Privacy Policy

We collect only data that is necessary for providing the Service, meeting legal obligations, and protecting users and the platform.

Where GDPR, UK GDPR, LGPD, or similar laws apply, we rely on one or more of the following legal bases:

• Contract: to create and manage your account and provide requested services.
• Legal obligation: AML/KYC, tax, licensing, responsible gaming, and regulatory reporting.
• Legitimate interests: fraud prevention, security, analytics, service improvement, and direct marketing where permitted (balanced against your rights).
• Consent: non-essential cookies, certain marketing communications, and optional features where required.
• Vital interests or public interest: rare cases such as serious security threats or legal process.

• Provide, operate, maintain, and personalize the Service.
• Process deposits, withdrawals, bonuses, and account transactions.
• Verify identity, age, and eligibility; prevent fraud and financial crime.
• Enforce Terms, investigate misconduct, and protect users and our rights.
• Deliver responsible gaming tools and honor self-exclusion requests.
• Send service notices, security alerts, and—where permitted—marketing.
• Conduct analytics, research, and product development using aggregated or de-identified data where possible.
• Comply with legal obligations and respond to lawful requests from authorities.

We do not sell personal data. We share data only as described below and require processors to protect data under contractual safeguards.

• Service providers: hosting, payments, KYC/AML, customer support, email, analytics, and security vendors.
• Affiliates and corporate group entities under common control.
• Regulators, law enforcement, courts, or auditors when legally required or to protect rights and safety.
• Business transfers: merger, acquisition, or asset sale subject to confidentiality and notice where required.
• With your direction or consent.

Your data may be processed in countries other than your own. Where required, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs), UK International Data Transfer Agreements, supplementary measures, and data processing agreements.

You may request information about transfer mechanisms by contacting our privacy team.

We retain personal data only as long as necessary for the purposes described, including legal, accounting, AML, and dispute resolution requirements.

Account data is generally retained for the life of the account plus a defined period thereafter (often five to ten years where required for gaming and financial regulations). Marketing data is retained according to consent and applicable limitation periods.

We implement technical and organizational measures including encryption in transit, access controls, logging, segmentation, secure development practices, and vendor due diligence.

No method of transmission or storage is completely secure. You are responsible for safeguarding your credentials and notifying us of suspected unauthorized access.

We use essential cookies for authentication, security, and core functionality. With consent where required, we may use analytics and preference cookies.

You can manage cookie preferences through your browser settings and, where provided, our cookie banner. Blocking essential cookies may impair Service functionality.

• Strictly necessary: session management, fraud prevention, load balancing.
• Functional: language, theme, and saved preferences.
• Analytics: aggregated usage measurement to improve the Service.
• Marketing: conversion tracking and campaign performance where permitted.

Depending on your location, you may have the following rights subject to exceptions and verification requirements:

• Access: obtain confirmation and a copy of personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion where no overriding legal basis exists.
• Restriction: limit processing in certain circumstances.
• Portability: receive data you provided in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests or direct marketing.
• Withdraw consent: where processing is consent-based, without affecting prior lawful processing.
• Automated decision-making: request human review where applicable law provides this right.

The Service is not directed to individuals under 18 (or higher age where required). We do not knowingly collect personal data from minors. If you believe a minor has provided data, contact us and we will take appropriate steps to delete it.

If a personal data breach is likely to result in risk to your rights and freedoms, we will notify affected users and relevant supervisory authorities as required by applicable law, including GDPR Articles 33 and 34.

Privacy inquiries and data subject requests: privacy@wageblox.com. Data Protection Officer (where applicable): dpo@wageblox.com.

EU/EEA users may contact their local data protection authority. UK users may contact the Information Commissioner's Office (ICO). Other jurisdictions have comparable regulators.

We may update this Privacy Policy to reflect legal, technical, or business changes. Material updates will be communicated via the Service or email where appropriate. The 'Last updated' date indicates the latest revision.