Privacy Policy

Start with what we do not have

There is no account system on LSM99. You cannot register, log in, save a favourite or store a payment method, because none of those features exist. So this site holds no name, no postal address, no date of birth, no identity document, no bank detail and no card number for you. It never has. Nothing you type into a casino, including your identity documents, reaches us.

The data controller for what little remains is LSM99, 47 Triq il-Kbira, Birkirkara BKR 4112, Malta. Privacy questions go to privacy@lsm99.gg.

Server request logs

Serving a page writes a log line. That line typically records your IP address, the date and time, the URL requested, the HTTP status, the referring URL if your browser sent one, and your user agent string, which names your browser and operating system.

We use those logs for three things only: keeping the site up, diagnosing errors, and blocking abuse such as scraping floods. We do not build a profile from them and we do not sell them. The lawful basis is our legitimate interest in running a secure website. Logs are kept no longer than 12 months, then deleted or truncated. Hosting and content delivery providers process them on our behalf under contract.

Analytics

Where analytics are running, they tell us which pages are read and which are ignored, so we know where to spend editorial time. The output we look at is aggregate: page views, entry pages, country, device class, referrer. We do not use analytics to identify you, and we do not combine it with anything else in order to try.

Analytics that rely on cookies or similar storage only run once you have consented, and you can withdraw consent at any time. The cookie policy explains the categories and how that control works.

Clicking out to an operator

This is the moment your privacy exposure actually changes, so it is worth reading twice.

When you click an operator link you leave LSM99 and arrive on a site we neither own nor control. From that instant the operator’s own privacy policy governs what happens, and the operator is the party responsible for it. Anything you enter there, an email address, a name, a date of birth, a document upload, a card or wallet detail, goes to the operator. It does not pass through us and we never see it. We cannot retrieve, correct or delete it for you, and a deletion request about your casino account has to go to that casino.

What the tracking parameter carries

An outbound affiliate link usually carries a parameter identifying LSM99, and sometimes the specific page you left from, as the source of the visit. That is how the operator knows to attribute a signup to us. The affiliate network then reports numbers back: clicks, registrations, and whether a deposit happened.

The parameter contains no name, no email, no IP address and no identity data, because we hold none of those to put in it. The reporting we receive is counts and totals, not a list of people. We cannot look up an individual player, and we cannot tell that a given reader became a given customer.

Contact enquiries

If you email us or use the contact page, we receive what you send: your email address, your message, and any attachment. We use it to answer you. For a correction request we may keep the thread as a record of why a page changed, which is part of how corrections work.

The basis is our legitimate interest in replying to correspondence. Routine enquiries are deleted within 12 months of the thread closing. Correspondence documenting a correction to a published review is kept up to 3 years, because we may need to show why a figure moved. Email is handled by a mail provider acting as our processor.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, object to processing that rests on legitimate interest, ask us to restrict processing, or ask for your data in a portable format. Where processing rests on consent, you can withdraw that consent at any time without giving a reason.

Send any of these to privacy@lsm99.gg. We aim to answer within one month. Note the practical limit: without an account there is often nothing to find beyond an email thread you sent us, and a raw log line cannot reliably be tied to a named person.

Age

LSM99 is for adults. We do not knowingly collect data from anyone under 18, and the site is neither designed nor promoted for children. If you believe a minor has sent us personal data, write to privacy@lsm99.gg and we will delete it.

International transfers

Our hosting, content delivery, analytics and email providers may process data outside your country, including outside the EEA and the UK. Where that happens we rely on safeguards such as an adequacy decision covering the destination or standard contractual clauses with the provider.

Complaints

If you think we have handled your data badly, tell us first at privacy@lsm99.gg and give us a chance to fix it. You also have the right to complain to your data protection regulator, which for this site is the Office of the Information and Data Protection Commissioner in Malta. Coming to us first does not remove that right.

Changes

We update this policy when what we do changes. The date at the top is the version marker, and the documents it sits alongside are indexed in the legal section.