Privacy Policy

Your data, explained plainly

Any information that identifies a person, alone or combined with other details, counts as personal data. Below we cover what a service may handle, why it may need it, when it might be disclosed and which privacy choices may exist. The PlaysGrand controller and its registered address remain unverified.

Answering questions about this draft and the planned use of data will take a verified privacy contact. For now, the Contact Us page lists no confirmed contact.

Details you supply and details your activity creates

You may share personal details when signing up, asking questions, paying or corresponding. Where the service and the relevant law allow, information may also come from authorised third-party providers or compliance databases. An email contains whatever you choose to write in it.

• Who you are: name, username, account IDs, proof of identity and a photo.
• Activity: visit times, pages viewed and your preferred language.
• Payment details: data that identifies a payment account and lets a transaction happen.
• Money movements: deposits, withdrawals, spending and proof of where funds or wealth come from.
• Messages: your exchanges with support staff.
• Compliance data: where the law requires checks, public-life details such as political exposure or criminal activity.
• Device data: country, IP address and related technical records.
• Ways to reach you: phone, email and postal address.

Sharing information is voluntary, but a service missing required details may not be able to open your account, handle money or let you in.

Why information is used

To open an account, provide the agreed service, reply to enquiries and handle deposits or withdrawals, a service may need your identity, contact and payment details. Checks on identity and transactions can also help with age verification, anti-money-laundering duties, responsible-gambling obligations and preventing fraud.

Records of your browsing and device can help protect the website, track down faults, show what users prefer and set things like language. Support conversations help answer requests and may shape staff training. Compliance checks required by law may draw on public-life information.

Marketing is separate from essential service notices. Where it needs consent, that consent must come first and can be withdrawn for free. Truly anonymous data, pooled into statistics that identify no one, may be used or shared for research, testing, analysis and developing the service.

Why processing is lawful

Depending on its purpose, processing may be needed to fulfil a contract or act on your request before signing one, to meet a legal duty, or to pursue a legitimate interest that respects your rights. This draft’s legitimate interests include tidy record-keeping, explaining changes to the service or policies, understanding customer needs and strengthening website security through testing and troubleshooting.

When consent is required, you should be asked in specific terms and told enough to decide with full knowledge. If account preferences offer the option, you can withdraw it there. Earlier processing that was lawful stays lawful.

For security, your registration details, transactions and compliance with the terms may be checked. The reference framework covers credit reports and checks against third-party databases, which can mean information leaves your country. Any such review or transfer must meet the applicable law with suitable safeguards. What PlaysGrand actually does here has not been confirmed.

How long information may be kept

Information should be held only as long as its purpose, a legal duty or a legitimate need requires. Account records may be kept while the account stays active, and contact preferences until you ask for a change. Different records can have different retention periods.

Under the reference guidance, some purchase-related information may be held for about 10 years to meet tax-reporting rules. Legal duties, disputes and claims can mean certain records are kept beyond normal account use. None of this is a confirmed PlaysGrand retention schedule; a verified privacy contact needs to supply the criteria that apply.

Who may receive your information

This draft involves no sale of personal information. Under suitable agreements, providers may receive what they need to run software, process payments, manage risk, prevent fraud or handle compliance. Providers that help with the customer experience may take part too, with consent where it is required.

Disclosure may be needed because of a law, a court order, someone’s vital interests, or a sale or merger. If fraud, tampering, abusive payment reversals, money laundering or similar misconduct is suspected, information may lawfully go to regulators, law enforcement, card issuers or other gaming operators, including as part of steps to reduce gambling-related harm.

When data crosses borders, the safeguards set by the relevant privacy law still apply. The duty to process information lawfully remains when a provider is used.

Keeping your account secure

Encryption, password protection, firewalls and HTTPS are the security measures the reference lists. Whether PlaysGrand actually uses them needs confirming, and no one can promise risk-free transmission over the internet.

Keep your account and sign-in details safe and pick a strong password. If you share your credentials, another person can act through your account, and under the applicable terms you may answer for what they do.

Minors and age checks

The service is not meant for under-19s, or for anyone below a higher local legal age. Signing up is no substitute for the required age and identity checks. Suspected underage use is reviewed under the draft approach, and once a minor is identified, the necessary steps are taken to remove their information, subject to applicable obligations.

Your privacy rights

Your rights, and any valid exceptions to them, come from the applicable law. Depending on it, you may be able to:

1. Find out how your personal information is used.
2. Receive your personal records after an identity check. The reference aims to answer within one month, or up to three months for complex requests; PlaysGrand’s procedures and timelines are still to be confirmed.
3. Have wrong or incomplete details put right.
4. Request erasure, or limits on how data is collected or processed. Some records may still be needed for legal duties or claims, or as a suppression record that blocks further contact.
5. Stop direct marketing and still get essential service notices.
6. Where the law allows it, object to profiling or to processing based on legitimate interests.
7. Have a human look again at an automated decision with legal or similarly serious effects.
8. Withdraw your consent where processing depends on it.
9. Get eligible records in a structured, machine-readable form you can take elsewhere.
10. Complain to the privacy authority responsible. The reference material names Estonia’s Data Protection Inspectorate, but which authority covers PlaysGrand and your location has to be confirmed.

You may need to prove who you are when making a request. If the law allows, excessive or unreasonable requests can be charged for or declined. Using these rights with PlaysGrand depends on a verified privacy channel.

Opting out of marketing

To opt out, use the unsubscribe link in a promotional message, your account preferences where offered, or verified support. Processing may take a little time. Essential account, payment and service notices may still arrive, as they are not marketing.

Third-party sites

A website linked from this one still has its own privacy rules. Each outside site answers for how it handles information, so check its rules before you give it any details.

Contacts and future updates

PlaysGrand’s controller, registered office and privacy contact are still to be confirmed. The reference framework names a Data Protection Officer; whether PlaysGrand has one, and how to contact them, must be checked rather than assumed.