Privacy Notice

Last updated: 24 July 2026

This Privacy Notice explains how Oddsprey ("we", "us" or "our") collects, uses, discloses and retains personal data relating to you when you use the Oddsprey website and services (the "Service"), and describes the rights available to you. The Service is operated from the Netherlands, and we act as the data controller in respect of your personal data. Our processing is carried out in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR"). Questions about this Notice may be addressed to support@oddsprey.com.

1. Personal data we collect

We collect only the personal data necessary to provide the Service:

• Account data. The email address used to register, which serves as your login, and your password (stored solely as a secure cryptographic hash and never in plain text).
• Preference data. Your currency, odds format and, if provided, your preferred club.
• Subscription data. The plan you hold and its associated dates, once paid billing is introduced.
• Wagering records. The wagers and results tracked against your account, together with your bankroll history, which are required for the performance features of the Service to function.
• Technical data. Standard server request logs, which may include your IP address, retained for security and diagnostic purposes and rotated on a short cycle.

We do not process special categories of personal data, and we do not create advertising or marketing profiles.

2. Purposes and legal bases

We process your personal data for the following purposes and on the following legal bases under Article 6(1) GDPR:

• To provide the Service and administer your account: performance of a contract (Article 6(1)(b)). This includes authentication, preferences, subscription management and your wagering records.
• To secure and maintain the Service: our legitimate interests in preventing abuse and diagnosing faults (Article 6(1)(f)). This includes server logging and bot prevention.
• To comply with legal obligations: where processing is required to meet a legal duty (Article 6(1)(c)).

Where we send optional email communications, we do so only on the basis of your consent (Article 6(1)(a)), which you may withdraw at any time.

3. Recipients and processors

We do not sell your personal data, and we do not disclose it for advertising purposes. We engage a limited number of processors to operate the Service:

• Hosting. The Service is hosted by an infrastructure provider located within the European Union. Your data is stored within the European Union.
• Google reCAPTCHA. The registration page uses Google reCAPTCHA to prevent automated abuse. Google may receive your IP address and browser information for the purpose of that verification, subject to Google's own privacy policy.
• Stripe. When paid billing is introduced, payments will be processed by Stripe. Stripe processes and stores your payment card details; we neither receive nor store your full card number.
• Sign in with Google. If you choose to sign in with Google, Google tells us your account identifier there, your email address and the name on that account, and nothing else. We store the identifier so we can recognise you next time, and the email address as your account name. We never receive your Google password. Choosing this option is entirely optional and you can create an account with an email address and password instead.
• Sign in with Microsoft. If you choose to sign in with Microsoft, Microsoft tells us your account identifier there, your email address and the name on that account, and nothing else. We store the identifier so we can recognise you next time, and the email address as your account name. We never receive your Microsoft password. Choosing this option is entirely optional and you can create an account with an email address and password instead.

We may also disclose personal data where required to do so by law or in response to a valid legal request.

4. Cookies

We use only strictly necessary cookies:

• a session cookie that maintains your logged-in state; and
• a preference cookie that records your cookie choice so that you are not asked again.

We do not use advertising cookies, analytics trackers or third-party tracking pixels. You may clear or block cookies through your browser settings; however, the Service cannot maintain your session, and login will not function, without the session cookie.

5. Retention

We retain account data for as long as your account remains open. On deletion of your account, we remove your personal data from our live systems. Residual copies may persist temporarily within routine backups until those backups are rotated out of retention. Server logs are retained only for a short period.

6. Your rights

Subject to the conditions and exceptions set out in the GDPR, you have the right to:

• access and obtain a copy of your personal data, which you may download from your account page or request from us;
• rectify inaccurate data, whether by updating your preferences on your account page or by asking us to correct other data;
• erase your personal data by deleting your account, or by request;
• object to or restrict certain processing, and to withdraw consent previously given, without affecting the lawfulness of processing carried out before withdrawal;
• data portability in respect of data you have provided to us; and
• lodge a complaint with a supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

To exercise any of these rights, please contact support@oddsprey.com. We will respond within one month, as required by the GDPR.

7. Age

The Service is intended for adults only, and you must be at least 18 years of age to use it. We do not knowingly process the personal data of any person under 18, and we will delete any such account upon becoming aware of it.

8. Amendments

We may amend this Privacy Notice from time to time. The date stated above indicates the current version, and we will draw attention to material changes on the Service.

9. Contact and controller details

Oddsprey
Zuidoostbeemster, Netherlands
Chamber of Commerce (KVK) number: 93353413
VAT identification number (BTW-ID): NL005019445B05
support@oddsprey.com

Our full registered address is available on request by email.