Data Protection Policy

1. Introduction

At TaoSweeps.com, operated by High Rollers of St Lucie Inc. (“TaoSweeps.com,” “we,” “us,” or “our”), we are committed to protecting the privacy and security of your personal information. This Data Protection Policy outlines how we collect, use, store, and protect your personal data in compliance with applicable data protection laws and regulations.

2. Scope

This policy applies to all personal data processed by TaoSweeps.com through our website, mobile platforms, customer service interactions, and any other channels through which we collect personal information from users of our social casino services.

3. Definitions

Personal Data: Any information relating to an identified or identifiable natural person.

Data Subject: The individual to whom the personal data relates.

Processing: Any operation performed on personal data, including collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, or erasure.

Data Controller: High Rollers of St Lucie Inc., operator of TaoSweeps.com, which determines the purposes and means of processing personal data.

4. Data Collection

4.1 Types of Personal Data We Collect

• Account Information: Name, username, email address, date of birth, and account creation date
• Contact Information: Email address, phone number, and physical address
• Identity Verification Information: Government-issued ID details, proof of address (when required for age verification or prize redemption)
• Financial Information: Payment method details, transaction history
• Technical Information: IP address, device information, browser type, operating system, session data
• Gameplay Information: Game preferences, playing habits, in-game purchase history

4.2 Methods of Collection

We collect personal data through:

• Account registration and profile creation
• Voluntary submissions through customer support
• Verification processes
• Website and application usage
• Cookies and similar tracking technologies
• Third-party authentication services (e.g., Google, Facebook)

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary for the performance of our contract with you
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, security, and service improvement
• Legal Obligation: Processing necessary to comply with legal requirements, including age verification and anti-money laundering regulations
• Consent: Processing based on your explicit consent, such as for marketing communications

6. Purposes of Processing

We process your personal data for the following purposes:

• Account management and service provision
• Age verification to ensure compliance with legal requirements
• Processing transactions and maintaining records
• Verification of identity for sweepstakes prize redemption
• Security and fraud prevention
• Customer support and communication
• Service improvement and development
• Legal and regulatory compliance
• Marketing and promotional activities (with consent)

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, including to provide our services, comply with our legal obligations, resolve disputes, and enforce our agreements. In particular:

• Account, identity verification (KYC), and transaction records are retained for a minimum of five (5) years following the termination of the business relationship, in accordance with our AML/CTF Policy
• Records relating to sweepstakes prize redemptions, including tax documentation, are retained for as long as required by applicable tax laws
• Marketing preferences are retained until you withdraw your consent or unsubscribe
• Technical and usage data is retained only as long as necessary for security, fraud prevention, and service improvement

When personal data is no longer required, we securely delete or anonymize it.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against accidental loss and unauthorized access, use, alteration, or disclosure, including:

• Encryption of personal data in transit
• Secure servers protected by firewalls
• Payment processing through PCI DSS-compliant third-party payment processors
• Access controls that limit personal data to authorized personnel with a business need
• Regular review of our security practices

No method of transmission over the Internet or electronic storage is completely secure. While we work to protect your personal data, we cannot guarantee its absolute security.

9. Data Sharing

We do not sell your personal data. We share personal data only as described in our Privacy Policy, including with:

• Service Providers: Payment processors, identity verification providers, hosting providers, and customer support providers that process personal data on our behalf and only on our instructions
• Legal and Regulatory Authorities: Law enforcement agencies, regulators, and other authorities where required by law, including to meet our anti-money laundering and sanctions obligations
• Business Transfers: A successor entity in connection with a merger, acquisition, or sale of assets
• Other Parties: Any other party with your consent

10. International Data Transfers

TaoSweeps.com is operated from the United States. If you access our services from outside the United States, your personal data will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. Where required by applicable law, we put appropriate safeguards in place for such transfers, including contractual commitments from our service providers to protect your personal data to an equivalent standard.

11. Your Rights

As a data subject, you have the following rights regarding your personal data:

• Right to Access: You can request information about what personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data under certain circumstances
• Right to Restriction: You can request limitation of processing of your data
• Right to Data Portability: You can request transfer of your data in a structured, commonly used format
• Right to Object: You can object to processing based on legitimate interests or for direct marketing
• Rights Related to Automated Decision Making: You can request human intervention in significant automated decisions

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform. Our Privacy Policy provides detailed information about the types of cookies we use, their purpose, and your choices regarding cookie usage.

13. Data Protection for Children

Our services are not intended for individuals under the age of 18 (or the applicable age of majority in your jurisdiction). We implement age verification measures to prevent minors from accessing our services. If we discover that we have collected personal data from a minor, we will promptly delete such information.

14. Data Breach Procedures

In the event of a personal data breach, we will:

• Assess the risk to affected individuals
• Notify relevant supervisory authorities within 72 hours, if required
• Inform affected individuals without undue delay when the breach is likely to result in a high risk to their rights and freedoms
• Document all breaches and remedial actions taken

15. Data Protection Officer

We have appointed a Data Protection Officer (DPO) responsible for overseeing our data protection strategy and implementation. You can contact the DPO using the details in Section 18.

16. Responsible Gaming and Data Protection

As part of our commitment to responsible gaming, we process certain personal data to:

• Implement and manage self-exclusion programs
• Monitor for signs of problematic gaming behavior
• Apply purchase limits and other responsible gaming tools

Processing for these purposes is based on our legal obligations and legitimate interests in promoting responsible gaming.

17. Policy Updates

We may update this Data Protection Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes through our website or via email. We encourage you to review this policy periodically.

18. Contact Us

If you have any questions about this Data Protection Policy or wish to exercise any of your rights, please contact our Data Protection Officer at support@taosweeps.com, or by mail at High Rollers of St Lucie Inc., Attn: Data Protection Officer (email support@taosweeps.com for the mailing address).

19. Complaint Resolution

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with your local data protection authority.