Privacy Policy

At Cara o Sello we value your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with and the rights you have over your data.

By using our Platform you agree to the practices described here. If you disagree, please refrain from using our services.

1.1 Information you provide:

• Registration: username, email address, hashed password.
• Verification (KYC): full name, date of birth, ID document, address.
• Payments: crypto wallet addresses and blockchain transaction history.
• Communications: messages, feedback and support requests.

1.2 Information collected automatically:

• Usage data: pages visited, time on site, clicks and interactions.
• Device data: IP address, browser type, operating system, language.
• Gaming data: betting history, wins, losses and games played.
• Cookies and similar tech: unique identifiers and preferences.

1.3 Third-party information:

• Identity verification providers.
• Public blockchain records.
• Analytics and security partners.

We use personal data to:

• Provide the service: process bets, manage accounts and payments.
• Verification and compliance: prevent fraud and meet legal requirements (KYC/AML).
• Security: detect suspicious activity and protect the platform.
• Communications: send important notices, answer queries and marketing emails (with consent).
• Product improvement: analyze usage and enhance features.
• Marketing: deliver personalised promotions (opt-out available).
• Responsible gaming: enable betting limits and self-exclusion.
• Dispute resolution: investigate claims or issues.

We rely on the following legal grounds:

• Contract performance: required to deliver the services you request.
• Legal obligations: AML/KYC and gambling regulations.
• Legitimate interests: fraud prevention, security and service optimisation.
• Consent: marketing and optional features (you may withdraw it at any time).

We may share data with:

4.1 Service providers:

• Crypto payment processors and wallet providers.
• Identity verification vendors.
• Cloud hosting and storage services.
• Analytics, monitoring and customer support tools.

4.2 Legal compliance:

• Regulators and law enforcement when legally required.
• Court orders, subpoenas or legal processes.

4.3 Business transactions: mergers, acquisitions or transfer of assets.

4.4 With your consent: whenever you authorise us to share information with third parties.

We implement technical and organisational safeguards:

• SSL/TLS encryption across all communications.
• Secure storage with hashed passwords and encrypted sensitive data.
• Two-factor authentication available for extra account protection.
• Regular audits and continuous monitoring to detect suspicious activity.
• Restricted access granted only to authorised personnel.

⚠️ No system is 100% secure, but we follow industry best practices to minimise risk.

We keep personal data as follows:

• Active accounts: for as long as you use the service.
• Closed accounts: up to 7 years to satisfy legal obligations.
• Blockchain transactions: immutable public records.
• Aggregated analytics: indefinitely in anonymised form.

You may request deletion, subject to legal retention requirements.

Depending on your jurisdiction you may:

• Access your personal data.
• Rectify inaccurate information.
• Erase data you no longer want us to keep.
• Restrict how we process certain data.
• Port your data in machine-readable format.
• Object to processing based on legitimate interests.
• Withdraw consent for marketing communications.
• Lodge a complaint with your supervisory authority.

Contact us at privacy@caraosello.com to exercise any right.

We use cookies to:

• Essential: maintain sessions and authentication.
• Performance: analyse usage and optimise features.
• Functionality: remember settings and preferences.
• Marketing: personalise offers (with consent).

Manage cookies through your browser; disabling essential cookies may impact functionality.

Because we operate on decentralised blockchain infrastructure, data may be processed globally. We rely on safeguards such as standard contractual clauses and independent certifications to protect your information during cross-border transfers.

Our services are intended for users aged 18+. We do not knowingly collect data from minors and will delete any information received inadvertently.

We may update this policy periodically. Significant changes will be communicated via the Platform or email. Review the “Last updated” date to identify the latest version.

Questions or data requests? Reach us at:

• 📧 Email: privacy@caraosello.com
• 📧 DPO: dpo@caraosello.com
• 💬 Live chat: available 24/7 on the platform