How we handle personal data flowing through the UBetOn platform.
Last updated: 2026-05-26
This policy covers personal data processed by UBetOn in the course of providing the iGaming platform to operator customers. It does not cover end-player personal data, which is processed by our operator customers under their own privacy policies.
Operator-customer contact data, technical metadata required to operate the platform (logs, metrics, error traces), commercial data (contract terms, revenue-share reconciliation), and configuration data (which features each operator has enabled).
All personal data is processed on sovereign, non-US infrastructure, with no US-parented entity processing it on our behalf. The processing jurisdiction is disclosed to your DPO.
Contract performance for operational data. Legitimate interest for security and fraud-prevention logging. Consent for marketing communications.
Operational logs: 90 days. Commercial records: 10 years, in line with standard commercial bookkeeping practice. Customer contact data: until contract end + 12 months.
Access, rectification, erasure, restriction, portability, objection — per GDPR. Submit requests through the contact form on this site; response within 30 days.
Sovereign, non-US hosting; sovereign transactional email and operator-messaging providers; and an SMS gateway used only as a fallback, with operator consent. Full list at /legal/subprocessors, updated within 30 days of any change.
Data Protection Officer: reachable through the contact form on this site. The data protection authority competent for our processing is disclosed to your DPO on request.
Placeholder text. Final policy will be reviewed by legal counsel before launch.