Privacy Policy

GDPR & CCPA Compliant

Privacy Policy

Your privacy is a priority. This policy explains what we collect and how it's used.

TLS 1.3
Encryption
AES-256
At rest
ISO 27001
Certified

1. Data We Collect

Account details (name, email, DOB), KYC documents, transaction history, device & IP information, gameplay logs, and communications with our team.

2. How We Use Your Data

To operate your account, process payments, prevent fraud, comply with AML and licensing obligations, personalise your experience, and send service updates.

3. Legal Basis

We process data under contract performance, legal obligations, legitimate interests, and — where applicable — your consent.

4. Data Sharing

We share data with payment processors, KYC providers, regulators, and law-enforcement when legally required. We never sell your data to third parties for marketing.

5. Data Retention

We retain account data for the duration of your relationship with us and for at least 5 years after account closure, in line with AML regulations.

6. Security

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). We employ 2FA, hardware security keys, cold-wallet custody, and regular third-party penetration testing.

7. Your Rights

You may access, correct, delete, restrict, or port your data, and object to processing. Contact privacy@gambit.vip to exercise these rights.

8. Cookies

We use essential, analytics, and preference cookies. You can manage your choices via the cookie banner or browser settings.

9. International Transfers

Data may be transferred outside your country to our processors. We use standard contractual clauses and equivalent safeguards.

10. Contact

Data Protection Officer — privacy@gambit.vip. You may also lodge a complaint with your local data protection authority.

© 2026 Gambit. All rights reserved. Curaçao License #8048/JAZ.