This Privacy Policy explains how Smash, operated by Softon Ltd, collects, uses, stores, and protects your personal data when you use our web platform. These practices apply fully to players residing in the United Kingdom. Please read this page carefully so you understand your rights and our responsibilities.

What We Collect and Why

When you create an account, we ask for information such as your full name, date of birth, email address, and residential address. This is necessary to verify your identity, comply with age-verification obligations, and maintain a secure account environment. During transaction processing — whether you are making a deposit or requesting a withdrawal — we also handle payment-related details such as the method used and the amounts involved. We do not store full card numbers directly; payment data is processed through certified payment gateways that operate under their own security standards.

We may also collect technical data generated during your browsing sessions, including your IP address, device type, browser version, and session activity. This information helps us detect unusual behaviour, prevent fraud, and ensure the web platform functions correctly for you. Cookies are used to maintain your session, remember your preferences, and support site security. You can manage cookie settings through your browser, though disabling certain cookies may affect how parts of the platform operate.

How We Protect and Share Your Data

Your data is protected using 256-bit SSL encryption during transmission and is held on secure servers with restricted internal access. Only staff members who require access to perform specific operational or compliance functions are permitted to view your personal information.

We share your data only in strictly limited circumstances. Payment gateways receive the information necessary to process your transactions. Identity verification services may receive relevant personal details to satisfy our know-your-customer obligations. Where required by law or by a regulatory authority, we will disclose data as directed. We do not sell your personal data to third parties or share it for marketing purposes.

You have rights over your personal data. You may request a copy of the information we hold about you, ask us to correct inaccurate details, or request that your account data be removed, subject to any legal retention requirements. To exercise any of these rights, please contact our support team through the channels listed on our website. We will respond to verified requests within a reasonable timeframe.

When an account is closed or becomes inactive, we retain your data for the period required under applicable regulations and anti-money-laundering rules. Once that retention period has elapsed, your data is securely deleted or anonymised.

If we make material changes to this Privacy Policy, we will notify you through a notice on our web platform or by the contact details associated with your account, giving you the opportunity to review the changes before they take effect. Continued use of the platform following notification will be taken as acceptance of the updated terms.

If you have concerns about how your data is handled and feel they have not been resolved through our support channels, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.