Privacy Policy

1. What We Collect

• Account data: name, email address, date of birth, phone number.
• Identity data (KYC): government-issued ID, selfie — required before first withdrawal, processed via a compliant third-party verifier.
• Payment data: processed exclusively by our payment processors. We store only a tokenised reference — never raw card numbers.
• Location data: GPS or IP-based location confirmed at sign-up and re-checked on money actions to verify eligibility.
• Usage data: session logs, game activity, device/browser information, IP address.
• Communications: support tickets, emails, and in-app messages you send us.

2. How We Use Your Data

• Operating and improving the platform.
• Verifying eligibility (age, location, identity).
• Processing deposits, withdrawals, and prize redemptions.
• Fraud prevention and security monitoring.
• Responsible gaming compliance (limit enforcement, self-exclusion).
• Legal compliance (anti-money-laundering, tax reporting where required).
• Sending transactional emails (receipts, security alerts, limit confirmations).
• Marketing communications — only with your consent; opt-out at any time.

3. Sharing Your Data

We do not sell your personal data. We share data only with:

• Payment processors (to process deposits and withdrawals).
• KYC/identity verification providers (for withdrawal eligibility).
• Fraud prevention and analytics services (aggregated or pseudonymous).
• Regulators and law enforcement where required by law.
• Self-exclusion registries where required by applicable regulation.

4. Retention

We retain account and transaction data for a minimum of 5 years after account closure, as required by anti-money-laundering regulations. KYC documents are retained for the legally required period. Usage logs are retained for up to 2 years.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access a copy of your personal data.
• Correct inaccurate data.
• Request deletion (subject to legal retention obligations).
• Object to or restrict certain processing.
• Data portability (where applicable).
• Opt out of marketing communications at any time.

To exercise these rights, contact privacy@gamingsuperapp.com.

6. Security

We use encryption in transit (TLS) and at rest, access controls, and regular security audits to protect your data. Payment processing is handled by PCI-compliant processors — we never handle raw card data.

7. Children

This platform is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a minor has created an account, contact us immediately at privacy@gamingsuperapp.com.

8. Changes

We will notify you of material changes to this policy by email and by posting an updated effective date. Continued use of the platform after changes constitutes acceptance.

9. Contact

Data protection enquiries: privacy@gamingsuperapp.com