Privacy

Privacy Policy

This page explains what data iGaming Operators collects through the website, accounts, subscriptions, and product workflows, why we collect it, and how we handle it.

What we collect

  • Account and subscription information you submit, such as your email address and optional details including your name, company, role, LinkedIn profile, and use case.
  • Technical and request data used to operate and protect the site, including IP address, approximate location, device and browser information, referrer, landing page, and basic form interaction metadata.
  • Marketing attribution data sent in the URL or request, such as UTM parameters, gclid, or fbclid, when present.
  • Consent preferences and limited local browser storage used to remember account flow and cookie choices.

How we use data

  • To process account creation, subscriptions, product access, updates, and onboarding.
  • To understand demand, prioritize access, improve the product, and evaluate which pages, campaigns, or use cases are performing best.
  • To prevent spam, abuse, duplicate submissions, and other misuse of the website or forms.
  • To maintain security, troubleshoot issues, and monitor website performance.

Where data is processed

The site is delivered through Cloudflare Pages. Account, contact, and subscription workflows are processed through Cloudflare functions and relevant service providers used to operate the product.

We operate our own first-party website analytics rather than sending browsing data to a third-party provider. We do not store raw IP addresses for analytics — each event carries a one-way hash of the IP generated with a salt that rotates daily, so the hash for a given visitor differs from one day to the next. The daily salt is derived from a long-lived secret that only we hold; someone with access to both our database and that secret could, in principle, recompute a past day's hash, but nobody outside the company has that access, and we do not use this data to build profiles of visitors across multiple days. Individual, raw analytics events are retained for 90 days and then deleted; the aggregated daily counts we compute from them, and a one-off historical import carried out when this system launched, are kept longer for the continuity of our own reporting.

We do not currently sell personal data submitted through this website.

iGaming Operators is a B2B market intelligence software platform. We do not operate gambling services, accept bets, process player funds, provide gambling odds, or offer consumer gambling products.

Retention

We keep account, subscription, and related website data for as long as it is reasonably needed to operate the product, provide access, communicate about updates, and protect the site from abuse. We may delete, anonymize, or reduce stored data when it is no longer needed for those purposes.

When you ask us to erase your account, we delete the data your account produced — saved companies and searches, contact reveals, alerts, support messages, product analytics, credit history, and your entries on any of our mailing lists. Four things deliberately survive, and we would rather say so plainly than let you discover it later:

  • Your email address, on a suppression list. This is how every mailing list and outreach pipeline knows never to contact you again. Erasing it would undo the erasure.
  • Invoices, payments and subscription records. Retained under Art. 17(3)(b) GDPR because tax and accounting law requires us to keep issued invoices. We do remove what was never part of that record: any stored card token, and the IP address, browser and referrer captured alongside it.
  • Cold-outreach history, if we ever emailed you as a business contact. Anonymised, not deleted. The text of those emails — ours and your replies — is cleared, but the record that you replied or opted out remains, because that record is what proves the opt-out was honoured. Copies held in the sending mailbox are a separate system; ask us and we remove those too.
  • Company verification submissions, anonymised. If you verified a company, the company-level facts remain as the record behind its published verification badge; every field naming you — your address, role, IP, browser and the submitted payload — is cleared.

Your own account record is kept as an empty stub rather than deleted outright, so the suppression check keeps working. Everything identifying in it is cleared: name, email, IP, city, browser, referrer, campaign parameters, any linked Google sign-in, two-factor secrets and recovery codes.

Business contact data we process

To provide B2B sales-intelligence, we process limited professional contact details of decision-makers at companies in the iGaming industry (such as name, job title, employer, and work email or LinkedIn profile). This data is sourced from public registers, company websites, public professional profiles, conference and industry listings, and reputable third-party data providers.

  • Legal basis. We process this professional, business-context data under legitimate interests (Art. 6(1)(f) GDPR) — connecting relevant B2B vendors and partners — balanced against each individual's rights and freedoms.
  • Your rights. If you are an individual whose business contact data we hold, you may request access, rectification, objection, restriction, or erasure, and you may opt out of being listed or contacted at any time. We honour opt-outs by suppressing your details from outreach and from the platform.
  • How to exercise them. Use our contact form or email [email protected], or use the unsubscribe link in any email we send. We action verified requests without undue delay.

Data controller: iGaming Operators. For any data-protection matter, use our contact form or email [email protected].

Your account: access and erasure

If you hold an account with us, you can ask for a copy of your data (Art. 15 and Art. 20) or for your account and its data to be erased (Art. 17). Both are handled by email:

  • Where to write. Email [email protected] from the email address on your account. We write back to that address to confirm the request before we act: we send your data only to that address, and we erase an account only after you confirm the request from that mailbox. If you write from a different address, we ask you to confirm it from the account address. If you no longer have access to that address, tell us and we will agree another way to confirm it is you.
  • A copy of your data. We send you everything we hold about your account as a JSON file — profile, sign-in sessions, activity log, saved companies and searches, contact reveals, credits, submissions, support messages, mailing-list entries and billing records. If any part of it cannot be assembled, the file says so rather than quietly arriving short.
  • Erasure. Irreversible. It runs as a single transaction: it either completes in full or changes nothing, and we tell you which. Four things survive it, for the reasons given under Retention above: your email address on a suppression list, so that no mailing list or outreach pipeline ever contacts you again; invoices, payments and subscription records, kept under Art. 17(3)(b) GDPR, with any stored card token and the IP address, browser and referrer captured alongside them removed; company verification submissions, anonymised, with every field naming you cleared; and, if we ever emailed you as a business contact, the cold-outreach records, with the text of those emails cleared.
  • Timing and cost. We reply without undue delay, and within one month of receiving your request at the latest. It is free.

You can exercise your other rights — rectification, restriction and objection — the same way, through our contact form or at [email protected].

Your choices

  • You can choose whether to accept optional analytics cookies through the cookie banner or by reopening cookie settings.
  • You can choose not to submit optional account profile fields.
  • You can ask for a copy of your account data, or for your account to be erased, by emailing [email protected] from your account address (see Your account: access and erasure), or contact us to have account information corrected.