1. Who we are
BonusMails (“we”, “us”, “our”) operates bonusmails.com, a casino bonus comparison and review site. For the purposes of the UK GDPR and the EU GDPR, the data controller is:
Privacy contact: contact@bonusmails.com
This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and what rights you have over it. It was last updated on 7 September 2026.
2. What personal data we collect
- Your email address — provided by you when you subscribe.
- Your subscription record — the date and time you subscribed, the landing page or advertisement you arrived from, the IP address used at sign-up, and the date and time you confirmed your subscription.
- Email engagement data — whether an email was delivered, whether it was opened, and which links were clicked. See section 11.
- Country or region — inferred from your IP address, so we only send you offers that are actually available where you live.
- Website usage data — pages viewed and referring site, collected through cookies. See section 10.
We do not collect payment details, identity documents, government identifiers, or any information about your accounts with casino operators. We do not ask for special category data — health, religion, political opinion, sexual orientation and similar — and we ask that you do not send it to us.
3. How we collect it
Nearly all the personal data we hold arrives by a single route: you saw one of our advertisements on Meta (Facebook or Instagram), followed it to one of our landing pages, and entered your email address. Our ad creative states plainly that we send no-deposit and low-wager casino bonus content, so that you know what you are subscribing to before you give us anything.
We then use double opt-in. After you submit your address we send you a confirmation email, and you are added to our active mailing list only once you click the link inside it. If you never click that link, your address is never used for marketing and is deleted.
We do not buy, rent, scrape, harvest, or otherwise acquire email addresses from third parties, and we have no intention of ever doing so.
4. Why we use it, and our lawful basis
- To send you marketing email — new no-deposit bonus alerts, exclusive offers we have negotiated directly with operators, industry news including warnings about operators we think you should avoid, and educational material on wagering requirements, RTP, licensing and responsible gambling. Lawful basis: your consent.
- To keep our list relevant — measuring engagement so we stop emailing people who have lost interest, and segmenting by country so we do not send you offers you cannot claim. Lawful basis: our legitimate interests in running a mailing list people actually want to receive.
- To honour your choices — keeping a record of unsubscribes and deletion requests so that we do not contact you again by mistake. Lawful basis: legal obligation.
- To operate and secure the website — serving pages, preventing abuse and diagnosing faults. Lawful basis: our legitimate interests.
Where we rely on your consent, you can withdraw it at any time, with no penalty and without giving a reason. Withdrawing consent does not affect processing that already happened while the consent was valid.
5. Who we share it with
We do not sell your personal data. We do not share it with casinos, advertisers, brokers, or any other third party for their own marketing purposes. When you click through to an operator from our site or from one of our emails, we pass no personal data to them — they see only that the visit came from us.
We do use a small number of service providers who process data on our instructions, under a written data processing agreement:
- Email Marketing Platforms — managing our email campaigns and recording engagement.
- Meta Platforms (Meta Platforms Ireland Ltd. and Meta Platforms, Inc.) — advertising and lead-capture forms.
We may also disclose personal data where we are legally required to, or where it is necessary to establish, exercise or defend legal claims.
6. Where your data is processed
Some of our processors are located outside the UK and the European Economic Area, principally in the United States and New Zealand. Where personal data is transferred out of the UK or EEA, that transfer is covered by the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), or by an adequacy decision. You can request a copy of the relevant safeguards by emailing us.
7. How long we keep it
- Unconfirmed sign-ups: deleted within 30 days if the confirmation link is never clicked.
- Active subscribers: kept for as long as you remain subscribed.
- Inactive subscribers: removed after 24 consecutive months without opening or clicking any of our emails.
- Unsubscribe and suppression records: if you unsubscribe or ask to be deleted, we keep your email address on a suppression list indefinitely. This is the only reliable way to guarantee we never email you again, and it is the minimum data needed for that purpose.
- Website analytics: retained for no more than 14 months.
8. Your rights under UK and EU data protection law
You have the right to:
- Be informed about how your data is used — this policy.
- Access a copy of the personal data we hold about you.
- Rectification — have inaccurate data corrected.
- Erasure — have your data deleted (“the right to be forgotten”).
- Restrict processing in certain circumstances.
- Data portability — receive your data in a machine-readable format.
- Object to processing based on our legitimate interests.
- Withdraw consent at any time.
To exercise any of these, email contact@bonusmails.com with “Privacy request” in the subject line. We will respond within one month, as the GDPR requires, and we will not charge you for it. We may ask you to confirm you control the email address in question — that is to protect your data, not to obstruct you.
We are not subject to any automated decision-making or profiling that produces legal effects for you.
If you are unhappy with how we have handled your data you can complain to your national supervisory authority. In the UK that is the Information Commissioner's Office (ico.org.uk); in the EU it is the data protection authority for the country you live in. We would appreciate the chance to put things right first.
9. Your rights under California law
If you are a California resident, the CCPA and CPRA give you the right to know what personal information we collect and why, to request a copy of it, to request its deletion, to correct inaccurate information, and not to be discriminated against for exercising those rights.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding twelve months. To make a request, email contact@bonusmails.com.
10. Cookies
We use a small number of cookies. Strictly necessary cookies make the site work and remember your cookie choice. Analytics cookies help us understand which pages are useful. Advertising cookies, where present, let us measure the performance of our Meta campaigns. Non-essential cookies are set only after you accept them in the banner shown on your first visit, and you can change your mind at any time by clearing this site's cookies in your browser. Blocking cookies does not stop you reading the site.
11. Email open and click tracking
We want to be explicit about this, because many senders are not. Our emails contain a small invisible image and rewritten links, which tell us whether a message was opened and which links were clicked. We use that to remove people who are no longer interested and to decide what to send.
We do not use it to build a profile of your gambling behaviour, and we do not share it with operators. If you would rather not be tracked, most email clients let you block remote images, which prevents open tracking — or you can unsubscribe and we will stop entirely.
12. Affiliate relationships and how we make money
BonusMails is free to use, and we make our money through affiliate commission: when you follow a link from our site or emails and register or deposit with an operator, we may receive a fee. This never costs you anything and never changes the terms of a bonus.
Commission does not buy a good review. We publish warnings about operators with delayed payouts, unfair terms or poor conduct, including ones we have commercial relationships with, because a list of subscribers who trust us is worth more than any single deal.
13. Age restriction
This site and our emails are for adults only. You must be at least 18, or the legal gambling age where you live — 21 in the United States, 19 in most of Canada. We do not knowingly collect data from anyone under that age. If you believe a minor has subscribed, email us and we will delete the record immediately.
14. Security
The site is served over HTTPS. Subscriber data is held in the systems of the processors named in section 5, under their own security controls, and access on our side is limited to the few people who need it. No system is perfectly secure, but we will notify you and the relevant regulator if a breach affects your data and the law requires it.
15. Changes to this policy
If we change this policy we will update the date at the top of section 1. If a change materially affects how we use your personal data, we will tell you by email before it takes effect.
16. Contact and complaints
Email contact@bonusmails.com for anything to do with your data, including access, correction, deletion and withdrawing consent. See our contact page for other enquiries.