This Privacy Policy explains how Smash, operated by Softon Ltd, collects, uses, stores, and protects your personal data when you use our web platform. These practices apply fully to players residing in the United Kingdom. Please read this page carefully so you understand your rights and our obligations.

What We Collect and Why

When you create an account, we collect information such as your full name, date of birth, email address, and chosen payment details. This data is necessary to verify your identity, process deposits and withdrawals, and meet our obligations under applicable gaming and anti-money laundering requirements. During transaction processing, we also handle payment-related data — such as partial card numbers or e-wallet identifiers — solely to facilitate and record your financial activity on the platform.

We also gather technical data during your sessions on our web platform. This includes your IP address, browser type, device type, and session logs. We use this information to maintain the security and stability of the platform, detect unusual activity, and ensure that our service functions correctly for every user. Cookies are used to remember your preferences and keep your session active; you may manage cookie settings through your browser, though doing so may affect certain aspects of your experience.

How We Protect and Share Your Data

Your data is protected using 256-bit SSL encryption during transmission and is stored on secure servers with restricted internal access. Only staff members with a legitimate operational need are permitted to view your personal information, and all such access is logged and monitored.

We do not sell your data to third parties. There are, however, limited and strictly defined circumstances in which your information may be shared externally. These include sharing with payment gateway providers to process your transactions, identity verification services used to confirm your details during registration or enhanced due diligence checks, and regulatory or law enforcement authorities when we are legally required to disclose information. Any third party we work with is required to handle your data securely and in line with applicable data protection standards.

We retain your personal data for as long as your account remains active. Following account closure or a period of inactivity, we retain your records for the duration required by our licensing conditions and applicable legal obligations. Once that retention period has elapsed, your data is securely deleted or anonymised.

You have the right to request access to the personal data we hold about you, to ask us to correct any inaccuracies, or to request deletion of your data where no legal obligation requires us to keep it. To exercise any of these rights, please contact us through our standard support channels. We will respond to your request within a reasonable timeframe and in accordance with our obligations under data protection law.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When material changes are made, we will notify you through our platform or via the email address registered to your account. We encourage you to review this page periodically to stay informed about how we handle your data.