This Privacy Policy explains how Smash, operated by Softon Ltd, collects, uses, stores, and protects your personal data when you use our web platform. These practices apply fully to all players residing in the United Kingdom. Please read this page carefully so you understand how your information is handled and what rights you hold.

What We Collect and Why

When you create an account, we collect personal information such as your full name, date of birth, email address, and chosen payment details. This information is necessary to verify your identity, process deposits and withdrawals, and comply with our obligations under applicable gaming and anti-money-laundering standards. During transaction processing, we may also collect financial data — including payment method references and transaction amounts — solely to facilitate secure and accurate transfers between your account and our payment partners.

We also gather technical data as you navigate our web platform. This includes session logs, browser type, device identifiers, and IP addresses. We use this information to maintain the security and stability of the platform, detect suspicious activity, and ensure that pages load and function correctly for you. Cookies are used in a limited and purposeful way: to keep your session active, remember your preferences, and support fraud prevention measures. You may adjust your cookie preferences through your browser settings, though doing so may affect certain aspects of platform functionality.

How We Protect and Share Your Data

Your data is protected using 256-bit SSL encryption across all connections between your browser and our servers. Personal and financial information is stored on secured servers with restricted internal access — only staff members who require your data to perform specific operational tasks are permitted to view it. We do not sell your data to third parties under any circumstances.

There are limited situations in which we share your information with external parties. Payment gateways receive only the data necessary to process your transactions. Identity verification services may receive documentation you submit during account verification checks. Regulatory authorities and law enforcement bodies may request access to your data where we are legally required to comply. In each case, data sharing is kept to the minimum necessary and is governed by confidentiality obligations.

We retain your personal data for as long as your account remains active. Following account closure or a period of inactivity, we retain records for the duration required by applicable regulations before securely deleting or anonymising them. This retention period exists to meet our legal and compliance obligations and to resolve any disputes that may arise after closure.

If you wish to access the personal data we hold about you, request a correction, or ask for your data to be removed where permitted by law, you may contact us through our support channels. We will respond to all verified requests within a reasonable timeframe. If you believe your data rights have not been respected, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable requirements. When we do, the revised version will be published on this page with an updated effective date. We encourage you to review this page periodically to stay informed about how we handle your data.