burger icon

Privacy Policy

This Privacy Policy explains how Stake, in connection with the Stake project operated for UK players via stakega.com, collects, uses, discloses and protects your personal data when you visit our websites, create an account or use our online gambling services. It applies to all visitors and registered players accessing Stake services through stakega.com from within the United Kingdom and, where relevant, to users in other jurisdictions whose data is processed in the context of these services. This Privacy Policy is effective from 1 January 2026 and replaces any previous versions for Stake on stakega.com.

Who We Are

The online gambling services offered to players located in Great Britain through Stake, in the context of Stake on stakega.com, are operated by TGP Europe Ltd ("we", "us", "our"). TGP Europe Ltd is the data controller for personal data processed in connection with your use of stakega.com for UK gambling services.

TGP Europe Ltd is a private limited company based in the Isle of Man and is licensed and regulated by the Gambling Commission of Great Britain under account number 38898. Details of our gambling licence and corporate registration, including our current registered office address, are available on the UK Gambling Commission's public register at:

https://gamblingcommission.gov.uk/public-register/business/detail/38898

For all privacy and data protection matters relating to Stake on stakega.com, including questions, requests and complaints, you can contact our data protection contact point as follows:

  • Email: support@stakega.com (please include "Data Protection" or "Privacy" in the subject line)
  • Postal correspondence: Data Protection Officer, TGP Europe Ltd, Isle of Man (see the UK Gambling Commission register entry for licence 38898 for the most up-to-date registered office address)
  • Website: through the customer support or help channels listed on https://stakega.com

What Personal Data We Collect

We collect and process different categories of personal data when you interact with Stake services through Stake on stakega.com. The exact data we collect depends on how you use our services, the products you choose and the legal obligations that apply to us as a UK-licensed gambling operator.

Identification and Contact Data

  • Profile information: full name, date of birth, username, password or other login credentials.
  • Contact details: email address (such as the address you use to contact support@stakega.com), telephone number, residential address and country of residence.
  • Verification (KYC) data: copies or details of identity documents (e.g. passport, national ID, driving licence), proof of address (e.g. utility bill, bank statement), source-of-funds/source-of-wealth information (e.g. employment details, income range, bank letters), and any information you provide to help us meet our "Know Your Customer" and anti-money laundering obligations.

Technical and Device Data

  • Device information: IP address, device identifiers, operating system, browser type and version, language settings and approximate location based on IP.
  • Usage data: log data about how you access and use stakega.com, including the pages you view, the time and date of your visits, clicks, navigation paths, session duration and error reports.
  • Security and authentication data: login history, failed login attempts, security tokens, and data related to multi-factor authentication where enabled.

Payment and Financial Data

  • Payment details: limited payment card or banking details necessary to process deposits and withdrawals (these may be handled directly by our payment service providers and not stored in full by us).
  • Transaction records: deposits, withdrawals, bets, wins, losses, account balances, bonuses credited and wagered, and any payment disputes or chargebacks.
  • Anti-fraud and AML data: information obtained from payment partners, screening tools and publicly available sources that helps us detect and prevent fraud, money laundering, terrorist financing and other financial crimes.

Behavioural and Gambling Activity Data

  • Betting and gaming history: games played, time spent playing, bet sizes, outcomes, stake patterns and in-game actions.
  • Responsible gambling data: self-exclusion status (including integration with national schemes such as GamStop), deposit limits, reality checks, time-outs and any interactions with our safer gambling team.
  • Interaction data: records of communications with customer support (including via email to support@stakega.com), complaints and dispute records (including matters escalated to IBAS or other ADR bodies).

Marketing and Communication Data

  • Preferences: your choices about receiving marketing communications (email, SMS, push notifications), language preferences and interests in particular products or promotions.
  • Campaign interactions: data on whether you open, read or click on marketing emails or in-site messages.

Cookies and Similar Technologies

  • Cookies: small text files stored on your device to remember your preferences, maintain your session and help us understand how you use stakega.com.
  • Pixel tags and scripts: technologies from us or our trusted partners used for analytics, security and, where you agree, advertising.
  • Device and browser-based identifiers: identifiers that help distinguish your browser or device for security and analytics purposes.

More detail on how we use cookies and how you can manage them is provided in the "Cookies & Tracking Technologies" section below.

Legal Basis for Processing

We process your personal data in accordance with UK data protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018. Depending on the context, we rely on one or more of the following legal bases:

  • Performance of a contract: We process data necessary to create and manage your account, verify your age and identity, provide access to games, process deposits and withdrawals, settle bets, award bonuses, resolve complaints, and provide customer support. Without this data, we cannot provide gambling services through stakega.com for Stake.
  • Compliance with legal obligations: As a UK-licensed operator (UK Gambling Commission licence 38898 held by TGP Europe Ltd), we must comply with regulatory, anti-money laundering (AML), counter-terrorist financing, fraud prevention, responsible gambling and tax/reporting requirements. This includes identity verification, transaction monitoring, record-keeping and sharing information with regulators, law enforcement or other authorities where legally required.
  • Legitimate interests: We process certain data where it is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests. These legitimate interests include:
    • ensuring the security and integrity of stakega.com, our systems and your account;
    • preventing misuse of our services (such as bonus abuse, fraud or match-fixing);
    • maintaining accurate records and improving our products, services and user experience;
    • conducting internal analytics and statistics to better understand how players use our services and to manage our business;
    • defending and exercising legal claims and handling disputes, including ADR processes through bodies such as IBAS.
  • Consent: In some cases, we process your data on the basis of your explicit consent, for example:
    • sending you direct electronic marketing that is not covered by our legitimate interests;
    • using certain non-essential cookies or similar technologies for analytics and advertising;
    • sharing your data with specific partners or affiliates for their own marketing, where permitted.
    You can withdraw your consent at any time, as explained in the "Your Rights" and "Cookies & Tracking Technologies" sections, without affecting the lawfulness of processing before withdrawal.
  • Protection of vital interests and public interest: In rare cases, we may process data to protect your vital interests or those of another person, or where processing is necessary for reasons of substantial public interest recognised in UK law (for example, serious crime prevention and safeguarding of vulnerable persons).

Purpose of Processing

We use your personal data only for specific, explicit and legitimate purposes and do not further process it in a manner incompatible with those purposes. The main purposes include:

  • Providing and administering gambling services: to create and manage your Stake account, verify eligibility (age and location), provide access to games, process deposits and withdrawals, settle bets, credit winnings and manage bonuses and loyalty schemes connected with Stake on stakega.com.
  • Regulatory compliance and risk management: to meet obligations under UK gambling legislation, the UK Gambling Commission licence conditions, AML/CTF laws and other applicable regulations, including KYC checks, transaction monitoring, record-keeping, reporting to authorities and cooperation with schemes such as GamStop.
  • Responsible gambling and player protection: to monitor player behaviour for signs of harm, apply limits, time-outs or self-exclusions, offer tools and interventions, and comply with safer gambling requirements and best practices (including guidance from bodies like BeGambleAware).
  • Customer support and dispute resolution: to respond to your questions and requests (for example, emails to support@stakega.com), investigate complaints, handle disputes (including ADR with IBAS) and generally provide assistance.
  • Service improvement and analytics: to understand how users interact with stakega.com, analyse performance, identify technical issues, optimise site layout and game presentation, and develop new features and services.
  • Marketing and promotions: to send you tailored offers, bonuses, newsletters and product information relating to Stake services on stakega.com, where permitted by law and your marketing preferences, and to measure the effectiveness of campaigns.
  • Security and fraud prevention: to protect our systems and your account from unauthorised access, maintain logs, detect and prevent fraud, money laundering, collusion and other abuse.
  • Legal, regulatory and business purposes: to maintain business and accounting records, perform audits, establish, exercise or defend legal claims, manage relationships with business partners and comply with corporate governance and reporting obligations.

Disclosure & Sharing

We do not sell your personal data. We disclose or share your data only when necessary for the purposes described in this Privacy Policy, when required by law, or when you have provided your consent where required. Categories of recipients may include:

  • Group and brand-related entities: other entities involved in providing the Stake brand experience and technology, to the extent necessary to operate Stake on stakega.com, maintain the platform, manage promotions or ensure consistent service quality, always under appropriate contractual safeguards.
  • Technical and infrastructure service providers: companies that host our platforms, provide IT, security, cloud services, data storage, content delivery networks, communication tools, and customer support technologies.
  • Payment and financial partners: banks, payment processors, card schemes and other payment service providers that process deposits, withdrawals and refunds, and help us prevent fraud and comply with AML/CTF rules.
  • Analytics, marketing and advertising partners: providers of analytics, tracking and marketing tools (including those using cookies and similar technologies), and, where you consent, advertising networks or affiliates that help us measure and improve campaigns or show relevant offers.
  • Regulators and authorities: the UK Gambling Commission, law enforcement agencies, tax authorities, financial intelligence units and other regulators or public authorities in the UK or other jurisdictions where legally required or permitted, for example in relation to suspected crime, AML/CTF obligations, responsible gambling or regulatory enquiries.
  • Alternative dispute resolution (ADR) bodies and self-exclusion schemes: IBAS (Independent Betting Adjudication Service) or other ADR providers, and self-exclusion schemes such as GamStop, where necessary to administer disputes or self-exclusion requests.
  • Professional advisers: lawyers, auditors, consultants and other professional advisers, where required to protect our rights, comply with legal obligations, support audits or manage business operations, under duties of confidentiality.
  • Business transfers: in the event of a merger, acquisition, reorganisation, asset sale or similar transaction involving our business, your data may be transferred to the relevant third parties, subject to appropriate safeguards and compliance with data protection law.

Whenever we share your data with third parties acting as our processors, they may only process your data on our instructions, for the specified purposes and subject to strict confidentiality and security requirements.

International Transfers

Because we operate online and work with partners in multiple jurisdictions, your personal data may be transferred to, and processed in, countries outside the United Kingdom, including the Isle of Man and other locations that may have different data protection laws from those in the UK.

  • Transfers within the UK and adequacy jurisdictions: Your data may be processed in the UK and in countries or territories that the UK Government has recognised as providing an adequate level of data protection ("adequate" jurisdictions).
  • Transfers to other countries: Where we transfer your data to a country that is not subject to an adequacy regulation, we implement appropriate safeguards such as:
    • the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses;
    • contractual protections imposing data protection and security obligations on the recipient;
    • additional technical and organisational measures (for example, encryption and access controls) to protect your data.
  • Transfers to certain service providers: For some tools and services (for example, analytics, cloud hosting or communications providers), data may be transferred to providers based outside the UK, including possibly in the EEA or the United States. Where such providers participate in recognised data transfer frameworks or are subject to equivalent safeguards, we rely on those mechanisms where appropriate.

You can contact us at support@stakega.com if you would like more information about the specific safeguards we use for international transfers.

Data Retention

We retain personal data only for as long as it is reasonably necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting or reporting requirements. Retention periods may vary by data category and context, but we apply the following general principles:

  • Account and identification data: Basic profile data, KYC documents, responsible gambling records and associated verification information are typically kept for the duration of your relationship with us and for up to five (5) years after account closure or your last transaction, unless a longer period is required by law or needed in connection with legal claims or regulatory investigations.
  • Transaction and gambling activity data: Records of deposits, withdrawals, betting history and relevant logs are kept to meet our regulatory and tax obligations and to handle disputes. These records are generally retained for a period aligned with UK regulatory and financial record-keeping requirements (usually up to five (5) to seven (7) years after the relevant transaction or account closure).
  • Marketing and communications data: Data about your marketing preferences and communications is retained while you remain opted in and for a limited period afterwards (for example, up to three (3) years after your last interaction) to evidence compliance and manage suppression lists.
  • Technical and security data: Logs, device identifiers and security-related data are kept for periods necessary for security, fraud prevention and system integrity, typically ranging from several months to a few years, depending on the sensitivity of the data and any legal requirements.

When the relevant retention period expires, or when data is no longer needed, we will either securely delete or anonymise it. In some cases, we may anonymise data earlier so that it can no longer be associated with you, for example for statistical or analytical purposes. If you exercise your rights to delete or restrict processing, we will also consider these requests in light of our legal obligations and legitimate interests, as explained below.

Your Rights

Under UK data protection law (UK GDPR and the Data Protection Act 2018), and where applicable under EU GDPR and relevant Mexican privacy regulations, you have several rights in relation to your personal data. These rights apply in the context of our operation of Stake on stakega.com and may be subject to legal limitations and exemptions.

Data Protection Rights

  • Right of access: You can request confirmation as to whether we process your personal data and obtain a copy of your data, together with information about how we process it.
  • Right to rectification: You can ask us to correct inaccurate or incomplete personal data. In many cases, you can update certain details directly via your account settings.
  • Right to erasure ("right to be forgotten"): You can request deletion of your personal data where, for example, it is no longer necessary for the purposes for which it was collected, you withdraw consent (where consent is the basis), or you successfully object to processing. We may need to retain certain data where required by law (for example, AML and regulatory record-keeping) or for the establishment, exercise or defence of legal claims.
  • Right to restriction of processing: You can ask us to restrict the processing of your data in specific circumstances, such as when you contest the accuracy of the data or when you have objected to processing and we are verifying our legitimate interests.
  • Right to object: You can object to processing based on our legitimate interests, including profiling, on grounds relating to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where the processing is necessary for legal claims. You also have an absolute right to object at any time to the use of your data for direct marketing (including profiling for marketing).
  • Right to data portability: In certain cases, you can request that we provide your personal data, which you have provided to us, in a structured, commonly used and machine-readable format, and you can request that we transmit that data to another controller where technically feasible.
  • Rights related to automated decision-making: If we make decisions that produce legal or similarly significant effects solely by automated means (such as certain risk or fraud assessments), you have the right to request human intervention, to express your point of view and to contest the decision, subject to legal limitations.
  • Right to withdraw consent: Where processing is based on your consent, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal but may mean we can no longer provide certain services or features.

Mexican and Other Non-UK Rights

While Stake on stakega.com is intended for UK players under UK regulation, if Mexican privacy law (such as the Federal Law on Protection of Personal Data Held by Private Parties) or other national laws apply to your circumstances, you may have additional or overlapping rights, often referred to as ARCO rights (Access, Rectification, Cancellation and Opposition). Where such laws apply, we will seek to respect those rights to the extent consistent with our legal obligations under UK law and our regulatory duties.

Exercising Your Rights

You can exercise your rights at any time by contacting us via:

  • Email: support@stakega.com (with "Data Protection Request" in the subject line)

To help us respond efficiently and protect your data, we may ask you to provide information to verify your identity and your relationship with us (for example, username, registered email, and limited additional information). We aim to respond to all valid requests without undue delay and, in any event, within one (1) month of receipt. In complex cases or where we receive multiple requests, this period may be extended by up to a further two (2) months; if so, we will inform you of the extension and reasons.

We will handle your requests free of charge. However, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded, repetitive or excessive, in line with UK GDPR.

Cookies & Tracking Technologies

When you visit or use stakega.com for Stake services, we use cookies and similar technologies to make our site work, enhance your experience, perform analytics and, where permitted, deliver relevant advertising.

Types of Cookies We Use

  • Strictly necessary cookies: essential for the operation of stakega.com, enabling core features such as navigation, secure login, account management, bet placement and payment processing. These cookies are required for the site to function and cannot be switched off through our cookie tools.
  • Functional cookies: enable enhanced functionality and personalisation, such as remembering your preferences (language, region, settings) and providing improved features.
  • Performance and analytics cookies: help us understand how visitors use the site, which pages are most frequently visited, and how users move around the site, enabling us to improve performance and usability.
  • Advertising and targeting cookies: used, where you consent, to deliver relevant advertising and promotions, measure the effectiveness of campaigns, and limit the number of times you see a particular advert. These cookies may be set by us or by our trusted advertising partners.
  • Session and persistent cookies: some cookies are session-based and expire when you close your browser; others are persistent and remain on your device for a longer period or until you delete them.

Managing Cookies

  • On-site controls: Where required by law, we present a cookie banner or preference centre when you first visit stakega.com, allowing you to accept or reject non-essential cookies. You can adjust your preferences at any time through the available cookie settings on the site.
  • Browser settings: You can configure your browser to block or delete cookies, or to alert you when cookies are being placed. How you do this depends on your browser; please refer to your browser's help section for instructions.

Please note that disabling or rejecting certain cookies may affect the functionality of stakega.com, and you may not be able to use all features or place bets as intended.

Data Security

We are committed to protecting your personal data and maintaining the security and integrity of stakega.com and the Stake services. We implement a combination of technical and organisational measures designed to prevent unauthorised access, loss, misuse or alteration of your data.

  • Encryption and transmission security: Data transmitted between your device and our systems is protected using modern encryption technologies (such as TLS 1.2 or higher), helping to safeguard it from interception.
  • Protection at rest: Where appropriate, we use encryption, pseudonymisation and access controls to protect stored data, with secure databases and log management systems.
  • Access controls: Access to personal data is restricted to authorised personnel and service providers who need it to perform their duties, based on role-based access controls and the principle of least privilege.
  • Authentication and account security: We encourage strong passwords and may offer additional security features such as multi-factor authentication. We monitor for unusual login patterns and take steps to prevent unauthorised access.
  • Monitoring, testing and audits: Our systems are subject to regular monitoring and security reviews. We carry out technical testing and assessments and may engage independent experts to review aspects of our security posture.
  • Policies and training: Staff with access to personal data receive training in data protection, confidentiality and security, and are bound by contractual obligations to protect your information.
  • Incident response: We maintain procedures to detect, respond to and remedy suspected personal data breaches. Where required by law, we will notify the relevant supervisory authority and affected individuals without undue delay.

We design our security measures with reference to industry standards and best practices (such as those reflected in frameworks like ISO 27001), while tailoring our controls to the specific risks of operating an online gambling platform under UK regulation.

Complaints & Contacts

If you have any questions or concerns about how we handle your personal data, or if you wish to make a complaint, you should first contact us so we can seek to resolve the issue directly.

Contacting Us

  • Email (primary channel): support@stakega.com (mark your message "Privacy Complaint" or "Data Protection")
  • Postal mail: Data Protection Officer, TGP Europe Ltd, Isle of Man (refer to the UK Gambling Commission public register entry for licence number 38898 for the current registered office address)
  • Online support: through the customer support options listed on https://stakega.com

When you contact us with a complaint or query, please provide sufficient information for us to identify your account (if any) and understand your concerns. We will acknowledge your complaint and aim to provide a substantive response within one (1) month. For complex matters, we may need more time, but we will keep you informed of progress.

Escalation to Supervisory Authorities

If you are not satisfied with our response or believe that our processing of your personal data does not comply with applicable law, you have the right to lodge a complaint with a supervisory authority.

  • United Kingdom - Information Commissioner's Office (ICO):
    • Website: https://ico.org.uk
    • Helpline: +44 303 123 1113
    • Postal address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
  • Mexico - INAI (where Mexican law applies):
    • Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI)
    • Website: https://home.inai.org.mx
  • European Union / EEA (where EU GDPR applies): If you are in the EU/EEA and your data is processed in the context of our services, you may also lodge a complaint with your local supervisory authority. Details of EU data protection authorities are available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

Updates

We may update this Privacy Policy from time to time, for example to reflect changes in our services, changes in applicable law or regulatory guidance, or improvements to our data protection practices. The "Last updated" date at the end of this Privacy Policy indicates when it was most recently revised.

  • Notification of changes: For minor or clarificatory changes, we will update the Privacy Policy and adjust the "Last updated" date. For material changes that significantly affect how we process your data or your rights, we will provide more prominent notice, which may include email notifications, in-account messages, and/or on-site banners on stakega.com.
  • Advance notice for significant changes: Where feasible and required, we will give you at least thirty (30) days' notice before significant changes take effect, so you can review the updated terms.
  • Your choices: If you do not agree with the updated Privacy Policy, you may choose to stop using the services and, where applicable, close your account. Continued use of Stake services on stakega.com after the effective date of an updated Privacy Policy will indicate your acknowledgement of the changes, to the extent permitted by law.
  • Versioning and changelog: We may keep prior versions of this Privacy Policy or a summary of material changes available upon request, so that you can see how our practices have evolved over time.

Last updated: January 2026