Privacy Policy

Last updated: June 10, 2025

Gamblly Technologies Ltd ("Gamblly", "we", "us", "our") is committed to protecting the privacy and security of all personal and non-personal data processed through our gambling API services, website, and related platforms. This Privacy Policy outlines our practices concerning the collection, use, disclosure, and protection of information.

1. Scope and Applicability

This policy applies to all individuals and entities interacting with Gamblly services, including but not limited to API clients, website visitors, business partners, and support contacts.

2. Information We Collect

We collect the following categories of information:

API authentication credentials (API keys, secret tokens, IP whitelists)
Technical data: IP addresses, request timestamps, endpoint usage, error logs
Contact information voluntarily provided (business email, Telegram handle, company name)
Billing information processed via encrypted third-party payment processors
Server and application logs for security and performance monitoring
Device and browser information when visiting gambllyapi.com

We do NOT collect or store end-user gambling activity, personal identities, payment card details, or any KYC documents from your players.

3. How We Collect Information

Information is collected through:

Direct API requests and responses
Web server access logs
Support ticket system (Telegram / Email)
Contract and onboarding forms
Third-party billing providers (encrypted)

4. Legal Basis for Processing (GDPR Compliance)

Processing is based on:

Performance of a contract (API service delivery)
Legitimate interests (security, fraud prevention, service improvement)
Legal obligations (anti-money laundering reporting when applicable)
Consent (where explicitly provided)

5. Use of Information

Data is used exclusively for:

Providing, maintaining, and improving API services
Monitoring usage to prevent abuse and ensure fair use
Detecting and preventing fraud, bonus abuse, and security threats
Communicating service updates, outages, and invoices
Complying with applicable laws and licensing requirements
Internal analytics (anonymized and aggregated)

6. Data Sharing and Disclosure

We do not sell, rent, or trade personal data. Data may be shared only with:

Authorized employees and contractors under strict NDA
Cloud infrastructure providers (AWS, Google Cloud – EU/US regions)
Payment processors (encrypted, no direct access)
Legal authorities when required by law or subpoena
Auditors for compliance certification purposes

7. International Data Transfers

Data may be transferred to and processed in countries outside the EEA. We ensure adequate safeguards via:

EU Standard Contractual Clauses (SCCs)
Binding Corporate Rules where applicable
Data Processing Agreements with all subprocessors

8. Data Retention

API logs: 90 days (security & debugging)
Support conversations: 12 months
Financial records: 7 years (legal requirement)
Account data: retained while active, deleted within 30 days of termination

9. Security Measures

We implement industry-leading security practices:

TLS 1.3 encryption in transit
AES-256 encryption at rest
Regular penetration testing
Zero-trust network architecture
24/7 security monitoring and incident response
PCI DSS Level 1 compliant payment flows

10. Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Request deletion ("right to be forgotten")
Restrict or object to processing
Data portability
Lodge a complaint with a supervisory authority

To exercise these rights, contact: [email protected]

11. Cookies and Tracking

Our website uses only essential session cookies. No tracking, analytics, or marketing cookies are deployed.

12. Children’s Privacy

Our services are not directed to individuals under 18. We do not knowingly collect data from minors.

13. Refund Policy (No Refunds)

All payments made to Gamblly for API services, subscriptions, setup fees, top-ups, renewals, and any other service-related charges are non-refundable. By purchasing, subscribing to, topping up, or otherwise paying for Gamblly services, you acknowledge and agree that you will not be entitled to any refund under any circumstances, except where a refund is required by applicable law.

Before making any payment or starting service usage, you must carefully review and confirm all service details, including but not limited to:

API provider availability and game catalog compatibility
Supported currencies and whether your required currency is available for the API/provider you intend to use
Regional availability, technical requirements, and integration prerequisites
Pricing, billing terms, renewal cycles, and usage limits (if any)

If you proceed with payment and later discover that a specific currency, provider, or feature is not suitable for your business needs, you will still not be eligible for a refund. If you are unsure about currency availability or compatibility, contact us before payment and verify the details in writing.

Chargebacks, payment reversals, or disputes initiated in violation of this policy may result in immediate suspension or termination of access to Gamblly services, and we reserve the right to pursue any applicable remedies.

14. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email and website notice at least 30 days in advance.