26
GOAL26
Log in

Privacy Policy

Last updated: 18 June 2026

This Privacy Policy explains how Goal26 Entertainment Ltd, a company incorporated in the Republic of Cyprus (Reg. No. HE 458921), with registered office at 14 Themistokli Dervi, Nicosia 1066, Cyprus ("GOAL26", "we", "us"), processes personal data of users of the GOAL26 sportsbook platform. We act as the data controller within the meaning of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") as transposed into Cypriot law.

1. Data We Collect

  • Identity & contact data: email address, username, language preference.
  • Financial data: deposit amount, USDT (TRC-20) wallet address provided for withdrawals.
  • Activity data: bets placed, stakes, outcomes, account balance history.
  • Technical data: IP address, device type, browser, session tokens.

2. How We Use Your Data

We process your personal data for the following purposes and on the following legal bases:

  • Providing the Service and settling bets (performance of a contract — Art. 6(1)(b) GDPR).
  • Verifying identity, preventing fraud and complying with anti-money-laundering obligations (legal obligation — Art. 6(1)(c)).
  • Improving the platform and securing our systems (legitimate interest — Art. 6(1)(f)).
  • Sending promotional communications, only where you have opted in (consent — Art. 6(1)(a)).

3. Data Retention

We retain your account data for the duration of your relationship with us and for up to five (5) years thereafter to comply with Cypriot AML/CFT record-keeping obligations. Technical logs are retained for up to twelve (12) months.

4. Sharing & International Transfers

We do not sell your personal data. We share data only with vetted processors that host our infrastructure, process payments, or provide customer-support tooling. Where data is transferred outside the EEA, we rely on Standard Contractual Clauses approved by the European Commission.

5. Your Rights

Under the GDPR you have the right to:

  • Access, rectify or erase your personal data;
  • Restrict or object to processing;
  • Receive your data in a portable format;
  • Withdraw consent at any time (without affecting prior processing);
  • Lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.

6. Security

We implement appropriate technical and organisational measures including TLS encryption in transit, encryption at rest, role-based access control and database-level row security to protect your data against unauthorised access or disclosure.

7. Cookies

We use strictly necessary cookies and local-storage entries to maintain your session, language preference and bonus-popup state. No advertising or third-party tracking cookies are set.

8. Contact

To exercise your rights or for any privacy-related enquiry, contact our Data Protection Officer at dpo@goal26.bet.