Privacy Policy

Controller

Data controller: Sault Ste. Marie Tribe of Chippewa Indians, Sault Ste. Marie, Michigan, US. Privacy mailbox: privacy@xcasiino.com.

What is gathered

• The IP address your device connects from, and a rough geolocation worked out from it, no finer than region or city.
• The user agent string: browser, version and operating system.
• Which pages were opened and which hotel links were clicked, only once analytics is switched on.
• Anything you write to us, contact-form messages included: name, email address, chosen topic and the message text.

Purposes

• Serving xcasiino pages and fending off malicious traffic (necessary).
• Analytics, so editors can see which pages are useful (consent).
• Marketing and affiliate attribution, so a partner network can link a booking to our referral (consent).
• Answering correspondence.

Under GDPR we rely on legitimate interest for security, on consent for analytics and marketing, and on your own request when we reply to you.

Recipients and transfers

Our hosting company, an analytics vendor, and partner or affiliate networks, the last and those only when advertising cookies are enabled and a referral link gets clicked. Whatever you hand a hotel during a booking falls under that hotel's policy, not ours. Certain vendors may handle data in other countries, covered by contractual safeguards. xcasiino does not trade personal data for money; the California section below explains 'sharing'.

How long we keep it

Analytics logs: no more than 14 months. Correspondence: as long as the conversation needs, and deleted no later than two years on. The cookie choice lives in your own browser for a maximum of twelve months.

GDPR rights

Readers in the EEA or UK are entitled to see what xcasiino holds on them, to fix or wipe it, to restrict or oppose processing, and to take it elsewhere as a machine-readable file. Withdrawing consent works through Manage cookies whenever you like, and xcasiino readers may also lodge a grievance with their national supervisory authority. Requests: privacy@xcasiino.com.

CCPA/CPRA rights

California residents may learn which categories of personal information xcasiino holds, have them deleted or corrected, and stop us sharing them for cross-context behavioural advertising; xcasiino treats a Reject All click as that instruction, and a Global Privacy Control signal is treated the same way. Exercising these rights will never cost you a worse service.

Children

xcasiino is written for grown-ups and does not set out to gather anything from people younger than 18. Should someone under that age have contacted xcasiino, let the privacy mailbox know and we will remove their message.

Updates

Any revision to this notice moves the date shown at the bottom.