Table of content

Privacy Policy

Last updated: 7 August 2026

1. An Overview of Data Protection

General

The following gives a simple overview of what happens to your personal information when you visit VIP-Grinders.com. Personal information is any data with which you could be personally identified. Detailed information on data protection can be found in the sections below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data collected on this website is processed by the website operator. The operator’s contact details can be found in the section “Notice Concerning the Party Responsible for This Website” below.

How do we collect your data?

Some data is collected when you provide it to us, for example when you fill out a registration or contact form, submit your poker room username in our backoffice, or subscribe to our newsletter.

Other data is collected automatically by our IT systems when you visit the website. This includes technical data such as your browser type, operating system, referring URL, and access timestamps. These data are collected automatically as soon as you enter our website.

When you submit your player account details in our backoffice, we share and request information such as your username, nickname, and email address with the poker room or casino you have registered at. We cannot track your account, verify your eligibility for rakeback deals, exclusive freerolls, or pay out our promotions without doing this, so it forms part of the service you have asked us to provide. This is explained in full in the Affiliate Tracking section below.

What do we use your data for?

Part of the data is collected to ensure the proper functioning of the website. Other data is used to analyse how visitors use the site, to attribute player accounts to our affiliate partnerships, and to deliver personalised promotions and support.

What rights do you have regarding your data?

You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that your data be corrected, restricted, or deleted. You can contact us at any time using the details provided in this policy if you have questions about privacy and data protection. You may also file a complaint with the competent supervisory authority.

Analytics and Third-Party Tools

When visiting our website, statistical analyses may be made of your browsing behaviour. This happens primarily using cookies and analytics tools.

This analysis does not identify you by name, but it is not fully anonymous, because the data is tied to an identifier for your browser or device. You can prevent it by adjusting your cookie preferences. Detailed information can be found in the sections below.

2. General Information and Mandatory Information

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with applicable data protection regulations, including the General Data Protection Regulation (GDPR), and this privacy policy.

When you use this website, various pieces of personal data will be collected. This privacy policy explains what information we collect, what we use it for, and on what legal basis.

Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.

Notice Concerning the Party Responsible for This Website

The party responsible for processing data on this website (the “data controller”) is:

HHK eCommerce Consulting Ltd.
86, Main Street, St. Julians
STJ 1015
Malta

Telephone: +356 77689968
Email: info@vip-grinders.com

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email to info@vip-grinders.com is sufficient. The data processed before we receive your request may still be legally processed.

Your Rights Under the GDPR

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15): You can request information about what personal data we hold about you, its origin, recipients, and the purpose of processing.
  • Right to rectification (Art. 16): You can request the correction of inaccurate or incomplete personal data.
  • Right to erasure (Art. 17): You can request the deletion of your personal data where there is no compelling reason for its continued processing.
  • Right to restriction of processing (Art. 18): You can request that we restrict the processing of your data under certain circumstances.
  • Right to data portability (Art. 20): You can request that data we process based on your consent or a contract be delivered to you or to a third party in a standard, machine-readable format.
  • Right to object (Art. 21): You can object to the processing of your personal data where we rely on legitimate interests as the legal basis, including profiling based on those interests.

To exercise any of these rights, contact us at info@vip-grinders.com or use the address given above.

Right to File Complaints with Supervisory Authorities

If you believe there has been a breach of data protection legislation, you have the right to file a complaint with the competent supervisory authority. For Malta, this is the Information and Data Protection Commissioner (IDPC). You can find their contact details at https://idpc.org.mt.

SSL / TLS Encryption

This site uses SSL/TLS encryption for security reasons and for the protection of the transmission of confidential content. You can recognise an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar.

When SSL/TLS encryption is activated, the data you transfer to us cannot be read by third parties.

Data Deletion

If you wish to delete your personal data stored by VIP-Grinders.com, log in to your account and go to My Account, then Privacy Policy, then Delete my Account. You can also use our data deletion request form.

Opposition to Promotional Emails

We expressly prohibit the use of contact data published in the context of website legal notice requirements for sending promotional and informational materials not expressly requested. The website operator reserves the right to take legal action if unsolicited advertising material, such as email spam, is received.

3. Age Restriction and Responsible Gambling

VIP-Grinders.com is intended exclusively for users aged 18 and over (or the legal gambling age in their jurisdiction, whichever is higher). We do not knowingly collect data from persons under 18. If we become aware that a minor has provided personal data, we will delete it promptly.

If you or someone you know has a gambling problem, free and confidential help is available. Our responsible gambling page lists verified helplines, self-exclusion schemes and support services for eighteen countries.

4. What We Collect and Why

Cookies

Our website uses cookies. Cookies are small text files that are stored on your device by your browser. They do not harm your computer and do not contain viruses.

We use the following categories of cookies:

  • Strictly necessary cookies: Required for the website to function, covering login sessions, your cookie preferences, and security tools including Google reCAPTCHA. These are exempt from the consent requirement under Article 5(3) of the ePrivacy Directive because they are needed to deliver the service you asked for. Where they involve personal data, the legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating a secure website).
  • Analytics cookies: Help us understand how visitors use our site (e.g. Google Analytics). Legal basis: Art. 6(1)(a) GDPR (consent).
  • Marketing / third-party cookies: Used by social media plugins and embedded content such as YouTube. Legal basis: Art. 6(1)(a) GDPR (consent).
  • Affiliate tracking cookies: Used to attribute your registration at a poker room or casino to VIP-Grinders so we can provide you with rakeback deals, freerolls, and support. These cookies are set when you click our affiliate links (via /go/ redirect pages). Legal basis: Art. 6(1)(a) GDPR (consent, given through our cookie banner).

You can manage your cookie preferences at any time through our cookie consent banner. You can also configure your browser to reject or delete cookies, though this may limit the functionality of certain features on the website.

Affiliate Tracking

VIP-Grinders.com operates as an affiliate for online poker rooms and casino operators. When you click on one of our affiliate links (URLs beginning with /go/), you are redirected to the partner’s website. During this process, a tracking cookie or URL parameter is set to identify that your registration originated through VIP-Grinders.

This tracking is necessary for us to:

  • Verify your eligibility for exclusive rakeback deals, freerolls, and bonus promotions.
  • Provide you with personal support and resolve tracking or payment issues with partner rooms.
  • Receive affiliate commissions from the partner operator.

The data shared with partner operators for tracking purposes typically includes your poker room username, email address, and account activity data relevant to rakeback calculations. Each partner operator has its own privacy policy governing how it handles your data, and we encourage you to review it before you register.

The operators we currently work with are the poker rooms listed on our rakeback deals pages and the casinos listed on our casino reviews pages. That list changes as partnerships begin and end.

Legal basis: the tracking cookie itself is set on the basis of your consent, Art. 6(1)(a) GDPR. The processing of your account details afterwards, so we can pay your rakeback and support your account, is Art. 6(1)(b) GDPR (performance of a contract).

Server Log Files

The website provider automatically collects and stores information that your browser transmits to us in “server log files”. These include:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Host name of the accessing device
  • Time of the server request
  • IP address

These data will not be combined with data from other sources. The basis for data processing is Art. 6(1)(f) GDPR (legitimate interest in ensuring the security and operation of our website).

Data We Receive From Partner Operators

Where you register at a poker room or casino through us and give us your player account details, we also receive information back from that operator. This typically covers your username, your account status, and the volume of rake or wagering you have generated.

We need this to calculate and pay your rakeback, to check your eligibility for our exclusive promotions, and to resolve tracking or payment disputes on your behalf. The source of this data is the operator you registered with.

We do not receive your identity documents, your payment or banking details, or your hand histories.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract), because we cannot deliver the rakeback and promotions you signed up for without it.

Contact Form

If you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.

We process this data only with your consent per Art. 6(1)(a) GDPR. You may revoke your consent at any time. We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains. Mandatory statutory retention periods remain unaffected.

Registration on This Website

You can register on our website to access additional functions such as submitting your poker room usernames, accessing exclusive freeroll passwords, and managing your VIP-Grinders account. The data you provide during registration will be used for the purpose of providing these services.

You do not need to register to read this website. Registration is required only for the features listed above, and if you choose not to provide the data we ask for, we cannot provide those features.

We process the data provided during registration on the basis of Art. 6(1)(b) GDPR (performance of a contract), so that we can operate your account. You may close your account at any time. We store the data collected during registration for as long as you remain registered. Statutory retention periods remain unaffected.

Registration with Facebook Connect or Google Sign-In

Instead of registering directly on our website, you may register or log in using Facebook Connect or Google Sign-In. Both options are offered on our member login page.

Facebook Connect. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”).

If you choose to register with Facebook Connect, you will be redirected to the Facebook platform where you can log in with your Facebook credentials. This links your Facebook profile to our website and gives us access to certain data stored on Facebook, including your name, email address, profile picture, and Facebook ID.

For more information, see Meta’s Data Policy at https://www.facebook.com/privacy/policy/.

Google Sign-In. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

If you choose to sign in with Google, you will be redirected to Google where you log in with your Google credentials. Google then shares a limited set of profile data with us, which includes your name, email address, profile picture, and Google account ID.

We do not post to your Google account and we do not request access to Gmail, Drive, or your contacts. You can withdraw our access at any time in your Google account under Security, then “Your connections to third-party apps and services”. For more information, see Google’s privacy policy at https://policies.google.com/privacy.

Data from either provider is used only to set up, provide, and personalise your VIP-Grinders account.

Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (performance of a contract).

Comments

If you use the comment function on this site, the time at which you created the comment, your email address, and your username will be stored along with your comment. Our comment function also stores IP addresses for the purpose of preventing illegal or slanderous content.

Comments and the associated data are stored based on your consent per Art. 6(1)(a) GDPR. They remain on our website until the content commented upon has been deleted or the comments are required to be removed for legal reasons. You may revoke your consent at any time.

Newsletter

If you subscribe to our newsletter, we require a valid email address and information that allows us to verify that you are the owner of that email address and that you agree to receive the newsletter. Any other information you give us when subscribing is optional.

We use this data only to send the requested information. The newsletter is delivered using an external email service provider, which processes subscriber data on our behalf under a data processing agreement and may not use it for its own purposes. We process this data only with your consent per Art. 6(1)(a) GDPR. You can revoke consent at any time, for example through the “unsubscribe” link in each newsletter. The data provided when subscribing will be used to distribute the newsletter until you cancel your subscription, at which point it will be deleted.

5. Social Media

We maintain profiles on X, Facebook, YouTube, Discord, and Telegram, and we link to them from our website. These are ordinary links. Clicking one takes you to that platform, and from that point the platform’s own privacy policy applies rather than ours. Simply loading a page on our site does not send your data to them.

Some pages may also embed content hosted by these platforms, for example a YouTube video or a social media post. Where that happens, your browser connects directly to that platform in order to load the content, and the platform can see your IP address and which of our pages you were viewing. Embedded content is covered in more detail in section 7.

Legal basis for embedded social content: Art. 6(1)(a) GDPR (consent, given through our cookie banner).

6. Analytics

Google Analytics

This website uses Google Analytics 4, a web analytics service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics uses cookies and similar technologies to analyse how visitors use the website. The information generated about your use of this website is transmitted to a Google server and stored there, and Google may transfer this data to servers in the United States. The safeguards that apply to those transfers are described in section 8 of this policy.

Google Analytics 4 does not log or store individual IP addresses. An IP address is used only to derive an approximate location and is then discarded, and this applies automatically rather than through a setting we enable.

Google uses the resulting data on our behalf to evaluate your use of the website, compile reports on website activity, and provide us with other services related to website and internet usage. This data is not merged with other data held by Google about you.

You can prevent the storage of cookies by adjusting your browser settings or through our cookie consent banner. You can also prevent Google from collecting and processing data about your use of the website by installing the browser opt-out plugin available at https://tools.google.com/dlpage/gaoptout.

We have entered into a data processing agreement with Google. For more information about how Google Analytics handles user data, see Google’s privacy policy: https://policies.google.com/privacy.

Legal basis: Art. 6(1)(a) GDPR (consent, given through our cookie banner).

7. Plugins and Tools

YouTube

Our website uses plugins from YouTube, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed about which of our pages you have visited. If you are logged in to your YouTube account, YouTube may associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used to help make our website content more engaging. For more information about handling user data, see Google’s data protection policy at https://policies.google.com/privacy.

Legal basis: Art. 6(1)(a) GDPR (consent, given through our cookie banner).

Google Web Fonts

For uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

For this purpose, your browser has to establish a direct connection to Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web Fonts is done in the interest of a uniform and attractive presentation of our website.

If your browser does not support web fonts, a standard font is used by your computer. Further information about handling user data can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy at https://policies.google.com/privacy.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a uniform website presentation).

Google reCAPTCHA

We use Google reCAPTCHA on our website to check whether data entered on our forms (such as registration or contact forms) has been entered by a human or by an automated program. reCAPTCHA analyses the behaviour of the website visitor based on various characteristics such as IP address, how long the visitor has been on the website, and mouse movements.

The data collected during the analysis is forwarded to Google. reCAPTCHA analyses take place completely in the background. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

For more information about Google reCAPTCHA and Google’s privacy policy, please visit https://policies.google.com/privacy.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting our site from abusive automated access and spam).

8. International Data Transfers

Some of the third-party services we use, including Google, Meta, and X, may transfer your data to servers located outside the European Economic Area (EEA), including to the United States.

Where the recipient is certified under the EU-US Data Privacy Framework, we rely on the European Commission adequacy decision of 10 July 2023. Where a recipient is not certified, or if that adequacy decision ceases to apply, we rely on Standard Contractual Clauses approved by the European Commission together with any supplementary measures required.

You can check whether any of these organisations is currently certified by searching the official Data Privacy Framework List maintained by the US Department of Commerce.

9. Automated Decision-Making

We do not use your personal data to make automated decisions that produce legal effects for you or that similarly significantly affect you.

Some tools on our site, such as our deal matching questionnaire, produce suggestions based on the answers you give. These are recommendations only and any decision to act on them is yours.

10. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. Specifically:

  • Account data: Retained for as long as your VIP-Grinders account is active. After account deletion, data is removed within 30 days, unless statutory retention obligations apply.
  • Affiliate tracking data: Retained for the duration of our commercial relationship with the relevant partner operator, and as long as necessary to resolve any outstanding rakeback, freeroll, or support queries.
  • Contact form data: Retained until the purpose of the enquiry has been fulfilled and you request deletion, or until statutory retention periods expire.
  • Analytics data: Google Analytics data is retained according to Google’s data retention settings. We have configured a retention period of 14 months for user-level data.
  • Server log files: Retained for up to 30 days for security purposes and then deleted.

11. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The “Last updated” date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

12. Contact

If you have any questions about this privacy policy or how we handle your personal data, please contact us:

HHK eCommerce Consulting Ltd.
86, Main Street, St. Julians
STJ 1015, Malta
Email: info@vip-grinders.com
Telephone: +356 77689968