Gambet Privacy Policy

This Privacy Policy ("Policy") describes how Gambet LLC, a Wisconsin limited liability company, doing business as Gambet ("Gambet,""we,""us,"or "our"), collects, uses, discloses, and protects personal information in connection with our websites, applications, competitions, tournaments, virtual currencies, payment and redemption functionality, support channels, and related products and services (collectively, the "Services").

This Policy applies to information we process as a controller of your personal information. It does not apply to third-party websites, chess platforms, payment providers, or identity-verification providers that operate under their own privacy policies, even when you reach them through Gambet. Capitalized terms not defined here have the meaning given in our Terms of Service.

We collect information you submit directly when you create an account, complete your profile, enter Competitions, contact support, or request a redemption.

• Account information: username, email address, password credentials, and authentication identifiers when you sign in with a third-party provider such as Google.
• Profile information: display name, avatar image, country or region, chess ratings, linked chess-platform handles, and visibility preferences you choose.
• Competition information: entries, results, moves, game records, timing data, chat or dispute messages, and appeal submissions.
• Transaction information: purchase and redemption requests, selected payout method, amounts, transaction references, and related correspondence.
• Verification information: identity documents, name, date of birth, address, and similar records you submit to our identity-verification provider when verification is required.
• Support information: messages, attachments, and contact details you send to us.

When you use the Services, we and our service providers automatically collect technical and usage information from your device and browser.

• Device and connection data: IP address, approximate location derived from IP address, device type, operating system, browser type and version, language, screen and viewport dimensions, and time-zone settings.
• Usage data: pages and screens viewed, features used, referral sources, session timestamps, clicks, navigation paths, and error or crash reports.
• Gameplay and integrity signals: move timing patterns, input methods, tab-focus and window events, board interaction telemetry, rating movement, and account-relationship signals used in Fair-Play Review.
• Cookies and similar technologies: session cookies, local storage, and comparable identifiers used to keep you signed in, remember preferences, secure the Services, and measure performance.

We receive personal information about you from third parties that help us operate the Services.

• Authentication providers, when you choose to sign in with a third-party account, share your identifier, email address, and basic profile details.
• Linked chess platforms provide your public handle, ratings, and game history when you connect an account.
• Payment, payout, and gift-card providers confirm transaction status, settlement details, and fraud or chargeback signals.
• Identity-verification and sanctions-screening providers return verification outcomes, risk indicators, and related records.
• Analytics, hosting, security, and email providers supply operational, deliverability, and abuse-prevention information.

We use personal information for the following purposes.

• Provide and operate the Services, including creating and maintaining your account, running matchmaking and Competitions, recording results, and displaying balances.
• Process purchases, entries, prize settlement, redemptions, refunds, and related bookkeeping.
• Protect competitive integrity through Fair-Play Review, including automated and artificial-intelligence-assisted anomaly analysis followed by human review where required.
• Detect, investigate, and prevent fraud, collusion, multi-accounting, account takeover, payment abuse, and other prohibited conduct.
• Verify identity, age, and eligibility, and comply with applicable legal, tax, sanctions, and record-keeping obligations.
• Communicate with you about your account, transactions, security notices, policy changes, and support requests.
• Send marketing and promotional messages where permitted, subject to your opt-out choices.
• Measure and improve performance, reliability, and product quality, including debugging and analytics.
• Enforce our Terms of Service and other policies, and establish, exercise, or defend legal claims.

We use automated systems to score gameplay and account signals for integrity, security, and fraud-prevention purposes. Automated signals may trigger a hold on a Provisional Result, a restriction on redemptions, or a temporary account limitation while a review proceeds.

Where an automated outcome would materially affect your account or funds, a human reviewer participates in the final decision, and you may contest the outcome through the appeal process described in our Terms of Service and Fair Play rules.

Where the laws of the European Economic Area, the United Kingdom, or a similar regime apply, we rely on the following legal bases: performance of a contract with you, to provide the Services you request; compliance with legal obligations, for verification, tax, and record-keeping requirements; our legitimate interests, in securing the Services, preventing fraud, and maintaining competitive integrity; and your consent, for optional marketing and certain non-essential cookies. You may withdraw consent at any time without affecting processing already carried out.

We do not sell your personal information for money. We share personal information only as described below.

• Service providers and processors that host our infrastructure, process payments and payouts, verify identity, send email, provide analytics, and supply security or anti-abuse tooling, under contracts limiting their use of the information.
• Other users, to the extent you make information public, including your username, avatar, ratings, results, and linked chess accounts that you have not hidden.
• Linked platforms and providers you direct us to interact with on your behalf.
• Legal and safety recipients, including regulators, law enforcement, courts, and advisors, where disclosure is required by law or reasonably necessary to investigate suspected fraud, protect rights and safety, or enforce our Terms.
• Corporate transaction participants, in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to this Policy or a successor policy with comparable protections.

We use strictly necessary cookies and local storage to authenticate you, preserve sessions and gameplay state, remember display preferences, and protect against abuse. We also use limited analytics and performance technologies to understand how the Services are used.

You can control cookies through your browser settings, and you may block or delete them. Blocking strictly necessary cookies will prevent sign-in, matchmaking, and gameplay features from working. We honor Global Privacy Control signals for opt-out preference purposes where legally required.

We retain personal information for as long as your account is active and thereafter for the periods needed to satisfy the purposes described in this Policy. Retention periods reflect the nature of the record: transaction, redemption, tax, and verification records are kept for the longer of seven years or the period required by applicable law; game records, integrity signals, and enforcement decisions are kept for as long as needed for dispute resolution and repeat-abuse detection; support correspondence is kept for a reasonable period following resolution.

When information is no longer needed, we delete it or de-identify it so it can no longer reasonably be associated with you.

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, access controls and least-privilege permissions on backend data, row-level authorization for user records, audit logging of staff actions, and separation of privileged operations from ordinary account access.

No system is perfectly secure. You are responsible for keeping your credentials confidential, using a strong and unique password, and notifying us promptly if you suspect unauthorized access to your account.

Depending on where you live, you may have the rights described below. We do not discriminate against you for exercising them.

• Access and portability: request confirmation of processing and a copy of the personal information we hold about you.
• Correction: request correction of inaccurate or incomplete personal information.
• Deletion: request deletion of personal information, subject to records we must retain for legal, tax, security, or dispute-resolution purposes.
• Opt out of marketing: unsubscribe from promotional email at any time using the link in the message or by contacting us; we will still send transactional and security notices.
• Opt out of targeted advertising, sale, or profiling: we do not sell personal information or engage in cross-context behavioral advertising, and you may submit a request to confirm your preferences.
• Objection and restriction: where applicable law provides, object to or request restriction of certain processing based on legitimate interests.
• Appeal: if we decline a request, you may appeal our decision by replying to our response.

Submit privacy requests to admin@gambet.com from the email address associated with your account, or through the support channels in our Help center. We will verify your identity before acting on a request, which may require you to confirm account details or complete a verification step. An authorized agent may submit a request on your behalf with written authorization that we can validate.

We respond within the time required by applicable law, generally within 45 days, and will tell you if we need an extension.

The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from anyone under 18 years of age. If we learn that we have collected personal information from a person under 18, we will close the account and delete the information, subject to records we must retain by law. A parent or guardian who believes a minor has provided personal information should contact admin@gambet.com.

We operate in the United States, and our service providers may process personal information in the United States and other countries whose data-protection laws differ from those of your jurisdiction. Where required, we use appropriate transfer mechanisms, such as the European Commission's Standard Contractual Clauses together with supplementary technical and organizational measures, to protect personal information transferred outside your region.

The Services may link to or interoperate with third-party sites, chess platforms, payment providers, and verification providers. Their collection and use of information is governed by their own privacy policies, and we do not control their practices. Review those policies before providing information to them.

We may update this Policy to reflect changes in our practices, technology, or legal requirements. When changes are material, we will provide notice through the Services or by email before the changes take effect, and we will update the effective date above. Your continued use of the Services after the effective date constitutes acceptance of the updated Policy.

Questions, requests, or complaints about this Policy may be directed to Gambet LLC, 2368 N 64th St, Wauwatosa, WI 53213, United States, or by email to admin@gambet.com. If you are in the European Economic Area or the United Kingdom, you may also lodge a complaint with your local supervisory authority.