This Privacy Policy explains how Smash, operated by Softon Ltd, collects, uses, stores, and protects your personal data when you use our web platform. These practices apply fully to all players residing in the United Kingdom. By creating an account and using our services, you agree to the handling of your information as described here.

What We Collect and Why

When you register an account, we collect identification details such as your full name, date of birth, email address, and residential address. This information is required to verify your identity, confirm you meet the minimum age requirement, and comply with our obligations under applicable gaming and anti-money laundering standards. During transaction processing, we also collect payment-related details — including the type of payment method used and transaction amounts — to facilitate deposits and withdrawals and to detect any unusual financial activity on your account.

We do not store full card numbers or sensitive authentication credentials directly. Payment processing is handled through secure third-party gateways that operate under their own data security obligations. We share only the minimum information necessary for these services to function correctly.

How Your Data Is Protected and Shared

All data transmitted between your browser and our platform is encrypted using 256-bit SSL technology. Your personal information is held on secure servers with restricted internal access — only staff with a legitimate operational need are permitted to view account data, and access rights are reviewed on a regular basis.

We may share your information with external parties in strictly limited circumstances. These include licensed payment processors, identity verification providers, and regulatory or law enforcement authorities where disclosure is required by law. We do not sell your data to third parties for marketing purposes, and we do not share it for any reason beyond those described in this policy.

We retain your personal data for as long as your account remains active. Following account closure or a prolonged period of inactivity, we keep records for the minimum duration required under applicable regulatory obligations. Once that retention period has elapsed, your data is securely deleted or anonymised.

You have the right to request a copy of the personal data we hold about you, to ask us to correct any inaccuracies, or to request the removal of your account data where no legal obligation requires us to retain it. To exercise any of these rights, please contact our support team through the channels available on our platform. We will respond to all verified requests within a reasonable timeframe.

If we make material changes to this Privacy Policy, we will notify you by posting an updated version on our website. We encourage you to review this page periodically. Continued use of the platform following any update constitutes your acknowledgement of the revised terms.

If you have concerns about how your data is handled and feel they have not been adequately addressed by our support team, you may escalate the matter to the relevant data protection authority in your jurisdiction.