Privacy and Your Data

Your data reaches selected recipients

We may share with payment providers and financial institutions the details needed to handle deposits and withdrawals, verify identity and meet their legal obligations. This may include your name, date of birth, email address, postal details, country, phone number, alias and verification documents.

Service providers receive data when it is necessary to deliver, manage or improve what we provide. They include customer-support, communications, technology and cloud-hosting providers. Game providers, fraud-prevention agencies, analytics providers and data aggregators may also receive relevant information for their respective services, checks, research and analysis.

Marketing partners may receive data for marketing activity. Authorized staff, contractors, agents, joint controllers, affiliates, subsidiaries and other brands within the same operator or business group may use it for the purposes described here. Law-enforcement bodies and other public authorities may receive information when required.

Data may also be disclosed if our business is merged, financed, acquired, sold, transferred or restructured, including in insolvency. If you submit a complaint, review or query to an outside forum, review service or dispute body, we may respond and share only the data needed to identify your account and address what you raised.

Registration starts the record

When you register, we may ask for your full name, username, email, phone number, country, postal code, gender, date of birth and social security number. We automatically receive your internet protocol address and location data at that point.

Identity and payment checks can add your passport or identity-card number, a document proving where you live, your social security number, where your wealth or funds come from, bank identification, financial statements and payment-system details. We use these details for age and identity verification, deposits and withdrawals, due diligence, anti-money-laundering checks, and other legal requirements that apply to us.

Your device adds context

Some details arrive automatically from your device, for instance its identifiers, the operating-system version and the internet protocol address. Logs record interactions such as content viewed, advertisements selected, searches, social sharing, session dates and times, pages visited, links followed and time spent during a session.

Cookies and similar technologies help collect some of this information. We may also collect or infer a general location and draw inferences such as interests or game preferences from the pages you view and games you play.

Other information can come from public or government databases, the internet, social media, online or printed media, banks and credit bodies, agencies that fight fraud, and public authorities. We may also receive data you have made public or linked through another account. These sources can help us verify information, personalize services and investigate suspicious activity.

Processing serves defined purposes

We use personal data to provide and support your account, answer requests, process payments, and communicate with you. It also helps us test, research, troubleshoot and improve services, maintain their operation, protect systems and intellectual property, detect harmful behaviour or fraud, investigate disputes, and meet legal duties.

Some processing is necessary to enter into or perform our contract with you. Some is required by law, including identity, age and location checks, responsible-gambling risk management, information security, responses to legal process, crime prevention and required reporting.

We may rely on legitimate interests where your rights and freedoms do not outweigh those interests. Examples include managing our relationship, improving services, conducting analytics and research, securing systems, preparing legal claims, identifying harmful play, detecting cheating or abnormal patterns, and recommending features based on gaming behaviour.

With your consent, we may send direct marketing by email, text message, phone call or notification. Consent may also support tailored offers, targeted advertising, measurement of marketing, and the running of tournaments, competitions, promotional events, loyalty schemes and rewards.

Your choices remain available

You have the right to ask for access to the personal data we hold and information about how we process it. You may ask us to correct data that is inaccurate or incomplete.

You may ask us to erase your data when neither the law nor a pressing business need requires us to keep it. In certain circumstances, you may request a restriction on processing or ask for your data in a common structured format that a machine can read, ready to be passed to another party.

You may object when processing is based on legitimate interests and may object to direct marketing. You can withdraw consent at any time without changing the lawfulness of processing already carried out on that consent. You may also complain to a data protection supervisor in the relevant place of residence, work or alleged infringement.

Send any request about these rights to [email protected]. We may need to deal with the request in line with the legal obligations that apply to us.

Retention follows the need

We keep personal data while you maintain an account and for the purposes described in this policy. It may be retained longer when legal obligations, including anti-money-laundering requirements, require that.

Once the account is closed and no legal or business need remains, the data will be deleted or anonymized so it can no longer be linked to you.

Transfers use safeguards

Personal data may be processed outside the EU and the European Economic Area. Before transferring it to affiliates or third parties, we use an available recognized safeguard. This may be a destination recognized as providing adequate protection, approved standard contractual clauses, or another legally recognized measure.

Security has practical limits

We use administrative, technical and physical measures against unauthorized access, loss, theft, misuse, disclosure, alteration and destruction. No system or internet transmission is completely secure, so absolute security cannot be guaranteed. We continue to assess and improve these practices.