This Privacy Policy explains how Smash, operated by Softon Ltd, collects, uses, stores, and protects the personal information you provide when using our web platform. These practices apply fully to players residing in the United Kingdom. By creating an account and using our services, you agree to the handling of your data as described below.

What We Collect and Why

When you register an account, we collect personal information such as your full name, date of birth, email address, residential address, and payment details. This information is necessary to verify your identity, process deposits and withdrawals, and meet our obligations under applicable anti-money laundering and responsible gambling requirements. During transaction processing, your payment method details are passed to our payment gateway partners solely to complete the transfer — we do not store full card numbers on our systems.

We also collect technical data as you use our web platform, including your IP address, browser type, device identifiers, and session activity logs. This data helps us maintain the security and stability of the platform, detect suspicious behaviour, and ensure a consistent experience across different browsers and screen sizes.

How We Protect and Share Your Data

Your data is protected using 256-bit SSL encryption during transmission and is held on secure servers with restricted internal access. Only members of our team who require access to fulfil a specific operational function are permitted to view personal account data, and all such access is logged and monitored.

We share your information only in strictly limited circumstances. Identity verification service providers may receive relevant personal details to confirm your identity and age as required by our licensing conditions. Regulatory and law enforcement authorities may be provided with data where we are legally obliged to do so. Beyond these circumstances, we do not sell, rent, or trade your personal data with third parties for marketing or any other commercial purpose.

Following account closure or a period of inactivity, we retain your data for as long as required by the regulatory obligations applicable to our operations. Once that retention period has elapsed, your data is securely deleted from our systems.

You have the right to request access to the personal data we hold about you, to ask for corrections where information is inaccurate, or to request that your account data be removed, subject to any legal obligations that require us to retain certain records. To exercise any of these rights, please contact us through our customer support channels and we will respond within a reasonable timeframe.

If we make material changes to this Privacy Policy, we will notify you by email or by a notice on our web platform before the changes take effect. We encourage you to review this page periodically so that you remain informed about how we handle your information. Your continued use of the platform following any update constitutes acceptance of the revised policy.