Privacy Policy

1. Controller, scope and contact

The data controller is Marc Company Escriche, established in Escaldes-Engordany, Andorra. AllPokerDeals is an editorial and informational site about online poker; it is not a poker room, casino, sportsbook, payment processor or gaming account manager.

This policy applies to allpokerdeals.com, its language versions, forms, support communications and the technologies described here. For privacy questions or rights requests write to [email protected]. For general legal matters, write to [email protected].

This policy does not replace the conditions of the linked operators. When you leave AllPokerDeals to visit a room, provider, social network or external platform, that third party's policy applies.

2. Processing principles

We apply the principles of lawfulness, fairness, transparency, data minimisation, purpose limitation, accuracy, security and storage limitation. We only ask for data reasonably necessary for the specific interaction and avoid requesting information we do not need.

You should not send us passwords, access keys, authentication codes, identity documents, document photographs, card numbers, banking data, private keys, medical information or other sensitive information through forms, Telegram, email or future chat tools. If we receive unnecessary information in error, we may delete it or ask you to use an appropriate channel.

3. Data we receive directly from you

• Contact and support data: name or alias, email address and Telegram username when you choose to provide them.
• Enquiry data: topic, country or market indicated, game type, room, room username or reference, message and the minimum data you voluntarily provide to explain an incident, offer, registration, referral or editorial enquiry.
• Location and network estimate for a contact request: if you check the form consent box and IP enrichment is configured, we send the request IP address to ipapi.is to estimate city, region, country, network/ISP and whether a VPN, proxy or Tor exit is detected. During local development only, the lookup may use the app server's public network address if the browser IP is unavailable. We send the IP and the returned estimate to our private staff-only Telegram chat with your request. Estimates can be inaccurate; the IP enrichment result is not added to the Payload contact-request record.
• Collaboration and referral data: contact information, professional or audience information you share if you contact us about the affiliate or referral programme. We do not request bank accounts or payment information through this site.
• Preferences and declarations: language, cookie choice, consent to respond to a request and, if enabled in the future, separate consent for newsletters or other commercial communications.

4. Data collected automatically

We may process technical and usage data necessary for the site to function and be secure, such as IP address, date and time, browser, operating system, device, language, referral URL, pages visited, technical errors and basic abuse-prevention signals.

When you accept the analytics category, Google Analytics may receive aggregated usage information, such as pages viewed, navigation events, cookie identifiers, browser, device and approximate location inferred from the IP. The site configures measurement with IP anonymisation. We do not collect GPS location, physical movements, biometric data or health profiles.

Affiliate link parameters may record limited technical information necessary to attribute a visit or an eligible referral. They are not used to sell personal data or to make automated decisions with legal or similarly significant effects.

5. Information from other sources

We do not purchase contact lists or obtain visitor profiles from public records for campaigns. The only planned exception is a one-off verification related to a request you initiate — for example, confirming with a room the status of a registration or referral — and only if we first explain what minimum information might be consulted or shared and obtain your affirmative authorisation.

Player experiences communicated to the team may be used to review editorial content, but will not be published as general facts without context or reasonable verification. They are not used to profile you or to decide your eligibility with an operator.

6. Purposes of processing

• Responding to questions, comparing public information, following up on a request and communicating with you through the channel you provided.
• Maintaining security, detecting spam, limiting abuse, investigating errors and protecting the infrastructure and its users.
• Remembering technical preferences and managing your cookie choice.
• Measuring site use and performance in aggregate, only where applicable and after any required consent.
• Managing an affiliate, community, creator or referral enquiry, including a one-off verification you have authorised.
• Sending newsletters or commercial communications only if they are enabled and you subscribe via a separate consent action.
• Complying with legal obligations, attending to requests from competent authorities, exercising or defending claims and enforcing our terms.

7. Legal bases

Where the GDPR applies, the legal basis depends on the purpose: consent for analytics cookies, newsletters and any communication or verification requiring it; performance of measures requested by you to respond to an enquiry; legitimate interests for security, fraud prevention, maintenance and proportionate improvement of the service; and compliance with legal obligations where applicable.

We do not base email marketing on legitimate interests where the rules require consent. You may withdraw consent at any time; this does not affect the lawfulness of processing carried out before withdrawal.

8. Cookies, local storage and similar technologies

See the Cookie Policy for the inventory, categories, duration and available controls. The site currently stores the consent choice under the key apd-cookie-consent-v1 for a maximum of 180 days. You can open "Cookie settings" from the footer at any time to accept, reject or modify non-essential categories.

Google Analytics must not load until you accept the corresponding category where consent is required. Rejecting or withdrawing that choice attempts to deactivate measurement and delete the analytics cookies the site controls with the prefixes _ga, _gid and _gat. Browsers and third parties may retain other identifiers under their own policies.

We do not activate behavioural advertising, remarketing, social media pixels or Google Analytics demographic or interests reports without first updating this policy, the banner, the cookie inventory and the consent mechanism.

9. With whom we may share data

We do not sell personal data for money. Nor do we hand your support data to poker rooms for their own purposes. If you submit a contact request and check the consent box, its details and IP-enrichment result are shared with the authorised team in a private Telegram staff chat so the team can review and answer you. The IP address is sent to ipapi.is for the requested lookup. We may also share information with authorities where a valid obligation exists, or with an operator or partner in the specific situation you have requested and authorised.

Providers may act as processors or independent controllers depending on their function. We will require or review the applicable contractual and privacy guarantees before activating any provider that processes personal data. We will not declare that a processing agreement, certification or transfer mechanism exists until we have verified it.

10. Current, planned providers and external links

The infrastructure uses Cloudflare and R2 for security, delivery and media storage. Google Analytics, if you accept it, is used for site-usage measurement. Google Search Console and Bing Webmaster Tools are for web-property diagnostics and are not visitor session analytics tools.

When IP enrichment is configured and a visitor submits a contact request with the required consent, the server sends the request IP to ipapi.is for a real-time estimate of location, network and VPN/proxy/Tor signals. ipapi.is states that queried IP addresses are processed to return the result and are not retained in persistent logs; its usage metadata may include the API key and calling server details. We do not store the lookup result in the Payload contact-request record, but include it with the request in the private Telegram staff chat. See the provider notices below.

Hostinger, Resend, a comments platform and an API-based AI assistant are planned services, not technologies activated merely by being mentioned here. Before activating any of them we will review their function, data-processing countries, privacy terms, controls, a processing contract where applicable, cookie inventory and collection notice.

Poker rooms, social networks, video platforms and other linked sites are responsible for their own practices. An affiliate link may include a click identifier; after leaving AllPokerDeals the third party's rules and cookies apply.

11. Voluntary verification with rooms and referrals

If you ask us to help verify a registration, referral or tracking issue with a room, we may receive the room name and the username or reference you choose to provide. Before sending any information to the corresponding operator or partner, we will explain the purpose, what minimum data would be necessary and request your affirmative authorisation.

We do not guarantee that an operator will confirm information, accept a registration, apply an offer or pay a reward. Do not send credentials, documents, payment information or security codes. Participation in a referral is voluntary and you must not provide another person's data without their permission.

12. Affiliation, editorial and possible incentives

AllPokerDeals uses affiliate links and may operate referral programmes. We may receive compensation if the public or private conditions of the partner are met. That relationship is identified alongside the relevant content or link and does not purchase a favourable rating, editorial position or concealment of relevant information.

If a programme offers a reward, financial incentive or service difference tied to personal data, we will publish a specific notice before participating: material conditions, categories of data involved, how to opt out and how the incentive is calculated where the law requires it. No additional data beyond what is necessary will be provided for that programme.

13. Newsletter and commercial communications

You should not currently assume you will receive marketing simply by contacting us. If we enable a newsletter, we will request a separate and clear subscription. Each commercial email will include a simple way to unsubscribe.

We do not send promotional SMS or make automated commercial calls. We may reply to a support or collaboration enquiry via the email or Telegram you provided; those replies do not in themselves constitute a marketing subscription.

14. Chat and artificial intelligence features

If we activate an AI-assisted chat, its purpose will be to provide guidance on site content, help locate information and direct support requests. You will be able to opt out and use ordinary contact channels instead. It will not be used for automated decisions producing legal or similarly significant effects on you.

Before activating it, we will identify the AI provider, review the processing and transfer guarantees, update this policy and display a notice in the chat itself. You will be able to request access to or deletion of data sent through the privacy channels. Do not enter sensitive information or credentials in the chat.

15. Comments and user-generated content

AllPokerDeals does not currently offer user accounts or a published comment system. If we incorporate third-party comments, a community norm and a specific notice will first be published identifying the provider, visible data, moderation, the possibility of guest comments, anti-spam rules and how to request removal.

Comments will not be implemented as a technique to manipulate search results. They may be subject to prior moderation and user-generated contributions may be marked with appropriate technical attributes to prevent abuse.

16. Retention

We retain data only as long as necessary for each purpose. Ordinary contact, support, affiliate or referral enquiries are retained for up to one year from the last interaction. Minimum records of a newsletter unsubscription may be kept for up to 24 months to respect the choice and demonstrate compliance. Cookie consent preferences are currently retained for up to 180 days.

Technical and analytics data are retained in accordance with the tool's current configuration, currently planned for a maximum of typically 14 months when Google Analytics is active with consent. Conversations in a future AI chat will be limited to a maximum of 12 months unless another period is agreed and published. We may retain information for longer if necessary for a legal obligation, fraud prevention, incident investigation or defence of claims.

17. Security

We apply reasonable and proportionate measures, including HTTPS encrypted connection, access controls, secure credentials, need-to-know access limitation, form validation, anti-spam measures and permissions review. No internet-connected system can guarantee absolute security; that is why we avoid requesting high-risk data.

If we detect a security incident affecting personal data, we will investigate, mitigate the impact and make the notifications to authorities or affected individuals required by applicable law. We do not claim certifications, audits or specific technical measures that have not been verified.

18. Minors and responsible play

The site is directed at adults of at least 18 years and at those who meet the applicable minimum age in their jurisdiction. We do not direct our services at minors or deliberately collect data from persons under 18. If you believe a minor has provided us with data, contact [email protected] so we can assess it and delete it where appropriate.

No page confirms that a room is legal, available or appropriate in your location. The visitor is responsible for verifying directly with the operator, the regulator and local rules whether they can play or register. Consult Responsible Play before engaging in gaming activities.

19. Your rights and how to exercise them

Depending on your location and applicable law, you may request access, rectification, erasure, objection, restriction, portability, withdrawal of consent, information about recipients or transfers, and review of certain automated decisions. AllPokerDeals allows you to submit a request without citing a specific law.

Send the request to [email protected] or use /contact and indicate that it is a privacy matter. To protect individuals, we may ask for reasonable information to verify that the request comes from the data subject or an authorised person. We will not ask for passwords or unnecessary documents. We will respond without undue delay and explain any applicable legal limitation.

If you are not satisfied with the response, you may request a review using the same channel. You may also lodge a complaint with the competent data protection authority in your country of residence or the applicable establishment.

20. Notices for US residents

This section applies when a US state privacy law is applicable to AllPokerDeals. It does not assert that all state laws or all their thresholds currently apply to us. It describes categories that may be processed: identifiers such as name, email, alias or Telegram; internet activity and technical data; approximate location derived from IP; and information from a request you choose to submit.

In the past 12 months, these categories may have been collected directly from you, automatically through authorised technologies, or from an operator or partner solely in a specific verification you requested. They may be disclosed to technical providers, consented analytics, authorised operators or partners, authorities where applicable, or in a legally permitted business reorganisation. We do not sell personal data for money and do not use targeted advertising or inference-based profiling at this time.

Covered residents may request to know, access, correct, delete, limit certain uses, opt out of a sale or sharing as defined by their law, and not receive discriminatory treatment for exercising their rights. Requests are handled via [email protected] or /contact. The site does not currently respond automatically to Global Privacy Control; this will be reviewed before activating targeted advertising or operations requiring that signal.

21. International transfers

AllPokerDeals is established in Andorra. Technical providers may process information in the European Economic Area, the United States or other countries depending on their infrastructure and configuration. Exact locations are not assumed: they will be verified per provider before activating new features.

Where an international transfer requires safeguards, we will apply the mechanism required by the applicable rules, which may include an adequacy decision, standard contractual clauses or another valid safeguard. Transfer rules will be reviewed before incorporating new hosting, email, comments or AI services.

22. Changes to this policy

We may amend this policy if the site, a technology, a provider, a referral programme or regulations change. We will publish the "Last reviewed" date and, if the change is material, will display a reasonable notice or request consent again where appropriate.

We recommend reviewing this page periodically. Previous relevant versions may be retained when necessary to demonstrate the conditions applicable on a specific date.

Official resources

The following links point to public sources for reference. They do not constitute legal advice for any specific case.

• Andorran Data Protection Agency (APDA)
• European Commission: international data transfers
• European Commission: adequacy decisions
• California Privacy Protection Agency (CPPA)