Privacy policy

GameBridge Services Limited (“GameBridge,” “Company,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your information when you visit our website at gamebridge.io, use our platform services (including the GameBridge platform and all related services), or otherwise interact with us.

By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use our services.

1. Information We Collect

1.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you:

• Complete a contact form, request a demo, or submit an inquiry
• Subscribe to our newsletter or marketing communications
• Register for an account or onboard as an operator on our platform
• Communicate with us via email, phone, live chat, or other channels
• Participate in surveys, events, webinars, or promotional activities
• Apply for a position with our company

This information may include your name, email address, company name, job title, phone number, mailing address, billing information, and any other details you choose to provide.

1.2 Information Collected Automatically

When you visit our website or use our services, we may automatically collect certain technical information, including:

• IP address and approximate geographic location
• Browser type, version, and language preferences
• Operating system and device information
• Pages visited, time spent on pages, and navigation paths
• Referring website addresses and search terms
• Device identifiers and screen resolution
• Date and time of access

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Business partners and resellers who refer you to our services
• Analytics providers (such as Google Analytics)
• Advertising networks and social media platforms
• Publicly available sources and business directories

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: To provide, maintain, and improve our platform and services
• Communication: To respond to your inquiries, provide customer support, and send service-related notices
• Demonstrations: To schedule and conduct product demonstrations tailored to your requirements
• Marketing: To send you marketing communications, product updates, and industry insights (with your consent where required)
• Analytics: To analyse usage patterns, monitor service performance, and improve user experience
• Security: To detect, prevent, and address fraud, security incidents, and technical issues
• Compliance: To comply with applicable laws, regulations, and legal obligations
• Business operations: To manage our business relationships, process transactions, and maintain records

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction that requires a legal basis for processing personal data, we rely on the following:

• Contractual necessity: Processing necessary to perform our contract with you or take pre-contractual steps at your request
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services, marketing, and fraud prevention
• Consent: Where you have given explicit consent, such as for marketing communications
• Legal obligation: Processing necessary to comply with a legal or regulatory obligation

4. Information Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• Service providers: We engage trusted third-party companies to perform services on our behalf, including cloud hosting (AWS), email delivery (AWS SES), analytics, payment processing, identity verification, and customer support tools. These providers are contractually obligated to protect your data.
• Business transfers: In the event of a merger, acquisition, reorganisation, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• Legal requirements: We may disclose your information when required by law, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, property, or safety.
• With your consent: We may share your information with third parties when you have given us explicit consent to do so.

5. International Data Transfers

GameBridge Services Limited, incorporated in the Isle of Man with company number 022763V, operates globally with offices in the Isle of Man, United Kingdom, United Arab Emirates, United States, and Cyprus. Your information may be transferred to and processed in countries other than your country of residence. When we transfer personal data internationally, we implement appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Binding corporate rules for intra-group transfers
• Your explicit consent where required

6. Data Security

We implement comprehensive technical and organisational measures to protect your information, including:

• Encryption of all data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest using AWS KMS
• Cloudflare WAF with OWASP ruleset and unmetered DDoS protection
• Role-based access controls (RBAC) with department-level permissions
• Two-factor authentication (2FA/TOTP) for administrative access
• Regular security assessments, penetration testing, and vulnerability scanning
• Employee training on data protection and security best practices
• Incident response procedures and breach notification protocols

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account data: Retained for the duration of the business relationship and for a reasonable period thereafter
• Marketing data: Retained until you unsubscribe or withdraw consent
• Transaction records: Retained for 7 years in accordance with iGaming regulatory requirements
• Website analytics: Retained for up to 26 months

When personal data is no longer required, we securely delete or anonymise it in accordance with our data retention policies.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal information we hold about you
• Right to rectification: Request correction of inaccurate or incomplete information
• Right to erasure: Request deletion of your personal information (subject to legal and regulatory obligations)
• Right to restriction: Request that we restrict the processing of your information
• Right to data portability: Request a machine-readable copy of your data
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: Withdraw previously given consent at any time
• Right to lodge a complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us at privacy@gamebridge.io. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your browsing experience, analyse website traffic, and personalise content. The types of cookies we use include:

• Essential cookies: Required for the website to function properly (session management, security, your cookie choice and language preference)
• Analytics cookies: Help us understand how visitors interact with our website (Google Analytics 4, Google Tag Manager)
• Marketing cookies: Used to deliver relevant advertisements and track campaign performance (Meta Pixel, Google Ads, TikTok Pixel)
• Preference cookies: Remember your settings and preferences (theme, language)

Cookies and consent

When you first visit gamebridge.io, a cookie notice asks you to choose between accepting all cookies and Essential only. Our analytics and marketing tags are loaded through Google Tag Manager. If you choose Essential only, Google Tag Manager is not loaded on the pages you visit afterwards, and only the cookies that record your choice (gb_consent) and your language preference (gb_lang) are set. Your choice is stored for 180 days; to change it, clear the cookies for gamebridge.io and the notice will appear again.

You can also manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

10. Third-Party Links

Our website may contain links to third-party websites, services, or applications that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our website.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us immediately at privacy@gamebridge.io.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the “Last updated” date at the top of this page
• Notify existing customers via email for significant changes
• Provide a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@gamebridge.io
• General inquiries: hello@gamebridge.io
• Address: GameBridge Services Limited, Third Floor, 34 Hope Street, Douglas, Isle of Man IM1 1AP (company number 022763V)

For EU/EEA data protection inquiries, you may also contact your local supervisory authority. In the United Kingdom, the relevant authority is the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the Isle of Man, you may contact the Isle of Man Information Commissioner.