Privacy Policy

Scope and Application

This Privacy Policy governs how Dada8 (the “Company”) collects, uses, stores and discloses personal data in connection with its online gambling services, including websites, mobile applications, and related products (the “Services”). It applies to players, visitors, and other individuals who interact with the Services. It does not govern data collected by third parties through sites or services outside our control, nor data governed by separate terms.

Data We Collect

We collect categories of personal data to operate and improve the Services. The data we collect directly from you includes:

  • Identity and contact data: name, date of birth, residential address, email address, telephone number.
  • Account information: username, password, account status, verification documents.
  • Financial data: payment method details, transaction history, source of funds, and records of deposits and withdrawals.
  • Gameplay and usage data: games played, bets placed, wins, session duration, device identifiers, IP address, browser language, operating system, and referrer pages.
  • Technical data: device type, network information, telemetry used to maintain and secure the Services.
  • Marketing data: preferences for communications and responses to marketing campaigns.
  • Self-exclusion and welfare data: information provided to set limits or exclude yourself from Services.

How We Use Personal Data

We use data to provide and improve the Services, protect players, and comply with law. Typical purposes include:

  • Verifying identity, preventing fraud, and implementing anti-money-laundering controls.
  • Processing payments and monitoring transactions for security and compliance.
  • Providing customer support and handling inquiries.
  • Managing the customer relationship, including account updates and enforcement of Terms.
  • Personalizing experiences and delivering communications consistent with preferences and consent.
  • Monitoring activity to detect unusual or suspicious behavior and to improve the Services.

Lawful Bases for Processing

We rely on multiple lawful bases to process personal data:

  • Contractual Necessity – processing required to provide the Services and fulfill our Terms.
  • Legitimate Interests – maintaining secure, reliable operations and improving user experience, with safeguards to protect rights.
  • Regulatory Compliance – AML/KYC, gambling licensing, tax reporting and financial obligations.
  • Consent – for processing activities where no other lawful basis applies or for marketing communications.
  • Legal Obligations – to comply with applicable laws and licensing requirements.

Data Retention

We retain personal data only as long as necessary for the purposes described and to comply with legal obligations. Typical retention periods include:

  • Transactional data (deposits and withdrawals): at least five (5) years from the date of the transaction.
  • Account data: during the active relationship and six (6) years after account closure, unless longer retention is required by law.
  • Identification and AML records: in accordance with regulatory periods applicable to our licensing and operations.
  • Marketing data and preferences: retention while consent or interest exists, or until opt-out.
  • Self-exclusion records: retained for the duration of the exclusion and to enforce it.

When data is no longer needed, we securely delete or anonymise it.

Sharing and International Transfers

We may share personal data with trusted service providers performing services for us, including payments processing, identity verification, data analytics, customer support, and marketing analytics. We may disclose data to comply with legal processes, to protect our rights or the safety of users, and to cooperate with regulatory authorities. Transfers to jurisdictions outside your residence may occur; we implement safeguards appropriate to the destination and in compliance with applicable data protection laws. De-identified data may be used for analytics or research without identifying individuals.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Services. We distinguish:

  • Strictly necessary cookies – essential to provide the Services (e.g., authenticating users, processing payments).
  • Performance and analytics cookies – used to understand how users engage with the Services.
  • Advertising cookies – used to tailor offers and promotions, subject to consent or legitimate interests where permitted by law.

You may configure your browser to refuse cookies or prompt before accepting them. Some features may not function if cookies are disabled.

Direct Marketing

You may opt out of marketing communications at any time via the unsubscribe option in communications or by contacting support. Transactional messages relating to the Services will not be affected by opt-out choices.

Profiling and Automated Processing

We may perform profiling to assess risk, tailor experiences, or detect suspicious activity. No decision with legal or similarly significant effects will be made by automated means without human involvement. Where profiling informs AML or risk assessment, staff will review results before any decisive action is taken.

Security

We implement technical and organizational measures to protect personal data, including:

  • Transport Layer Security (TLS) encryption for data in transit.
  • Encryption at rest for stored data.
  • Strict access controls based on legitimate need.
  • Regular security assessments and an incident response plan, with notifications where required by law.

Your Rights

You may exercise rights provided by applicable data protection laws, including:

  • Access to your personal data and processing records.
  • Rectification of inaccurate or incomplete data.
  • Erasure of data where permitted by law.
  • Restriction of processing or objection to processing on grounds relating to your situation.
  • Data portability in a structured, commonly used format.
  • Withdrawal of consent where consent is the lawful basis for processing.

Requests should be directed to the contact details below. We will respond within a reasonable timeframe, not exceeding one month, with extension where justified by complexity.

Minors

Our Services are not intended for individuals under eighteen (18) years of age. We take steps to verify age and to purge data relating to minors when discovered.

Data Protection by Design and Default

We embed privacy considerations into product design and implement default privacy settings to limit unnecessary data processing.

Changes to This Policy

We may update this Privacy Policy from time to time. We will publish the updated terms and revise the date. Continued use of the Services after changes constitutes acceptance of the revised policy.

Contact Information

For questions or requests concerning your personal data, please contact: [email protected].