DraftAsia («we», «us», «our») is committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy explains how we collect, use, store, and protect your information when you use our sports betting platform, and sets out your rights in relation to your data.

We process your data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where it applies, and other jurisdictional requirements. By using our services, you acknowledge that you have read and understood this policy.

1. Data Controller

The data controller responsible for your personal data is DraftAsia (or the legal entity operating the platform in your jurisdiction, as stated on our website and in our Terms of Service). For any questions about this policy or your data, you can contact us using the details in the «Contact» section below.

2. What Data We Collect

We may collect and process the following categories of data:

• Identity and contact data: name, date of birth, address, email address, telephone number, and similar details you provide when registering or updating your account.
• Account and profile data: username, password (stored in encrypted form), preferences (language, currency, timezone), and communication history with our support team.
• Financial and transaction data: payment method details (e.g. card type or e-wallet identifier, not full card numbers where prohibited), deposit and withdrawal history, betting history, and account balance information.
• Technical data: IP address, browser type and version, device type, operating system, unique device identifiers, and log data related to your access to our services.
• Usage data: how you use our website and app, including pages visited, bets placed, and interaction with our products, for the purposes of improving our services and ensuring security and compliance.
• Regulatory and compliance data: identity and address verification documents (e.g. ID, utility bills), self-exclusion or limit-setting choices, and any other information we are required to collect or retain under applicable law (e.g. anti–money laundering and responsible gambling).

3. Purposes and Legal Basis for Processing

We use your data for the following purposes, where permitted by law:

• Provision of services: to open and manage your account, process bets, deposits, and withdrawals, and provide customer support. Legal basis: contract performance and, where relevant, legal obligation.
• Regulatory and legal compliance: to meet our obligations under gaming, anti–money laundering (AML), know-your-customer (KYC), and responsible gambling rules. Legal basis: legal obligation.
• Security and fraud prevention: to protect our platform and users from fraud, abuse, and security threats. Legal basis: legitimate interest and, where applicable, legal obligation.
• Communication: to send you service-related messages (e.g. account and bet confirmations, security alerts) and, where you have consented or we are permitted by law, marketing. You can opt out of marketing at any time. Legal basis: contract, consent, or legitimate interest as appropriate.
• Improvement and analytics: to analyse usage and improve our products, subject to applicable law and your choices regarding cookies and similar technologies. Legal basis: legitimate interest or consent where required.

4. Who We Share Your Data With

We may share your data only where necessary with:

• Regulators and authorities: gaming commissions, law enforcement, or other bodies when required by law or to protect our rights.
• Payment and service providers: banks, payment processors, e-wallets, and technology providers who assist us in operating our platform, under strict confidentiality and data-processing agreements.
• Professional advisers: lawyers, auditors, or consultants where necessary for legal or compliance purposes.

We do not sell your personal data to third parties for their marketing. We may share anonymised or aggregated data that does not identify you.

5. International Transfers

Your data may be processed in or transferred to countries outside your country of residence. Where we do so, we ensure appropriate safeguards (e.g. standard contractual clauses or adequacy decisions) are in place as required by applicable law.

6. Data Retention

We retain your data only for as long as necessary to fulfil the purposes set out in this policy and to comply with legal, regulatory, and accounting requirements. This may include retention for several years after account closure where required by gaming or financial regulations. When data is no longer needed, we securely delete or anonymise it.

7. Your Rights

Depending on your location, you may have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your data in certain circumstances (subject to our legal and regulatory obligations).
• Restriction: request that we limit how we use your data in certain cases.
• Data portability: receive your data in a structured, machine-readable format where technically feasible.
• Object: object to processing based on legitimate interests or to marketing.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.
• Complain: lodge a complaint with a supervisory authority in your country.

To exercise these rights, contact us using the details below. We will respond within the timeframes required by applicable law.

8. Security

We implement appropriate technical and organisational measures (including encryption, access controls, and regular reviews) to protect your data against unauthorised access, loss, or misuse. Despite our efforts, no system can be completely secure; we encourage you to keep your login details safe and to use strong passwords and two-factor authentication where offered.

9. Cookies and Similar Technologies

We use cookies and similar technologies to operate our site, remember your preferences, and analyse usage. For full details, please see our Cookie Policy.

10. Minors

Our services are not directed at individuals under the legal age for gambling in their jurisdiction. We do not knowingly collect data from minors. If you believe we have inadvertently collected such data, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and, where required by law, notify you of material changes. Your continued use of our services after publication constitutes acceptance of the updated policy. We recommend that you review this page periodically.

12. Contact

For any questions about this Privacy Policy, your personal data, or to exercise your rights, please contact us:

• Via our Contact page
• By email: support@draftasia.com

If you are in a jurisdiction where we are required to designate a Data Protection Officer (DPO), we will make the DPO contact details available on this page or upon request.

Last updated: February 2025