Privacy Policy

About the Operator

The website is owned and operated by Novatrix SRL, a company registered under the laws of Costa Rica with registration number 3-102-893958. Its registered address is Province 03 of Cartago, County 07 of Oreamuno, Potrero Cerrado, North Side of Manuel Ávila Camacho School, Costa Rica. Acting as the data controller, we determine the purposes and means of processing your personal data as set out in this policy. To ensure ongoing compliance and to address any privacy concerns, we have appointed a dedicated Data Protection Officer (DPO). You may contact the DPO at [email protected] regarding this policy, to exercise your rights, or to raise any issues about your personal data.

Categories of Personal Data Collected

We collect and process personal data necessary to deliver a secure, compliant, and enjoyable gaming experience. This includes any information relating to an identified or identifiable individual.

The main categories are:

• Identity data: full name, username, date of birth, gender, nationality, and identification document numbers.
• Contact data: residential address, proof-of-address documentation, email address, telephone number, and preferred contact methods.
• Financial data: bank account details, payment card information, and evidence of source of funds or wealth.
• Transaction data: records of deposits, withdrawals, and other monetary activities.
• Gaming data: information on games played, login and logout times, wager amounts, bonus participation, and responsible gaming interactions.
• Technical data: IP address, general location, browser and device details, operating system, time zone, and login credentials.
• Marketing and communication data: preferences for receiving promotions, consent records, and details of interactions with our support team.

This data is sourced directly from you through registration, gameplay, and communications; from third-party verification and identity confirmation services; payment institutions; anti-money laundering and politically exposed persons databases; regulatory bodies and responsible gaming registers; and business partners such as affiliates and analytics providers who may supply pseudonymized or anonymized information.

Purposes of Processing and Legal Bases

We process your data for clearly defined reasons, relying on appropriate legal grounds:

• To perform our contractual obligations, including account management, transaction processing, identity verification, customer support, and access to offers.
• To comply with legal and regulatory obligations, such as anti-money laundering rules, Know Your Customer checks, responsible gambling requirements, and mandatory reporting.
• To pursue our legitimate interests in preventing fraud, detecting bonus abuse, identifying unauthorized use, and protecting both our business and our users.
• To deliver personalized marketing and promotional communications, based on your consent or our legitimate interests where permitted.
• To analyze usage patterns, fix technical problems, improve the platform, and conduct research, grounded in legitimate interests.
• To maintain and enhance security through monitoring and protective measures, supported by both legitimate interests and legal obligations.

Disclosure of Personal Data

We disclose personal data only where required and always under strict conditions to trusted recipients:

• Other entities within our corporate group for purposes such as fraud prevention, AML compliance, responsible gaming, and (with your consent) group marketing.
• Game providers, limited to essential data needed to deliver their content.
• Payment service providers for transaction processing.
• Marketing partners when you have consented to promotional contact.
• Regulatory and law enforcement authorities when legally compelled (we will contest unwarranted requests).
• Specialized third-party providers for communication tools, identity verification, AML/KYC screening, and fraud detection.
• In connection with corporate transactions such as mergers or acquisitions, with advance notice to you.
• Professional service providers (e.g., legal advisors) under binding data processing agreements.

Every third party is contractually required to process data securely, lawfully, only for specified purposes, and with the minimum necessary information.

International Data Transfers

Personal data may be transferred outside the European Economic Area. In such cases, we ensure adequate protection through mechanisms like Standard Contractual Clauses approved by the European Commission or transfers to jurisdictions recognized as providing sufficient safeguards.

Data Retention Periods

We retain personal data only for as long as necessary to achieve the purposes for which it was collected, taking into account legal requirements and risk factors. Due to anti-money laundering regulations, certain records must be kept for a minimum of five years following account closure, and erasure requests cannot override this obligation. Anonymized data may be retained indefinitely to support service enhancements and analytics.

Your Rights and Consent

By using our services, you consent to the data processing described in this policy. Subject to GDPR, PIPEDA, and other applicable laws, you have the right to:

• Withdraw consent at any time (though certain processing may continue based on legal or contractual grounds).
• Access, correct, or request deletion of your personal data.
• Restrict processing or object to it in specific circumstances.
• Receive your data in a portable format.
• Opt out of marketing communications.
• Lodge a complaint with the relevant data protection authority.

Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects. Should such processing occur in the future, we will provide separate notice as required by law.

Data Security Practices

We employ comprehensive technical, physical, and administrative safeguards to protect your personal data from unauthorized access, loss, alteration, or unlawful processing. Information is transmitted over secure channels, and access is limited to personnel who need it for legitimate business purposes. You play a key role in security by using strong passwords, enabling two-factor authentication where available, and keeping your credentials confidential.

Changes to the Policy

This policy may be updated from time to time to reflect evolving technology, legal obligations, or operational changes. We recommend reviewing it periodically.

Contact Information

If you have questions about this Privacy Policy, wish to exercise your rights, or have any concerns, please contact our DPO at [email protected]. Additional support is available via [email protected] or our live chat feature.

Effective from: 13.02.2026

Last updated: 13.02.2026