Privacy policy | SkegBets

1. Who We Are

Skeg Bets ("we", "us", "our") operates the SkegBets platform at www.skegbets.com. We are the data controller responsible for your personal data. For all privacy-related enquiries, contact us at: support@skegbets.com.

2. Data We Collect

We collect the following personal data when you use SkegBets: • Account data: your name and email address, provided via Google OAuth when you create an account. • Profile image: your Google profile picture, used to personalise your account. • Usage data: picks you have viewed, unlocked, or bet on, stored to power your dashboard. • Payment data: subscription status and membership ID issued by our Merchant of Record (Whop). We do not store your card details; all payment processing is handled by Whop Technologies, Inc. • Consent record: the date and version of these terms you accepted at sign-up. • Technical data: IP address and browser type, collected automatically for security and fraud prevention.

3. Legal Basis for Processing

Under the EU General Data Protection Regulation (GDPR), we process your personal data on the following legal bases: • Contract performance: to provide you with the SkegBets service you have signed up for, including delivering picks and managing your subscription. • Consent: to send analytics data to Google Analytics via Google Tag Manager, and to set non-essential cookies, only after you have given explicit consent via our cookie banner. • Legitimate interests: to ensure the security and integrity of our platform, and to prevent fraud. • Legal obligation: where required to comply with applicable law.

4. How We Use Your Data

We use your data to: • Create and manage your account • Deliver sports betting picks and analysis • Process and manage your subscription via Whop (our Merchant of Record) • Respond to support requests sent to support@skegbets.com • Improve the platform based on anonymised usage analytics (only with your cookie consent) • Comply with legal obligations

5. Cookies & Tracking

We use the following cookies: • Essential cookies: session cookies required to keep you logged in. These are strictly necessary and do not require consent. • Analytics cookies: Google Analytics (via Google Tag Manager) to understand how users interact with the site. These are only set after you accept our cookie banner. You may withdraw consent at any time by clicking "Cookie Settings" in the footer. We do not use advertising or third-party tracking cookies without your explicit consent.

6. Third-Party Services

We share data with the following trusted third parties, strictly as necessary to operate the service: • Google OAuth (account sign-in) • Whop Technologies, Inc. (Merchant of Record for subscription payments, subject to Whop's Privacy Policy at https://whop.com/privacy) • Neon (database hosting, data stored in the EU/US) • Vercel (hosting and deployment) • Resend (transactional email delivery) • Google Analytics / Google Tag Manager (analytics, only with cookie consent) We do not sell your personal data to any third party.

7. International Data Transfers

Some of our third-party service providers are based outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on providers covered by the EU-US Data Privacy Framework.

8. Data Retention

We retain your personal data for as long as your account is active. If you request deletion of your account, we will erase your personal data within 30 days, except where retention is required by applicable law (e.g. financial records required for tax purposes, which may be retained for up to 7 years).

9. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights: • Right of access: request a copy of the personal data we hold about you. • Right to rectification: request correction of inaccurate or incomplete data. • Right to erasure ("right to be forgotten"): request deletion of your personal data. • Right to restriction: request that we limit how we use your data. • Right to data portability: receive your data in a structured, machine-readable format. • Right to object: object to processing based on legitimate interests. • Right to withdraw consent: withdraw cookie or tracking consent at any time without affecting prior lawful processing. To exercise any of these rights, contact us at support@skegbets.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection supervisory authority.

10. Security

We implement industry-standard security measures including HTTPS encryption, access controls, and secure database management. However, no transmission over the internet is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by GDPR.

11. Children

SkegBets is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with their data, please contact us at support@skegbets.com and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or by a prominent notice on the website. The "last updated" date at the top of this page will always reflect the most recent version. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact

For any privacy-related questions or to exercise your rights, contact us at: Skeg Bets Email: support@skegbets.com