Privacy Policy

This Privacy Policy explains how pawerpley.com, including the Power Play gaming environment, collects, uses, shares, and protects your personal data when you visit the website, create an account, or use any related services. It applies to all visitors, registered players, and other users who access pawerpley.com in connection with Power Play from the United Kingdom and, where relevant, from other jurisdictions. By using the site you acknowledge that you have read and understood this Privacy Policy. This version is effective and was last updated in January 2026.

1. Who We Are

For the purposes of UK data protection law, the controller responsible for your personal data in connection with the Power Play environment on pawerpley.com ("we", "us", "our") is the online gaming operator that owns and operates pawerpley.com and holds a C.I.L. Master License #5536/JAZ issued in Curaçao. The full corporate details of the operating company, including its legal name, registered address and company registration number, are set out in the Terms and Conditions published on pawerpley.com and form an integral part of this Privacy Policy.

Our principal place of business and corporate contact details may be updated from time to time in those Terms and Conditions. This Privacy Policy is designed to align with the requirements of the UK General Data Protection Regulation ("UK GDPR") and the UK Data Protection Act 2018 for players located in the United Kingdom, while also taking into account international standards and, where applicable, Mexican and EU data protection principles.

Data protection contact

Data Protection Officer / privacy contact: We have designated a Data Protection Officer ("DPO") or equivalent data protection contact responsible for overseeing questions in relation to this Privacy Policy and our data practices.
How to contact us: You can contact our DPO or data protection team by using the "Contact Us" or support section on pawerpley.com, and by clearly marking your message "Data Protection" or "Privacy". Additional contact details (such as email and postal address) are provided in the Terms and Conditions and/or Help Centre on pawerpley.com.
Language: We generally handle privacy communications in English, but may, where reasonably possible, assist you in another language depending on available support resources.

What Personal Data We Collect

We collect only the personal data that is necessary for operating Power Play on pawerpley.com, complying with our legal obligations (including KYC/AML), and protecting our legitimate interests and those of our players. The main categories of data are:

Identification and contact data

Profile information: Full name, username, date of birth, gender (if provided), country of residence, and proof of age.
Contact details: Email address, telephone number, residential address, preferred language, and communication preferences.
KYC documentation: Copies of identity documents (e.g. passport, national ID, driving licence), proof of address (e.g. utility bill, bank statement), and any additional information requested for verification.

Account, transactional and payment data

Account data: Account ID, registration date, login history, security settings, responsible gambling limits and self-exclusion status.
Payment data: Deposits, withdrawals, chosen payment methods, partial payment card details (in tokenised or truncated form), bank account information, and payment confirmations from our payment partners.
Betting and gaming history: Records of bets, wagers, wins and losses, bonuses claimed, game sessions, and in-game interactions related to Power Play.

Technical, device and usage data

Technical data: IP address, device identifiers, browser type and version, operating system, time zone, language settings, and approximate geolocation (derived from IP).
Usage logs: Pages visited, navigation paths, clickstream data, session timestamps, and interaction with promotional banners or messages.
Security and diagnostics: Log files, error reports, authentication tokens, and security-event information used to detect fraud, misuse or technical issues.

Cookies and similar technologies

Cookie data: Unique identifiers stored in cookies or similar technologies that remember your preferences, maintain sessions, and help us understand how Power Play on pawerpley.com is used.
Tracking technologies: Pixels, tags, SDKs and local storage used for analytics, fraud detection and, where consented, marketing and advertising.

Communications and customer support data

Support interactions: Records of your communications with customer support, including chat transcripts, emails, call notes and complaint files.
Feedback and surveys: Information you provide in surveys, feedback forms or reviews relating to pawerpley.com or the Power Play environment.

Third-party and publicly available data

Verification data: Information obtained from identity verification, credit reference and fraud-prevention agencies, and from KYC/AML databases, sanctions lists and politically exposed persons ("PEP") lists.
Marketing and affiliation: Information from trusted marketing partners and platforms that refer you to pawerpley.com, subject to your consent and their own privacy policies.
Public information: Content you make public on forums, social media or independent review sites about pawerpley.com or Power Play, which is processed in line with those platforms' terms, not ours.

3. Legal Basis for Processing

Under the UK GDPR we must have a lawful basis for each type of personal data processing. Depending on the context, we process your data on the following legal grounds:

Contractual necessity

Account creation and management: We process your identification, contact and account data to register you as a player, provide access to Power Play on pawerpley.com, and manage your account and settings.
Provision of services: We use your data to place bets, settle wagers, credit winnings, apply bonuses, and deliver the gaming services you request.
Payments and withdrawals: Processing of payment and transactional data is necessary to accept deposits, process withdrawals and maintain accurate records of your balance.

Compliance with legal obligations

KYC/AML requirements: We process identification documents, transaction data and behavioural information to comply with anti-money laundering, counter-terrorist financing, sanctions screening and responsible gambling obligations under applicable law.
Regulatory reporting: We may need to share and retain certain data to respond to lawful requests from regulators, tax authorities or law enforcement agencies, including authorities in Curaçao under Master License #5536/JAZ.
Record keeping: We maintain records of your account and transactions for legally required periods, including those applicable in the UK and other relevant jurisdictions.

Legitimate interests

Security and fraud prevention: We process technical, device, usage and transactional data to protect the integrity of pawerpley.com and Power Play, detect suspicious behaviour, prevent abuse of bonuses and combat fraud.
Service improvement and analytics: We analyse aggregated and pseudonymised usage data to optimise our website, games, promotions and customer support.
Defense of legal claims: We retain and use relevant data where necessary to establish, exercise or defend legal claims, including disputes with players or regulators.

Consent

Marketing communications: We send electronic marketing communications (email, SMS, push notifications) about Power Play on pawerpley.com only where you have given valid consent or where permitted by PECR and similar rules.
Optional cookies and tracking: Non-essential cookies and similar technologies (e.g. for personalised advertising) are used based on your consent through our cookie banner or preferences centre.
Special categories of data: In rare cases where we process sensitive data (for example, information you provide about your health in a responsible gambling context), we will do so based on your explicit consent or another applicable legal ground.

Vital interests and public interest

Protection of individuals: We may process data where necessary to protect the vital interests of you or another person (for example, disclosure to emergency services in serious circumstances).
Public interest and regulatory functions: In strictly limited cases, we may process and share data to support public authorities in fulfilling their regulatory or law enforcement functions, where this is lawful and proportionate.

Purpose of Processing

We use the personal data described above only for specified, explicit and legitimate purposes connected to the operation of Power Play on pawerpley.com and compliance with our legal obligations. In particular, we process your data for the following purposes:

Providing and managing gaming services: To create and administer your account, verify your identity and age, process bets and wagers, operate games, calculate and pay winnings, manage bonuses and promotions, and provide customer support.
Legal and regulatory compliance: To comply with KYC/AML rules, responsible gambling duties, sanctions screening, tax and accounting obligations, and regulatory requirements in the UK and other relevant jurisdictions, including Curaçao under Master License #5536/JAZ.
Risk management and fraud prevention: To monitor gameplay and transactions for signs of fraud, misuse, bonus abuse, money laundering or other suspicious activity, and to protect the security of pawerpley.com and its users.
Service improvement and analytics: To conduct statistical and analytical research on how players use Power Play, improve the performance and usability of our website and apps, and develop new features and offerings.
Personalisation and marketing: To tailor content, recommendations and offers to your preferences and activity, and to send you marketing communications about Power Play on pawerpley.com where permitted by law and your consent.
Customer relations and dispute resolution: To handle enquiries, complaints and disputes, record communications with you, and manage our relationship with you in a transparent and fair manner.
Business operations and planning: To manage our business, including internal reporting, audits, corporate governance, and potential corporate transactions such as mergers, acquisitions or restructurings.

Disclosure & Sharing

We treat your personal data as confidential and only share it where necessary for the purposes described in this Privacy Policy, in accordance with UK GDPR and other applicable laws. Recipients may be located within or outside the UK.

Service providers and partners

Payment service providers and banks: To process deposits, withdrawals, chargebacks and other payment-related services we share relevant personal and transactional data with authorised payment processors, card schemes and banking institutions.
Technology and hosting providers: We use carefully selected third parties to provide hosting, cloud infrastructure, IT support, data storage, security tools, email and SMS delivery, and analytics services for pawerpley.com and Power Play.
KYC/AML and fraud prevention partners: Identity verification agencies, credit reference agencies, sanctions-screening providers and fraud-prevention services assist us in meeting regulatory obligations and preventing abuse.

Regulators, authorities and dispute bodies

Regulatory authorities: Where required by law, we may disclose relevant data to supervisory authorities, law enforcement agencies, courts and other public bodies in the UK or other jurisdictions, including gaming regulators associated with C.I.L. Master License #5536/JAZ.
Data protection authorities: In the context of privacy-related investigations or complaints, we may cooperate with data protection authorities, including the UK Information Commissioner's Office (ICO) and, where applicable, other national regulators.

Affiliates, marketing and analytics partners

Affiliates and advertising networks: With your consent and in accordance with cookie preferences, we may share limited pseudonymised data with marketing partners to measure campaign performance, attribute referrals and deliver relevant promotions relating to Power Play on pawerpley.com.
Analytics providers: We may share pseudonymised or aggregated data with analytics providers to help us understand usage patterns and improve our services. Such data is not used to identify you directly.

Professional advisers and corporate transactions

Professional advisers: Lawyers, auditors, consultants and accountants may receive access to personal data where reasonably necessary for the provision of their professional services and subject to confidentiality obligations.
Business transfers: If we undergo a reorganisation, merger, acquisition or sale of all or part of our business or assets, personal data relating to pawerpley.com and the Power Play environment may be transferred to the new owner or entity, subject to continued protection under this Policy or a similar standard.

We do not sell your personal data. Where we share data with third parties, we do so under written contracts that require them to protect your data and use it only in accordance with our instructions and applicable law.

International Transfers

Because pawerpley.com and the Power Play environment operate online and rely on international infrastructure and partners, your personal data may be transferred to, and processed in, countries outside the UK. These countries may have different data protection laws from those in the UK, and in some cases may not provide the same level of protection.

Intra-group and operational transfers: Data may be transferred to entities and service providers located in jurisdictions where our gaming operations, support services or infrastructure are based, including (but not limited to) Curaçao (in connection with C.I.L. Master License #5536/JAZ), the European Economic Area (EEA), and other countries.
Safeguards for non-adequate countries: Where we transfer personal data to a country that is not subject to an adequacy regulation under UK law, we implement appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to EU Standard Contractual Clauses, or other contractual protections approved by the UK Information Commissioner's Office.
Technical and organisational protections: In addition to contractual safeguards, we apply technical measures (including encryption and access controls) and organisational measures (such as strict internal policies and limited access) to protect your data during and after international transfers.
Access to copies of safeguards: You may obtain more information about international transfers and a copy of the relevant safeguards by contacting our DPO via the channels indicated in this Privacy Policy, subject to appropriate redactions to protect commercial confidentiality.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to comply with legal, accounting and reporting obligations, and to resolve disputes. Retention periods may vary depending on the type of data and applicable law, but we apply the following general principles:

Player account and identification data: Core account records and identity verification data are typically retained for the duration of your relationship with us and for at least five (5) years after account closure, in line with applicable KYC/AML and anti-fraud obligations.
Transaction and payment data: Records of deposits, withdrawals and betting history are usually kept for up to seven (7) years after the relevant transaction, to comply with legal, tax and regulatory requirements and to handle any disputes.
Customer support and complaints data: Correspondence and complaint files are generally stored for up to six (6) years after resolution, to evidence our dealings with you and to defend legal claims.
Marketing and consent records: Data relating to marketing preferences and consent is kept for as long as you remain subscribed and for a reasonable period thereafter to demonstrate compliance with consent requirements. If you opt out, we may keep a limited record of your opt-out to ensure your preferences are respected.
Technical and analytics data: Logs and analytics data are retained for shorter periods, typically up to twenty-four (24) months, unless a longer period is required for security, fraud investigation or legal purposes.

When personal data is no longer needed for its original purpose and we are not legally required to retain it, we will either securely delete it or irreversibly anonymise it so that it can no longer be linked to you. If we anonymise data, we may continue to use it for statistical and analytical purposes without further notice to you.

Your Rights

Under the UK GDPR and, where applicable, under Mexican data protection law (including the Federal Law on the Protection of Personal Data Held by Private Parties - "LFPDPPP"), you have a number of rights in relation to your personal data. These include the EU-style GDPR rights and the Mexican ARCO rights (Acceso, Rectificación, Cancelación, Oposición). The availability of specific rights may depend on your place of residence and the legal basis for processing.

Core data protection rights

Right of access: You can request confirmation as to whether we process your personal data and obtain a copy of the data we hold about you, together with information about how we use it.
Right to rectification: You can ask us to correct inaccurate or incomplete personal data. Where possible, you may update certain details directly via your account on pawerpley.com.
Right to erasure ("right to be forgotten" / cancelación): In certain circumstances, you can ask us to delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, you have withdrawn consent, or you validly object to processing. This right is subject to our legal obligations (for example, we may need to retain some data for AML or regulatory reasons).
Right to restriction of processing: You may request that we restrict the processing of your data in specific situations, for example while we are verifying its accuracy or assessing an objection.
Right to object (oposición): You may object to processing based on our legitimate interests, including profiling, where you believe your fundamental rights and freedoms outweigh our interests. You also have the right to object at any time to the use of your data for direct marketing.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you can request that we provide your personal data in a structured, commonly used and machine-readable format, or transmit it to another controller where technically feasible.
Right to withdraw consent: Where processing is based on your consent (for example, for marketing or non-essential cookies), you may withdraw that consent at any time via your account settings, the unsubscribe links in our communications, or by contacting us. Withdrawal of consent does not affect the lawfulness of processing prior to that withdrawal.

Exercising your rights and response times

How to make a request: You can exercise your rights by contacting our DPO or data protection team via the support or contact options on pawerpley.com, clearly indicating the right you wish to exercise and providing sufficient information for us to verify your identity and locate your data.
Identity verification: For your security, we may request additional information (such as confirmation of account details or identity documents) to ensure that we are dealing with the correct individual and to prevent unauthorised access.
Response timeframe: We aim to respond to your request within one (1) month (30 days) of receipt. In complex or numerous cases, we may extend this period by a further two (2) months, in which case we will inform you of the extension and reasons within the initial 30-day period. For residents of Mexico, we also strive to comply with the specific response timelines prescribed by LFPDPPP.
Fees: We will handle your requests free of charge, unless they are manifestly unfounded or excessive. In such cases, we may charge a reasonable fee or refuse to act on the request, in accordance with applicable law.

Some rights may be limited where granting them would adversely affect the rights and freedoms of others, interfere with ongoing investigations, or prevent us from complying with legal obligations, especially in relation to gaming, fraud, KYC and AML requirements. Where we rely on such exemptions, we will explain this to you where legally permitted.

2. Cookies & Tracking Technologies

pawerpley.com uses cookies and similar technologies in connection with Power Play to make the website work, improve performance, and deliver relevant content and offers. Cookies are small text files stored on your device when you visit our site, and they may be set by us (first-party cookies) or by third parties (third-party cookies).

Types of cookies we use

Strictly necessary (session) cookies: These cookies are essential for the operation of pawerpley.com and Power Play. They allow you to navigate the site, log in, maintain sessions, and use secure areas such as the cashier. Without them, the service cannot function properly.
Functional (persistent) cookies: These remember your choices and preferences (such as language, region, login settings and display options) so that your experience is more convenient and personalised on subsequent visits.
Analytics and performance cookies: These help us understand how visitors use pawerpley.com, which pages are most popular, how long users spend on them, and how they interact with the site. We use this information to improve the performance and usability of Power Play. Data collected is generally aggregated and does not directly identify you.
Advertising and targeting cookies: With your consent, these cookies and similar technologies may be used to deliver more relevant adverts and promotions relating to Power Play on pawerpley.com and measure the effectiveness of our marketing campaigns. They may be set by us or by carefully selected advertising partners.

Managing cookies and preferences

Consent management: On your first visit (and periodically thereafter), a cookie banner or preferences panel will ask you to accept or manage non-essential cookies. You can change your choices at any time via the cookie settings available on pawerpley.com.
Browser settings: Most browsers allow you to block or delete cookies, or to alert you when cookies are being set. Please note that disabling strictly necessary cookies may affect the functionality of Power Play and prevent you from using some features.
Third-party technologies: Third-party cookies and tracking technologies are subject to the privacy policies of the respective providers. We encourage you to review those policies for more information on how they process your data.

Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction or damage. While no online system can be guaranteed 100% secure, we continuously work to maintain a level of security appropriate to the risk.

Encryption: Data transmitted between your browser and pawerpley.com is protected using modern transport-layer security protocols (TLS 1.2 or higher). Where appropriate, we also encrypt certain categories of data at rest.
Access controls and authentication: Access to personal data is restricted to authorised personnel who need it to perform their duties. We apply role-based access controls, strong authentication procedures and, where feasible, multi-factor authentication for sensitive systems.
Network and infrastructure security: We use firewalls, intrusion detection and prevention systems, anti-malware tools and other security technologies to protect our infrastructure and monitor for suspicious activity.
Security testing and audits: Our systems and applications are regularly tested and reviewed using vulnerability assessments, security monitoring and, where appropriate, independent audits. We strive to align our practices with recognised industry standards and frameworks (such as ISO 27001-type and SOC 2-type controls) where appropriate, without implying formal certification unless expressly stated on pawerpley.com.
Staff training and policies: Employees and contractors who process personal data are subject to confidentiality obligations and receive appropriate training on data protection, security and responsible handling of customer information.
Incident response: We maintain incident response procedures to detect, investigate and respond to suspected personal data breaches. Where required by law, we will notify the relevant supervisory authority and affected individuals without undue delay.

5. Complaints & Contacts

We aim to handle your personal data fairly and transparently. If you have concerns about how we process your data in connection with Power Play on pawerpley.com, we encourage you to contact us first so that we can try to resolve the issue.

How to contact us

Initial contact: If you have a question, request or complaint about privacy, please contact our customer support team via the support or "Contact Us" section on pawerpley.com and indicate that your query relates to data protection.
Escalation to DPO: If your concern is not resolved at first contact, you may request that it be escalated to our Data Protection Officer or privacy team. They will review your complaint in detail and coordinate an appropriate response.

Our complaint handling process

Acknowledgement: We will acknowledge receipt of your privacy complaint or rights request as soon as reasonably possible, usually within a few working days.
Investigation and response: We will investigate your concern and aim to provide a substantive response within thirty (30) days. If we are unable to respond within this period due to complexity or volume, we will inform you of any extension and explain the reasons.
Further steps: If you are dissatisfied with our response, or if you believe that we are processing your personal data unlawfully, you have the right to lodge a complaint with a competent data protection authority.

Supervisory authorities

United Kingdom: If you are in the UK, you can contact the Information Commissioner's Office (ICO) at https://ico.org.uk or by using the contact details published on that website.
Mexico: If you are in Mexico and believe your data protection rights under the LFPDPPP have been infringed, you may contact the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) via https://home.inai.org.mx or using the contact channels indicated there.
European Union / EEA (where applicable): If EU/EEA data protection law applies to you, you may lodge a complaint with your local supervisory authority. Contact details are available on the European Data Protection Board's website.
Gaming regulators: For issues specifically related to regulatory aspects of our gaming licence (such as fairness of games), you may, where applicable, contact the relevant gaming regulator, including the authority linked to C.I.L. Master License #5536/JAZ in Curaçao, using the contact details available on their official resources.

Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or operational needs relating to Power Play on pawerpley.com. When we make changes, we will revise the "Last updated" date at the beginning of this Policy and, where appropriate, provide additional notice.

Notification methods: For material changes, we may notify you via email, account messages, prominent notices on pawerpley.com (such as banners or pop-ups), or a combination of these methods.
Advance notice: Where feasible and where changes are significant, we will give you at least thirty (30) days' advance notice before the new version takes effect, so that you can review the changes.
Your options: If you do not agree with the updated Policy, you may choose to stop using pawerpley.com and request account closure. Continued use of the site after the effective date of an updated Privacy Policy will constitute acceptance of the changes, to the extent permitted by law.
Version control: We may keep previous versions of this Privacy Policy for record-keeping purposes. You may request access to prior versions by contacting our DPO, subject to reasonable limitations.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data in connection with Power Play on pawerpley.com.