Introduction

Frumzi operates an online gambling platform. This Privacy Policy explains what personal data we collect, how we process it, the purposes for processing, and your rights in relation to that data. It applies to data you provide, as well as data collected automatically when you visit the Frumzi Website or use our services.

Controller and contact

Frumzi is the data controller for personal data processed through the Frumzi Website and services. You can contact us via the in‑site Help Center or the standard contact methods provided on the Website. We will respond within a reasonable time and in accordance with applicable law.

What personal data we collect

• Identity data: name, date of birth, government-issued identifiers as required for identity verification.
• Contact data: email address, postal address, telephone number.
• Financial and transaction data: payment method details, deposits, withdrawals, bets, winnings, and related verification information.
• Technical data: IP address, device type, browser, language, and approximate location where permitted by you.
• Usage data: information about your interaction with the Website and services, including games played and timestamps.
• Marketing data: your preferences for marketing communications and consent status.
• Communications data: records of communications with our support team and feedback provided by you, including wellbeing information where you provide it voluntarily.

How we use your data

We use personal data to provide, operate, and improve our services, to verify identity and eligibility, to process payments, to protect against fraud and other illegal activity, to comply with legal and regulatory obligations (including anti-money laundering and responsible gaming requirements), and to communicate with you about account matters, security updates, and, where you have consent, marketing offers or personalized content.

Legal bases for processing

1. Performance of a contract: processing necessary to provide the Frumzi services you request and to manage your account.
2. Compliance with a legal obligation: processing required to meet regulatory, taxation, and reporting obligations (including anti-money laundering and player protection requirements).
3. Legitimate interests: processing for fraud prevention, risk management, security, and business development where your rights do not override these interests.
4. Consent: processing for activities such as direct marketing or individualized offers, which you may withdraw at any time.

Data sources

We collect personal data from you directly when you provide information to open or manage an account, from your interactions with the Website and services, from cookies and similar technologies, from surveys, and from third parties such as service providers and regulatory bodies as permitted by law.

Cookies and tracking technologies

We use cookies and similar technologies to operate the service, remember preferences, and analyze usage. We classify cookies as strictly necessary, preferences, and analytics. You may adjust your browser settings to reject cookies or to be prompted before cookies are set. Some features may not function without cookies.

Data sharing and disclosure

We may share personal data with service providers who process data on our behalf (for example, payment processors and IT services), with regulators as required by law, with entities involved in corporate transactions under appropriate safeguards, and with others where you have given consent. We do not sell personal data to third parties for marketing purposes without your consent.

International transfers

Your data may be transferred to servers or processors located outside your jurisdiction. We implement safeguards in line with applicable data protection law to protect the security and confidentiality of your data during such transfers.

Retention and deletion

We retain personal data for as long as necessary to fulfill the purposes described in this Policy and as required by law. In general, data related to your account and activity is retained for at least five years after the termination of the customer relationship, unless a longer retention period is required for regulatory or legal reasons.

Security

We implement technical and organizational measures to protect personal data. Data in transit is protected by TLS encryption; data at rest is encrypted using AES-256 or an equivalent standard. Access to personal data is restricted to staff with a legitimate need to process it, and regular security assessments are conducted. We monitor for security incidents and have procedures to respond to any breach, including notifying affected individuals as required by law.

Children’s privacy

The Frumzi Website is not intended for individuals under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware of such data, we will delete it promptly and take appropriate measures to restrict access.

Your rights

Depending on your location, you may have rights including: access to your personal data; rectification of inaccurate data; erasure of data (the right to be forgotten); restriction of processing; data portability; objection to processing; and withdrawal of consent where processing is based on consent. Some rights are subject to applicable law and may be limited by regulatory requirements. To exercise any right, use the in-site tools or contact us through the methods described above.

Automated decision-making

We do not rely on automated decision-making that produces legally or similarly significant effects unless required or permitted by law. If such processing occurs, you will be informed and given appropriate safeguards.

Changes to this policy

We may update this Policy from time to time. We will publish the effective date at the top and provide notification of material changes in accordance with applicable law. Continued use of the Frumzi Website after changes constitutes consent to the updated Policy.

Complaints and supervision

You may contact us with privacy concerns. You may also lodge a complaint with the competent data protection authority in your jurisdiction if you believe your rights have been violated.