Log in Sign up

PRIVACY POLICY

IPU.BET | International Players Union
Domain: https://ipu.bet
Controller / Operator: ADVERT ME, SAS, société par actions simplifiée
Registration number: 830 065 900 R.C.S. Nanterre
Share capital: EUR 1,000.00
Registered office: 9 avenue Gutenberg, 92800 Puteaux, France
Email: support@ipu.bet
Last updated: 12.05.2026

1. General provisions

1.1. This Privacy Policy (the “Policy”) describes how ADVERT ME (“ADVERT ME”, “we”, “us”, “our”) collects, uses, stores, discloses and protects the personal data of users of the IPU.BET | International Players Union platform (“IPU.BET”, the “Platform”), available at https://ipu.bet.

1.2. For the purposes of data protection laws, including Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), ADVERT ME acts as the controller of personal data in relation to processing carried out in connection with the operation of the Platform.

1.3. ADVERT ME is a company established in France and registered with the RCS of Nanterre under number 830 065 900. Since the controller is established in the European Union, the appointment of an EU representative under Article 27 GDPR is not required.

1.4. IPU.BET is an online information platform, user community and support service for users interacting with independent third-party gambling operators, casinos, bookmakers and other partners (“Partners”). IPU.BET is not a casino, bookmaker, gambling operator, payment institution, gambling game provider or party to any gambling activity.

1.5. The Platform does not accept real-money bets, does not operate real-money games, does not pay out gambling winnings, does not hold user funds, does not manage users’ gaming accounts with Partners, does not determine game outcomes and does not set the terms of deposits, withdrawals, bonuses, KYC/AML checks or responsible gambling tools of Partners.

1.6. If a user visits a Partner’s website, registers with a Partner, accepts a bonus, participates in gambling, makes a deposit, requests a withdrawal or uses a Partner’s responsible gambling tools, the relevant relationship arises directly between the user and that Partner. The Partner independently determines the purposes and means of processing personal data within its services and acts as an independent data controller.

1.7. This Policy applies to users from countries in which the Platform is available or to which it is directed, including Uzbekistan, Kazakhstan, Kyrgyzstan, Azerbaijan, Turkey, Poland, Spain, Italy, Germany, Portugal, the Netherlands, Switzerland, Canada, Argentina, Colombia, Brazil, Venezuela, Tanzania, Kenya, Botswana, South Africa and Australia.

1.8. This Policy is an informational document. It does not replace Partners’ terms of use, privacy policies, bonus programme rules, responsible gambling rules or any other third-party service documents.

2. Definitions

2.1. “Personal data” means any information relating to an identified or identifiable natural person.

2.2. “Processing” means any operation or set of operations performed on personal data, including collection, recording, organisation, storage, alteration, use, disclosure, restriction, erasure or destruction.

2.3. “User” means a natural person who visits the Platform, creates an account, uses IPU.BET services, participates in the Sweep Coins programme, contacts Player Support, registers for Community Events or otherwise interacts with the Platform.

2.4. “Partner” means an independent third-party gambling operator, casino, bookmaker, bonus offer provider, promotion organiser, reward provider or other commercial partner whose information may be displayed on the Platform.

2.5. “Affiliate ID” means a technical identifier, referral ID, click ID, campaign ID, partner ID, tracking link, postback ID or other identifier used to record clicks, registrations, bonus-related actions, affiliate payments or affiliate campaign performance.

2.6. “Sweep Coins” means virtual units within the Platform credited to users for activity under the IPU.BET programme rules. Sweep Coins are not money, electronic money, a deposit, a security, a payment instrument, a gambling stake or gambling winnings.

2.7. “Player Support” means informational and organisational support for users in communication with Partners. Player Support is not a legal service, legal representation, court representation or a guarantee of the outcome of any dispute.

2.8. “Addiction Support Resources” means informational materials, links and contact details for resources related to problem gambling and responsible gambling. IPU.BET does not provide medical, psychological, psychotherapeutic or rehabilitation services.

2.9. “Community Events” means offline or online events for members of the IPU.BET community, including private meetings, parties, conferences, networking events or other events.

2.10. “Cookie Policy / Cookie Notice” means a separate document or consent interface describing the use of cookies, pixels, SDKs, local storage, fingerprinting technologies and similar tracking technologies.

3. Categories of personal data

3.1. Registration and account data:

  • email address;
  • phone number;
  • email verification status;
  • SMS verification status;
  • date of birth;
  • username / nickname;
  • country of residence;
  • interface language;
  • account creation date;
  • account status;
  • account settings;
  • history of consents and withdrawals.

3.2. Automatically collected technical data:

  • IP address;
  • country code determined by IP address;
  • date and time of the session;
  • browser type and version;
  • operating system and device type;
  • cookie ID;
  • session ID;
  • referrer URL;
  • viewed pages and interface actions;
  • data relating to clicks on affiliate links;
  • technical logs;
  • device fingerprint or other anti-fraud identifiers where necessary for security, prevention of multi-accounting, geo-blocking circumvention, bonus abuse or other violations.

3.3. Additional verification / light KYC. In certain cases, we may request repeated phone verification, a self-declaration of residential address, a self-declaration of date of birth and, in exceptional cases, a scan or image of a document with unnecessary data masked, showing only the name, date of birth or other minimum required information.

3.4. Communication data: the content of a request, correspondence history, attachments voluntarily provided by the user, the status and outcome of the request, and internal support notes.

3.5. Affiliate data: affiliate ID, referral ID, click ID, campaign ID, partner ID, click timestamp, country code, device type, referrer, landing page, conversion status if provided by a Partner, and aggregated performance indicators for affiliate campaigns.

3.6. Sweep Coins programme data: history of Sweep Coins accruals and deductions, current virtual Sweep Coins balance status, reward redemption history, selected rewards, eligibility status, data on programme rule violations and disputed accruals or deductions.

3.7. Player Support data: description of the situation, Partner name, user account ID with the Partner, copies of correspondence with the Partner, documents or screenshots voluntarily provided by the user, and the status and outcome of the request. Where possible, the user must mask excessive information before submitting materials.

3.8. Community Events data: first and last name, contact details, information about the selected event, logistics data, passport data for visa support or travel arrangements only where necessary and based on separate consent, dietary preferences and medical restrictions only if the user provides them voluntarily and gives explicit consent.

3.9. Addiction Support Resources data: the fact of the request, the user’s country or region, the content of the request and support communication history. We do not make medical diagnoses, assess the user’s health condition or provide medical or psychological services.

3.10. By default, we do not collect full passport copies, biometric data, selfies with documents, bank statements, income certificates, full source-of-funds data, payment card details, bank details, seed phrases, crypto private keys or data on real-money bets, winnings or losses with Partners, unless the user provides such information voluntarily as part of a Player Support request.

4. Purposes and legal bases of processing

4.1. Where GDPR applies to the processing, we process personal data on one or more of the following legal bases: Article 6(1)(a) GDPR - consent; Article 6(1)(b) GDPR - performance of a contract; Article 6(1)(c) GDPR - legal obligation; Article 6(1)(f) GDPR - legitimate interests; Article 9(2)(a) GDPR - explicit consent for special categories of data.

4.2. The main purposes and legal bases are:

  • registration and account management - Article 6(1)(b);
  • email/SMS verification, account security and communications - Articles 6(1)(b), 6(1)(f);
  • age, country and eligibility checks - Articles 6(1)(b), 6(1)(c), 6(1)(f);
  • security, anti-fraud, prevention of multi-accounting, geo-blocking circumvention and bonus abuse - Article 6(1)(f);
  • cookies and session data for functionality - Article 6(1)(b) or Article 6(1)(f);
  • analytics, marketing and non-essential cookies - Article 6(1)(a), where consent is required;
  • affiliate tracking - Article 6(1)(f), and consent for cookies/tracking where required;
  • Sweep Coins - Articles 6(1)(b), 6(1)(f);
  • Player Support - Articles 6(1)(b), 6(1)(f);
  • Community Events - Articles 6(1)(b), 6(1)(f), and Article 6(1)(a) for certain data;
  • medical restrictions and other special categories of data for events - Article 9(2)(a);
  • passport data for visa support - Articles 6(1)(a), 6(1)(b);
  • marketing communications - Article 6(1)(a), where consent is required;
  • compliance with legal requests and protection of rights - Articles 6(1)(c), 6(1)(f).

4.3. Where we rely on legitimate interests, such interests may include securing the Platform, preventing fraud, detecting multi-accounting, protecting against bonus abuse, protecting users and the Platform, handling disputes, internal analytics, improving services and preventing use of the Platform from prohibited jurisdictions.

4.4. Where processing is based on legitimate interests, we conduct a balancing assessment when required by applicable law. The user may request general information about such assessment, provided this does not infringe the rights of others, trade secrets, Platform security or the effectiveness of anti-fraud mechanisms.

4.5. Where processing is based on consent, the user may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Retention periods

5.1. We retain personal data for no longer than necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law, legal obligations, accounting requirements, security requirements, dispute resolution or the protection of rights.

5.2. Main retention periods:

  • account data - account activity period plus 12 months after closure or last activity;
  • consent history - until consent is withdrawn plus 12 months, or longer where necessary to demonstrate compliance;
  • cookies and similar identifiers - from 1 day to 24 months depending on the cookie category;
  • affiliate data - up to 24 months, unless a longer period is required for settlements, disputes or audits;
  • Sweep Coins data - account activity period plus 12 months;
  • financial or accounting records related to Sweep Coins rewards or Community Events - up to 7 years where required by tax, accounting or other applicable law;
  • support correspondence - up to 24 months after the request is closed;
  • Player Support cases - up to 24 months after closure; in case of a dispute, until the expiry of the limitation period;
  • Community Events data - up to 12 months after the event, unless a longer period is required for accounting, security, insurance or legal defence;
  • visa support data - until the purpose of processing is completed plus a reasonable period for evidencing actions;
  • dietary preferences and medical restrictions - only until the end of the event unless the user has given separate consent for longer retention;
  • security logs - usually up to 12 months;
  • light KYC data - for the period necessary for verification, prevention of abuse, protection of rights or compliance with applicable obligations;
  • data subject to mandatory AML, tax or accounting requirements - for the period established by applicable law, where such requirements apply to the specific processing.

5.3. After the applicable retention period expires, data is deleted, anonymised or archived with restricted access if further retention is necessary for legal defence, investigations, compliance with obligations or prevention of repeated abuse.

5.4. If a user deletes an account or requests erasure of data, we may retain certain data where necessary to comply with law, prevent fraud, demonstrate compliance, handle disputes, protect rights or prevent repeated violations of Platform rules.

6. Recipients of data

6.1. We do not sell users’ personal data in the sense of transferring data to third parties for direct monetary payment. However, the Platform uses an affiliate model under which IPU.BET may receive remuneration from Partners for clicks, registrations, bonus activations or other user actions.

6.2. Partners are independent controllers. When a user visits a Partner’s website or interacts with a Partner, that Partner independently determines the purposes and means of processing the user’s personal data.

6.3. IPU.BET and Partners are not joint controllers merely because of an affiliate link, referral tracking or commercial partnership, where each party independently determines the purposes and means of its own processing.

6.4. We may transfer limited data to Partners where necessary for affiliate tracking, click confirmation, eligibility checks, complaint handling or prevention of abuse, including affiliate ID, click ID, timestamp, country code, device type, referral data and limited information about a user complaint if the user asks IPU.BET to assist in communication with the Partner.

6.5. We may engage service providers that process personal data on our behalf and according to our instructions, including hosting, CDN, email/SMS verification, mailing services, CRM, user support, web analytics, cookie consent management, anti-fraud/fingerprinting, Sweep Coins reward providers, event providers, accounting, legal and compliance advisers.

6.6. Where GDPR applies, we enter into data processing agreements with processors in accordance with Article 28 GDPR where required by applicable law.

6.7. We may disclose personal data to public authorities, regulators, courts, law enforcement authorities or other authorised persons where disclosure is required by law, necessary to comply with a lawful request, prevent fraud, protect rights, investigate violations or secure the Platform.

6.8. In the event of a reorganisation, merger, sale of business, transfer of assets, investment, due diligence or similar corporate transaction, personal data may be disclosed to a potential or actual successor, investor, adviser or purchaser, subject to applicable law and reasonable confidentiality safeguards.

7. International data transfers

7.1. ADVERT ME is established in France. Given the international nature of the Platform, personal data may be processed in France, the European Union, the European Economic Area, the United Kingdom, Switzerland, users’ countries of residence, countries where Partners are located, countries where processors are located and other jurisdictions.

7.2. If personal data of users from the EU/EEA is transferred to countries that have not been recognised by the European Commission as providing an adequate level of protection, we use applicable transfer mechanisms, including the European Commission’s Standard Contractual Clauses adopted by Decision 2021/914, supplementary technical, contractual or organisational safeguards, Transfer Impact Assessments, mechanisms under Article 46 GDPR or derogations under Article 49 GDPR where applicable to the specific situation.

7.3. The user may request general information about applicable international transfer mechanisms by contacting support@ipu.bet. We may limit disclosure where necessary to protect trade secrets, security, the rights of others or confidential contractual terms.

8. Cookies and similar technologies

8.1. The Platform uses cookies, pixels, local storage, session storage, fingerprinting technologies and similar technologies to ensure website operation, security, analytics, personalisation, affiliate tracking and marketing.

8.2. We use the following categories of cookies and similar technologies: strictly necessary, analytics, marketing, affiliate/tracking and preferences.

8.3. Strictly necessary cookies may be used without separate consent if they are genuinely necessary to provide a service requested by the user or to ensure security.

8.4. Analytics, marketing and affiliate/tracking cookies are used only after obtaining the user’s consent where such consent is required by applicable ePrivacy or data protection law.

8.5. The user may accept, reject or configure cookie categories through the cookie banner or cookie settings on the Platform. The user may withdraw consent at any time through the cookie settings.

8.6. Disabling some cookies may affect certain Platform functions, including account login, participation in the Sweep Coins programme, affiliate attribution, personalisation and security.

8.7. More detailed information about cookies, retention periods, providers and consent management may be set out in a separate Cookie Policy / Cookie Notice.

9. Sweep Coins and affiliate model

9.1. Sweep Coins are virtual units within the Platform and are used exclusively under the IPU.BET programme rules. Sweep Coins are not money, electronic money, a deposit, a security, a financial instrument, a payment instrument, a gambling stake or gambling winnings.

9.2. Sweep Coins are not purchased for money and are not directly convertible into fiat currency. The possibility to exchange Sweep Coins for rewards depends on the programme rules, reward availability, the user’s eligibility and compliance with the Platform terms.

9.3. If a reward is provided by a third party, such as a merchandise provider, event provider, NFT provider or Partner, we may transfer to that party the minimum data necessary to provide the reward, verify eligibility, arrange delivery, grant access or fulfil the user’s request.

9.4. IPU.BET may receive remuneration from Partners, including CPA, revenue share, hybrid commission, fixed fee, listing fee or other forms of commercial remuneration. Such remuneration may be linked to the user’s click on an affiliate link, registration with a Partner, use of a bonus, activity with a Partner or other events.

9.5. The affiliate model does not make IPU.BET a party to the contract between the user and a Partner. IPU.BET does not control Partners’ gambling services, does not accept bets, does not pay winnings, does not manage deposits, does not conduct the Partner’s KYC/AML and is not responsible for the Partner’s decisions.

9.6. We strive to separate the commercial model from editorial selection and user rankings. However, the user must independently check the licence, terms, reputation, bonus rules and availability of Partner services in the user’s jurisdiction.

10. User rights

10.1. Where GDPR applies, the user has the rights of access, rectification, erasure, restriction of processing, notification to recipients, data portability, objection, rights relating to automated decision-making, withdrawal of consent and lodging a complaint with a supervisory authority.

10.2. To exercise rights, the user may contact support@ipu.bet.

10.3. We may request additional information to verify the user’s identity before fulfilling a request where necessary to protect the account, prevent unauthorised access or comply with law.

10.4. We respond to requests without undue delay and, where GDPR applies, generally within one month of receipt of the request. This period may be extended by a further two months where the request is complex or numerous requests have been received.

10.5. Exercising rights is generally free of charge. We may refuse to act on a manifestly unfounded or excessive request or charge a reasonable fee where permitted by applicable law.

10.6. The right to erasure is not absolute. We may retain data where retention is necessary to comply with law, prevent fraud, ensure security, resolve disputes, protect legal rights, meet accounting purposes, evidence consents or prevent repeated violations.

10.7. The user has the right to object to processing based on legitimate interests. In that case, we will stop processing unless we can demonstrate compelling legitimate grounds that override the user’s interests, rights and freedoms, or where processing is necessary for the establishment, exercise or defence of legal claims.

10.8. The user may opt out of marketing communications at any time through an unsubscribe link, account settings or by contacting support.

10.9. The user may lodge a complaint with the French supervisory authority CNIL or with the data protection supervisory authority in the country of residence, place of work or place of the alleged infringement.

11. Protection of minors

11.1. The Platform is intended only for users who have reached the minimum age established for the relevant jurisdiction. The minimum age is 18, except for Kazakhstan, where the minimum age is 21.

11.2. We do not target the Platform at minors, do not knowingly target minors and do not allow minors to create accounts or use IPU.BET services.

11.3. During registration, the user must provide a truthful date of birth and country of residence. We may use self-declaration, email/SMS verification, technical checks, geo-blocking and, where necessary, light KYC to verify age and eligibility.

11.4. If we become aware that an account has been created by a person below the minimum age, we will block or delete the account and delete the relevant personal data, except for data that must be retained to comply with law, prevent re-registration, ensure security or protect legal rights.

11.5. If a user believes that a minor has provided us with personal data, the user may notify us at support@ipu.bet.

12. Data security and incidents

12.1. We apply reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

12.2. Such measures may include access controls, need-to-know access restrictions, encryption or pseudonymisation, activity logging, anti-fraud monitoring, backups, vulnerability management, contractual obligations of processors, internal security policies, staff training and incident response procedures.

12.3. Despite the measures taken, no system can guarantee absolute security. The user is also responsible for keeping account credentials, email account, phone, device and communication channels secure.

12.4. If a personal data breach occurs and GDPR applies, we assess the risk to users’ rights and freedoms. Where notification is required, we notify the competent supervisory authority without undue delay and, where applicable, no later than 72 hours after becoming aware of the breach.

12.5. If the breach is likely to result in a high risk to the rights and freedoms of the user, we will also notify the relevant user in the manner and within the time limits required by applicable law, unless a lawful exception applies.

13. Automated decisions and anti-fraud systems

13.1. We may use automated or semi-automated systems to detect violations, including multi-accounting, fraud, bonus abuse, bots, scripts, geo-blocking circumvention, use of VPN/proxy from prohibited jurisdictions, suspicious activity and violations of the Sweep Coins rules.

13.2. Such systems may analyse technical data, device fingerprint, IP address, cookie ID, account behaviour, Sweep Coins accrual history, session data, referral data and other risk indicators.

13.3. If a decision may have a significant effect on the user, such as long-term account blocking, cancellation of Sweep Coins or refusal of a reward, we seek to apply human-in-the-loop review where required by applicable law or internal procedures.

13.4. The user may challenge a significant decision, request review and provide additional explanations by contacting support@ipu.bet.

13.5. We may refrain from disclosing details of anti-fraud algorithms where disclosure could reduce the effectiveness of security systems, reveal trade secrets, facilitate circumvention of rules or harm the rights of other users.

14. Changes to the Policy

14.1. We may update this Policy from time to time to reflect changes in the Platform, law, technology, partnership model, data categories, processing purposes or safeguards.

14.2. The current version of the Policy is always available on the Platform.

14.3. If changes are material, we will notify users by email, through the Platform interface or by another reasonable method at least 30 days before the changes take effect, unless a shorter period is required by law, security, prevention of abuse or an urgent service change.

14.4. If a change requires new consent, we will request such consent separately.

14.5. If the user does not agree with the changes, the user may stop using the Platform and, if the user has an account, request account closure.

14.6. We may keep an archive of previous versions of the Policy or provide them upon request where reasonably possible.

15. Contacts

Data Controller:

ADVERT ME, SAS, société par actions simplifiée

RCS Nanterre: 830 065 900

Share capital: EUR 1,000.00

Registered office: 9 avenue Gutenberg, 92800 Puteaux, France

Platform: IPU.BET | International Players Union

Domain: https://ipu.bet

Data requests email: support@ipu.bet

DPO / Privacy Manager: [if a DPO is appointed: name/contact details of the DPO; if no DPO is appointed: Privacy Manager, support@ipu.bet]

A user from the EU/EEA also has the right to lodge a complaint with CNIL in France or with the supervisory authority in the user’s country of residence, place of work or place of the alleged infringement.