Privacy Policy

1.1 The controller of your personal data is Frost ("Frost", "we", "us"). You can reach us by opening a support ticket from your Account.

1.2 For any question about this policy or your data, open a support ticket from your Account in the Account category and say that it is a data-protection request.

2.1 Account data: your email address, username, password (stored only as a secure hash), phone number if you give it, date of birth, preferred language and display currency, and your account settings.

2.2 Identity and verification data, when we ask you to verify: your name, date of birth, address, national identification number where it appears on a document, copies of identity documents, a verification selfie in which you hold a one-time code, proof of address, and evidence of the source of your funds.

2.3 Transaction data: deposits, withdrawals, tips, vault transfers, wallet addresses, blockchain transaction identifiers, card or wallet purchase references from payment providers, and every movement of your Balance.

2.4 Gameplay data: your bets, game rounds, results, sportsbook bets reported by the provider, Bonuses, VIP progress and rewards.

2.5 Technical data: IP address, device and browser information, session records, approximate location derived from your IP address (which decides whether we show you a territory notice), and logs of requests and errors.

2.6 Communications: support tickets and their messages, chat messages, records of the emails and notifications we send you, and, if you connect Telegram to receive notifications, the identifier of that Telegram chat.

2.7 Acquisition data: where you came from when you registered, such as a referral or partner link, campaign parameters and the referring website.

2.8 Sign-in data from third parties: if you sign in with a third-party account, such as a social login or a crypto wallet, we receive an identifier for that account and, where the provider shares it, your email address.

3.1 To provide the Platform and perform our contract with you: to open and run your Account, process deposits, bets and withdrawals, run games and promotions, pay rewards and provide support.

3.2 To comply with legal obligations, such as anti-money-laundering and tax rules, record keeping and lawful requests from authorities.

3.3 For our legitimate interests in running a secure and fair platform: to prevent fraud, multi-accounting and bonus abuse, to secure Accounts, to resolve disputes, to understand how the Platform is used and to improve it. We balance these interests against your rights.

3.4 With your consent: to send you marketing communications and to use optional analytics cookies. You can withdraw consent at any time, without affecting processing before you did.

4.1 We ask for verification documents when our staff decide it is needed, for example during a security, fraud or compliance review. Documents are reviewed by our own staff.

4.2 Your documents are encrypted before they are stored, and access to them is restricted to authorised staff and recorded.

4.3 We use your documents only to verify your identity, address and source of funds, to protect your Account and the Platform, and to meet our legal obligations.

5.1 Payment providers, which process your deposits, card or wallet purchases and withdrawals.

5.2 Game and sportsbook providers, which receive the identifiers and transaction data needed to run their games and settle your bets.

5.3 Hosting, infrastructure, email and communication service providers, which process data on our behalf and under our instructions.

5.4 Professional advisers, such as lawyers and auditors, under a duty of confidentiality.

5.5 Courts, law enforcement and other competent authorities, when we are legally required to disclose data or where it is necessary to establish, exercise or defend legal claims.

5.6 A purchaser or successor, if our business or part of it is sold or reorganised.

5.7 We do not sell your personal data.

6.1 Our service providers may process your data in countries other than your own, which may not offer the same level of protection. Where we transfer data, we take steps to ensure that it remains protected, including contractual safeguards with the recipient.

7.1 Data is encrypted in transit using TLS. Identity documents, two-factor secrets and the most sensitive identity fields are encrypted at rest.

7.2 Access to personal data is restricted by role and audited. Passwords are stored only as secure hashes.

7.3 No system is perfectly secure. You can help protect your Account by using a strong, unique password and enabling two-factor authentication.

8.1 We keep your account, transaction and gameplay records, together with the identity details attached to them, for five years after your account is closed, as anti-money-laundering rules require. When that period ends, the personal details on the account (name, email address, username, date of birth, address, phone number and IP addresses) are anonymised, and the identity documents you uploaded for verification (ID, selfie and proof of address) are deleted. The financial records themselves are kept without anything that identifies you, and the record of the verification decision is kept.

8.2 Some data is deleted sooner: chat messages after 30 days, web request and error logs after 90 days, records of signed-out or expired devices after 180 days, in-app notifications after one year, and closed risk reviews after two years. One-time sign-in and password reset codes are deleted 30 days after they expire.

8.3 An account that has never made a deposit or a withdrawal, and has never been paid referral commission or a partner statement, can be erased on request without waiting. Any other account is closed on request, and its personal details are anonymised when the period in 8.1 ends.

8.4 Records of the consents you gave or withdrew, and the audit record of actions taken on your Account, are kept as evidence for as long as the related records are kept.

9.1 You can download your data, erase it, and give or withdraw your marketing consent yourself, in your profile settings. Erasure closes your account: if it has never made a deposit or a withdrawal, and has never been paid referral commission or a partner statement, everything that identifies you is erased straight away; otherwise the account is closed now and your personal details are anonymised when the retention period above ends.

9.2 Your data export includes your profile, wallets, ledger, game rounds, deposits and withdrawals, verification status, consents and sessions. Identity documents are listed in it, but their files are not included.

9.3 You can also request correction or restriction of your data, and object to certain processing, by opening a support ticket from your Account. Some data must be retained for legal reasons even after an erasure request.

9.4 You can object at any time to marketing. Every marketing email contains an unsubscribe link.

9.5 We will respond to a request within one month. We may need to verify your identity before acting on a request.

9.6 You may also have the right to complain to a data protection authority in the country where you live.

10.1 Strictly necessary: a session cookie that keeps you signed in, a security token that protects your actions against cross-site request forgery, and the record of your cookie choice. These cannot be switched off, because the Platform does not work without them.

10.2 Preferences: your language, sidebar layout, display currency, selected asset and game settings, stored in cookies or in your browser's local storage.

10.3 Attribution: where you arrive through a referral or partner link, we store the code so that the referral can be credited when you register.

10.4 Optional analytics: if you choose Accept all in the cookie banner, we record how you arrived on the Platform, such as campaign parameters and the referring website. If you choose Necessary only, we do not.

10.5 You can change your choice by clearing the cookies and storage for this site, after which the banner is shown again. Blocking necessary cookies in your browser will stop the Platform from working.

11.1 The Platform is for adults only. We do not knowingly collect data from anyone under 18. If we learn that we hold data about a minor, we close the Account and delete the data, except where we must keep records by law.

12.1 We may update this policy. The date at the top of this page shows when it last changed. Where a change is material, we will notify you in the product or by email.

13.1 For privacy questions and requests, open a support ticket from your Account; our support team replies in the same thread.