Privacy Policy

This Privacy Policy describes how IGAXMING N.V. ("we", "us", "our") collects, uses, discloses and protects personal data when you visit igaxming.com, register for a customer account, purchase a software licence or otherwise interact with us. We act as a data controller for the personal data we collect from our website visitors, prospects and B2B customers; we act as a data processor on behalf of our licensees in respect of player data that flows through the Software they self-host.

We comply with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR, the California Consumer Privacy Act ("CCPA") and applicable Curaçao data-protection law. For specific GDPR rights, please also consult our GDPR Compliance page.

Account & contact data: full name, business email, country, language preference, phone (optional), company name, role.

Identification & KYC (B2B): proof-of-identity documents and corporate registration documents when required for enhanced due diligence (see AML/KYC).

Transactional data: licence purchases, plan tier, payment method (we do not store full card numbers — these are tokenised by PayPal/NowPayments), transaction amount, currency, billing address, invoice history.

Technical data: IP address, browser user-agent, device type, operating system, referring URL, language, pages visited, click events, performance metrics, error logs.

Communications: support tickets, email correspondence, chat transcripts, sales calls (when recorded with consent).

Cookies & similar technologies: see Cookie Policy.

• Contract performance (Art. 6(1)(b) GDPR): creating accounts, delivering licences, providing support, billing.
• Legal obligation (Art. 6(1)(c) GDPR): AML/CFT obligations, tax invoicing, fraud-prevention recordkeeping, responses to lawful authority requests.
• Legitimate interest (Art. 6(1)(f) GDPR): securing our infrastructure, preventing fraud, improving our Services, B2B marketing within the iGaming industry, exercising or defending legal claims.
• Consent (Art. 6(1)(a) GDPR): non-essential cookies, marketing emails (where required), case studies featuring your brand.

We share personal data only with: (i) payment processors (PayPal, NowPayments) to collect fees; (ii) cloud-infrastructure providers (database hosting, CDN, transactional email) bound by data-processing agreements; (iii) analytics & monitoring tools processing pseudonymised usage data; (iv) professional advisors (auditors, lawyers) under confidentiality; (v) competent authorities when required by law, court order or to enforce our rights.

We do not sell personal data. We do not engage in profiling that produces legal or similarly significant effects on individuals.

Where personal data is transferred outside the EEA, the UK or other restricted jurisdictions, we rely on European Commission adequacy decisions where applicable, or on the EU Standard Contractual Clauses (2021) combined with additional technical and organisational safeguards. A copy of the relevant transfer mechanism is available on request from privacy@igaxming.com.

We retain personal data only as long as necessary for the purposes for which it was collected: account data for as long as the account is active plus six (6) years to satisfy commercial-law obligations; tax-invoice data for ten (10) years; AML records for at least five (5) years after the end of the business relationship; security logs for twelve (12) months; marketing data until consent is withdrawn.

Subject to applicable law, you have the rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent and the right to lodge a complaint with a supervisory authority. To exercise any right, contact privacy@igaxming.com with reasonable proof of identity. We respond within one (1) month (extendable by two (2) months for complex requests).

We implement risk-appropriate technical and organisational measures including transport-layer encryption (TLS 1.2+), encryption at rest for sensitive fields, role-based access controls, multi-factor authentication on administrative accounts, regular vulnerability scanning, third-party penetration tests, a documented incident-response plan and staff security training. No system is 100% secure; we strive to follow industry best practice and to notify supervisory authorities and affected individuals within 72 hours when a personal-data breach so requires.

The Services are not directed to children under 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, contact privacy@igaxming.com and we will promptly delete it.

We may update this Policy from time to time. We will indicate the date of the most recent update at the top of this page and, for material changes, notify customers through the portal or by email. For any privacy-related question:
IGAXMING N.V. — Data Protection Office
Heelsumstraat 51, E-Commerce Park, Curaçao
Email: privacy@igaxming.com