This Privacy Policy explains how Smash, operated by Softon Ltd, collects, uses, stores, and protects your personal data when you use our web platform. These practices apply fully to all players residing in the United Kingdom. Please read this page carefully so you understand your rights and how we handle your information.

What We Collect and Why

When you create an account, we collect personal information such as your full name, date of birth, email address, and payment details. This information is necessary to verify your identity, process deposits and withdrawals, and comply with our obligations under applicable gaming and anti-money laundering regulations. During transaction processing, we may also collect data related to the payment method used, transaction amounts, and timestamps. We do not collect more information than is reasonably required to operate your account securely and lawfully.

We also gather technical data automatically when you access our web platform. This includes your IP address, browser type, device identifiers, and session activity logs. We use this data to maintain the security and functionality of the site, detect suspicious behaviour, and ensure a consistent experience across sessions. Cookies are used to manage your session and remember your preferences; you may adjust your cookie settings through your browser, though doing so may affect certain features of the platform.

How We Protect and Share Your Data

Your data is protected using 256-bit SSL encryption during transmission and is stored on secure servers with restricted internal access. Only staff members who require access to your information in order to carry out their duties are permitted to view it, and all such access is logged and monitored.

We share your personal data only in strictly limited circumstances. Payment gateways process your financial transactions and receive only the data necessary to complete those transactions. Identity verification services may receive documentation you submit during account verification. Regulatory and law enforcement authorities may receive data where we are legally required to disclose it. We do not sell your personal data to third parties or share it for marketing purposes.

You have the right to access the personal data we hold about you, request corrections to any inaccurate information, or ask us to delete your data where we are no longer required to retain it by law. To exercise any of these rights, please contact our support team through the channels available on our web platform. We will respond to your request within a reasonable timeframe.

Following account closure or a period of inactivity, we retain your data for as long as required under applicable legal and regulatory obligations. Once that retention period has elapsed, your data is securely deleted or anonymised.

If we make material changes to this Privacy Policy, we will notify you by posting an updated version on our web platform. Continued use of the platform following any such update constitutes your acknowledgement of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your information.