Privacy policy

5scatter.com is operated by 5scatter. For anything in this policy — a copy of your data, a correction, a deletion, or a question about how any of it works — write to privacy@5scatter.com and a person will answer.

Under the UK GDPR and the EU GDPR, 5scatter is the controller of the personal data described here.

This policy covers 5scatter.com and nothing else. When you follow a link from this site to a casino operator, you leave 5scatter and that operator's own privacy policy applies to you from that point. We have no access to and no control over what they collect.

Read the rest if you want the detail. This is accurate, not a simplification that leaves something out.

• If you just read pages here, we do not know who you are. No advertising cookies, no tracking pixels, no profile, no data sold or shared with advertisers. Ever, not “not currently”.
• If you create an account, we hold what you give us to sign in and what you record in the bonus-hunt tracker. That is yours. You can export it or delete it.
• If you follow a link to a casino, we record that a click happened, from which page, and which country it resolved to. We do not record your IP address and we do not set a cookie to recognise you later.
• The statistics on /stats are computed from hunts people recorded here. They are aggregate and anonymous, private hunts are excluded entirely, and there are minimum sample sizes so no figure can describe one person's session. Section 1.5 explains exactly what is and is not included, because that section is about your data.
• We do not sell data. There is nothing to sell — we do not build the kind of profile that has a buyer.

Most people who use 5scatter never create an account. They read slot pages, look up an RTP, play a demo. Here is everything that happens.

Aggregate page statistics. We use Vercel Web Analytics to count page views. It sets no cookies, stores no identifier on your device, and does not follow you to other websites. Each request produces a short-lived hash on Vercel's servers that is discarded after 24 hours, so the same person visiting tomorrow is a new, unconnected visitor. What is recorded with a page view is: the time, the page URL, the referring site, the country, region and city the request resolved to, your device type, and your browser and operating system version. That is the whole list.

Nothing else. No advertising or analytics cookies. No Google Analytics. No Meta pixel. No fingerprinting. Our fonts are served from our own servers rather than fetched from Google when the page loads, so reading a page here does not send your IP address to a third party.

Server logs. Our hosting provider, Vercel, keeps short-term operational logs of requests, which include IP addresses, in order to run the service and defend it against abuse. We do not use those logs to build any profile of you and we do not combine them with anything else in this policy.

Lawful basis. Legitimate interests — understanding how many people read which pages, and keeping the site up and secure. We have balanced this against your interests and consider it proportionate specifically because the measurement is anonymous, does not persist on your device, and cannot follow you off this site. If it ever stops being any of those things, this section changes first and we will say so.

Some pages here link to online casinos, and we may be paid a commission when a reader signs up through one. How that works commercially is set out on our affiliate disclosure. This section is about the data.

Every outbound link of that kind goes through an address on our own site beginning /go/. When you follow one, we write one row recording:

• a randomly generated click reference,
• which operator, and the exact destination address we sent you to,
• the country and, in Canada, the province your request resolved to, and how we resolved it,
• which page of ours you left from, and where on that page the link was,
• which slot or provider page it related to, if any,
• the address of the page that referred you to us, if your browser sent one,
• your browser's user-agent string,
• the time,
• and, only if you are signed in to a 5scatter account, your account identifier.

Three things we deliberately do not do here, and they are worth stating plainly because they are the norm in this industry:

1. We do not store your IP address. Your country is resolved from the request as it arrives — which we are required to do, because we are legally not allowed to show casino links to readers in several countries — and the address itself is discarded rather than written down.
2. We do not set a cookie or any other identifier on your device. We cannot recognise you on a later visit and we do not try to.
3. If you are not signed in, that row is not linked to a person. It is a click from a country, from a page.

What it is for. Two things, and no third thing: getting paid correctly, and being able to show a regulator that our country restrictions actually work. We record refusals as carefully as we record redirects, because “prove you did not send readers to an operator you were not allowed to promote” is a question we may one day be asked, and a system that only logs successes cannot answer it.

Lawful basis. Legitimate interests — operating and reconciling the commercial arrangements that fund the site, and demonstrating compliance with gambling advertising law. Where you are signed in and the row carries your account identifier, the same basis applies and you have the rights in section 1.9 over it.

Signing in. Accounts are handled for us by Clerk. Depending on how you sign up, Clerk holds your email address, your name and profile image if you provided them or your sign-in provider supplied them, your password in hashed form if you set one, and the technical records of your sessions and devices. We can see this information; we do not receive or store your password.

What you record in the tracker. A bonus hunt is a record you create. It holds the hunt's name and any notes you write, its currency, its start and end times, whether you marked it private, each bonus you collected — the slot, the site you played it on, your bet size, your balance when it triggered, what it returned, any note or screenshot you attached — and, for shared hunts, each participant's nickname and starting and closing balances.

Some of that is financial information about your own gambling, and some of it is about other people if you invite them. We treat it accordingly: it is visible to you and to the people you share a hunt with, and it is not visible to anyone else.

Also held: your currency preference, your favourited slots and providers, and the notifications the site has sent you.

Lawful basis. Performance of the contract between us — you asked for an account and a tracker, and this is what providing them requires.

We publish a page of aggregate bonus-hunt statistics — how per-bonus returns are distributed, which slots get recorded most, and how often a hunt finishes at or above its budget. Those figures are computed from hunts that people, including you, recorded on 5scatter. You should know exactly what that means for your data, so here it is in full.

What goes in. The bet size, the return, the slot and the provider from each recorded bonus, plus the calendar date it was recorded and the hunt's budget. Nothing else.

What never goes in, and cannot:

• Any hunt you marked private is excluded entirely. Not anonymised — excluded. A private hunt is private, including from a total.
• Any bonus you marked hidden is excluded entirely, even in a hunt that is not private.
• No account identifier, hunt name, note, screenshot or participant nickname is read at all. The queries that build the page do not request those fields, so the page cannot leak one by accident.
• No timestamps. Dates are reduced to the calendar day, because the exact minute you recorded a bonus is precision the statistic does not need and would make a session easier to pick out.

Minimum sample sizes, so no figure is one person's session. We publish no distribution of returns below 25 settled bonuses. A slot appears in the most-recorded list only once it has at least 10 recorded bonuses. We publish no at-or-above-budget rate below 10 completed hunts. Below any of those thresholds the page shows nothing rather than a number, and every published figure carries its sample size and the date range it covers.

If you recorded hunts before this page existed. Many people did, and we would rather say so than let you discover it. Data protection law specifically permits further use of information for statistical purposes in this way, provided it is aggregated and cannot identify anyone — that is the basis we rely on, and the rules above are how we make sure it holds. If you would rather your hunts were not part of it, you have two controls and both work retroactively: mark a hunt private, or hide an individual bonus. The page is recomputed from the database every time it is built, so a hunt you mark private today is out of the next build. There is no separate opt-out to find and no form to fill in.

The same is true of deletion. Delete a hunt, or your whole account, and those bonuses stop being counted from the next build onward. Figures already published in an old screenshot are not something we can reach, but nothing we compute from that point forward includes you.

Lawful basis. Legitimate interests, for statistical purposes, on aggregated data from which no individual can be identified.

We use no advertising, analytics or tracking cookies. There is no consent banner on this site because there is nothing on it we would need your consent for. That is a design decision, and if it ever changes you will be asked before anything changes, not after.

What is stored on your device is:

All three are necessary to provide something you explicitly asked for, which is why none of them requires consent. You can clear them in your browser at any time; clearing the first will sign you out.

Vercel Web Analytics sets no cookies at all — see section 1.3.

We use a small number of service providers. Each one processes data only on our instructions and cannot use it for its own purposes.

Transfers outside the UK and EEA to the providers above are made under the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses, together with each provider's own technical safeguards.

We do not sell personal data, and we do not share it with advertisers, data brokers or casino operators. When you follow a link to a casino we pass no personal data to them — only our own click reference, so the operator can tell us the click came from us. Whatever they collect after that, they collect directly from you under their own policy.

You have the right to get a copy of the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on legitimate interests — sections 1.3, 1.4 and 1.6 — you have a specific right to object, and we will stop unless we can show grounds that override yours.

How to exercise any of them: email privacy@5scatter.com. Tell us what you want and, if you have an account, which email address it uses. We will respond within one month. There is no charge.

We will ask you to confirm you are who you say you are before we send anyone a copy of their gambling records — not to be obstructive, but because the alternative is that anyone who knows your email address can ask for them.

Some of it you can do yourself, immediately and without asking us: delete a hunt, mark a hunt private, hide a bonus, change your details, or delete your whole account, all from within the site.

If you are unhappy with how we have handled this, tell us first — we would rather fix it. You also have the right to complain to a data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk). In the EU it is the supervisory authority in the country where you live.

5scatter is not for children. You must be at least 18 to hold an account — 19 in Ontario — and our content about gambling is not directed at anyone under that age. We do not knowingly collect personal data from children. If you believe a child has created an account, write to privacy@5scatter.com and we will delete it.

We will update this page when what we do changes, and the date at the top will tell you when. If a change is material — a new category of data, a new purpose, a new processor, or anything that would need your consent — we will say so on the page and, if you have an account, tell you directly. We will not quietly change what a previous version promised.