Gambiva

Privacy Policy

At Gambiva, we process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable United Kingdom data protection law. This policy explains what information we collect, why we collect it, and how we safeguard it throughout your relationship with us.

1. Nature and scope of personal data collected

We collect several categories of personal data when you register, deposit, play, or withdraw on our platform. This information allows us to operate your account safely and meet our regulatory obligations.

Under GDPR, we are required to identify precisely what we process and why. The categories below reflect the full scope of data we may hold about you during the course of our relationship.

  • Identity details, including full name, date of birth, and nationality
  • Contact information such as postal address, phone number, and registered email
  • Financial data, including payment method details and transaction history
  • Account activity, including login records, gameplay history, and wagering patterns
  • Technical data such as IP address, device type, and browser information
  • Verification documents submitted during identity checks

How this data reaches us

Most data is provided directly by you during registration or ongoing account use. Some technical data is collected automatically through your device as you interact with our services.

2. Purposes and objectives of data processing

We process personal data for defined and lawful purposes only. Our obligations under GDPR require a documented legal basis for each type of processing we carry out.

Processing supports account administration, financial transactions, fraud prevention, and compliance with licensing requirements. We also rely on this data to provide customer support and maintain the integrity of our platform.

  • Account creation, verification, and ongoing management
  • Processing deposits, withdrawals, and transaction records
  • Fraud prevention and anti-money laundering checks
  • Meeting regulatory and licensing obligations
  • Providing customer support and resolving disputes
  • Sending account-related communications and service updates

3. Security measures and technical integrity

We maintain technical and organisational measures designed to protect personal data against unauthorised access, loss, or disclosure. These measures are reviewed and updated as our platform evolves.

Our security framework includes encryption of sensitive data during transmission, restricted internal access controls, and regular monitoring of our systems. Staff handling personal data are bound by confidentiality obligations, and access is limited to what is strictly necessary for each role. We also conduct periodic assessments of our infrastructure to identify and address potential vulnerabilities.

These safeguards reflect our obligations under GDPR to apply appropriate security measures proportionate to the risk involved.

4. Sharing information with third parties

We do not sell personal data under any circumstances. Information is shared only where necessary to operate our services or meet legal obligations.

Third-party recipients are bound by contractual obligations requiring them to process data securely and solely for the purposes specified. We carry out due diligence on any party with whom data is shared.

  • Payment processors and financial institutions handling transactions
  • Identity verification providers conducting KYC checks
  • Regulatory authorities where disclosure is legally required
  • IT infrastructure and hosting providers supporting our platform
  • Fraud prevention and anti-money laundering service providers

We use cookies and similar technologies to operate our platform, remember your preferences, and analyse how our services are used. Some cookies are essential for account functionality, while others support performance analysis.

You can manage cookie preferences through your browser settings at any time. Disabling certain cookies may affect the functionality of parts of our platform, particularly those related to session management and account security.

6. Data retention period

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy. Retention periods are determined by regulatory requirements, operational need, and applicable statutory limitation periods.

Financial and transaction records are typically retained for a minimum period required under anti-money laundering regulations. Account data may be retained after closure where necessary to meet legal obligations or resolve disputes.

7. User rights over their data

Under GDPR, you hold a defined set of rights regarding the personal data we hold about you. These rights allow you to understand, control, and where appropriate, limit our processing activities.

We respond to all valid requests within the timeframes required by law. Where a request cannot be fulfilled, we will explain the legal basis for our decision.

  • Right of access to the personal data we hold about you
  • Right to rectification of inaccurate or incomplete data
  • Right to erasure, subject to legal and regulatory limitations
  • Right to object to certain types of processing
  • Right to data portability in a structured, commonly used format

8. International data transfers

Personal data may be transferred to countries outside the United Kingdom or European Economic Area where our service providers are based. Such transfers are carried out in accordance with GDPR requirements.

Where data is transferred internationally, we rely on recognised safeguards such as standard contractual clauses or equivalent mechanisms approved under applicable data protection law. These measures ensure that your data continues to receive an appropriate level of protection, regardless of where it is processed.

9. Privacy policy updates

We may update this policy periodically to reflect changes in our practices, technology, or legal obligations. Material changes will be communicated through our platform.

We encourage you to review this policy from time to time. Continued use of our services after an update constitutes acceptance of the revised terms.

10. Contact information

Gambiva is operated under licence in Curaçao, licence number 8048/JAZ. Questions regarding this policy or requests relating to your personal data can be submitted through the contact channels available on our platform.

We are committed to addressing all privacy-related enquiries promptly and in accordance with our obligations under GDPR and applicable United Kingdom data protection law.

Responsible gambling

Gambling should always remain an enjoyable activity. If you feel your gambling is becoming a concern, free and confidential support is available through the National Gambling Helpline on 0808 8020 133. Our services are intended for individuals aged 18 and over only.