Gravira Privacy Policy
Scope of this policy
Gravira operates as the controller of the personal data described in this document. This policy applies to all interactions you have with our platform, including registration, gameplay, and customer support communications. We maintain strict records of all data processing activities to ensure compliance with applicable data protection laws. This document forms part of our Terms and Conditions and governs your use of our services.
The information contained herein details the specific types of data we collect and the lawful grounds for processing that data. We update this policy periodically to reflect changes in law or our operational procedures. Any updates will be effective from the date stated at the top of the document. Your continued use of our services after such updates constitutes acceptance of the new terms.
This policy covers data collected directly from you during account creation and verification. It also encompasses data generated automatically through your interaction with our website or mobile application. This includes technical data such as IP addresses and device identifiers. The scope extends to all data we hold regardless of the format or medium in which it is stored.
We ensure that all third-party processors acting on our behalf adhere to the standards set forth in this policy. They must implement appropriate technical and organizational measures to protect your data. We conduct regular audits to verify their compliance with these requirements. Failure by any processor to meet these standards will result in immediate contractual termination.
Categories of personal data
We collect personal data both directly from you and through automated means. This distinction is important because the legal basis for processing differs between the two categories. Data you provide voluntarily forms the core of your identity profile. Data generated by use of our service is necessary for the technical operation of the platform.
Identity and contact information
Identity data includes your full name, date of birth, and residential address. Contact details consist of your email address and telephone number. We require this information to verify your identity and communicate with you regarding account matters. This data is essential for complying with age verification regulations.
| Data Category | Purpose of Processing | Retention Period |
|---|---|---|
| Identity Data | Age verification and fraud prevention | Account lifetime plus 7 years |
| Financial Data | Transaction processing and AML checks | 7 years from last activity |
| Gameplay Records | Game integrity and bonus compliance | 2 years from account closure |
Financial and transaction records
We record all deposits, withdrawals, and wagers made on our platform. Payment method details are stored only to the extent necessary for processing. Financial data includes the source of funds where required for anti-money laundering checks. We do not store full credit card numbers on our servers.
- Verification documents such as ID cards or utility bills
- Device identifiers and IP addresses
- Cookies and session logs
- Communication history with support staff
Lawful basis for processing
Our processing of personal data relies on specific legal grounds defined by data protection legislation. Each type of data processing is mapped to a distinct lawful basis. This mapping ensures that we do not process data without a valid reason. You can request a copy of this mapping at any time.
Contractual necessity
| Processing Activity | Lawful Basis | Legal Reference |
|---|---|---|
| Account creation | Performance of contract | GDPR Article 6(1)(b) |
| Bonus fulfillment | Contractual obligation | Terms and Conditions |
| Payment processing | Legal obligation | Anti-money laundering laws |
We process your data to fulfill the contract we have entered into with you. This includes creating your account and providing the services you have requested. Without this data, we cannot provide access to the games or process payments. This basis remains valid for the duration of your account activity.
Legal compliance and legitimate interests
Some processing is required by law rather than by contract. This includes anti-money laundering checks and responsible gambling monitoring. We also rely on legitimate interests for fraud prevention and network security. These interests are balanced against your rights and freedoms in every case.
- Consent for direct marketing communications
- Consent for non-essential cookies
- Withdrawal of consent is possible at any time
- Withdrawal does not affect prior processing lawfulness
Sharing of personal data
We share personal data only with trusted third parties who assist in providing our services. These recipients include payment service providers, identity verification agencies, and fraud prevention networks. Each third party is contractually bound to handle your data securely. We do not sell your personal data to marketing agencies or data brokers.
Game software suppliers receive technical data necessary for game operation and win validation. They do not receive your financial information or contact details. Regulators and law enforcement agencies may require access to data for investigation purposes. We only provide this data when legally compelled to do so.
Personal data may be transferred to countries outside your country of residence. This occurs when we use cloud services or processors based in different jurisdictions. We ensure adequate safeguards are in place before any such transfer occurs. These safeguards include standard contractual clauses approved by the European Commission.
We restrict access to your personal data to employees who need it to perform their duties. This includes customer support staff and compliance officers. All third-party processors must meet our security standards. We audit their practices annually to ensure ongoing compliance.
Data retention periods
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy. Retention periods are determined by legal obligations rather than commercial preference. Different categories of data have different statutory retention requirements. We review retention schedules annually to ensure compliance with current laws.
Account data is kept for the lifetime of the account plus seven years after closure. This period is required for tax reporting and anti-money laundering regulations. Financial transaction records are retained for the same seven-year period. This ensures we can provide records to you or regulators upon request.
Verification documents are retained for seven years from the date of verification. This allows us to respond to identity-related disputes or investigations. Marketing consents are deleted once you withdraw permission or we lose contact. We do not retain marketing lists indefinitely without active engagement.
Data subject to litigation or regulatory investigation is retained until the matter is resolved. This may extend retention periods beyond standard schedules. We notify you when data is held for this specific purpose. Once the legal requirement expires, we proceed with deletion or anonymization.
Your data subject rights
You have specific rights regarding the personal data we hold about you. These rights are granted by data protection legislation and are enforceable in court. You may exercise any of these rights without paying a fee. We will respond to your request within one calendar month.
Core data rights
| Right | What it means | How to use it |
|---|---|---|
| Right of access | Get a copy of your data | Submit written request |
| Right to erasure | Request deletion of your data | Email our privacy team |
| Right to rectification | Correct inaccurate information | Update profile or write to us |
We may verify your identity before processing any data subject request. This step protects your data from unauthorized access. We use the information you provided during registration to confirm your identity. Additional documentation may be requested for sensitive data types.
Exercise and limitations
Some rights are limited where we must retain data for legal reasons. For example, we cannot erase transaction records required for tax purposes. We will explain which rights apply to your specific request. You may escalate unresolved issues to the supervisory authority.
Security Measures and Complaint Process
We implement robust technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, or unauthorised access. These safeguards include encryption protocols and secure servers that operate under strict access controls. While no security system is entirely impervious to risk, we continuously update our infrastructure to mitigate emerging threats. This balance ensures your information remains confidential without compromising the usability of our services. Regular audits help us verify that our protocols meet current industry standards effectively.
If you identify any irregularity or believe your data has been compromised, contact our support team immediately through the contacts page. We investigate all reported concerns promptly and will update you on the progress of any review. Should you remain dissatisfied with our resolution, you retain the right to escalate the matter to the relevant supervisory authority. The specific address for this authority is also available on our contacts page for your reference. This two-step process ensures that local issues are resolved efficiently before external involvement becomes necessary.
Your trust is paramount to our operations, and we are committed to maintaining the highest standards of data protection. By using our platform, you acknowledge that we utilise advanced encryption but cannot guarantee absolute security in all circumstances. This transparency allows you to make informed decisions about sharing sensitive information with us. We encourage you to review our full policy details regularly to stay aware of any changes. Our goal is to foster a secure environment while delivering a seamless gaming experience for all users.