and the country your connection came from. The redirect is immediate.

Engagement scoring. We keep a simple score per subscriber based on opens and clicks, and we may group subscribers by country, language or engagement level to decide which campaigns they receive. This has no legal or similarly significant effect on you, and there is no automated decision-making in the sense of GDPR Article 22 — the only outcome is which marketing email you get.

We filter out opens and clicks generated by mail-provider prefetching and security scanners, so that automated activity is not attributed to you as a person.

Opting out of tracking: turning off image loading in your mail client prevents open tracking. If you would rather we did not record clicks either, email us and we will flag your record so tracking is not applied to your future emails.

5. Who We Share It With

We do not sell personal data, and we never share your email address with the casinos or brands featured in our emails. When you click through to a partner, you go to their site as a new visitor — we pass no personal data to them, only an anonymous reference that tells them the visit came from us.

We use the following processors, each under a data processing agreement:

Processor	Purpose	Location
Resend	Email delivery	EU (Ireland)
Supabase	Database and authentication	EU
Vercel	Website and application hosting	EU edge, US company
PostHog	Website analytics, where enabled	EU (Germany)

Transfers outside the EEA.Our processors are configured to store and process data in the EU. Where a provider is a US company that may access data for support purposes, transfers are covered by the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

6. How Long We Keep It

While you are subscribed: for as long as you remain subscribed, plus 24 months of inactivity, after which we delete records that have shown no engagement.
Per-email tracking records: 24 months, then deleted or aggregated into anonymous statistics.
After you unsubscribe: we keep your email address on a suppression list indefinitely. We are required to be able to prove we stopped emailing you, and the only reliable way to never email you again is to remember not to. Nothing else is retained.
Consent records: for as long as we rely on that consent, plus three years, as evidence that consent was given.

7. Where Your Data Came From

We collect email addresses through sign-up forms on our own sites and through partner promotions where you agreed to receive email from VIPHOST. If you believe you are receiving our emails without having asked, tell us — we will remove you and tell you what source we have on record for your address.

8. Cookies

Our newsletter uses no cookies at all. On viphost.io we use strictly necessary cookies for login sessions and security, which do not require consent.

Where website analytics is enabled, it is configured not to create a profile for anonymous visitors, not to record sessions, and to respect your browser's "Do Not Track" setting. If your browser sends that signal, no analytics is loaded at all.

9. Your Rights

Under the GDPR you have the right to:

Access — get a copy of the data we hold about you (Art. 15)
Rectification — have inaccurate data corrected (Art. 16)
Erasure — have your data deleted (Art. 17)
Restriction — limit how we use your data (Art. 18)
Portability — receive your data in a machine-readable format (Art. 20)
Objection — object to processing based on legitimate interests, and to direct marketing at any time (Art. 21)
Withdraw consent — at any time, without giving a reason (Art. 7(3))

The fastest routes: every email we send carries a one-click unsubscribe link, and most mail clients also show an unsubscribe button next to the sender. For anything else, email privacy@viphost.io. We respond within one month, as required by Art. 12(3). Exercising these rights is free.

You also have the right to lodge a complaint with a supervisory authority in the EU country where you live or work (Art. 77). You do not have to contact us first, though we would rather have the chance to put things right.

10. Security

Data is encrypted in transit and at rest. Access to subscriber data is restricted to accounts that need it and is protected by authentication and row-level access controls. If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours and inform you directly where the risk is high (Arts. 33–34).

11. Children

Our emails concern gambling-related offers and are strictly for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has subscribed, contact us and we will delete the record immediately.

12. Changes

We may update this policy. The date at the top always reflects the current version, and we will tell you by email before any change that materially affects how we use your data.

13. Contact

Questions, requests or complaints: privacy@viphost.io.