Privacy policy

Data we collect
We collect information you provide directly, such as name, date of birth, address, username, password, preferred currency, and marketing preferences. During verification we may request images or scans of identity documents, proof of address, and, where necessary, source of funds evidence like bank statements or payslips. When you deposit or withdraw we process payment method details that are necessary to complete the transaction.

We also collect data generated by your activity, including logins, session timestamps, device and browser identifiers, IP address, language, pages visited, games played, bets placed, deposits, withdrawals, balances, bonuses, and chat transcripts. Cookies and similar technologies record preferences and help us recognize your device. Some analytics data is aggregated or pseudonymised to understand performance without identifying you directly.

Purposes of processing
We use your data to create and manage your account, verify age and identity, process payments, settle bets, deliver games, and provide customer support. We record activity to detect fraud, protect the integrity of games, manage risk, and comply with anti money laundering rules and sanctions screening. Aggregated analytics help us improve stability, measure load, and plan features. Where you opt in to marketing, we use your preferences to tailor messages about promotions or product updates. You can change those preferences in your profile at any time.

Legal bases
We rely on several legal bases under the GDPR. Contract is the basis for activities needed to provide the service, such as account creation, gameplay, and payments. Legal obligation applies to identity checks, record keeping, reporting, and responsible gambling controls required by law. Legitimate interests cover security, fraud prevention, service analytics, and product improvement, balanced against your rights and expectations. Consent applies to optional areas, such as certain cookies and direct marketing where required. You can withdraw consent in your settings without affecting the lawfulness of processing carried out before withdrawal.

Cookies and similar technologies
Cookies help the site remember your choices, keep you signed in, measure performance, and prevent abuse. Strictly necessary cookies are essential for core functions like authentication and session security, and cannot be switched off. Functional and analytics cookies are used to understand errors and improve navigation. Marketing cookies, where used, support campaign measurement and frequency capping. You can manage non essential cookies through the on site controls or your browser settings. Blocking some cookies may reduce functionality, for example bet slips or game loading.

Payments and financial data
When you deposit or withdraw, payment processors and banks receive the information needed to complete the transaction. We store only the data required for reconciliation, chargeback handling, and regulatory reporting. Card numbers are handled according to scheme rules, and sensitive elements are tokenised where possible. We may request documents to confirm source of funds or wealth when thresholds are reached. These checks are standard in regulated services and support financial crime prevention.

Identity verification and KYC
To protect minors and meet legal duties, we verify age and identity. Checks can include document scans, liveness checks, address validation, and screening against sanctions or politically exposed person lists. If checks fail due to poor image quality or mismatched data, we may ask for a clearer copy or an alternative document. We log verification outcomes and retain records for the period required by law. Access to this data is restricted to trained staff who need it for their role.

Fraud prevention and risk control
We monitor patterns related to account takeover, bonus abuse, payment fraud, odds manipulation, and self exclusion circumvention. Tools include device fingerprinting, velocity rules, geolocation at a general level, and anomaly detection. If risk indicators trigger, we may pause certain actions while a review takes place. Outcomes can include lifting the restriction, applying limits, or closing the account according to the terms of service.

Responsible play data
We collect data about limits you set, session durations, reality checks, time outs, self exclusion status, and interactions with safer gambling messages. This information helps us support your choices and meet obligations around early identification of harm. If patterns suggest elevated risk, we may contact you in product or apply temporary restrictions. Records of interventions are kept to ensure continuity and auditability.

Sharing of data
We share personal data with service providers who support the platform, such as hosting partners, game providers, payment processors, identity verification vendors, analytics providers, and professional advisers. Each provider is bound by contractual safeguards and processes data only on our instructions. We may share information with regulators, law enforcement, banks, and dispute resolution bodies when required by law or to protect our rights or the rights of others. In the event of a corporate transaction, personal data may be transferred as part of diligence or completion, subject to appropriate safeguards.

International transfers
Some partners process data outside the European Economic Area. When this happens we use approved transfer tools, such as adequacy decisions or standard contractual clauses, combined with technical and organisational measures like encryption and access controls. You can review the categories of partners involved in your account settings and the help centre notice that lists current subprocessors.

Retention periods
We keep personal data only as long as needed for the purposes described. Account records linked to transactions and verification are retained for the periods required by financial and anti money laundering laws. Logs that support security and fraud prevention are kept for time frames that allow effective investigation and defense of claims. When retention expires, data is securely deleted or anonymised so it can no longer be linked to you.

Your rights
Under the GDPR you have rights to access your personal data, to correct inaccuracies, to erase certain data, to restrict or object to processing in specific situations, and to data portability. Where processing is based on consent you can withdraw it in your profile. These rights may be limited where we must keep data to comply with legal obligations or where disclosure would impact the rights of others. You can exercise rights through the tools in your account, including data export and preferences. We will respond within the timelines set by law.

Automated decisions and profiling
Some features rely on automated decision making, for example risk scoring, bonus eligibility checks, and responsible gambling monitoring that compares activity to predefined thresholds. These systems help us apply rules consistently and at scale. Where automated decisions produce legal or similarly significant effects, you can request human review and express your point of view. We document the logic used by these systems and evaluate outcomes to reduce bias and error.

Security measures
We protect personal data with administrative, technical, and physical safeguards. Traffic is encrypted, access is controlled by role, and sensitive operations require strong authentication. Production systems are monitored for anomalies and patched on a regular schedule. Independent testing reviews our security posture, and findings are tracked to closure. Despite these efforts, no system is entirely immune to risk, so we maintain plans for detection, response, and recovery.

Children
The service is for adults only. We do not knowingly collect data from anyone under the legal age for gambling in Ireland. If we become aware that an underage person has provided personal data, we will close the account and delete the information where lawful. Parents and guardians who suspect access by a minor should use device level controls and remove saved payment methods.

Changes to this policy
We may update this privacy policy to reflect changes in law, guidance, or product design. Material updates will be signposted on site with a clear effective date so you can review what changed. Historic versions are archived for reference. Continued use of the service after an update indicates that you have read the new version.

Definitions
Personal data means any information that identifies or can be linked to an identified person. Processing means any operation performed on personal data, such as collection, storage, use, disclosure, or deletion. Controller means the entity that decides why and how personal data is processed. Processor means a third party that processes personal data on behalf of the controller. These terms are used with the meanings given in the GDPR.