Privacy Policy

This Privacy Policy sets out how Stake collects, processes, protects, discloses, and, where applicable, destroys the personal data of users accessing its online casino and sportsbook services in India. All personal data is handled strictly on the basis of user consent, in accordance with applicable data protection principles. The policy is intended to provide a clear and transparent account of how personal information is managed across all interactions with the platform. Users are encouraged to read this document carefully before registering or continuing to use the services.

Privacy and Data Protection at Stake

Stake is committed to maintaining the privacy and security of personal data collected from users in India. Personal information is gathered only for defined, lawful purposes and is protected through a combination of technical and organisational security measures. The platform does not sell or rent personal data to third parties, and all data handling practices are designed to align with applicable Indian privacy and data protection frameworks.

The following points summarise the key aspects of data collection and protection on the platform:

  1. Personal data collected includes full name, date of birth, contact details, government-issued identification, and financial account information.
  2. Device and technical data such as IP addresses, browser type, and operating system information are collected automatically upon site access.
  3. Behavioural data, including browsing activity and gaming preferences, is recorded to improve service delivery.
  4. Data is collected at the point of account registration, during identity verification, and throughout ongoing platform use.
  5. All collected data is stored on secured servers with restricted access controls to prevent unauthorised entry.
  6. Encryption technologies are applied to sensitive data during transmission and at rest.
  7. Internal access to personal data is limited to authorised personnel with a documented need to process it.
  8. Regular security audits and system reviews are conducted to identify and address potential vulnerabilities.
  9. Users retain the right to access, correct, and request deletion of their personal data at any time by contacting the platform's support team.
  10. Data retention periods are governed by regulatory requirements and are not extended beyond what is necessary for the stated purpose.

Users may request access to their personal data, seek corrections to inaccurate records, or apply for deletion of information that is no longer required for the purposes for which it was collected. These rights are exercisable by submitting a written request through the designated support channels. Stake processes all such requests in accordance with applicable timelines.

In India, the platform operates in alignment with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and emerging obligations under the Digital Personal Data Protection Act, 2023. Stake continually reviews its compliance posture to ensure adherence to evolving regulatory requirements applicable to online services operating in the Indian market.

How Collected Information is Used

Personal data collected by Stake is used exclusively for purposes that are directly connected to the provision, administration, and improvement of its online services. Information submitted during account registration enables identity verification and ensures compliance with applicable legal obligations, including anti-money laundering and responsible gaming requirements. Transaction data is processed to facilitate deposits, withdrawals, and the accurate recording of account activity. Behavioural and usage data supports ongoing improvements to the platform and assists in tailoring the service experience to individual preferences.

The specific uses of collected personal data include the following:

  1. Creating and managing user accounts, including verification of identity and eligibility to access services.
  2. Processing financial transactions such as deposits, withdrawals, and the crediting of bonuses or promotional rewards.
  3. Communicating with users regarding account activity, security alerts, policy updates, and support responses.
  4. Conducting analytics to understand platform usage patterns and improve service features.
  5. Delivering personalised content, recommendations, and promotional communications where the user has provided consent.
  6. Fulfilling obligations under applicable law, including responding to requests from regulatory authorities.
  7. Detecting, investigating, and preventing fraudulent activity, unauthorised access, or misuse of the platform.
  8. Supporting responsible gaming initiatives by monitoring usage patterns and enabling self-exclusion or limit-setting tools.
  9. Maintaining records required for audit, legal defence, or dispute resolution purposes.
  10. Sharing data with licensed third-party service providers who assist in the technical operation of the platform, subject to confidentiality obligations.

All data processing activities are carried out on a lawful basis, which may include user consent, contractual necessity, legal obligation, or legitimate interest, as applicable to each specific processing activity. Stake maintains records of processing activities and does not use personal data for purposes incompatible with those originally disclosed to the user.

How Users Can Access and Manage Their Information

Users registered on the Stake platform in India have the ability to view and update their personal information directly through their account settings. Where corrections to name, contact details, or other account information are required, users may make these changes via the account profile section or by contacting the support team with appropriate documentation. Requests for the deletion or restriction of personal data are handled through the designated data rights request process, available through the platform's support channels.

Users acknowledge that certain security verification steps are required before any modifications are made to sensitive account information. This is a standard procedure to protect the account holder from unauthorised changes. Where payment information is processed, users consent to the handling of that data by authorised electronic payment service providers engaged by Stake, who are bound by their own data security obligations.

Stake is committed to upholding the privacy of all registered users and takes appropriate steps to ensure that personal data remains accurate, current, and secure throughout the period it is retained on the platform.

Protection of Minors

Stake’s services are strictly intended for users who are 18 years of age or older. Access to the platform by minors is prohibited, and the operator takes all reasonable steps to enforce this restriction. The following points outline the platform’s approach to protecting the privacy of children:

  1. The platform is designed and intended exclusively for adult users aged 18 and above.
  2. Stake cannot independently confirm the age of a user without the submission and verification of valid government-issued identification documents.
  3. Where it is discovered or reported that a minor has registered an account, that account will be suspended immediately pending investigation.
  4. Any personal data found to have been collected from a user who is confirmed to be under the age of 18 will be permanently deleted from the platform’s records.
  5. Parents or legal guardians who believe a minor may have accessed or registered on the platform are encouraged to contact the support team promptly with supporting documentation.
  6. Stake cooperates fully with parental or guardian requests for data deletion and will confirm completion of the deletion process in writing.

International Transfer of Personal Data

As an online platform with global operations, Stake may process personal data in countries outside India where its affiliated entities, technology providers, or service partners are located. The laws governing data protection in these jurisdictions may differ from those applicable in India. By continuing to use the platform, users acknowledge and consent to the transfer and processing of their personal data in these locations.

Stake ensures that all international data transfers are conducted in accordance with applicable legal standards and that confidentiality and security obligations are imposed on all parties involved in such processing. The following points provide further detail on how international transfers are managed:

  1. Personal data may be transferred to and stored in countries where Stake's technology infrastructure or service providers operate.
  2. All third parties receiving personal data under international transfer arrangements are contractually required to maintain confidentiality and apply appropriate security safeguards.
  3. Transfers are carried out only to the extent necessary to fulfil the services and legal obligations described in this policy.
  4. Where required by applicable law, additional transfer mechanisms such as standard contractual clauses or equivalent protections may be applied.
  5. Users retain their rights to access, correct, or request deletion of their data regardless of where it is processed.
  6. Stake does not transfer personal data internationally for purposes beyond those disclosed in this Privacy Policy.

Use of Cookies on the Platform

Cookies are small text files that are placed on a user’s device when a website is accessed. Stake uses cookies to gather statistical data about how users interact with the platform, to analyse browsing behaviour, to personalise the service experience, and to support the ongoing improvement of site functionality. These small files allow the platform to recognise returning users, remember preferences, and deliver a more consistent experience across sessions. Cookies used on the platform are retained for a period of up to one year from the date they are set, after which they expire automatically. Users may manage or disable cookies through their browser settings; however, doing so may affect the availability of certain platform features. By continuing to use the platform, users acknowledge the use of cookies as described in this section.

Acceptance of This Privacy Policy

By accessing or using Stake’s services in India, users are deemed to have read and accepted the terms of this Privacy Policy in full. The most recently published version of this document supersedes and replaces all prior versions, and it is the responsibility of each user to review the policy periodically to remain informed of any changes. Continued use of the platform after any such update constitutes acceptance of the revised policy as in effect at that time.

Sharing of Personal Data with Third Parties

Stake may share personal data with third parties in specific circumstances, including where required by law, as part of legal proceedings or dispute resolution processes, or in fulfilment of contractual obligations. Where a list of authorised third parties is maintained on the platform, users may refer to that list for details. In cases where specific third parties are not individually listed, Stake will inform users of the purpose and scope of such sharing at the relevant time. By providing personal data and continuing to use the platform, users consent to the sharing of their information as described in this section.

The following points outline the circumstances and conditions under which personal data may be shared with third parties:

  1. Personal data may be disclosed to regulatory authorities, law enforcement agencies, or courts where required by applicable Indian law or binding legal order.
  2. Data may be shared with licensed payment processors and financial institutions for the purposes of processing transactions and complying with anti-money laundering requirements.
  3. Technology service providers engaged to support platform operations may access personal data to the extent necessary to perform their contracted services.
  4. Identity verification and know-your-customer service providers may receive personal data for the purposes of confirming user eligibility and preventing fraud.
  5. Where Stake undergoes a corporate restructuring, merger, or acquisition, personal data may be transferred to the successor entity under equivalent confidentiality conditions.
  6. Marketing and analytics partners may receive aggregated or pseudonymised data for the purposes of performance analysis, where this does not identify individual users.
  7. Any third party receiving personal data is contractually required to maintain confidentiality and to use the data solely for the purpose for which it was shared.
  8. Stake does not sell personal data to third parties under any circumstances.

Updated: