Privacy Policy | Shakebet

This Privacy Policy explains how Shakebet (operated by May Sun Services S.A. at shakebets.co) collects, uses, stores, shares, and protects your personal data when you visit our website, register an account, play our games, use our sportsbook, or otherwise interact with our services. Please read it carefully. By using shakebets.co you confirm that you have read and understood this policy.

1. Who We Are

Shakebet is a brand name operated by May Sun Services S.A. ("we", "us", "our", "Shakebet"). Our platform is accessible at shakebets.co. We hold a gaming licence issued by the Anjouan Offshore Finance Authority (licence number ALSI-202411025-FI1), and we process personal data in accordance with that regulatory framework and applicable data-protection law.

For any privacy-related queries, you may contact us via the methods described in Section 14 of this policy.

2. Scope of This Policy

This policy applies to:

All visitors to shakebets.co, whether or not they hold a registered account;
Registered players who use the casino, live casino, sportsbook, or any other product on the platform;
Individuals who contact our customer-support team by live chat or email;
Individuals who participate in promotions, bonuses, loyalty programmes, or VIP schemes.

This policy does not apply to third-party websites or services that may be linked from shakebets.co. We are not responsible for the privacy practices of those third parties.

3. Data We Collect

3.1 Information You Provide Directly

Registration data: full legal name, date of birth, residential address, email address, username, and password.
Identity and verification documents: government-issued photo ID (passport, national identity card, or driving licence), proof of address (utility bill or bank statement), and, where applicable, source-of-funds or source-of-wealth documentation required for KYC compliance.
Payment information: details relating to the payment methods you use, which may include card numbers (where applicable, stored in tokenised form by our payment processors), cryptocurrency wallet addresses, bank account details, or e-wallet identifiers.
Responsible-gaming data: information you provide when you set deposit limits, loss limits, wagering limits, session time limits, or when you request self-exclusion or a cooling-off period.
Communications: records of your correspondence with our support team, including live-chat transcripts and emails.
Promotional and survey data: responses you give when participating in promotions, missions, the loyalty programme, or any optional surveys.

3.2 Information We Collect Automatically

Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
Usage data: pages visited, games launched, session duration, swipe interactions, sportsbook events viewed or bet on, cash-out activity, and navigation paths through the site.
Transaction data: deposit amounts, withdrawal requests and outcomes, bonus activations, wagering activity, cashback calculations, and VIP tier changes.
Cookies and similar technologies: see Section 10 for full details.
Geolocation data: approximate location derived from your IP address, used to verify eligibility to play and to comply with jurisdictional restrictions.

3.3 Information From Third Parties

Identity-verification providers: results of document checks, database matches, and fraud-screening scores.
Payment processors and banking partners: confirmation of transactions, chargeback notifications, and flagged activity.
Sanctions and PEP screening services: information confirming whether you appear on any politically exposed persons (PEP) list, sanctions list, or adverse-media database.
Responsible-gaming databases: where permitted by law, checks against self-exclusion registries.
Analytics and fraud-prevention partners: aggregated or pseudonymised signals used to protect the integrity of the platform.

4. How We Use Your Data

Purpose	Legal Basis
Creating and managing your account	Performance of a contract
Processing deposits and withdrawals across all supported payment methods (crypto, cards, bank transfers, e-wallets, Apple Pay, Google Pay, etc.)	Performance of a contract
Verifying your identity and age (KYC) before and during account activity	Legal obligation; legitimate interests
Complying with our Anjouan gaming licence obligations, including anti-money-laundering (AML) and counter-terrorist-financing (CTF) requirements	Legal obligation
Screening against sanctions, PEP, and adverse-media lists	Legal obligation; legitimate interests
Calculating and awarding welcome bonuses, free spins, cashback, Lootbox Monday rewards, Shakebet Wheel prizes, missions, and loyalty-store redemptions	Performance of a contract; legitimate interests
Managing your VIP tier (Bronze through Mega) and associated benefits, including personal account managers from Ruby tier onwards	Performance of a contract; legitimate interests
Enforcing bonus terms, wagering requirements, and withdrawal limits	Performance of a contract; legitimate interests
Providing 24/7 customer support via live chat and email	Performance of a contract; legitimate interests
Detecting and preventing fraud, collusion, bonus abuse, and other prohibited conduct	Legitimate interests; legal obligation
Implementing and monitoring responsible-gaming tools (self-exclusion, deposit and loss limits, reality checks)	Legal obligation; legitimate interests; protection of vital interests
Sending transactional communications (account confirmations, withdrawal notifications, security alerts)	Performance of a contract; legitimate interests
Sending marketing communications about promotions, new games, or offers (where you have consented or where permitted by applicable law)	Consent; legitimate interests
Personalising your experience, including game recommendations and targeted promotions	Legitimate interests; consent
Platform analytics, performance monitoring, and product improvement	Legitimate interests
Resolving disputes and enforcing our Terms and Conditions	Legitimate interests; legal obligation
Complying with court orders, regulatory requests, or law-enforcement enquiries	Legal obligation

5. Know Your Customer (KYC) and Verification

As a licensed operator, we are required to verify the identity, age, and, in certain circumstances, the source of funds of our players before or shortly after account registration, and at various points during the account lifecycle. This is not optional — it is a condition of our Anjouan licence and is essential for responsible gambling compliance and AML/CTF purposes.

KYC verification may be triggered at any point, including:

Prior to processing your first withdrawal;
When cumulative deposits or account activity reach certain internal thresholds;
Where our risk-assessment processes identify a need for enhanced due diligence;
Periodically as part of ongoing account monitoring.

Documents we may request include, but are not limited to:

Proof of identity: valid passport, national identity card, or driving licence;
Proof of address: utility bill, bank statement, or official correspondence dated within the last three months;
Proof of payment method: screenshot of e-wallet, photograph of card (with the middle eight digits obscured), or bank statement confirming account ownership;
Source-of-funds or source-of-wealth documentation where enhanced due diligence is required.

We process KYC documents securely. Documents are used solely for verification purposes and are retained only as long as required by law or regulatory obligation. Failure to provide requested documentation may result in withdrawal requests being placed on hold or, where required by law, your account being restricted or closed.

6. Responsible Gambling and Data

Shakebet is committed to safer gambling. We collect and process data specifically to support responsible-gaming obligations, including:

Recording and enforcing any deposit limits, loss limits, wagering limits, or session limits you set on your account;
Logging self-exclusion requests and ensuring they are applied promptly and maintained for the requested period;
Monitoring account activity for patterns that may indicate problem gambling, and proactively contacting players where our systems flag concern;
Where applicable, checking external self-exclusion databases to honour exclusions requested via third-party responsible-gambling schemes;
Retaining records of responsible-gaming interactions, including any exclusion period, for compliance purposes even after an account is closed.

If you believe you may be experiencing issues with gambling, please contact our support team at any time via live chat or email. You may also contact independent support organisations such as GamCare, BeGambleAware, or Gamblers Anonymous.

7. Marketing Communications

We may send you marketing communications about Shakebet promotions, new game releases, bonus offers, and loyalty-programme updates. We will do so only where you have given your consent at registration or subsequently, or where applicable law permits us to send marketing on the basis of our legitimate interests.

You may withdraw your consent or opt out of marketing communications at any time by:

Clicking the unsubscribe link included in any marketing email;
Updating your communication preferences in your account settings;
Contacting our support team by live chat or email.

Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew consent. We will continue to send you transactional and service-related messages (such as withdrawal confirmations and security alerts) regardless of your marketing preferences, as these are necessary for the performance of your contract with us.

8. Sharing Your Data

We do not sell your personal data. We may share it with the following categories of recipient, only to the extent necessary and for the purposes described in this policy:

Payment-processing partners: banks, card schemes (Visa, Mastercard), cryptocurrency networks, and payment service providers (including those facilitating Trustly, Klarna, Boku, Wise, Revolut, Apple Pay, and Google Pay transactions) to process deposits and withdrawals.
Identity-verification and fraud-prevention providers: third-party KYC, AML screening, and fraud-detection services.
Game software providers: the approximately 35 studios whose titles appear in our lobby (including Evolution Gaming, Pragmatic Play, Hacksaw Gaming, Nolimit City, Yggdrasil, NetEnt, Play'n GO, BGaming, Spribe, and others) may receive session data required to operate the games you play.
IT infrastructure and hosting providers: companies that host our servers, provide cloud infrastructure, or support platform operations.
Customer-support technology providers: platforms used to deliver live-chat and email support services.
Analytics providers: services that help us understand platform performance and user behaviour in aggregated or pseudonymised form.
Regulatory authorities and law enforcement: our Anjouan licensing authority, and any government body, regulator, or law-enforcement agency where we are legally obliged to disclose information.
Professional advisers: lawyers, auditors, and accountants bound by confidentiality obligations.
Business successors: in the event of a merger, acquisition, restructuring, or sale of assets, your data may be transferred to the successor entity, subject to equivalent data-protection obligations.

All third parties with whom we share personal data are required to handle it securely and in accordance with applicable data-protection law and our contractual requirements.

9. International Data Transfers

Shakebet is operated by May Sun Services S.A. and our platform is accessible globally (subject to jurisdictional restrictions). As a result, your personal data may be transferred to, stored in, or processed in countries outside your country of residence, including countries that may not provide the same level of data-protection as your home jurisdiction.

Where such transfers occur, we take appropriate safeguards to protect your data, which may include contractual clauses, data-processing agreements with adequate protection standards, or reliance on recognised transfer mechanisms. By using shakebets.co you acknowledge that your data may be transferred internationally in this way.

10. Cookies and Tracking Technologies

We use cookies, pixels, local storage, and similar tracking technologies on shakebets.co. These help us operate the platform, remember your preferences, analyse usage, and deliver relevant content.

10.1 Types of Cookies We Use

Category	Purpose	Can You Opt Out?
Strictly Necessary	Essential for login, session management, security, and platform functionality (including game loading and payment processing)	No — required for the site to function
Functional / Preference	Remembering your language, currency display, and platform preferences (e.g. Swipe feature settings)	Yes, via cookie settings
Analytics / Performance	Understanding how visitors use shakebets.co, which pages are most visited, and how features perform	Yes, via cookie settings
Marketing / Targeting	Delivering relevant promotional content and tracking the effectiveness of marketing campaigns	Yes, via cookie settings or opt-out

You may manage your cookie preferences at any time through our cookie-consent banner (displayed on your first visit) or through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use the platform.

11. Data Retention

We retain your personal data for as long as your account is active and for a period thereafter as required by our legal and regulatory obligations. The specific periods that apply include:

Account and transaction data: retained for a minimum of five years following account closure, or for longer periods where required by AML/CTF regulations or our licensing authority;
KYC and identity documents: retained for the period required by applicable law following the end of the business relationship, typically a minimum of five years;
Responsible-gaming records: self-exclusion and limit-setting records are retained for the duration of the exclusion period and for a minimum period thereafter to ensure the exclusion is honoured if you request account reinstatement;
Support and communication records: retained for as long as necessary to resolve disputes and for the applicable statutory limitation period;
Marketing preferences and consent records: retained for as long as relevant to demonstrate compliance with consent obligations.

Where data is no longer required, we securely delete or anonymise it.

12. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit using TLS (Transport Layer Security);
Encryption or tokenisation of sensitive payment data;
Access controls and authentication requirements for staff and systems;
Regular security assessments and monitoring;
Staff training on data-protection obligations.

No method of electronic transmission or storage is completely secure. While we take every reasonable precaution, we cannot guarantee the absolute security of your data. You play an important role in keeping your account secure: please use a strong, unique password, never share your login credentials, and contact us immediately if you suspect unauthorised access to your account.

13. Your Rights

Depending on your country of residence and applicable law, you may have the following rights in relation to your personal data:

Right of access: to request a copy of the personal data we hold about you;
Right to rectification: to request that inaccurate or incomplete data be corrected;
Right to erasure: to request deletion of your personal data in certain circumstances (note that this right may be limited where we are required to retain data for regulatory or legal reasons);
Right to restriction of processing: to request that we limit how we use your data in certain situations;
Right to data portability: to receive your data in a structured, machine-readable format in certain circumstances;
Right to object: to object to processing based on our legitimate interests, or to direct marketing;
Right to withdraw consent: where we process your data on the basis of consent, to withdraw that consent at any time without affecting the lawfulness of prior processing;
Rights related to automated decision-making: to request human review of any significant decisions made about you by automated means.

To exercise any of these rights, please contact us using the details in Section 14. We will respond within the timeframe required by applicable law (typically within 30 days of receiving your request). We may need to verify your identity before processing your request. There is no charge for making a request, though we reserve the right to charge a reasonable fee for manifestly unfounded or excessive requests.

If you are dissatisfied with how we handle your request, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

14. How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us using one of the following methods:

Live Chat: available 24/7 via the chat widget on shakebets.co;
Email: available via the contact address listed in the Help or Support section of shakebets.co.

We aim to respond to all privacy-related enquiries promptly. For formal data-subject rights requests, please mark your email clearly as a "Data Subject Request" to ensure it is directed to the appropriate team.

15. Children

Shakebet is strictly an adults-only platform. Our services are not directed at, and may not be used by, anyone under the age of 18 (or such higher minimum age as may apply in your jurisdiction). We do not knowingly collect personal data from minors. Age is verified as part of our KYC process. If we become aware that we have inadvertently collected data from a person under the minimum age, we will delete that data and close the associated account immediately. If you believe a minor may have registered on our platform, please contact us immediately.

16. Third-Party Links

shakebets.co may contain links to third-party websites, including those of game studios, payment providers, or affiliate partners. This Privacy Policy does not apply to those external sites. We encourage you to read the privacy policy of any third-party site you visit. We accept no responsibility for the content or privacy practices of third-party websites.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. When we make material changes, we will notify you by posting the updated policy at shakebets.co and, where appropriate, by sending you a direct notification (for example, by email). The date at the top of this page will always indicate when the policy was last revised. We encourage you to review this policy periodically. Your continued use of shakebets.co after any update constitutes acceptance of the revised policy.

18. Effective Date

This Privacy Policy is effective as of the date Shakebet launched operations in 2025. It applies to all personal data collected from that date onwards, and to personal data previously collected in connection with the operation of shakebets.co.