1. Who We Are & Data Controller Details
The primary data controller for personal data processed under this website is TSG Interactive
Gaming Europe Limited (Spinola Terraces, Mikiel Ang Borg Street, St. Julian's, SPK 1000,
Malta), an operating brand of Flutter Entertainment plc. For US-regulated jurisdictions, data is
co-managed with licensed state-specific gaming entities.
2. Categories of Information We Collect
We process only personal data strictly required to maintain legal gaming accounts:
- Identity Data: Full legal name, date of birth, government identification numbers
(Social Security or National ID where statutorily mandated).
- Contact Data: Residential street address, email address, telephone numbers.
- Financial & Transactional Data: Bank account numbers, payment card tokens,
transaction logs, deposit/withdrawal histories, and source of funds documentation.
- Technical & Telemetry Data: IP address, device fingerprints, operating system type,
geolocation telemetry (to enforce state licensing boundaries), and login timestamps.
- Responsible Gaming Data: Self-exclusion history, deposit limits, and algorithmic
behavioral early-detection markers.
3. Legal Grounds for Processing
We process your personal information under the following established legal bases:
- Contractual Performance: To establish your account, authenticate logins, execute
game rounds, and process cashouts.
- Legal & Regulatory Compliance: To satisfy mandatory Anti-Money Laundering (AML),
anti-fraud, counter-terrorist financing, and responsible gambling legal obligations.
- Legitimate Interests: To detect collusive gameplay, prevent cyber threats, audit
our gaming engines, and secure network infrastructure.
- Consent: Where explicitly provided for promotional newsletters and tailored
marketing communications.
4. Data Retention & Security Architecture
All data transmission between your browser and our servers is secured using 256-bit Transport Layer
Security (TLS 1.3) with military-grade encryption. Stored databases utilize AES-256 encryption at rest.
In compliance with international financial and gaming licensing regulations, account and financial
transactional logs are retained for a minimum of five (5) to seven (7) years following account
termination.
5. Your Statutory Privacy Rights
Under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), you
are entitled to:
- Request access to a full export of personal data held regarding your profile.
- Request rectification of inaccurate, outdated, or incomplete data records.
- Request erasure of personal data where retention is no longer legally mandated.
- Object to or restrict specific processing operations, including direct marketing.
- Exercise your right to data portability to another licensed platform.
6. Contacting the Data Protection Officer
(DPO)
If you have inquiries regarding our data practices or wish to submit a data subject access request,
contact our Data Protection Office directly at [email protected].