Privacy Policy

Last Updated: October 8, 2025

Big Wins Hub ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and browser extension.

1. Information We Collect

1.1 Information You Provide

  • Email address (for account creation and authentication)
  • Display name (optional)
  • Betting slip data you choose to upload (screenshots, descriptions, odds, stakes, payouts)
  • Comments and interactions on betslips

1.2 Automatically Collected Information

  • Usage data (pages visited, features used, time spent)
  • Device information (browser type, operating system)
  • IP address (for security and analytics)
  • Cookies and similar tracking technologies

1.3 Browser Extension Data

  • Active tab URL (only when you use the extension on betting sites)
  • Screenshot data (only when you capture a betslip)
  • DOM content (only from betting slip elements you select)

Note: The extension only accesses data on betting sites when you actively use it. We do not track your browsing activity on other websites.

2. How We Use Your Information

  • To provide and maintain our service
  • To authenticate your account and manage user sessions
  • To display your uploaded betslips to the community
  • To enable social features (likes, comments, favorites)
  • To send you notifications about activity on your content
  • To improve our service through analytics
  • To prevent fraud and ensure platform security
  • To comply with legal obligations

3. Data Storage and Security

We implement industry-standard security measures to protect your data:

  • Data is stored on secure Supabase servers with encryption at rest
  • All data transmission uses HTTPS/TLS encryption
  • Passwords are hashed and never stored in plain text
  • Access to personal data is restricted to authorized personnel only
  • Regular security audits and updates

Data is stored in secure data centers within the European Union and United States, complying with GDPR requirements.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data in the following circumstances:

  • Public Content: Betslips you upload are publicly visible to all users
  • Service Providers: Supabase (database hosting), Cloudflare (CDN and security)
  • Legal Requirements: When required by law or to protect rights and safety
  • Business Transfers: In connection with mergers, acquisitions, or asset sales

5. Your Rights (GDPR)

Under GDPR, you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restriction: Limit how we use your data
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to processing of your personal data
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at the email address provided below.

6. Cookies and Tracking

We use cookies and similar technologies for:

  • Essential Cookies: Required for authentication and core functionality
  • Analytics Cookies: To understand how users interact with our service
  • Preference Cookies: To remember your settings and preferences

You can control cookies through your browser settings. Note that disabling essential cookies may affect functionality.

7. Data Retention

  • Account data is retained while your account is active
  • After account deletion, personal data is removed within 30 days
  • Public betslips may be retained for historical purposes (anonymized after account deletion)
  • Backup data is deleted according to our backup retention policy (90 days maximum)
  • Legal compliance data may be retained longer if required by law

8. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to have it removed.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Service providers certified under relevant data protection frameworks
  • Adequate data protection measures equivalent to GDPR standards

10. Third-Party Services

Our service uses the following third-party services:

These services have their own privacy policies and we recommend reviewing them.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last Updated" date
  • Sending an email notification for significant changes

Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: privacy@bigwinshub.com

Data Protection Officer: dpo@bigwinshub.com

We will respond to your request within 30 days as required by GDPR.

13. Supervisory Authority

If you are located in the European Economic Area, you have the right to lodge a complaint with your local data protection supervisory authority. You can find your authority at: edpb.europa.eu

By using Big Wins Hub, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.