Privacy

Legal Basis for Processing

We process your personal data under the following legal bases:

Contract (Article 6(1)(b) UK GDPR): To provide the Stacked service you've requested.
Legitimate Interests (Article 6(1)(f) UK GDPR): For service improvements, security, and analytics.
Consent (Article 6(1)(a) UK GDPR): For marketing communications via email and SMS, and for optional analytics cookies.

Information We Collect

Account Information

Google Account Data: We use Google OAuth for authentication. We collect your Google account email, profile name, and unique identifier to create and manage your account.
Account Settings: Your preferences, notification settings, and app configuration.
Phone Number (Optional): If provided during signup, used for marketing communications.

Technical Information

Technical Data: Basic technical information about your device and browser to ensure compatibility and optimize the service. This information does not include unique identifiers and cannot be used to personally identify you.

Website Analytics

Usage Data: We collect anonymous usage data through analytics tools to understand how visitors use our website and improve user experience. You can opt out through our cookie consent tool.

Betting Information

Bet Details: Information about your bets that you manually enter or extract from photos you upload (bet amounts, teams, players, markets, odds).

How We Use Your Information

Core Functionality

Bet Tracking: Process and organize your betting information to provide real-time updates.

Notifications: Alert you about bet status changes, game events, and cash-out opportunities.

App Permissions

Camera & Photo Library

We request access to your camera and photo library to allow you to upload screenshots or photos of betting slips for automatic bet extraction. This access is only used when you choose to upload an image.

Notifications

We request notification permissions to send you real-time updates about your bet status and game events. You can control these in your device settings.

Information Sharing

We never sell your personal information to third parties. We never share your betting information with bookmakers or other betting services.

Third-Party Data Processors

We use carefully selected third-party processors to help deliver our service. All processors are bound by data processing agreements and may only process data on our instructions:

Amazon Web Services (AWS): Cloud infrastructure and data storage (UK data centres)
OpenAI: Image processing for betting slip extraction (data processed transiently, not stored)
Elastic Cloud: Search and analytics infrastructure (EU/UK hosting)
We conduct due diligence on all processors and ensure they provide appropriate security measures and GDPR compliance.

Data Retention

Account Data: Retained until you delete your account.
Betting Data (including uploaded images): Retained until account deletion. We reserve the right to delete betting data 2 years after bet completion.
Aggregated Analytics: Anonymised data may be retained indefinitely for service improvement purposes.

International Data Transfers

Your data is primarily hosted in AWS EU-WEST-2 (London) data centres. Some 3rd party service providers we use may process data outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the ICO.

Cookies

Our website may use both essential cookies (required for the website to function properly) and non-essential cookies (such as analytics cookies to understand site usage and improve user experience). Where we use non-essential cookies, we will ask for your consent before they are set, and you can opt out or change your preferences at any time. Essential cookies do not require consent as they are necessary to provide the service you have requested.

Data Security

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). We use AWS infrastructure with comprehensive security controls including access logging, multi-factor authentication, and regular security audits.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of Access: Request a copy of your personal data we hold.
Right to Rectification: Request correction of inaccurate personal data.
Right to Erasure: Request deletion of your personal data ("right to be forgotten").
Right to Restriction: Request restriction of processing in certain circumstances.
Right to Data Portability: Receive your data in a structured, commonly used format.
Right to Object: Object to processing based on legitimate interests.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at privacy@stacked.game.

Complaints

If you're unsatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.

Children's Privacy

Stacked is strictly for users aged 18 and over. We do not knowingly collect or process personal data from anyone under 18. If we become aware that we have collected data from someone under 18, we will delete it immediately. If you believe we have data from someone under 18, please contact privacy@stacked.game immediately.

Data Breach Notification

We'll notify the ICO and affected users of any relevant breaches as required by law.

Responsible Gambling

Stacked is NOT a betting platform, but Stacked does promote responsible gambling and gambling awareness. If you or someone you know needs support:

United Kingdom

National Gambling Helpline: 0808 8020 133
GambleAware: gambleaware.org
GamCare: gamcare.org.uk

Outside the UK

Please contact your national gambling support service or responsible gambling helpline.

Contact

Email: privacy@stacked.game
Website: https://stacked.game

Privacy & Security Policy

Overview

Data Controller

Data Security

Your Rights Under UK GDPR