This Privacy Policy explains how Smash, operated by Softon Ltd, collects, uses, stores, and protects your personal data when you use our web platform. These practices apply fully to all players residing in the United Kingdom. Please read this page carefully so you understand your rights and how we handle your information.

What We Collect and Why

When you create an account, we collect personal information such as your full name, date of birth, email address, and chosen payment details. This information is necessary to verify your identity, process deposits and withdrawals, and comply with our obligations under applicable gaming regulations. During transaction processing, we may also collect financial data — including payment method details and transaction history — to facilitate secure and accurate payments and to carry out fraud prevention checks.

We also gather technical data automatically as you navigate our web platform. This includes your IP address, browser type, device identifiers, and session activity logs. We use this information to maintain the security, stability, and functionality of the site. Cookies help us remember your preferences, keep your session active, and identify unusual access patterns that could indicate a security concern. You can manage cookie preferences through your browser settings, though disabling certain cookies may affect how the platform functions for you.

How We Protect and Share Your Data

Your data is protected using 256-bit SSL encryption across all connections between your browser and our servers. Personal and financial information is held on secure servers with restricted internal access — only staff members who require it to carry out their specific duties are permitted to view your data. We do not sell your personal information to third parties under any circumstances.

There are limited situations in which we may share your data with external parties. Payment gateways and identity verification services receive only the information they need to complete a specific transaction or verification check. Regulatory authorities may also request access to player data where we are legally required to comply. In every case, data sharing is governed by strict confidentiality agreements and is kept to the minimum necessary.

We retain your personal data for as long as your account remains active. Following account closure or a period of inactivity, we keep records for the duration required by our licensing obligations under the Anjouan Gaming Authority and by applicable financial regulations. Once the mandatory retention period has passed, your data is securely deleted or anonymised.

You have the right to request access to the personal data we hold about you, to ask for corrections where information is inaccurate, and to request deletion of your data where no legal obligation requires us to retain it. To exercise any of these rights, please contact our support team through the channels available on the platform. We will respond to all verified requests within a reasonable timeframe.

If we make material changes to this Privacy Policy, we will notify you through a notice on the platform or by email before the changes take effect. Continued use of the site following such notification constitutes your acknowledgement of the updated practices. We encourage you to review this page periodically to stay informed.