Privacy

Privacy Policy

This page explains what data iGaming Operators collects through the website, accounts, subscriptions, and product workflows, why we collect it, and how we handle it.

What we collect

  • Account and subscription information you submit, such as your email address and optional details including your name, company, role, LinkedIn profile, and use case.
  • Technical and request data used to operate and protect the site, including IP address, approximate location, device and browser information, referrer, landing page, and basic form interaction metadata.
  • Marketing attribution data sent in the URL or request, such as UTM parameters, gclid, or fbclid, when present.
  • Consent preferences and limited local browser storage used to remember account flow and cookie choices.

How we use data

  • To process account creation, subscriptions, product access, updates, and onboarding.
  • To understand demand, prioritize access, improve the product, and evaluate which pages, campaigns, or use cases are performing best.
  • To prevent spam, abuse, duplicate submissions, and other misuse of the website or forms.
  • To maintain security, troubleshoot issues, and monitor website performance.

Where data is processed

The site is delivered through Cloudflare Pages. Account, contact, and subscription workflows are processed through Cloudflare functions and relevant service providers used to operate the product.

We operate our own first-party website analytics rather than sending browsing data to a third-party provider. We do not store raw IP addresses for analytics — each event carries a one-way hash of the IP generated with a salt that rotates daily, so the hash for a given visitor differs from one day to the next. The daily salt is derived from a long-lived secret that only we hold; someone with access to both our database and that secret could, in principle, recompute a past day's hash, but nobody outside the company has that access, and we do not use this data to build profiles of visitors across multiple days. Individual, raw analytics events are retained for 90 days and then deleted; the aggregated daily counts we compute from them, and a one-off historical import carried out when this system launched, are kept longer for the continuity of our own reporting.

We do not currently sell personal data submitted through this website.

iGaming Operators is a B2B market intelligence software platform. We do not operate gambling services, accept bets, process player funds, provide gambling odds, or offer consumer gambling products.

Retention

We keep account, subscription, and related website data for as long as it is reasonably needed to operate the product, provide access, communicate about updates, and protect the site from abuse. We may delete, anonymize, or reduce stored data when it is no longer needed for those purposes.

When you ask us to erase your account, we delete the data your account produced — saved companies and searches, contact reveals, alerts, support messages, product analytics, credit history, and your entries on any of our mailing lists. Three things deliberately survive, and we would rather say so plainly than let you discover it later:

  • Your email address, on a suppression list. This is how every mailing list and outreach pipeline knows never to contact you again. Erasing it would undo the erasure.
  • Invoices, payments and subscription records. Retained under Art. 17(3)(b) GDPR because tax and accounting law requires us to keep issued invoices. We do remove what was never part of that record: any stored card token, and the IP address, browser and referrer captured alongside it.
  • Cold-outreach history, if we ever emailed you as a business contact. Anonymised, not deleted. The text of those emails — ours and your replies — is cleared, but the record that you replied or opted out remains, because that record is what proves the opt-out was honoured. Copies held in the sending mailbox are a separate system; ask us and we remove those too.
  • Company verification submissions, anonymised. If you verified a company, the company-level facts remain as the record behind its published verification badge; every field naming you — your address, role, IP, browser and the submitted payload — is cleared.

Your own account record is kept as an empty stub rather than deleted outright, so the suppression check keeps working. Everything identifying in it is cleared: name, email, IP, city, browser, referrer, campaign parameters, any linked Google sign-in, two-factor secrets and recovery codes.

Business contact data we process

To provide B2B sales-intelligence, we process limited professional contact details of decision-makers at companies in the iGaming industry (such as name, job title, employer, and work email or LinkedIn profile). This data is sourced from public registers, company websites, public professional profiles, conference and industry listings, and reputable third-party data providers.

  • Legal basis. We process this professional, business-context data under legitimate interests (Art. 6(1)(f) GDPR) — connecting relevant B2B vendors and partners — balanced against each individual's rights and freedoms.
  • Your rights. If you are an individual whose business contact data we hold, you may request access, rectification, objection, restriction, or erasure, and you may opt out of being listed or contacted at any time. We honour opt-outs by suppressing your details from outreach and from the platform.
  • How to exercise them. Use our contact form or email [email protected], or use the unsubscribe link in any email we send. We action verified requests without undue delay.

Data controller: iGaming Operators. For any data-protection matter, use our contact form or email [email protected].

Your account: access and erasure

If you hold an account with us, you can exercise two of your rights yourself, without asking anyone, from Account & Billing:

  • Download my data (Art. 15). Returns everything we hold about your account as a JSON file — profile, sign-in sessions, activity log, saved companies and searches, contact reveals, credits, submissions, support messages, mailing-list entries and billing records. If any part of it cannot be assembled, the file says so rather than quietly arriving short.
  • Delete my account and data (Art. 17). Irreversible, and confirmed by typing DELETE_MY_DATA. Erasure runs as a single transaction: it either completes in full or changes nothing and tells you it failed. See Retention above for the three things that survive it, and why.

You can also exercise these rights — along with rectification, restriction and objection — through our contact form or at [email protected].

Your choices

  • You can choose whether to accept optional analytics cookies through the cookie banner or by reopening cookie settings.
  • You can choose not to submit optional account profile fields.
  • You can download or permanently delete your account data yourself from Account & Billing, or contact us to have account information corrected.