Privacy Policy
Last updated: 2026-09-30
1. Introduction
gamblescan.io ("GambleScan", "we", "us", "our") is operated by Blacklight Society OÜ, which is responsible for the personal information described in this policy. We are committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. It covers visitors, account holders, and the content creators listed in our creator (KOL) directory.
2. Information We Collect
2.1 Information You Provide
- Email address: when you create an account or sign in
- User content: reviews, disputes, and comments you submit
- Communications: emails or requests you send us, including creator removal requests (the channel address, your email, and your relationship to the channel)
2.2 Information Collected Automatically
- Usage data: pages visited and referral source, collected as aggregated page-view statistics
- Device data: IP address, browser type, and operating system, as received by our hosting provider
- Cookies: see Section 9
2.3 Information from Third Parties
- Sign-in providers: Google, if you sign in with Google
- Wallet addresses: if you connect a crypto wallet
- Streaming platform connections: if you connect a channel on the "Connect your channels" page, we receive your channel's public identity and statistics from that platform (see Section 16)
- Public platform data about creators: we collect public channel information about gambling content creators from official platform APIs (see Section 2.4)
2.4 Creator (KOL) Directory Data
GambleScan lists content creators who stream or publish gambling content ("creators"), so that casinos and players can understand who is active in this market.
Where the data comes from. We use only official platform APIs (Twitch, Kick, YouTube). We do not scrape websites. Kick data is used with written permission from Kick's developer team.
What we collect about a creator, even if they have not signed up:
- Channel handle, display name, profile image, and channel URL
- The public channel description
- Broadcast language and the gambling category they stream in
- Public statistics: follower or subscriber counts, live viewer counts, view and video counts, and when they were measured
- Casino websites or referral links that appear in the public channel description
What we do not collect: real name, date of birth, gender, home country or address, or private messages. We do not rate or rank creators.
How it is shown. Creator profiles are public. Numbers taken from platforms without the creator's confirmation are labelled "public"; numbers measured after a creator connects their own channel are labelled "verified". Email addresses and phone numbers that appear in channel descriptions are hidden on our pages.
3. How We Use Your Information
We use your information to:
- Provide and maintain the Site
- Authenticate your identity
- Process your submissions (reviews, disputes, removal requests)
- Operate the creator directory: show creators' public channel information, audience statistics, and the casinos they promote alongside our casino trust data
- Verify channel ownership when a creator connects a channel
- Send service-related communications
- Understand how the Site is used and improve it
- Detect and prevent fraud or abuse
4. Legal Basis for Processing (GDPR)
If you are in the EU or UK, our legal bases are:
- Contract: processing necessary to provide the Site to account holders
- Legitimate interest: improving the Site and preventing fraud
- Legitimate interest (creator directory): we process the public, professional channel information of creators to provide market transparency for players and casinos. We limit this to information the creator has made public for professional purposes, exclude sensitive data, hide contact details, and let any creator have their data removed at any time (Section 8)
- Consent: where you have given it, for example when you connect a channel
5. Data Retention
- Account data: kept while your account is active; you can ask us to delete it (Section 8)
- User content: kept unless you ask us to delete it
- Creator directory data: kept while the channel remains active in gambling content; statistics are kept as a dated history. Removed on request (Section 8), after which we stop collecting that channel
- Connected channel tokens: stored encrypted and deleted when you disconnect the channel or revoke access on the platform
6. Data Sharing
We do not sell your personal data, and we do not sell or license raw platform data to third parties.
We share data with:
- Service providers: database, hosting, and email delivery
- Legal authorities: when required by law
- Public display: your reviews and disputes, and creator directory profiles, are publicly visible
7. Where Data Is Processed
Our main service providers are Supabase (database, hosted in Sydney, Australia) and Vercel (application hosting and delivery). Your data may therefore be processed in countries other than your own.
8. Your Rights
Depending on where you live, you may have the right to:
- Access: request a copy of your data
- Rectification: correct inaccurate data
- Erasure: request deletion of your data
- Portability: receive your data in a structured format
- Objection: object to certain processing
- Restriction: request restriction of processing
To exercise these rights, email admin@gamblescan.io.
Creators: you can ask us to remove your channel from the directory at gamblescan.io/kol-removal — no account is needed. We review each request, delete the profile, its channels, and its statistics, and stop collecting the channel. If you connected a channel, you can disconnect it at any time on the "Connect your channels" page; this deletes the stored access tokens and hides that channel's statistics.
9. Cookies
| Cookie | Purpose | Duration |
|---|---|---|
| sb-…-auth-token | Keeps you signed in | Until you sign out |
| gs-locale, gs-locale-source | Remembers your language | 1 year |
| hero_ab_test_variant | Compares two homepage designs | 30 days |
| kol_oauth | Secures a channel connection while you sign in to a platform | 10 minutes |
Site statistics (Vercel Web Analytics and Speed Insights) do not use cookies. You can control cookies through your browser settings.
10. Third-Party Links
The Site links to third-party sites such as casinos, game providers, and streaming platforms. We are not responsible for their privacy practices; please review their policies.
11. Children's Privacy
The Site is not intended for anyone under the legal gambling age. We do not knowingly collect data from minors, and we will delete it if we learn that we have.
12. Data Security
We use HTTPS for all data in transit, restrict internal access to data, and store platform access tokens encrypted. No method of transmission or storage is completely secure.
13. Changes to This Policy
We may update this Privacy Policy. The date at the top shows the latest version. We will announce material changes on the Site.
14. Contact Us
For privacy questions or requests, contact Blacklight Society OÜ at admin@gamblescan.io.
15. EU Representative
If required by GDPR Article 27, we will appoint an EU representative.
16. Platform Connections and YouTube API Services
When you connect a channel, we use the platform's official sign-in (OAuth). We request read-only access and never post, change, or delete anything on your channel.
| Platform | What we read |
|---|---|
| Twitch | Your user ID, login name, display name, profile image, description, and follower total |
| Kick | Your user ID, name, profile image, and channel slug and description |
| YouTube | Your channel ID, title, custom URL, thumbnail, description, and subscriber, video, and view counts |
We re-read this information about once a day to keep "verified" statistics current. Access tokens are stored encrypted.
YouTube. GambleScan uses YouTube API Services. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy. You can revoke GambleScan's access at any time through Google's security settings page. When access is revoked or you disconnect, we delete the stored tokens, stop refreshing the channel, and delete stored YouTube data that we are not permitted to keep, within 7 days.
GambleScan's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.