This policy explains what personal data we collect, why, and your rights under the GDPR and similar laws. We act as the data controller for your account data.
1. Data we collect
- Account data: email, display name, country, date of birth.
- Verification (KYC) data processed via our identity provider.
- Transaction and wallet data (deposits, withdrawals, tickets).
- Technical data: IP address, device fingerprint, session activity (for security & fraud prevention).
2. Why we process it
To operate your account, process payments, run draws, meet legal/AML obligations, prevent fraud, and enforce responsible-gaming controls. Legal bases include contract performance, legal obligation, and legitimate interests.
3. Sharing
We share data with KYC/AML providers, infrastructure processors, and authorities where legally required. We do not sell your personal data.
4. Retention
We retain account and transaction records for the period required by applicable gaming/AML law, then delete or anonymise them.
5. Your rights
- Access, rectification, and erasure (subject to legal retention duties).
- Data portability and objection to certain processing.
- Withdraw consent and lodge a complaint with your supervisory authority.
Exercise these via your account settings or by contacting our Data Protection Officer.
6. Cookies
We use strictly-necessary cookies for authentication and security. Analytics or marketing cookies, if introduced, will be opt-in.