1. Introduction
1.1 Craze is committed to safeguarding the privacy and personal data of its customers and users. This Privacy Policy outlines how we collect, use, disclose, store, and protect your personal information in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, and any other applicable UK or international laws and regulations.
1.2 This Privacy Policy applies to all data collected through our website, mobile application, services, and any associated platforms operated by Craze.
1.3 By registering an account, using our services, depositing or withdrawing funds, or otherwise interacting with our platform, you are deemed to have read, understood, and agreed to the terms of this Privacy Policy and our Terms and Conditions. If you do not accept any part of this Privacy Policy, you must immediately cease using our services and platform.
1.4 We may amend this Privacy Policy periodically. All amendments will be published on our platform. Continued use of our services following such amendments constitutes acceptance of the revised terms.
2. Categories of Personal Data Collected
2.1 Craze collects and processes personal information that you provide directly or indirectly, including but not limited to the following categories:
(i) Identification Data: Full name, date of birth, gender, and nationality. (ii) Contact Data: Residential address, postal address, email address, telephone number, and device contact lists (subject to your consent). (iii) Financial Data: Bank account details, card information, account statements, and transaction history. (iv) Verification Data: Images or numbers from government-issued identification documents (e.g. passport, driving licence), proof of address, or national identifiers such as tax file numbers. (v) Technical Data: Device type and ID, IP address, geolocation data, browser type, access times, and referring URLs. (vi) Usage Data: Page views, login times, features used, interactions with advertisements, and behavioural activity on our platform. (vii) Communication Data: Records of communications with our support team, including via email, telephone, or online chat. (viii) Marketing and Survey Data: Responses to surveys, feedback forms, and promotional activities.
3. Legal Basis and Purpose for Processing
3.1 We collect and process your personal data on one or more of the following legal bases under the UK GDPR:
(a) To perform a contract with you or to take steps at your request before entering into a contract (Article 6(1)(b)); (b) To comply with a legal obligation to which we are subject, including regulatory and anti-money laundering requirements (Article 6(1)(c)); (c) For the purposes of our legitimate interests, provided that your interests and fundamental rights do not override those interests (Article 6(1)(f)); (d) Where you have provided your explicit consent for a particular processing activity (Article 6(1)(a)).
3.2 We process your personal data for the following purposes:
(i) Creating, managing, and operating your user account. (ii) Verifying your identity and conducting Know Your Customer (KYC) and anti-money laundering (AML) checks. (iii) Processing deposits, withdrawals, and other financial transactions. (iv) Detecting, preventing, and investigating fraud, money laundering, and other illegal activities. (v) Monitoring usage and promoting responsible gambling practices. (vi) Communicating with you in relation to service updates, security notifications, and account management. (vii) Sending promotional offers and marketing materials (subject to your preferences). (viii) Complying with applicable laws, regulations, and licensing conditions.
4. Disclosure and International Transfers of Data
4.1 We may disclose your personal data to third parties only where necessary and permitted by law, including to:
(a) Payment service providers, financial institutions, and payment gateway operators for processing transactions; (b) Identity verification and KYC/AML service providers for compliance and fraud prevention; (c) Regulators, law enforcement agencies, courts, or public authorities upon lawful request or where required to comply with applicable laws; (d) Business partners, affiliates, and service providers engaged in hosting, technical support, customer service, analytics, and marketing functions; (e) Research bodies conducting authorised studies into gambling-related harm (where anonymisation of data is ensured).
4.2 Some of the above recipients may be located outside the United Kingdom or the European Economic Area. Where we transfer your personal data internationally, we ensure adequate safeguards are in place to protect your data, including standard contractual clauses approved by the UK Information Commissioner’s Office or equivalent legal mechanisms.
5. Security of Data
5.1 Craze employs appropriate technical and organisational measures to safeguard your personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include:
(i) 256-bit Secure Socket Layer (SSL) encryption of all communications and transactions; (ii) Regular security audits and penetration testing; (iii) Role-based access controls for employees; (iv) Secure data centres and firewalls; (v) Data minimisation and pseudonymisation practices where applicable.
5.2 We also require that our partners, suppliers, and service providers implement equivalent measures to maintain the confidentiality and integrity of your data.
6. Data Retention
6.1 Your personal data will be retained only for as long as necessary for the purposes for which it was collected, including satisfying legal, regulatory, accounting, or reporting requirements.
6.2 In accordance with our statutory obligations under applicable laws (including anti-money laundering and responsible gambling legislation), we may retain certain personal data for a minimum of five (5) years from the date of account closure.
6.3 When your data is no longer required, it will be securely deleted, anonymised, or otherwise rendered irretrievable.
7. Your Rights
7.1 You have the following rights under the UK GDPR:
(i) Right to access – to request a copy of the personal data we hold about you; (ii) Right to rectification – to correct any inaccurate or incomplete data; (iii) Right to erasure – to request deletion of your data where legally permissible; (iv) Right to restrict processing – to limit our use of your data in certain circumstances; (v) Right to data portability – to receive your data in a structured, machine-readable format; (vi) Right to object – to object to processing based on legitimate interests or direct marketing; (vii) Right to withdraw consent – where processing is based on your consent.
7.2 To exercise any of your rights, please contact our Data Protection Officer at [insert email address]. We will respond to your request within one calendar month, subject to verification of your identity and applicable legal restrictions.
8. Cookies and Similar Technologies
8.1 Our website uses cookies and similar technologies to enhance user experience, monitor performance, and deliver targeted content. Cookies are small data files placed on your device when you visit our platform.
8.2 We use the following types of cookies:
(i) Strictly necessary cookies – essential for basic functionality of the site; (ii) Performance cookies – to analyse site usage and improve performance; (iii) Functional cookies – to remember your preferences and settings; (iv) Marketing cookies – to deliver personalised advertisements based on your behaviour.
8.3 You may modify your browser settings to disable cookies. However, please note that certain features of the site may not function correctly without them.
9. Marketing Communications
9.1 You may receive service updates, legal notices, and marketing communications from us via email, SMS, or in-app notifications, in accordance with your contact preferences.
9.2 You may opt out of receiving promotional communications at any time by updating your preferences in the “My Account” section or by contacting customer support.
10. Confidentiality of Winnings
10.1 Craze treats all information regarding your winnings, cash-outs, and account balances as strictly confidential. We will not disclose such information to any third party except as required by law, regulation, or order of a competent authority.
11. Third-Party Websites and Services
11.1 Our platform may contain links to third-party websites or services. Craze is not responsible for the privacy practices or content of such third parties. You are encouraged to review their respective privacy policies before providing any personal data.
12. Complaints and Supervisory Authority
12.1 If you are dissatisfied with the way we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or the equivalent data protection authority in your country of residence.
ICO Contact Details: Website: https://ico.org.ukHelpline: 0303 123 1113
13. Contact Details
If you have any questions regarding this Privacy Policy or the manner in which we handle your data, please contact our Customer Support Services:
Email: [Insert Customer Service Email] Address: [Insert Registered Business Address]