This Privacy Policy explains how Shakebet, operated by May Sun Services S.A. ("we", "us", "our"), collects, uses, stores, shares, and protects your personal data when you use shakebetsonline.com and its associated services, including the casino, sportsbook, and any promotional features. By registering an account or otherwise using our platform, you confirm that you have read and understood this policy. If you do not agree with any part of it, please do not use the site.

1. Who We Are

Shakebet is the trading name of the platform operated by May Sun Services S.A., licensed under Anjouan licence number ALSI-202411025-FI1. All references to "Shakebet", "Shake Bet", "we", "us", or "our" in this policy refer to May Sun Services S.A. as the data controller responsible for your personal information collected through shakebetsonline.com.

If you have any questions or concerns about how we handle your personal data, or if you wish to exercise any of your data rights, you may contact us using the details set out in Section 14 of this policy.

2. Scope of This Policy

This policy applies to all personal data we collect from individuals who:

• Register an account on shakebetsonline.com;
• Browse or use the site as a visitor without registering;
• Contact our customer support team;
• Participate in any bonus, promotion, loyalty programme, or competition we run;
• Correspond with us by email, live chat, telephone, or any other means.

This policy does not cover the practices of third-party websites that may be linked to or from shakebetsonline.com. We encourage you to review the privacy policies of any such third parties separately.

3. What Personal Data We Collect

We collect two broad categories of personal data: information you provide to us directly, and information we collect automatically as you use the platform.

3.1 Information You Provide Directly

• Registration data: Your full name, date of birth, email address, residential address, country of residence, username, and password when you create your account.
• Identity verification documents (KYC): Copies of government-issued photographic identification (such as a passport or national identity card), proof of address (such as a utility bill or bank statement), and, where required, source-of-funds or source-of-wealth documentation.
• Payment information: Details relating to the payment methods you use, which may include card numbers (stored in truncated form), cryptocurrency wallet addresses, bank account details, or credentials for e-wallet and payment services such as Trustly, Klarna, Wise, Revolut, Zimpler, Boku, or Payoneer.
• Communications: Any messages, attachments, or other content you send us through live chat, email, or any other support channel.
• Responsible gambling information: Details you voluntarily provide when requesting deposit limits, self-exclusion, cooling-off periods, or other responsible gambling tools.
• Promotional and survey responses: Information you provide when entering a competition, completing a survey, or engaging with promotions such as the Lootbox Monday, the ShakeBet Wheel, or the Missions board.

3.2 Information We Collect Automatically

• Technical data: IP address, device type, operating system, browser type and version, and screen resolution.
• Usage data: Pages viewed, search queries entered within the lobby, games played, session duration, bet amounts, win and loss amounts, bonus usage, loyalty tier progression, and any use of features such as the Swipe feature or Event Builder.
• Transaction data: Records of all deposits, withdrawals, bonuses credited and forfeited, wagering activity, and cashback payments received through our loyalty programme.
• Cookie and tracking data: Information gathered through cookies, pixel tags, and similar tracking technologies as described in Section 12 of this policy.
• Geolocation data: General location inferred from your IP address, used for regulatory compliance and to prevent access from restricted jurisdictions.

4. How We Use Your Personal Data

We process your personal data only where we have a lawful basis for doing so. The principal purposes for which we use your information are set out below, together with the legal basis on which we rely.

Where we rely on legitimate interests as our legal basis, we have assessed that our interests do not override your fundamental rights and freedoms. You have the right to object to processing carried out on this basis; see Section 11 for details.

Where we rely on consent — for example, for certain marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Bonuses, Promotions, and Loyalty Data

To operate our bonus and loyalty systems fairly and in accordance with our Terms and Conditions, we process gameplay and transaction data associated with your account. This includes, but is not limited to:

• Tracking progress through the three-deposit welcome package (100%, 50%, and 150% deposit matches, and free spins on Le Bandit) and verifying that minimum deposit thresholds have been met;
• Calculating wagering contribution percentages across product types — slots at 100%, live game shows at 20%, blackjack and roulette at 10%, and crash or arcade games at 0% — to determine bonus completion;
• Recording your loyalty level (1–50) and tier (Bronze through Mega) and applying the correct cashback rate and weekly maximum accordingly;
• Distributing Monday cashback as real, withdrawable funds and maintaining an accurate record that no wagering requirement applies to such payments;
• Administering Lootbox Monday rewards, ShakeBet Wheel spins (available from Loyalty Level 5), and Missions and Shake & Win challenge completions;
• Applying withdrawal limit adjustments — including the elevated €100,000 daily limit for Mega tier players — correctly to your account;
• Detecting and preventing bonus abuse, including monitoring for breaches of the €5 maximum bet rule while a bonus is active and the 10x bonus win cap.

This data is retained for as long as necessary to administer the relevant promotion, to resolve any disputes arising from it, and to meet our legal and regulatory record-keeping obligations.

6. Payment Data and Financial Records

Shakebet supports a wide range of payment methods, including Visa, Mastercard, bank transfer, Trustly, Klarna, Boku, Wise, Revolut, Zimpler, Payoneer, and eight cryptocurrencies (Bitcoin, Ethereum, BNB, USDC, Dogecoin, TRON, Bitcoin Cash, Litecoin, and USDT across BEP20, ERC20, and TRC20 networks). The personal and financial data we process in connection with payments includes:

• Payment method details provided at the time of deposit or withdrawal;
• Transaction amounts, timestamps, and processing status;
• Cryptocurrency wallet addresses associated with your account;
• Records of the wagering activity required before fee-free withdrawals are permitted;
• Correspondence with payment processors and acquiring banks where necessary to resolve queries or disputes.

We do not store full card numbers on our systems. Card payment data is processed by our authorised payment service providers, who apply their own security standards. We share only the minimum payment data necessary with each provider to complete the requested transaction.

Financial transaction records are retained for the period required by our licence and applicable anti-money laundering regulations, which is ordinarily a minimum of five years from the end of the customer relationship.

7. Know Your Customer (KYC) and Identity Verification

As a licensed gambling operator, we are required to verify the identity and age of all customers before allowing real-money play, and to conduct ongoing due diligence as required by our licence obligations. Our KYC process may require you to provide:

• A valid government-issued photo ID (passport, national identity card, or driving licence);
• Proof of your current residential address, such as a utility bill or bank statement dated within the last three months;
• Evidence of the source of funds used to deposit, such as payslips, bank statements, or other financial documentation;
• Evidence of the source of wealth for higher-volume players, particularly where transaction patterns or account activity warrant enhanced due diligence;
• Any additional documentation we are required to request under our anti-money laundering obligations.

We may verify your identity using automated third-party verification services, and we may cross-reference information you provide against publicly available databases, credit reference agency data, and fraud-prevention registers. Where automated decision-making is used in this process, you may request that a human review be carried out by contacting our support team.

Failure to complete KYC verification when requested may result in restrictions being placed on your account, including the suspension of withdrawal processing, in accordance with our Terms and Conditions and our regulatory obligations.

Identity verification documents are stored securely and retained for the period required by applicable law and our licence — typically a minimum of five years following account closure.

8. Responsible Gambling

We take our responsible gambling obligations seriously. In order to provide and operate our responsible gambling tools, we process certain personal data including your gameplay history, deposit and wagering volumes, session lengths, self-reported preferences, and any interactions you have with our responsible gambling features. Specifically, we may:

• Record and enforce deposit limits, loss limits, session time limits, and cooling-off periods that you set through your account;
• Process self-exclusion requests and apply the relevant restrictions to your account promptly;
• Monitor your account activity for patterns that may indicate problem gambling behaviour, and where appropriate, make contact to offer support resources or apply protective measures;
• Share information with third-party responsible gambling organisations or national self-exclusion registers where we are required or permitted to do so;
• Retain a record of any self-exclusion or restriction applied to your account for the duration of that restriction and for a reasonable period thereafter, to prevent circumvention.

Responsible gambling data is processed on the basis of our legal obligations, our legitimate interests in operating a safe gambling environment, and, where applicable, your explicit consent. This data will not be used for marketing purposes.

9. Who We Share Your Data With

We do not sell your personal data to third parties. We may share your information with the following categories of recipient, only to the extent necessary for the stated purpose:

All third parties to whom we disclose personal data are required to process that data in accordance with applicable data protection law and to implement appropriate technical and organisational security measures.

10. International Transfers of Data

Shakebet and some of its service providers may process your personal data in countries outside your country of residence, including countries that may not offer the same level of data protection as your home jurisdiction. Where such transfers take place, we take appropriate steps to ensure that your data is adequately protected, including through the use of contractual safeguards, data processing agreements, and where available, transfers to recipients in jurisdictions recognised as providing an adequate level of protection.

By using shakebetsonline.com, you acknowledge that your personal data may be transferred to, stored, and processed in locations outside your country of residence in the manner described in this policy.

11. Your Data Rights

Depending on your jurisdiction and the applicable data protection framework, you may have some or all of the following rights in relation to your personal data held by Shakebet:

• Right of access: You may request a copy of the personal data we hold about you and information about how we use it.
• Right to rectification: You may ask us to correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request that we delete your personal data where we no longer have a lawful basis to retain it. Please note that we may be required to retain certain data for regulatory and legal compliance purposes, and erasure requests cannot override those obligations.
• Right to restriction of processing: You may ask us to restrict how we use your data in certain circumstances — for example, while a dispute about its accuracy is resolved.
• Right to data portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of our legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Rights related to automated decision-making and profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, where that decision produces legal or similarly significant effects on you. You may request a human review of any automated decision by contacting us.

To exercise any of these rights, please contact us using the details in Section 14. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request and we reserve the right to charge a reasonable fee or decline requests that are manifestly unfounded or excessive.

12. Cookies and Tracking Technologies

Shakebet uses cookies, pixel tags, web beacons, and similar technologies on shakebetsonline.com. These tools allow us to operate the site correctly, remember your preferences, analyse how users interact with the platform, and where applicable, deliver relevant advertising.

The main types of cookies we use are:

• Strictly necessary cookies: Essential to the operation of the site, including maintaining your logged-in session, processing transactions, and enforcing security measures. These cannot be disabled without impairing site functionality.
• Functional cookies: Remember your preferences and settings, such as language and display options, to improve your experience.
• Analytics cookies: Collect aggregated data on how users navigate the site — which games are viewed, how long sessions last, which features are used — to help us improve the platform. We may use third-party analytics providers for this purpose.
• Marketing and targeting cookies: Track your activity across our site and, where applicable, across third-party sites, to deliver content and advertising relevant to your interests. These are only placed with your consent.

When you first visit shakebetsonline.com, you will be presented with a cookie consent notice that allows you to accept or manage your cookie preferences. You may update your preferences at any time through the cookie settings link on the site. You may also control cookies through your browser settings, although doing so may affect the functionality of the site.

Please be aware that third-party game providers and technology suppliers embedded within the Shakebet platform may also set their own cookies, which are governed by their respective privacy policies.

13. Data Security

We implement a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These include, but are not limited to:

• Encryption of data in transit using SSL/TLS technology;
• Encryption of sensitive data at rest;
• Access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their role;
• Regular security assessments and penetration testing;
• Staff training on data protection and security obligations;
• Incident response procedures to detect, investigate, and address any suspected data breach promptly.

Whilst we take reasonable steps to protect your information, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect any unauthorised access to your account.

14. How Long We Retain Your Data

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. Our principal retention periods are as follows:

• Account data: For the duration of your account and for a minimum of five years following account closure, in accordance with our licence obligations and anti-money laundering requirements.
• KYC and identity verification documents: For the period required under our Anjouan licence and applicable AML legislation — ordinarily a minimum of five years from the end of the customer relationship.
• Financial transaction records: A minimum of five years from the date of the transaction, or longer if required by law or ongoing regulatory proceedings.
• Communications and support records: Generally for a period of two to five years, depending on the nature of the communication and any related disputes.
• Marketing preferences: Until you withdraw your consent or opt out, and for a short period thereafter to ensure your preference is honoured.
• Responsible gambling records (including self-exclusion records): For the duration of any restriction applied, and for at least five years thereafter.

Where data is no longer required, we will securely delete or anonymise it in accordance with our internal data retention and disposal procedures.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how we handle your personal data, please contact us through the customer support channels available on shakebetsonline.com. We aim to acknowledge all data-related enquiries promptly and to resolve them within the timeframe required by applicable law.

If you are not satisfied with our response to a complaint or concern, you may have the right to lodge a complaint with a relevant data protection authority or regulatory body in your jurisdiction.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legal requirements. When we make material changes, we will notify you by posting a revised version on shakebetsonline.com with an updated effective date, and where appropriate, by sending a direct notification to your registered email address. We encourage you to review this policy periodically. Your continued use of the site following the posting of any changes constitutes your acknowledgement of the updated policy.

This Privacy Policy was last reviewed and updated in 2025.