Privacy Policy

Last updated: 12 March 2026. We are committed to protecting your personal data under GDPR and the Irish Data Protection Act 2018.

1. Data We Collect

Registration data (name, email, DOB, address), payment details (processed and stored by our payment partners — not us), identity verification documents (stored encrypted), session data (IP, device, browser), play history, and support conversations.

2. How We Use It

Operating your account, processing deposits and withdrawals, preventing fraud and money laundering (AML), MGA reporting obligations, sending operational emails (receipts, payout confirmations), marketing emails only if you opt in, and improving our services via anonymised analytics.

3. Data Retention

We retain account data for 7 years after account closure as required by MGA AML rules, after which it is auto-deleted. Marketing consent data is retained only while you opt in.

4. Your Rights Under GDPR

Access (download your data), rectification (correct inaccuracies), erasure (close account and delete data after the regulatory retention period), portability (export in JSON/CSV), and objection (opt out of marketing). Email [email protected] to exercise any right — we respond within 30 days per GDPR.

5. Third Parties

We share data only with: payment processors (Stripe, PayPal, Revolut, Apple Pay, Google Pay), KYC providers (for identity verification), the MGA regulator (for compliance), and in legal cases (court orders). We never sell data.

6. Cookies

Essential cookies for session management, anonymous analytics cookies, and optional marketing cookies. Consent manager lets you accept or reject non-essential cookies on your first visit.

7. Data Security

RSA 2048-bit SSL, TLS 1.3, encrypted-at-rest storage, role-based internal access, quarterly penetration testing, annual SOC 2 audit. Payment details never touch our servers — tokenised via Stripe and equivalent.

8. Contact

Data Protection Officer: [email protected]. If you are unhappy with our response you can contact the Irish Data Protection Commission (dataprotection.ie).