Stake Privacy Policy

Stake collects personal data that users provide during registration, account management, and general use of the platform. This includes, but is not limited to, full name, date of birth, contact details, payment information, and identity verification documents.

Types of Personal Data Collected

• Name and contact information submitted during account creation;
• Payment and transaction details used to process deposits and withdrawals;
• Identity documents required for verification and compliance purposes;
• Device information, IP addresses, and browsing behavior collected automatically;
• Communications exchanged with the support team.

How Personal Data Is Protected

Stake applies a combination of technical and organizational measures to safeguard user information. These include:

• Encrypted data transmission using industry-standard protocols;
• Restricted internal access to personal data on a need-to-know basis;
• Regular security assessments and system audits;
• Secure storage of sensitive information on protected servers.

User Rights

Users retain the right to access, correct, or request deletion of their personal data at any time. Requests may be submitted through the platform’s official support channels. Stake processes such requests in accordance with applicable data protection obligations.

Compliance with Icelandic Law

All data processing activities carried out by Stake in relation to Icelandic users comply with the requirements of Act No. 90/2018 on Data Protection and the Processing of Personal Data, which implements the General Data Protection Regulation (GDPR) into Icelandic law. Users in Iceland are afforded the full scope of rights established under that framework.

Personal data collected through the platform is used exclusively for defined, lawful purposes. Stake does not process user information in ways that are incompatible with the purposes for which it was originally gathered.

Purposes of Data Processing

• Account creation, maintenance, and authentication;
• Processing financial transactions, including deposits and withdrawals;
• Verifying user identity in compliance with regulatory requirements;
• Delivering customer support and resolving disputes;
• Improving platform functionality, design, and overall user experience;
• Conducting analytics to understand how services are accessed and used;
• Sending communications related to account activity, promotions, and policy updates, where the user has provided consent;
• Meeting legal and regulatory obligations applicable to online gaming operations.

Lawful Basis for Processing

All processing activities are carried out on one or more of the following lawful bases:

• Explicit user consent provided at the point of data collection;
• Performance of a contract to which the user is a party;
• Compliance with a legal obligation applicable to the operator;
• Legitimate interests pursued by the operator, provided those interests are not overridden by the user’s rights.

Data is not sold, rented, or otherwise transferred to third parties for commercial purposes outside the scope described in this policy.

Users have the right to access the personal data held about them by Stake at any time. Requests for access, correction, or deletion of data can be submitted through the platform’s official support channels.

Accessing and Updating Personal Data

• Users may request a copy of their personal data by contacting the support team;
• Inaccurate or outdated information can be corrected upon submission of a formal request;
• Users may request the deletion of their data where no legal obligation requires its continued retention.

Correction and Deletion Procedures

Once a request is received, Stake reviews and responds within the timeframe required by applicable data protection law. In cases where deletion is requested, data will be removed from active systems unless retention is required for legal, regulatory, or dispute resolution purposes.

Consent to Security Checks and Payment Processing

By using Stake, users acknowledge and consent to the following:

• The performance of identity and security verification checks as required by law;
• The processing of payment data by authorized third-party payment service providers;
• The sharing of information with verification and fraud prevention services where necessary to fulfill regulatory obligations.

These processes are integral to the secure and compliant operation of the platform.

Stake operates as an online gaming and sportsbook platform strictly intended for individuals aged 18 years and older. Access to any part of the platform by minors is prohibited.

Age Restriction Policy

• The platform is not designed for, directed at, or intended to be used by individuals under the age of 18;
• No personal data is knowingly collected from minors;
• Users are required to confirm their age during the registration process.

Limitations on Age Verification

Stake cannot independently verify the age of every user without the submission of valid identity documentation. Users who provide false information regarding their age do so in violation of the platform’s terms and applicable law.

Parental or Guardian Requests

If a parent or legal guardian becomes aware that a minor has provided personal data to the platform, a formal request for deletion of that data may be submitted through the support team. Upon verification of the request, Stake will remove the relevant information from its systems without undue delay, to the extent permitted by law.

Stake operates on a global scale, and personal data may be transferred to, stored in, or processed in countries outside of Iceland where the platform’s partners, service providers, or operational infrastructure are located.

Scope of International Transfers

• Personal information may be processed in jurisdictions that have different data protection standards than those in Iceland;
• Transfers are carried out only where appropriate safeguards are in place, as required by applicable law;
• Partner organizations receiving personal data are contractually obligated to maintain confidentiality and apply adequate security measures.

User Consent

By accessing and using the Stake platform, users provide informed consent to the cross-border transfer and processing of their personal data as described in this section. Users who do not consent to such transfers should discontinue use of the platform and contact the support team to initiate data deletion.

Confidentiality Assurance

All third parties involved in the international processing of personal data are bound by confidentiality obligations. Stake takes reasonable steps to ensure that partner organizations handle user data in a manner consistent with this policy and applicable data protection requirements.

This policy constitutes a binding document governing the relationship between Stake and its users with respect to the collection and processing of personal data. The terms outlined herein may modify, limit, or otherwise define the scope and legal effect of the rights and obligations described.

Applicability of the Disclaimer

This disclaimer applies upon the occurrence of any of the following:

• The user formally accepts the policy through a digital signature or confirmation mechanism;
• The user accepts the terms by ticking a consent box or clicking an acceptance button during registration;
• The user accesses or continues to use the platform after being informed of the policy, thereby indicating accession to its terms.

Effect on User Rights

The disclaimer does not eliminate statutory rights afforded to users under Icelandic or European data protection law. It serves to clarify the boundaries within which Stake operates and to set clear expectations regarding data handling practices. Any modifications to this document will be communicated to users in advance where required by law.

Cookies are small text files that are stored on a user’s device when visiting a website. Stake uses cookies to support the proper functioning of the platform and to gather information about how users interact with it.

Purposes of Cookie Use

• Collecting statistical data about platform usage and traffic patterns;
• Analyzing user behavior to identify areas for improvement;
• Personalizing the experience based on previous interactions and preferences;
• Enhancing overall site performance and navigation.

Cookie Retention

Cookies placed by the platform are retained for a period of up to one year, after which they expire automatically. Users may manage or disable cookies through their browser settings; however, doing so may affect the functionality of certain features.

Types of Cookies Used

• Session cookies, which are temporary and deleted when the browser is closed;
• Persistent cookies, which remain on the device for the retention period specified above;
• Third-party cookies placed by analytics or service providers integrated into the platform.

By continuing to use the platform with cookies enabled, users consent to their use as described in this section.

The use of the Stake platform, in any capacity, constitutes full and unconditional acceptance of the terms set out in this privacy policy. This applies to all users, including registered account holders and visitors who access the platform without creating an account.

Prevailing Version

• The version of this policy currently published on the platform supersedes all prior versions;
• In the event of any inconsistency between this document and any previously published version, the current document takes precedence;
• Stake reserves the right to update this policy at any time, and users will be notified of material changes through the platform or via the contact details associated with their account.

Continued Use as Acceptance

Users who continue to access the platform following the publication of an updated policy are considered to have accepted the revised terms. Users who do not agree with any updated version should cease use of the platform and contact the support team to address any outstanding data concerns.

In certain circumstances, personal data collected through the Stake platform may be shared with third parties. Such sharing is carried out only where a lawful basis exists and is limited to what is necessary for the stated purpose.

Circumstances Involving Third-Party Sharing

• Compliance with legal obligations, court orders, or regulatory requirements;
• Resolution of disputes, including fraud investigations and chargeback procedures;
• Fulfillment of contractual obligations with verified service providers and partners.

Transparency Regarding Third Parties

Where third-party recipients of personal data are identified on the platform, users are encouraged to review those parties’ own privacy documentation. Where specific recipients are not listed, Stake will inform users of the purpose and scope of any data sharing upon request.

Consent Through Data Provision

By submitting personal information to Stake, users acknowledge and consent to the possibility that such data may be shared with third parties under the conditions described in this section. This consent is an inherent part of the agreement entered into upon registration and continued use of the platform.

The Stake platform may contain links to external websites that are not operated or controlled by Stake. These links are provided for informational or functional purposes and do not constitute an endorsement of the content or practices of those external sites.

Responsibility for External Content

• Stake does not assume responsibility for the privacy practices of any third-party websites accessed through links on the platform;
• Each external website operates under its own privacy policy, which may differ substantially from this document;
• Users who follow such links do so at their own discretion.

User Caution

Users are advised to exercise caution when navigating away from the Stake platform and to review the privacy policy of any external website before submitting personal information. Stake has no control over the collection, use, or protection of data by third-party websites and cannot be held liable for any data handling that occurs outside of its own platform.