Using the stawkibet.com platform involves sharing personal information. This document explains what information we collect, how we process it and what security measures we apply. Reading this policy will help you understand your rights and our obligations regarding privacy.
Terms and definitions
Personal data covers any information that allows an individual to be identified directly or indirectly. Processing includes the full range of operations with such information: from collection to deletion.
Operator — the legal entity that manages the platform and determines how information is handled. Data subject — the individual whose data is processed.
Scope of collected information
We receive data from several sources and classify it into categories.
Information you provide directly:
- Personal identifiers — surname, first name, date of birth, citizenship
- Contact details: mobile phone number, email address
- Address information — place of registration and actual residence
- Documentary information — details of your passport or other identity document
- Content of requests to customer support
Payment information:
- Bank card details — number, expiry date, cardholder name
- E-wallet details
- Cryptocurrency addresses
- Detailed transaction history
Data recorded automatically:
- Network address and derived geodata
- Device and software environment specifications
- Behavioural analytics — pages visited, actions taken
- Timeline of gaming activity and bets
Purpose of processing
Each category of information serves specific purposes:
- Compliance with regulatory requirements for customer identification
- Providing services in accordance with the user agreement
- Processing and recording financial transactions
- Fraud prevention and account protection
- Compliance with anti-money laundering legislation
- Analytics to improve the service
- Communication on technical and marketing matters
- Handling claims and resolving disputes
Legal grounds
Personal data is processed on the following grounds:
- Necessity of fulfilling contractual obligations
- Compliance with mandatory legal requirements
- Pursuing the operator's legitimate interests, balanced against the rights of the data subject
- Voluntary informed consent for optional types of processing
Recipients of data
Personal information may be shared with a limited list of third parties:
- Payment solution providers — to carry out transactions
- Identity verification services – to verify documents
- Game software developers — technical identifiers for the products to work
- Infrastructure providers — hosting, cloud services
- Government authorities — in response to lawful requests
Every contractor is bound by non-disclosure obligations and acts strictly within the instructions received.
International transfer
The service infrastructure is geographically distributed. When data is transferred to countries with an inadequate level of protection, compensating mechanisms are used: standard contractual clauses, binding corporate rules and industry certifications.
Tracking technologies
The site uses cookies and similar technologies to provide functionality and analytics.
Cookie categories:
- Strictly necessary: authorisation, sessions, basic security
- Functional — saving your language and personal settings
- Statistical – aggregated data on how the service is used
- Advertising — creating relevant offers
The first two types are mandatory; the other two are optional and managed via the consent banner or browser settings.
Protection system
Information security is ensured by a multi-layered set of measures:
- Cryptographic encryption in transit and at rest
- Firewalls and intrusion detection systems
- Strict role-based access control
- Regular security audits
- Regular penetration tests
- Staff training programmes
Absolute security is unattainable, but we make every effort to minimise risks.
Retention periods
Data is stored for a period justified by the purposes of processing and regulatory requirements:
- Identification documents — at least five years after account closure
- Transaction history – at least five years
- Communication records — three years from the last contact
- Technical logs – up to one year
Once the retention periods expire, the information is irreversibly destroyed.
Exercising data subject rights
The law grants you a number of rights:
- Request a list of the data processed and a copy of it
- Request correction of inaccuracies
- Request deletion where there are grounds
- Restrict processing while claims are being verified
- Receive data in a machine-readable format for transfer
- Withdraw consent to marketing communications
Requests are accepted via customer support. A response is provided within thirty days.
Data of minors
The service is intended for adult users. We do not knowingly collect information about persons under eighteen. If such data is discovered, it is deleted immediately.
Policy review
The document is updated as needed. We notify you of significant changes in advance — by publishing them on the website and by email. The date of the latest revision is shown at the bottom of the page.
Feedback
Send questions about the processing of personal data to the support team. If you are not satisfied with the response, you have the right to contact the personal data protection supervisory authority in your jurisdiction.
