Gamba Privacy Policy – How We Protect Your Personal Data

Gamba — operated under the domain gamba.wine — is the data controller responsible for your personal information when you use the platform. As data controller, Gamba determines the purposes for which your personal data is processed and the means by which that processing occurs.

If you have any questions, concerns or requests relating to your personal data, you can reach Gamba's data team directly at support@gamba.wine. We aim to respond to all privacy-related enquiries within 5 business days of receipt.

This Privacy Policy applies to all personal data collected through gamba.wine, including data collected during account registration, gameplay, customer support interactions, payment transactions and general browsing of the platform — whether or not you have a registered Gamba account.

Gamba collects several categories of personal data depending on how you interact with the platform. The table below summarises what we collect and why each category is needed.

Gamba collects personal data through several channels. Understanding which channel produces which type of data helps clarify what information Gamba holds at any given time.

• Direct registration: When you create a Gamba account, you provide identity and contact data directly. This is the primary source of your core account information.
• Gameplay activity: Every game round, bet and tournament entry is recorded server-side as transaction and usage data. This data is essential for accurate settlement, dispute resolution and responsible gaming monitoring.
• Payment processing: When you deposit or withdraw, financial data (method type, partial account references, transaction timestamps and amounts) is recorded. Full card details flow through certified payment gateway partners and are not passed to Gamba.
• Support interactions: When you contact Gamba via live chat or email, the content of those communications is recorded for quality assurance, training and dispute resolution purposes.
• Automated technical collection: Gamba's platform automatically collects technical and usage data when any device connects to gamba.wine — this includes IP addresses, browser and device identifiers and session logs. This happens even for visitors who have not registered an account.
• Cookies and similar technologies: As described in Section 09, Gamba uses cookies to maintain session state, prevent fraud and understand how the platform is used. See that section for full details and your opt-out options.

Gamba uses personal data for specific, documented purposes. We do not use data collected for one purpose as a basis for unrelated processing unless we have separately notified you and obtained any required consent.

• Platform operation: Running your account, processing bets and game rounds, handling deposits and withdrawals, delivering bonuses and managing tournament participation all require access to your account and transaction data.
• Identity and fraud verification: Verifying player ages, confirming that payment methods belong to the account holder and detecting patterns consistent with fraudulent activity, multi-accounting or bonus abuse.
• Responsible gaming: Monitoring gameplay patterns to identify indicators of potentially harmful behaviour. Where such indicators are present, Gamba may reach out proactively with responsible gaming information or apply account-level interventions as set out in the Responsible Gaming Policy.
• Customer support: Resolving your queries, processing complaints and maintaining records of communications for quality assurance and training purposes.
• Legal and regulatory compliance: Meeting obligations under applicable financial regulations, anti-money laundering requirements and data protection law, including retention of records for the periods required by law.
• Platform improvement: Analysing aggregated usage data to identify performance issues, improve game experience, optimise page load times and prioritise new features based on how the platform is actually used.
• Marketing communications: Sending promotional offers, bonus notifications and platform updates to players who have opted in to receive such communications. You can opt out at any time by following the unsubscribe link in any Gamba marketing message or by contacting support.

Every data processing activity at Gamba is grounded in one or more legitimate legal bases. The principal legal bases Gamba relies upon are:

• Contractual necessity: Processing that is required to deliver the services you have contracted for when you registered a Gamba account — including running your account, processing payments and settling game rounds. Without this processing Gamba cannot provide its service.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements — including anti-money laundering obligations, financial record-keeping mandates and age verification requirements.
• Legitimate interests: Processing that serves Gamba's legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring and product improvement — where those interests are not overridden by your privacy rights. Gamba conducts a balancing assessment for each legitimate interest purpose to ensure that your rights are respected.
• Consent: Where Gamba relies on your consent for processing — principally for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

Gamba does not sell your personal data. We share data only with the categories of third party described below, and only to the extent required for the stated purpose.

• Payment gateway providers: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and Visa/Mastercard acquiring banks each receive the minimum transaction data required to process deposits and withdrawals. These partners operate under their own data protection frameworks and are independently certified.
• Identity verification services: Where age or identity verification is triggered, your identity data may be shared with a certified verification provider solely for the purpose of completing that verification. The provider does not retain or use your data for any other purpose.
• Technology infrastructure providers: Cloud hosting, content delivery, platform security and analytics tools that Gamba uses to operate the platform. These providers act as data processors under Gamba's instructions and are bound by strict data processing agreements.
• Legal and regulatory authorities: Where required by law, court order or regulatory instruction, Gamba may disclose personal data to relevant authorities. This includes mandatory reporting obligations under applicable anti-money laundering regulations. Gamba will notify you of such disclosures where permitted to do so.
• Fraud prevention networks: In cases of confirmed fraud or multi-accounting, limited identifying data may be shared with industry fraud prevention networks to prevent the same individual from exploiting other platforms.

Data security is not an afterthought at Gamba — it is a foundational requirement that influences every part of the platform's architecture. The technical and organisational measures Gamba maintains include:

• Encryption in transit and at rest: All data transmitted between your device and Gamba's servers uses 256-bit SSL/TLS encryption. Sensitive data stored on Gamba's systems is encrypted at rest using industry-standard algorithms.
• Access controls: Personal data is accessible only to Gamba staff who have a documented business need to access it. Access rights are reviewed periodically and revoked immediately upon role changes or departures.
• Intrusion detection and monitoring: Gamba's infrastructure is monitored 24/7 for anomalous access patterns, potential intrusion attempts and unusual data transfer volumes.
• Regular security audits: Gamba's platform undergoes periodic security audits by qualified external parties. Findings are prioritised and remediated according to their risk severity.
• Incident response: In the event of a personal data breach that poses a risk to your rights, Gamba will notify affected players and relevant authorities in accordance with applicable breach notification timelines.

You also have a role in keeping your account secure. Use a strong, unique password for your Gamba account, do not share your login credentials with anyone, and contact support immediately if you suspect unauthorised access.

Gamba retains personal data for no longer than is necessary for the stated purpose or as required by applicable law. The following retention periods apply:

When the applicable retention period expires, personal data is either securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

Gamba uses cookies and similar browser-based technologies on gamba.wine. Cookies are small text files stored on your device that allow the platform to recognise your session, maintain your login state and understand how you interact with the site. The categories of cookie Gamba uses are:

You can manage cookie preferences through your browser settings. Most browsers allow you to view, disable or delete cookies for specific sites. Note that disabling essential cookies will prevent you from logging into your Gamba account.

As a Gamba player, you have a number of rights in relation to your personal data. These rights are not conditional on account status — they apply whether your account is active, dormant or closed. To exercise any of the rights below, submit a written request to support@gamba.wine. Gamba will respond within 30 days.

Gamba is strictly for adults aged 18 and above. The platform does not knowingly collect personal data from anyone under the age of 18. Age verification is part of the account registration process and Gamba applies additional verification checks at the withdrawal stage.

If Gamba becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account closed. If you are a parent or guardian and believe your child has registered an account on Gamba, please contact support@gamba.wine immediately. We will investigate and take appropriate action without delay.

Gamba also encourages parents and guardians to use parental control software to prevent minors from accessing gaming and betting websites on any shared device in the household.

Gamba may update this Privacy Policy from time to time — to reflect changes in how we operate, to incorporate new legal requirements or to improve the clarity of existing provisions. When we make material changes that affect your rights or how your data is used, we will notify registered players by email and by a prominent notice on the platform at least 7 days before those changes take effect.

The "Last Updated" date at the top of this policy shows when it was most recently revised. We encourage you to review it periodically. If you continue using Gamba after the effective date of any change, that constitutes your acknowledgement of the updated policy. If you disagree with any change, you have the right to close your account and request deletion of your data before the change takes effect.

For any question, concern or request relating to this Privacy Policy or to your personal data held by Gamba, please get in touch:

Please include your Gamba username and a clear description of your request or concern in any privacy-related communication. This helps us locate your account records and respond accurately and efficiently.