Privacy Policy

1. Overview & Controller

This Privacy Policy describes how Genius Arbitrage ("we", "us", "our"), the operator of the Oddsbucks platform ("Service"), collects, uses, stores, and discloses information about you when you use the Service.

For the purposes of applicable data protection laws, including the General Data Protection Regulation (GDPR) and the UK GDPR, the data controller responsible for your personal data is Alaattin Dagli, operating under the business name Genius Arbitrage, established in Romania.

For any privacy-related questions or requests, please contact us at support@oddsbucks.com.

2. Data We Collect

We collect the following categories of personal data:

3. Legal Basis for Processing

Under the GDPR, we rely on the following legal bases:

• Contract performance: Processing necessary to provide the Service you have contracted for (e.g. account management, subscription fulfilment, technical support).
• Legitimate interests: Security, fraud prevention, service administration, service improvement, analytics, and protecting our legal rights, provided that such interests are not overridden by your rights and freedoms.
• Consent: Marketing communications and non-essential cookies, where we ask for your consent before processing.
• Legal obligation: Compliance with applicable law, including financial record-keeping obligations.

4. How We Use Your Data

We use your personal data for the following purposes:

• To create and manage your account and authenticate your sessions;
• To process subscription payments and billing;
• To provide, maintain, and improve the Service;
• To personalise your experience and save your preferences;
• To send you transactional emails (account confirmation, password reset, billing receipts);
• To send service-related notices and important security alerts;
• To respond to support requests and other enquiries;
• To detect and prevent fraud, abuse, and security incidents;
• To comply with applicable legal obligations;
• With your consent: to send marketing and promotional communications about our products.

We will not use your data for automated decision-making that produces legal or similarly significant effects without human review.

5. Data Sharing & Disclosure

We do not sell your personal data. We may share data with:

• Service providers: Trusted third parties that help us operate the Service, including cloud hosting providers, payment processors, email delivery services, and analytics tools. These service providers process personal data on our behalf and are bound by appropriate contractual and confidentiality obligations.
• Legal & regulatory authorities: When required by applicable law, court order, or governmental authority.
• Business transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, in which case we will notify you before your data is transferred.
• Protection of rights: When we believe disclosure is necessary to enforce our Terms, protect our rights or safety, or investigate fraud.

We do not share your personal data with bookmakers or any third parties for marketing purposes without your explicit consent.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Account data: Retained for the duration of your account and for up to 90 days following account deletion, after which it will be deleted or anonymised unless a longer retention period is required by law or for the establishment, exercise, or defence of legal claims.
• Billing records: Retained for up to 7 years as required by applicable tax and financial regulations.
• Support communications: Retained for up to 3 years to support quality improvement and dispute resolution.
• Aggregated analytics: May be retained indefinitely in anonymised form.

7. International Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA) or the United Kingdom. When we transfer your personal data internationally, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the European Commission;
• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Binding Corporate Rules or other appropriate mechanisms.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:

• Encryption of data in transit via TLS/HTTPS;
• Encryption of sensitive personal data at rest, where applicable;
• Industry-standard password hashing (bcrypt or equivalent);
• Access controls limiting data access to authorised personnel only;
• Regular security assessments and monitoring.

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant supervisory authorities as required by applicable law.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data, subject to certain exceptions.
• Right to restriction: Request restriction of processing in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us at support@oddsbucks.com. We will respond to your request within 30 days of receipt, unless a longer period is permitted by applicable law. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your data protection rights have been infringed.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from anyone under 18 years of age. If we become aware that we have collected personal data from a person under the age of 18, we will take reasonable steps to delete such information promptly. If you believe that a person under 18 has provided us with personal data, please contact us at support@oddsbucks.com .

11. Cookies

We use cookies and similar tracking technologies as described in our Cookie Policy. Essential cookies and similar technologies are used to operate the Service. You may manage optional cookies through your browser settings or our cookie preference controls, subject to the functionality available on the Platform.

12. We Do Not Hold Bookmaker Account Data

Important: Oddsbucks is an information and calculation tool. We do not have access to bookmaker account credentials, account balances, deposits, withdrawals, betting transactions, winnings, losses, or other data held by bookmakers. Such information remains under the control of the relevant bookmaker and is governed by that bookmaker's own privacy policy.

The personal data we process is limited to information you provide directly to us and data generated through your use of the Platform, as described in this Privacy Policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes, we will notify you by email or via a prominent notice on the Service, and update the "Last updated" date. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact & DPO

For questions, concerns, or requests relating to your personal data and this Privacy Policy, please contact our Privacy team: