How we handle personal data flowing through the UBetOn platform.
Last updated: 2026-05-26
This policy covers personal data processed by UBetOn in the course of providing the iGaming platform to operator customers. It does not cover end-player personal data, which is processed by our operator customers under their own privacy policies.
Operator-customer contact data, technical metadata required to operate the platform (logs, metrics, error traces), commercial data (contract terms, revenue-share reconciliation), and configuration data (which features each operator has enabled).
All personal data is processed on sovereign, non-US infrastructure, with no US-parented entity processing it on our behalf. The processing jurisdiction is disclosed to your DPO.
Contract performance for operational data. Legitimate interest for security and fraud-prevention logging. Consent for marketing communications.
Operational logs: 90 days. Commercial records: 10 years, in line with standard commercial bookkeeping practice. Customer contact data: until contract end + 12 months.
Access, rectification, erasure, restriction, portability, objection — per GDPR. Submit requests to dpo@ubeton.com; response within 30 days.
Sovereign, non-US hosting; sovereign transactional email and operator-messaging providers; and an SMS gateway used only as a fallback, with operator consent. Full list at /legal/subprocessors, updated within 30 days of any change.
Data Protection Officer: dpo@ubeton.com. The data protection authority competent for our processing is disclosed to your DPO on request.
Placeholder text. Final policy will be reviewed by legal counsel before launch.