Privacy Policy
Last updated: 12 July 2026
We respect your privacy and are committed to processing your personal data lawfully, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Malta’s Data Protection Act (Chapter 586).
Who we are (Data Controller)
The Website www.konnabonus.com is owned and operated by Affcool LTD, a company formed under the laws of Malta, with registered address 152, Office 9, Triq In-Naxxar, San Gwann SGN 9030, Malta. For any privacy matter, contact us at [email protected].
The personal data we collect, why, and our legal basis
We only collect what we need for the purposes below.
1. Newsletter subscribers. If you sign up for our newsletter, we collect your email address (and name, if you provide it), your IP address and approximate location (country, region, city), and the date and source of your sign-up. We use this to send you the casino bonus offers and updates you asked for. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time via the unsubscribe link in every email, without affecting processing already carried out.
2. Bonus Hunt “Guess & Win” game. When you take part, we collect the username and email address you enter, your guess, and your IP address. We use this to run the competition, identify and contact winners about prizes, and prevent duplicate or fraudulent entries. Legal basis: performance of your participation in the game (Art. 6(1)(b) GDPR) and our legitimate interest in preventing fraud and running the competition fairly (Art. 6(1)(f) GDPR).
3. Offer-click measurement. We count clicks on the casino offers shown on the Website. We do this without cookies and without profiling you: we store only a salted, one-way hash of your IP address (which cannot be reversed to your IP) plus your approximate country, deduplicated per offer per day. Legal basis: our legitimate interest in understanding which offers are useful to visitors (Art. 6(1)(f) GDPR).
4. Server logs & security. Our servers and our security/firewall systems keep standard technical logs (such as IP address, browser type and time of request) to keep the Website secure and available. Legal basis: our legitimate interest in the security and integrity of the Website (Art. 6(1)(f) GDPR).
We do not use Google Analytics or advertising trackers, and we do not sell your personal data to anyone.
Who we share data with
We share personal data only with service providers (“processors”) who help us operate the Website, and only as needed:
- Hosting of the Website and database.
- Email delivery — Google (Gmail API) and smtp.com, used to send our newsletter.
These providers act on our instructions under data-processing agreements. Some, such as Google, may process data outside the EU/EEA; where they do, the transfer is protected by appropriate safeguards such as the EU Standard Contractual Clauses.
Affiliate and casino links. When you click an offer you leave our Website and go to a third-party casino or affiliate network. Those third parties are independent controllers of any data they collect; please read their own privacy policies.
How long we keep your data
- Newsletter: until you unsubscribe or ask us to delete it, after which it is removed or anonymised.
- Bonus Hunt entries: for the duration of the relevant competition and a reasonable period afterwards to award prizes and handle any dispute, then deleted or anonymised.
- Offer-click hashes: kept only in aggregated/pseudonymised form for statistical purposes.
- Security logs: kept only for the limited period needed for security.
Your rights
Under the GDPR you have the right to: access your data; have it corrected; have it erased; restrict or object to its processing; data portability; and, where processing is based on consent, to withdraw that consent at any time. To exercise any of these rights, email [email protected] and we will respond within the timeframes required by law.
If you believe we have not handled your data properly, you have the right to lodge a complaint with the Maltese supervisory authority, the Information and Data Protection Commissioner (IDPC), idpc.org.mt.
How we protect your data
We use technical and organisational measures to protect your data, including HTTPS encryption in transit, restricted administrative access, one-way hashing of IP addresses used for click measurement, a web-application firewall, and locked-down backups. No system is completely secure, but we work to protect your information appropriately.
Age restriction
The Website promotes gambling and is intended only for persons aged 18 or over. We do not knowingly collect personal data from anyone under 18. Please gamble responsibly — see BeGambleAware.org.
Changes to this policy
We may update this Privacy Policy from time to time. The “last updated” date above shows when it was last revised.