This Privacy Policy explains how Smash, operated by Softon Ltd, collects, uses, stores, and protects your personal data when you use our web platform. These practices apply fully to players residing in the United Kingdom. By creating an account and using our services, you agree to the handling of your information as described below.

What We Collect and Why

When you register an account, we collect information such as your full name, date of birth, email address, and chosen payment details. This information is necessary to verify your identity, process deposits and withdrawals, and meet our obligations under applicable licensing and anti-money laundering requirements. During transaction processing, we may also collect financial data — including payment method details and transaction history — to facilitate secure and accurate transfers and to detect any irregular activity on your account.

We also gather technical data automatically as you navigate our web platform. This includes your IP address, browser type, device identifiers, and session activity logs. We use this information to maintain the security and stability of the platform, identify potential threats, and ensure that the site functions correctly across different browsers and devices. Cookies are used to remember your session preferences and support a consistent browsing experience. You may adjust your cookie preferences through your browser settings, though doing so may affect certain aspects of site functionality.

How We Protect and Share Your Data

Your data is protected using 256-bit SSL encryption during transmission, and stored on secure servers with restricted internal access. Only personnel who require access to your information in order to carry out their specific duties are permitted to view it. We do not sell your personal data to third parties under any circumstances.

There are limited situations in which we share your information with external parties. These include payment gateway providers who process your transactions, identity verification services we use to confirm your details during registration or at the request of our licensing authority, and regulatory or law enforcement bodies where we are legally required to disclose information. In each case, data is shared only to the extent necessary and in accordance with applicable data protection standards.

We retain your personal data for as long as your account remains active. Following account closure or a period of inactivity, we retain your records for the duration required by our regulatory obligations. Once that retention period has elapsed, your data is securely deleted or anonymised.

You have the right to request access to the personal data we hold about you, to ask us to correct any inaccuracies, or to request the removal of your account data where no legal obligation requires us to retain it. To exercise any of these rights, please contact our support team through the channels available on our website. We will respond to your request within a reasonable timeframe and in accordance with our obligations under applicable data protection law.

If we make material changes to this Privacy Policy, we will notify you through our platform or by email before those changes take effect. We encourage you to review this page periodically to stay informed about how we handle your data.