1. Plain-English Summary
If you want the TL;DR before the full document:
- We collect the minimum personal data needed to run your membership.
- We never sell your data to advertisers or data brokers — full stop.
- Your bet diary, mood logs and analytics are private to you and isolated by row-level security.
- Payment data is handled by Stripe; we never see your card number.
- You can export or delete everything in one click from Settings → Data.
- We're GDPR, UK-GDPR and CCPA-aligned, regardless of where you live.
2. Who is the Data Controller
The data controller for Parlay Paradise is Simao Global Limited("Simao Global", "we", "us", "our"), a company providing the Parlay Paradise platform. For all data-protection matters please contact compliance@parlayparadise.app.
Our Data Protection Officer reviews every formal request within five business days. For users in the EU/UK, you have the right to lodge a complaint with your local supervisory authority (ICO in the UK, your national DPA in the EU).
3. What We Collect
We collect three categories of information:
(a) Account data — email, display name, password hash (never plaintext), avatar, country, time zone, language and tier. Required to provide the service.
(b) Product data — bet diary entries, mood logs, watchlist, leader follows, academy progress, chat messages, badges earned. Generated by your use of the platform.
(c) Technical data — IP address, browser type, device type, session timestamps, error traces. Used solely for security, fraud prevention and platform reliability.
We do not collect: government IDs, biometric data, health data, or precise location beyond country-level. We do not require linked bookmaker accounts.
4. Why We Process It (Lawful Basis)
Contract — to deliver the membership you've subscribed to.
Legitimate interest — to prevent fraud, improve the product, and protect members from problem-gambling harm.
Consent — for optional marketing emails, push notifications and analytics cookies. Consent can be withdrawn anytime in Settings → Notifications.
Legal obligation — to retain billing records for tax purposes and respond to lawful requests from supervisory authorities.
6. How Long We Keep It
Active accounts — for the lifetime of your membership plus 12 months for fraud/abuse protection.
Closed accounts — personal identifiers deleted within 30 days of account closure unless legally required to retain (e.g., tax records for 6 years).
Anonymous analytics — aggregated, non-identifiable usage statistics may be retained indefinitely.
Chat messages — retained while the channel exists; you can delete individual messages at any time.
7. Your Rights
Wherever you live, you have the following rights:
- Access — receive a copy of all data we hold on you (Settings → Data → Export).
- Rectification — correct any inaccurate data.
- Erasure ("right to be forgotten") — delete your account and data instantly.
- Restriction — pause processing while a dispute is resolved.
- Portability — export in machine-readable JSON/CSV.
- Objection — opt out of legitimate-interest processing (e.g. product analytics).
- Withdraw consent — for any consent-based processing, anytime.
To exercise any right, email compliance@parlayparadise.app. We respond within 30 days.
8. Security Measures
We apply defence-in-depth security:
- TLS 1.3 in transit, AES-256 at rest.
- Argon2id password hashing — passwords are never recoverable, only resettable.
- Row-Level Security on every database table — your data is queryable only by you.
- Mandatory 2FA for all staff with production access.
- Continuous vulnerability scanning and a public bug-bounty program.
- Quarterly third-party penetration tests.
In the unlikely event of a personal-data breach, we'll notify affected users and the relevant supervisory authority within 72 hours.
9. International Transfers
Our primary infrastructure is in the EU (Frankfurt) and US (Virginia). Where data is transferred outside the UK/EEA, we rely on the UK International Data Transfer Agreement and EU Standard Contractual Clauses to ensure equivalent protection.
10. Children
Parlay Paradise is strictly 18+ (21+ in jurisdictions where that is the local minimum). We do not knowingly collect data from anyone under 18. If we learn we have, we delete it immediately.
11. Changes to This Policy
Material changes will be emailed to all active members at least 14 days before they take effect. Non-material clarifications will be posted here with an updated "Last updated" date. Continued use after the effective date constitutes acceptance.
12. Contact
Privacy questions, data requests, or to exercise any right above: compliance@parlayparadise.app.
Postal address available on request. We aim to acknowledge within 48 hours and resolve within 30 days.