This Privacy Policy explains how Smash, operated by Softon Ltd, collects, uses, stores, and protects your personal data when you use our web platform. These practices apply fully to players residing in the United Kingdom. By creating an account and using our services, you agree to the handling of your information as described below.

What We Collect and Why

When you register an account, we collect information such as your full name, date of birth, email address, residential address, and chosen payment details. This information is necessary to verify your identity, process deposits and withdrawals, and meet our obligations under applicable gaming and financial regulations. During transaction processing, we may also collect data related to the payment method used, transaction amounts, and timing — all of which is required to complete payments securely and to maintain accurate account records.

We also gather technical data automatically as you navigate our web platform. This includes your IP address, browser type, device type, and session activity logs. We use this information to keep the platform functioning correctly, to detect unusual or potentially fraudulent behaviour, and to maintain the security of your account. Cookies are used to remember your preferences and maintain your session while you are logged in. You may adjust cookie settings through your browser, though doing so may affect certain platform functions.

How We Protect and Share Your Data

Your personal data is protected using 256-bit SSL encryption during transmission. Once received, it is stored on secure servers with restricted internal access — meaning only personnel with a legitimate operational need are permitted to view your information. We do not sell your data to third parties under any circumstances.

There are limited situations in which we share your data with external parties. Payment gateways require certain transaction details to process your deposits and withdrawals. Identity verification services may receive your personal documents to confirm your eligibility to play. Where required by law or by a regulatory authority, we may also be obliged to disclose relevant data. In each case, we share only what is strictly necessary and require that third parties handle your information responsibly.

You have rights over your personal data. You may request a copy of the information we hold about you, ask us to correct any inaccuracies, or request that your account data be removed, subject to any legal retention obligations we must fulfil. To exercise any of these rights, please contact our support team through the channels available on our web platform, and we will respond within a reasonable timeframe.

We retain your data for as long as your account remains active. Following account closure or a period of inactivity, we keep certain records for the duration required by applicable law and regulatory standards, after which data is securely deleted or anonymised.

If we make material changes to this Privacy Policy, we will notify you through our web platform or by email before those changes take effect. We encourage you to review this page periodically so that you remain informed about how your data is handled. Continued use of our platform following any update constitutes your acceptance of the revised policy.