Privacy Policy

1. Who We Are

If you have any questions regarding this Privacy Policy, you may contact us at the above address or via email.

2. What Data We Collect

Data You Provide Directly

• Email address (when subscribing to the newsletter or requesting information).
• Date, time and IP address at the moment of opt-in (for proof of consent).
• Any information you submit through contact forms (including: first and last name, message content).

Data Collected Automatically

The website uses cookies and analytics tools. Gamblitude displays a cookie banner allowing Accept All, Reject All, or Customise.

Automatically collected data may include:

• Device and browser information (browser type and version, operating system, screen resolution, browser language).
• Usage data and analytics (collected via Google Analytics and LinkedIn Insight Tag).
• IP address (collected for security monitoring, anomaly detection, and analytics purposes).

3. Customer / Platform Data (for B2B Clients)

Gamblitude offers an AI-powered data warehousing and analytics platform for iGaming operators. Publicly available information describes:

• A cloud-native data warehouse,
• AI-driven analytics,
• Processing of performance metrics, KPIs, gaming data patterns, transactional behaviour, anomaly detection, etc.

Precise categories of personal data processed on behalf of clients depend on the client’s configuration.

These may include end-user identifiers, transactional records, behavioural data, and KPI metrics processed solely within the client’s data warehouse environment. Gamblitude acts as a Data Processor in relation to such data; the client remains the Data Controller and is responsible for ensuring a valid legal basis for processing.

4. Purposes of Processing & Legal Bases (GDPR)

5. How We Use Your Data

We use your data to:

• Provide access to our AI-driven iGaming analytics tools and generate insights.
• Deliver newsletters and product updates.
• Improve website functionality and performance.
• Ensure security, detect anomalies, and protect the platform from abuse (including activity monitoring, access logging, and fraud prevention).
• Fulfil regulatory requirements relevant to iGaming environments (including support for AML/KYC data handling obligations and responsible gambling frameworks applicable to our clients).

6. Cookies and Tracking Technologies

Gamblitude uses cookies for:

• Enhancing browsing experience
• Personalised ads or content
• Traffic analytics. This is explicitly indicated by the cookie banner visible on the site.

For a detailed description of cookies, retention, and vendors, please see our Cookies Policy available at https://gamblitude.ai/cookies-policy.

7. Data Processors and Transfers

Gamblitude states that email data is stored in a marketing platform whose provider acts as a Processor under a Data Processing Agreement.

Additional processors: LinkedIn Ireland Unlimited Company (LinkedIn Insight Tag — acting as an independent controller under LinkedIn’s own privacy policy) and a CRM platform provider (HubSpot or Salesforce) acting as Processor under a Data Processing Agreement.

Data may be transferred outside the EEA under Standard Contractual Clauses.

8. Data Retention

• Newsletter: until withdrawal of consent or discontinuation of the program, whichever comes first.
• Platform data: deleted within 30 days of contract termination, unless a longer retention period is required by applicable law or agreed in the Data Processing Agreement with the client.
• Website analytics logs: Google Analytics

9. Your Rights Under GDPR

You may exercise the following rights at any time:

• Access your personal data
• Rectification
• Erasure
• Restriction
• Data portability
• Withdraw consent without affecting prior processing
• Lodge a complaint with the Polish Supervisory Authority (UODO). All these rights are confirmed in the site’s existing privacy notice.

To exercise these rights, contact: [email protected]

10. AI-Specific Disclosures (EU AI Act)

Public sources indicate that Gamblitude uses AI extensively across analytics, anomaly detection, predictions, cohort comparisons, KPI analysis, and automated insights.

Where applicable, Gamblitude will provide:

• Information about AI logic used,
• Measures to ensure transparency,
• Human-in-the-loop oversight where needed,
• Documentation required by the AI Act. Gamblitude’s AI systems are designed to support business decision-making and are not used for automated decisions with significant legal effect on individuals. All AI inference runs locally within the client’s data warehouse. Clients are informed of any AI-assisted features active within their environment via contractual documentation and platform documentation.

Gamblitude states that its AI agent always runs locally on the client’s data warehouse and does not send data externally.

11. Children’s Privacy

Gamblitude does not provide services targeted at minors.

Data related to minors is not knowingly collected. Gamblitude operates exclusively as a B2B platform serving licensed iGaming operators. Access to the platform and its services is restricted to business entities and their authorised personnel. No mechanisms exist to collect data from or about minors. If Gamblitude becomes aware that personal data of a minor has been inadvertently collected, such data will be deleted without undue delay.

12. Data Security

Gamblitude describes its platform as operating fully within the client’s secure environment, meaning:

• AI inference occurs locally,
• No data leaves the data warehouse,
• This provides faster and more secure responses for clients.

Further security measures applied by Gamblitude include: encryption of data in transit using TLS/HTTPS; multi-factor authentication (MFA) and role-based access controls for all internal systems; and regular security audits and penetration testing conducted by independent third parties. Security incidents are handled in accordance with applicable GDPR notification requirements.

13. Third-Country Transfers

If personal data is transferred outside the EEA, it is done using:

• Standard Contractual Clauses (SCCs)
• Contractual safeguards described in the Privacy Policy

Exact countries and providers: As of the effective date of this Policy, Gamblitude does not transfer personal data to countries outside the European Economic Area. All data processors and sub-processors used by Gamblitude are based within the EEA or operate under equivalent data protection standards. Should this change in the future, this Policy will be updated accordingly and appropriate safeguards (such as Standard Contractual Clauses) will be put in place prior to any transfer.

14. Changes to This Policy

Gamblitude states it will post updates to the privacy policy on its website and notify users where appropriate.

15. Contact

For questions or requests regarding personal data: [email protected]

Postal address:
Gamblitude Sp. z o.o.
ul. Klonowa 24
43-188 Orzesze, Poland