Privacy

Scope and Application

This Privacy Policy explains how LaRo789 collects, uses, stores, and discloses your Personal Data in connection with the Services we provide, including our website, mobile applications, and related products and services. It applies to all Personal Data processed by LaRo789 in the course of operating and offering the Services, regardless of you where you access them.

Data Controller and Contact Details

LaRo789 Ltd acts as the data controller for your Personal Data. If you have questions about this Policy, requests regarding your rights, or concerns about our processing of your Personal Data, please contact our privacy team: Email: privacy@laro789

Legal Framework

We process Personal Data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and national laws implementing or supplementing GDPR, as well as licensing and anti‑money laundering requirements that apply to our operations. Where relevant, we comply with data protection provisions arising from jurisdictional licenses governing online gambling activities.

Categories of Personal Data We Collect

• Identity and contact data: name, date of birth, address, email, telephone number, and government-issued identifiers when required for verification.
• Account data: username, password, security questions, and customer‑related identifiers.
• Activity and usage data: wager history, deposits and withdrawals, game history, session timestamps, device and browser information, IP address, and analytics data related to your interaction with the Services.
• Financial data: payment method details, transaction amounts, and source of funds information necessary to process payments and comply with legal obligations.
• Marketing and preference data: communications preferences, consent status for marketing, and engagement with campaigns.
• Other data you provide: communications with support, feedback, or requests submitted through the Services.

Purposes for Processing

• To create and manage your account and verify your identity to prevent impersonation and fraud.
• To provide the Services you request, including processing bets, games, deposits, and withdrawals.
• To comply with legal and regulatory obligations, including AML/KYC and licensing requirements.
• To administer and optimize the Services, maintain security, and detect and prevent fraudulent or unlawful activity.
• To communicate with you about your account, support requests, and important notices.
• To personalise your experience and deliver tailored content and promotions where permitted by law.
• To conduct profiling and analytics to improve our products and ensure responsible gaming, with safeguards described below.

Legal Bases for Processing

• Contractual necessity: processing necessary to perform and administer the contract for the Services.
• Legitimate interests: security, fraud prevention, risk management, and service improvement, provided such interests do not override your rights and freedoms.
• Legal obligation: compliance with AML/KYC, tax, and other regulatory requirements.
• Consent: where required for marketing communications or certain data processing activities.

Data Retention

We retain Personal Data for as long as necessary to fulfill the purposes described in this Policy, to meet regulatory and legal obligations, or to resolve disputes. In typical cases, transactional data and account records are retained for a minimum of five (5) years after the end of the relationship or after active use ceases, unless a longer retention period is required by applicable law. When data is no longer needed, we will securely delete or anonymise it.

Data Sharing and International Transfers

We may disclose Personal Data to service providers, payment processors, auditors, regulators, and corporate affiliates where necessary to provide the Services, comply with legal obligations, or protect our rights. When transfers occur outside your home jurisdiction or outside the European Economic Area, we rely on appropriate safeguards and mechanisms required by law (such as standard contractual clauses) to ensure an adequate level of protection for your data.

Security of Your Personal Data

We implement industry-standard security measures to protect your Personal Data, including encryption for transmission (TLS 1.2 or higher), encrypted storage on protected drives, access controls, and regular security monitoring. Our systems employ firewalls and monitoring to detect and prevent unauthorised access, disclosure, alteration, or destruction of data.

Profiling, Automated Processing, and Sanctions Checks

We may perform profiling and automated processing to assess risk, detect suspicious activity, and conduct AML/KYC controls. The final decision on high-impact actions remains human‑involved; automated checks may flag data for review by our staff. Examples include IP address risk assessments and sanctions/PEP screening as part of compliance processes. No solely automated decision will determine your access to the Services without human review where such decisions could have a legal or similarly significant effect on you.

Your Rights as a Data Subject

• Right of access: request a copy of your Personal Data and details of its processing.
• Right to rectification: correct incorrect or incomplete data.
• Right to erasure: request deletion where processing is unlawful or no longer necessary.
• Right to restriction of processing: limit processing under certain circumstances.
• Right to data portability: obtain your data in a structured, commonly used, machine-readable format.
• Right to object: object to processing based on legitimate interests or for direct marketing, including profiling.
• Right to withdraw consent: withdraw consent without affecting the lawfulness of processing based on prior consent.
• Right to lodge a complaint: with a supervisory authority if you believe your data rights have not been respected.

Marketing Communications

We will send marketing communications only with your consent or where otherwise permitted by law. You may withdraw consent or opt out of future marketing at any time by contacting our privacy team or following the opt-out instructions in our communications. Even after withdrawal, we may continue to process data necessary for service delivery or for other legitimate purposes.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Services, analyse usage, and enable certain features. You may manage cookie preferences in your account settings; persistent cookies and third‑party analytics may be used in accordance with applicable law and our Cookie Policy.

Children

The Services are not directed at individuals under 18 years of age, and LaRo789 does not knowingly collect Personal Data from minors. If we discover such data, we will take steps to delete it promptly.

Changes to this Policy

We may update this Policy from time to time. We will provide notice of material changes through the Services or other appropriate means and update the effective date at the top of the Policy.

Contact and Complaints

If you have questions about this Policy, your rights, or how we handle your Personal Data, contact us at privacy@laro789. You may also file a complaint with your local supervisory authority if you consider that our processing of your Personal Data infringes applicable law.

Effective Date

Effective date: 2026-03-22.