1. Data controller
BLAKbets, the operator of this website and platform, is the controller of your personal data. For data enquiries, use our contact form, selecting “Personal data (GDPR)”. We respond without undue delay, within one month at the latest.
2. The data we process
| Data | Source |
|---|---|
| Email address, name or username, account ID | provided by you at registration, including through an external sign-in provider if you choose one |
| Session data: IP address, device and browser information, sign-in time | automatically when using the service |
| Tracker data: bets, stakes, odds, balances and transactions in your sportsbook accounts | provided by you |
| Board settings (filters, bankroll, mode) | saved when you use them |
| Access and subscription history, billing documents | generated when you buy or renew a plan |
| Cancellation survey response (optional) | provided by you |
| Contact form messages: email address, subject and message | provided by you |
| Service usage data: page views, clicks and features used | only with your consent to analytics cookies |
| Session recordings: screen content, cursor movements and clicks, excluding text entered into fields | only with your consent to analytics cookies |
3. Purposes and legal bases
| Target | Legal basis (GDPR) |
|---|---|
| Creating and maintaining your account, platform access, subscription and tracker management | art. 6 ust. 1 lit. b, wykonanie umowy |
| Billing and accounting records | Article 6(1)(c): legal obligation |
| Responding to messages, complaints and data requests | Article 6(1)(b) and (c): contract and legal obligation |
| Service security, preventing abuse such as account sharing, and establishing, exercising or defending legal claims | art. 6 ust. 1 lit. f, prawnie uzasadniony interes |
| Ankieta przy anulowaniu, poprawa oferty | art. 6 ust. 1 lit. f, prawnie uzasadniony interes |
| Analysing usage and session recordings to identify and fix unclear parts of the service | Article 6(1)(a): consent, which you may withdraw at any time |
4. How long we keep your data
- Account, tracker and settings data are kept until account deletion. You have 30 days to cancel a deletion request, after which the data is permanently deleted.
- Ending or cancelling a subscription does not delete your data. It stays in your account so you can access it when you return.
- Subscription history and billing documents are retained for the period required by tax and accounting laws.
- Contact form messages are kept for 3 years after sending, then automatically deleted.
- Analytics data is kept until you withdraw consent, for no longer than 12 months.
- Session recordings are kept for 30 days, then deleted.
- Application logs containing customer data, such as IP addresses and account IDs, are kept for 30 days. Odds collection engine logs do not contain personal data and are not subject to this period.
5. Our data processors
We use providers who process data on our behalf under data processing agreements:
| Provider | Purpose | Location and legal basis |
|---|---|---|
| Clerk, Inc. | registration, sign-in and session management | USA, certyfikat EU-U.S. Data Privacy Framework |
| Supabase, Inc. | account, tracker, subscription and message database | servers in London (United Kingdom, covered by the European Commission's adequacy decision); US provider, standard contractual clauses |
| Hetzner Online GmbH | application and data engine servers | Germany (EU) |
| Cloudflare, Inc. | domain, DNS and traffic protection | USA / global network, EU-U.S. Data Privacy Framework certified |
| PostHog, Inc. | usage analytics and session recordings, only with consent | EU (servers in Frankfurt) |
We will add the payment provider to this list before launching online payments. We may also share data with public authorities when legally required.
6. Transfers outside the European Economic Area
Some providers are based in the United States, and the database runs on servers in the United Kingdom. Transfers use the mechanisms in Chapter V of the GDPR: European Commission adequacy decisions (the UK; the US for companies certified under the EU-U.S. Data Privacy Framework) or standard contractual clauses. You can request information about safeguards through our contact form.
7. Your rights
- access your data and receive a copy,
- rectify your data,
- delete your data (you can delete your account in Account settings),
- restrict processing,
- data portability,
- object to processing based on legitimate interests,
- withdraw consent at any time, without affecting the lawfulness of earlier processing,
- lodge a complaint with the President of Poland's Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).
8. Whether you must provide data
Providing data is voluntary. However, you need an email address to create an account or receive a reply, and the tracker needs tracker data to work. Analytics consent does not affect access to the service.
9. Automated decisions
We do not make decisions about you based solely on automated processing that produce legal effects. Analytics helps us understand feature usage.
10. Security
Connections are encrypted. Each account's data is isolated in the database, and users can access only their own records. Only service staff can read contact form messages.
11. Cookies
Our cookie practices are described in the Cookie policy.
12. Changes
We announce material changes to this policy on the website or by email.