Parimatch Privacy Policy
Parimatch (hereinafter referred to as "the Company", "we" or "the Operator") attaches the utmost importance to protecting the privacy and personal data of its users. This Privacy Policy explains what data we collect, for what purposes we process it, how long we retain it, and what rights are available to you as a data subject when you use the services at https://hattiestjohn.de. The Operator is licensed by the Curaçao Gaming Authority and processes data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the UK Data Protection Act 2018, and, where applicable, the California Consumer Privacy Act (CCPA). By registering and using our platform, you agree to the processing principles described below.
What Data We Collect
As part of registration and use of our services, we collect the following categories of personal data: identification data (name, date of birth, address), contact data (email address, phone number), account and payment data, verification documents required for the KYC review (copy of ID, selfie with ID, proof of address where applicable), technical data (IP address, device identifier, browser type), and behavioural data related to your gaming and betting activity. Payment data such as card details is processed exclusively through PCI DSS-certified payment processors and is not stored in full on our own servers.
Purpose of Data Processing
We process your data in particular to perform the user agreement, to verify your identity and age, to fulfil statutory due diligence obligations under anti-money laundering (AML) rules pursuant to the National Ordinance on the Prevention and Combating of Money Laundering and Terrorist Financing and Directive (EU) 2018/843, for fraud prevention, for processing deposits and withdrawals, for providing customer support, and – with your consent – for marketing purposes. Data is disclosed to third parties only to payment service providers, regulatory authorities, or service providers who are contractually bound to comply with adequate data protection standards.
Retention Period
Personal data, in particular betting and transaction history, is retained for a minimum of five (5) years after termination of the business relationship in order to comply with statutory retention obligations under anti-money laundering rules and the regulatory requirements of the Curaçao Gaming Authority. Once the statutory period has expired, the data is securely deleted or anonymised unless a further legal obligation to retain it applies.
Technical and Organisational Security Measures
To protect your data, we use modern SSL/TLS encryption for all data transmissions. Payment card data is processed exclusively through PCI DSS-certified payment service providers. Access to personal data is restricted to authorised staff of our Compliance Department, which is specifically responsible for ensuring compliance with data protection and anti-money laundering regulations. We also operate internal systems for detecting unusual transactions and suspicious account activity to ensure both financial security and the protection of your personal information.
Your Rights as a Data Subject
Under the GDPR, you have the right to access the data stored about you, the right to rectification of inaccurate data, the right to erasure ("right to be forgotten") unless a statutory retention obligation applies, the right to restriction of processing, the right to data portability, and the right to object at any time to the processing of your data for marketing purposes. To exercise these rights, you may contact our Support Team at any time. Please note that we may need to carry out an identity check in order to process your request.
Disclosure to Third Parties and International Transfers
Your data may be disclosed to regulatory authorities such as the Curaçao Gaming Authority ([email protected]), to payment service providers, and to technical service providers who assist us in providing our services. Where data is transferred to countries outside the European Economic Area, we ensure through appropriate contractual clauses and safeguards that an adequate level of data protection is maintained.
Cookies and Similar Technologies
Our website uses cookies and similar technologies to ensure the functionality of the platform, to store your preferences, and to improve our services. For further information, please refer to our separate Cookie Policy.
Contact and Complaints
For questions about this Privacy Policy or to exercise your rights, our Support Team is available by email at [email protected] or via 24/7 Live Chat. Formal complaints must be submitted within six (6) calendar months of the relevant incident. Receipt of a general complaint is acknowledged within seven (7) calendar days, and resolution typically occurs within 28 calendar days, extendable by up to four weeks in complex cases. If you are not satisfied with the Operator's response, you have access to a free and mutually binding alternative dispute resolution (ADR) procedure. Regulatory violations may also be reported directly to the Curaçao Gaming Authority at [email protected].