Privacy policy

Who controls your data

The data controller is [[LEGAL ENTITY NAME]], [[REGISTERED ADDRESS]]. Our data protection officer can be reached at [[DPO EMAIL]].

If you are in the UK or EEA you may complain to your national supervisory authority; ours is [[SUPERVISORY AUTHORITY]].

What we collect

• Identity and contact data — name, date of birth, address, email, phone number.
• Verification data — identity documents, proof of address, and source-of-funds evidence.
• Financial data — deposits, withdrawals, balances, and the payment instruments you use.
• Gameplay data — bets, stakes, sessions, wins and losses, and bonus activity.
• Technical data — IP address, approximate location, device and browser, and how you use the site.
• Communications — support tickets, chat and email correspondence, and marketing preferences.

Why we hold it, and on what legal basis

• To run your account and settle your bets — performance of our contract with you.
• To verify age and identity, prevent money laundering and fraud, and report as required — legal obligation.
• To detect gambling harm and act on responsible-gambling signals — legal obligation and substantial public interest.
• To secure the service, and to improve it — our legitimate interests, balanced against your rights.
• To send marketing — your consent, which you may withdraw at any time.

Automated decisions and profiling

We use automated checks for identity verification, fraud and payment risk, and for detecting patterns associated with gambling harm. These can restrict an account or decline a transaction. You may ask for human review of any such decision and contest the outcome.

Who we share it with

We do not sell your personal data.

• Regulators, law enforcement and financial-crime authorities, where legally required.
• Identity verification, payment and fraud-prevention providers.
• Game and sportsbook providers, limited to what is needed to run the game you launched.
• Our hosting, communications and analytics processors, under contract and on our instructions.

International transfers

Where data leaves the UK or EEA we rely on an adequacy decision, or on standard contractual clauses with additional safeguards. You can ask us for a copy of the mechanism relied on for a given transfer.

How long we keep it

Account, transaction and verification records are kept for [[RETENTION PERIOD]] after your account closes, because our licence and anti-money-laundering law require it. Self-exclusion records are kept for the duration of the exclusion and for [[SELF EXCLUSION RETENTION]] afterwards, so that an exclusion cannot be defeated by opening a new account. Marketing preferences are kept until you change them.

Your rights

Exercise any of these by contacting [[DPO EMAIL]] or through support. We respond within one month. Note that erasure does not extend to records we must retain, and that closing your account does not lift a self-exclusion.

• Access — a copy of the personal data we hold about you.
• Rectification — correction of data that is wrong or incomplete.
• Erasure — deletion, where we are not legally required to keep it.
• Restriction and objection — including objecting to processing based on legitimate interests.
• Portability — a machine-readable copy of data you gave us.
• Withdrawal of consent — at any time, for anything based on consent.

Security

Access to player data is restricted to staff who need it, credentials are stored hashed and never in plain text, and transport is encrypted throughout. No system is perfectly secure; if a breach is likely to result in a high risk to you, we will tell you and the supervisory authority as the law requires.