Privacy Policy

Welcome to our Privacy Policy and Data Protection Notice for the year 2026. This document details the categories of personal information we collect, the operational purposes for which we use it, and the technical protocols we implement to safeguard your privacy.

We are committed to protecting your personal data and ensuring that every guideline governing your information is clear, accessible, and transparent.

Consent and Your Rights of Choice

We process your personal data based on your voluntary, affirmative consent, which you can manage at any time.

• Granting Consent: You provide explicit authorization when you check an opt-in box, click “Accept” on our banners, or configure your preferences within our cookie consent panel.
• Withdrawing Consent: You retain the absolute right to withdraw your consent at any time. You can do this by updating your account settings or sending a request to our data protection team. Once withdrawn, we will immediately cease the corresponding data processing.
• Consequences of Non-Provision: While providing your details is optional, certain core services in 2026 require verified data to function. If you choose not to provide mandatory details such as your email, age, or payment information, some services—including account access, support responses, and statutory legal checks—may not be available.

Categories of Personal Information Collected

To deliver secure services and comply with statutory obligations, we process specific categories of personal information. The table below outlines these categories and the typical data points we collect.

Sources and Origin of Personal Data

We collect personal data from traceable and lawful channels in 2026:

• Direct User Input: Information you enter manually when creating an account profile, completing digital forms, uploading identification documents, or communicating with our help desk.
• Automated Technologies: Technical metadata captured automatically by our web servers during your active navigation, including your IP address, device specifications, and cookie trackers.
• Integrated Payment Partners: Transaction statuses, unique reference numbers, payment channels, and general fraud-check evaluations received from banking institutions, card processors, and e-wallet services.
• Identity Verification Services: Specialized verification agencies that validate your submitted ID documents, verify your age, and assess identity-theft risk scores where legal checks are required.
• Third-Party Integrations: Demographic parameters, marketing campaign metrics, and reference details provided by authorized analytic partners, ad partners, and public records.

Purposes and Lawful Grounds for Data Processing

Every data processing activity we perform in 2026 is linked to a specific, lawful purpose:

• Platform Operations: We process your account credentials, login metadata, and payment information to activate profiles, verify transactions, render our main services, and maintain platform stability.
• User Personalization: We use your language preferences, location, and past actions on the site to show relevant content, saved settings, and custom account options.
• Service Communications: Your contact data allows us to send system messages, transaction receipts, security warnings, terms updates, and answers to your support queries.
• System Improvements: We analyze aggregated website traffic, page speed metrics, and error logs to fix technical bugs and optimize our server infrastructure.
• Legal Compliance: We retain and process KYC records, transaction logs, and age verifications to comply with tax rules, audit requirements, anti-money laundering laws, and official regulatory directives in 2026.

Data Retention and Storage Lifespans

Personal data is held only as long as necessary to satisfy the original purpose or comply with statutory retention requirements under applicable laws:

• Account Records: Stored continuously while your account remains active. After account closure, profile details are kept for up to 5 years to manage potential contract disputes, pending claims, or statutory audits.
• Payment & Tax Records: Transaction invoices, billing records, and payment confirmations are stored for a mandatory 7-year period to comply with corporate accounting, audits, and tax reporting rules.
• KYC & Verification Files: Identity verification documents and age-proof records are retained for 5 years after the last transaction, unless a longer period is mandated by a judicial order.
• Support Logs: Email correspondence and chat histories are stored for 3 years to ensure quality control, resolve chargebacks, and address recurring service issues.
• Consent & Cookie Records: Logs of your privacy consent settings are stored for 13 months, and standard web analytics data is kept for 25 months before automatic erasure.
• Security Metadata: Connection logs and IP access histories are retained for 12 months, extending up to 24 months in cases where an account is banned due to fraud or security violations.
• Erase-on-Expiry Protocol: When a retention deadline expires, we permanently delete, fully anonymize, or securely lock the files within 30 days, unless a legal claim or statutory investigation requires an extended hold.

Technical and Organizational Safeguards

We implement a multi-layered security framework to protect your personal details against data breaches, unauthorized access, or loss:

• Data Encryption: Your data is encrypted using TLS 1.3 protocols during transmission (in transit) and protected with AES-256 encryption once stored on our secure servers (at rest).
• Access Controls: Employee access to user databases is restricted on a strict need-to-know basis. All administrative connections require Multi-Factor Authentication (MFA), with permissions audited every 90 days.
• System Monitoring: Network defenses are bolstered by automated firewalls, active threat detection, session timeout rules, and daily, encrypted off-site backups.
• Personnel Compliance: Staff members are bound by confidentiality agreements, must follow strict internal data-handling protocols, and complete mandatory annual data protection training.
• Breach Management: If a security incident occurs, our technical response team is trained to contain the threat immediately. We will notify the appropriate regulatory authorities and affected users without delay, in compliance with statutory requirements.

Marketing Communication Controls and Opt-Out Rights

We respect your communication preferences in 2026. If you have chosen to receive promotional updates, SMS notifications, or push alerts, you can opt out at any time through these methods:

• Promotional Emails: Click the “Unsubscribe” link found at the bottom of any marketing email we send.
• Marketing SMS: Reply with the word “STOP” to opt out of promotional text messages on your mobile device.
• Device Settings: Turn off push alerts directly in your device’s operating system or through your platform profile settings.
• Profile Configurations: Modify your communication preferences by toggling options within the “Contact Settings” or profile section of your user account.
• Customer Support: Contact our help desk directly to request removal from promotional mailing lists.
• Essential Notifications: Please note that you will continue to receive necessary operational emails—such as security alerts, password resets, payment receipts, and statutory legal notices—as they are required to maintain account security.

Use of Cookies and Web-Tracking Technologies

Our website utilizes cookies and similar tracking technologies to ensure core functionality, remember your settings, evaluate traffic performance, and personalize content.

• Essential Cookies: Mandatory files required to enable basic navigation, secure logins, and checkout steps. These cannot be disabled in the system.
• Functional Cookies: Non-essential trackers that remember your customized settings, such as your preferred interface language and currency display, for future visits.
• Analytics Cookies: Analytical tools that compile anonymous, aggregated metrics on page views, visitor volumes, and technical performance, helping us improve the site’s speed.
• Advertising Cookies: Marketing technologies that display relevant advertisements based on your browsing interests and prevent you from seeing the same ad repeatedly.
• Managing Settings: You can modify your preferences or withdraw consent for non-essential tracking at any time through our on-site Cookie Settings page.
• Browser Configuration: You can block, disable, or delete cookies through your browser’s security settings. Refer to the official help guides for Google Chrome, Mozilla Firefox, Apple Safari, or Microsoft Edge for detailed instructions.

Your Legal Rights Over Personal Data

Under applicable data protection laws in 2026, you hold fundamental statutory rights regarding your personal information:

• Right to Access: Request and receive a comprehensive summary of all personal data we process, along with a copy of the records linked to you.
• Right to Correction: Request immediate updates, corrections, or completion of inaccurate, outdated, or incomplete details in your profile (such as email, phone, or name).
• Right to Erasure: Request the permanent deletion of your personal records once the original processing purpose is complete or when you withdraw your consent, where legally possible.
• Right to Portability: Request a copy of your personal data in a structured, machine-readable digital format to transfer to another service.
• Right to Restriction: Request that we temporarily limit the use of your data during a dispute or legal inquiry.
• Right to Objection: Object to direct ads, profiling, or processing activities based on our legitimate business interests.
• Response Commitment: Our compliance officer will review and address your request within 30 calendar days, unless the complexity of the query or legal provisions permit an extension. We will verify your identity before releasing any personal information to prevent unauthorized disclosure.

International Cross-Border Data Transfers

To maintain secure cloud storage, continuous customer support, and stable payment processing in 2026, your personal data may be transferred to service partners located outside your home country, including the EEA, the UK, and the United States.

• Operational Transfer Purposes: Cross-border data movements are strictly limited to technical activities such as secure database backup, fraud monitoring, transactional verification, and customer support delivery.
• Contractual Safeguards: For transfers to jurisdictions without a recognized adequacy decision, we utilize Standard Contractual Clauses (SCCs) and implement binding data-minimization and security protocols in our partner agreements.
• Adequacy Frameworks: We rely on established adequacy decisions recognized by international regulators when processing data in countries with robust legal protections, such as Japan, Switzerland, or Canada.
• Transfer Protocols: All cross-border data flows are secured with TLS 1.2 or newer, restricted role-based access, audit logs, and data reviews before any files leave their country of origin.

Information Disclosures to Third-Party Recipients

We do not sell your personal details to marketing firms. Your information is disclosed to third-party recipients only for defined, lawful purposes under strict contracts that restrict access, use, and retention:

• Service Providers: Cloud hosting vendors, payment gateways, identity verification systems, security auditors, email delivery services, and help desk platforms.
• Business Partners: Joint campaign partners, affiliate networks, or linked customer service providers, shared only with your explicit consent or where a legitimate, contract-bound interest exists.
• Legal Authorities: Courts of law, tax departments, law enforcement, and regulatory bodies when we are required to comply with a valid subpoena, warrant, or statutory audit under 2026 legislation.
• Corporate Restructuring: Prospective buyers, legal advisors, or financial auditors during a corporate merger, acquisition, asset sale, or structural audit, protected by strict confidentiality agreements.

Data Protection Office and Grievance Redressal

For any questions regarding your personal records, this policy, or to submit a formal privacy request, please contact our Data Protection Officer:

• Email Address: privacy@roobet.com
• Contact Phone: +44 20 7946 0958
• Resolution Timelines: We will acknowledge all incoming inquiries within 5 business days and provide a formal, comprehensive resolution within 30 calendar days.
• Regulatory Escalation: If you are unsatisfied with our response, or if you believe your data has been handled in violation of the law, you have the statutory right to file a formal complaint with your local supervisory authority, such as the UK Information Commissioner’s Office (ICO).