Privacy Policy
Last Updated: February 20th, 2026
Document Control
| Version | Date | Updated by | Approved by | Change |
|---|---|---|---|---|
| 1.0 | 01.08.2025 | DPO | CEO | Policy Change |
| 1.1 | 16.09.2025 | DPO | CEO | Full rewrite for UKGC alignment |
| 1.2 | 17.10.2025 | HOF | - | Final Review |
| 1.3 | 20.02.2026 | - | - | Data retention from 7 years to 5 years after account closure. |
Version Owner: Data Protection Officer (DPO)
Review Cycle: Annually or following significant changes in law, regulation, or business operations.
1. Overview
1.1. Who We Are
Kairos Edge Limited is a licensed and regulated online gambling operator in the United Kingdom.
- Company Name: Kairos Edge Limited
- Registration Number: 16064446
- Registered Address: Sussex Innovation Centre Science Park Square, Falmer, Brighton, England, BN1 9SB
- UK Gambling Commission Licence: 000-066399-R-340489-001
- Data Protection Officer (DPO): dpo@reelmoney.bet
We provide online sports betting and casino services via our website and mobile applications
1.2. Purpose
This Privacy Policy explains how we collect, use, store, share, and protect your personal data in line with:
- UK GDPR and the Data Protection Act 2018
- UK Gambling Commission Licence Conditions and Codes of Practice (LCCP)
- Remote Technical Standards (RTS), in particular RTS 4: Information Security
- ISO/IEC 27001:2022 controls adopted in our Information Security Management System (ISMS).
1.3. Scope
This Policy applies to:
- Players and registered customers
- Website and mobile app visitors
- Employees, contractors, and business partners where processing relates to gambling services
- Third parties providing services on our behalf.
1.4. Review and Changes
Reviewed annually by the Compliance Manager and approved by the CEO. Any changes will be communicated to customers.
2. What Data We Collect
We collect and process the following categories of personal data:
- Identity Data: full name, date of birth, government-issued ID (passport, driving licence).
- Contact Data: email, phone number, home address.
- Financial Data: payment details, deposit and withdrawal history, source of funds/wealth.
- Account & Usage Data: username, login credentials, betting and gaming history, session logs, IP addresses.
- Compliance & KYC Data: AML checks, sanctions/PEP screening, self-exclusion data (GamStop).
- Technical Data: device type, browser, OS, cookies, and tracking identifiers.
- Special Category Data: information about self-exclusion, affordability, or problem gambling behaviours where necessary to meet regulatory obligations.
- Communications Data: emails, live chats, call recordings (for compliance, training, and dispute resolution).
3. How We Use Your Data
| Purpose | Lawful Basis |
|---|---|
| Account creation & management | Performance of a contract |
| Age & ID verification | Legal obligation |
| AML, CTF & fraud prevention | Legal obligation |
| Provision of betting & gaming services | Performance of a contract |
| Customer support & dispute resolution | Legitimate interest |
| Responsible gambling monitoring (affordability, self-exclusion, markers of harm) | Legal obligation |
| RTP monitoring & games testing (fairness audits) | Legal obligation |
| Marketing (where opted-in) | Consent |
| Analytics & service improvements | Legitimate interest |
| Security monitoring & incident response | Legitimate interest / legal obligation |
5. International Transfers
If your data is transferred outside the UK, we ensure safeguards are in place, including:
- UK Addendum to EU Standard Contractual Clauses (SCCs)
- Adequacy regulations recognised by the UK Government
- Technical and organisational controls to ensure equivalent protection.
6. Data Retention
We retain personal data only as long as necessary for regulatory, legal, and contractual purposes:
- Customer account & betting data: 5 years after account closure (UKGC LCCP).
- AML/CTF data: 5 years after end of business relationship (MLR 2017).
- Self-exclusion data: Minimum 7 years.
- Financial records: 5 years for audit and tax.
- Complaints/disputes: Minimum 5 years from resolution.
- Marketing data: until consent is withdrawn.
8. Automated Decision-Making
We use automated tools to:
- Detect fraud and suspicious activity
- Identify underage or self-excluded customers
- Monitor responsible gambling behaviours
All automated processes are subject to human oversight, and you have the right not to be subject to solely automated decisions (Article 22 UK GDPR).
9. Children and Underage Users
We do not knowingly collect data from anyone under 18. If such data is inadvertently processed, it will be deleted immediately.
10. Security of Your Data
We maintain an ISO 27001:2022 certified ISMS and comply with UKGC RTS 4: Information Security.
Controls include:
- Data encryption in transit and at rest
- Multi-factor authentication (MFA)
- Role-based access controls
- Continuous monitoring and logging
- Regular penetration testing and security audits.
11. Your Data Protection Rights
You have the right to:
- Access your data (Art. 15 GDPR)
- Rectify inaccuracies (Art. 16)
- Erasure where lawful (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing (Art. 21)
- Withdraw marketing consent at any time
- Not be subject to decisions based solely on automated processing (Art. 22)
Some rights may be restricted where required by UKGC or AML regulations.
12. Complaints
If you are unhappy with how we process your data, you can contact our DPO at dpo@reelmoney.bet.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: www.ico.org.uk
- Phone: 0303 123 1113
13. Contact Us
Kairos Edge Limited
Sussex Innovation Centre Science Park Square, Falmer, Brighton, England, BN1 9SB
Email: support@updates.reelmoney.bet
14. References
- UK GDPR & Data Protection Act 2018
- UKGC Licence Conditions and Codes of Practice (LCCP)
- UKGC Remote Technical Standards (RTS)
- ISO/IEC 27001:2022 Annex A Controls