Privacy Policy

1. Introduction

This Privacy Notice describes our personal data processing and how we collect and use your personal information.

Personal data means any information directly or indirectly relating to an identified or identifiable natural person. Examples of personal data are name, an identification number, or an IP address.

Processing means any operation which is performed on personal data. Examples of processing are collection, recording, storage and transmission.

2. Data Controller

The Data Controller responsible for our processing of personal data is Gambit Technologies AB (“Gambit”), a Swedish limited liability company with registration no. 559334-6439. You can reach us via e-mail to our customer support at support@gambit.ai or via regular mail to Gambit Technologies AB, Drottningholmsvägen 5, 112 42 Stockholm, Sweden.

If you have specific questions regarding our processing of personal data, please contact our Data Protection Officer at data@gambit.ai.

3. Which personal data do we process?

The personal data we collect is primarily obtained directly from you or by our systems automatically collecting information about how you use our services:

  • Contact information, such as name, identification number or date of birth, address, e-mail address and telephone number.
  • Financial information and payment information, such as credit or debit card numbers, bank details and information regarding your transactions.
  • Supplementary documentation to counter money laundering and financing of terrorism, such as photo ID and documents to evidence your source of funds, income, employment, address etc.
  • Game and usage history, such as date, time and duration of use of our website and app.
  • Technical information regarding your use of our website and app, such as your IP address, web browser, operating system, system language etc.

In addition to the information you provide to us, we may collect information about you from third party sources. For example, in order to fulfill our legal obligations and meet the requirements for customer knowledge according to the Money Laundering Act, we may collect personal data from public databases and other third-party sources to check and verify information about your person, address and income, PEP status and other customer information.

4. Why do we process your personal data?

We only process your personal data when we have a legal ground to do so. Our processing of personal data is based on the following legal grounds.

  • We process your personal data for the performance of our contract with you. For example, this may be to open and administer your account, process your deposits, bets, winnings and withdrawals, administer the services and games on our website and app and to provide you with customer support.
  • We are required to process your personal data to comply with our legal obligations. For example, this may be to meet applicable requirements under the accounting and tax legislation or to meet the requirements for customer knowledge and risk assessment under the Swedish Anti-Money Laundering Act.
  • We process your personal data on the basis that in some cases we have a legitimate interest to process your data. For example, this may be to offer you personalised marketing and offers. Our interest is legitimate because it allows for a more relevant and interesting communication between us. It also lets us provide you access to better and more developed services.

5. Who gets access to your personal data?

Your personal data is primarily processed by Gambit.

We may share your personal data with other companies that process the personal data on our behalf (processors). For example, this can be companies that provide payment services, IT services, services for identification, risk assessment and compliance, or marketing services. The processors’ processing of personal data is based on the same legal ground that applies to our processing of the data, for example for the performance of our contract with you. We enter into written agreements with the processors to guarantee a secure processing of personal data.

We also disclose personal data to authorities (such as the Swedish Tax Agency and the Police) to the extent required to comply with our legal obligations.

6. Where is your personal data processed?

Your personal data is primarily processed in the EU/EEA.

In some cases, your personal data may be transferred to a country outside the EU/EEA due to the fact that we use international providers of certain services. Such transfers may only take place in accordance with the General Data Protection Regulation and provided that at least one of the following conditions are met.

  • The European Commission has decided that the country has an adequate level of protection.
  • We have provided appropriate safeguards, for example in the form of binding corporate rules or an approved code of conduct.

7. For how long is your data stored?

Your personal data is stored for as long as it is needed to fulfill the purposes of the processing. Normally, this means that the data is stored for the duration of the contract period. In addition, we may store the data for the time required for us to comply with our legal obligations, including regulations on money laundering (normally five years) and accounting (seven years). After that, the personal data is erased or anonymized.

8. Your rights

The General Data Protection Regulation gives you certain rights regarding your personal data. You always have the right to:

  • Access your personal data and other relevant information.
  • Rectification of inaccurate or incomplete personal data.
  • Erasure of your personal data. In some cases, you may not be able to get all personal data erased because it might be necessary to keep and we have a legal ground to do so.
  • Restrict our processing of your personal data, for example if you believe the data to be incorrect and we need time to review it.
  • Object to our processing of your personal data on the basis of our legitimate interest, including to our use of profiling.
  • Receive your personal data in a structured, commonly used and machine-readable format for transmitting to another company (data portability).

If you wish to exercise your rights, you can send a written request to our customer support at support@gambit.ai. You also have the right to submit a complaint to the relevant supervisory authority. In Sweden, the Swedish Authority for Privacy Protection (www.imy.se/en) is the relevant supervisory authority.

9. Profiling

Profiling means the automated processing of personal data to evaluate certain personal aspects relating to you, for example personal preferences, interests or behaviour.

We use profiling to analyse the preferences, interests and behaviours of our customers for marketing purposes and to improve our customers’ experience of our digital services. For example, this may mean that we personalise what is displayed when you log in to our service, or that you receive personalised offers and tips from us.

You may object to our use of your personal data for profiling at any time by sending a written request to our customer support at support@gambit.ai.

10. Changes to this Privacy Notice

This Privacy Notice may be updated from time to time.