PRIVACY POLICY
Last updated: 28/05/2026
Version: 1.0.1
This Privacy Policy explains how Grail Technologies Ltd. (“Company”, “we”, “us”, or “our”) collects, processes, and protects your personal data in connection with the Grailbet Partners affiliate program and website.
We are committed to safeguarding your privacy and ensuring that your personal data is handled in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), where applicable.
This Privacy Policy should be read together with our Affiliate Terms and Conditions and Cookie Policy.
1. DATA CONTROLLER
Grail Technologies Ltd.
Rodney Bayside Building
Rodney Bay, Gros Islet
Saint Lucia
Email: [email protected]
The Company acts as the data controller in respect of Personal Data processed through the Affiliate Program and Website. This means that the Company determines the purposes and means of processing your Personal Data.
2. CHANGES TO THIS PRIVACY POLICY
The Company reserves the right, at its sole discretion, to amend, update, or modify this Privacy Policy at any time to reflect changes in legal, regulatory, or operational requirements.
Where changes are considered material, the Company shall take reasonable steps to notify you via the Website, email, or the Affiliate Platform. Continued use of the Affiliate Program following such updates shall constitute your acceptance of the revised Privacy Policy.
3. THE DATA WE COLLECT
We collect Personal Data that is necessary for the operation of the Affiliate Program, for compliance with legal obligations, and to ensure the proper functioning of our services.
3.1 Data provided by you
When you register or interact with the Affiliate Program, we may collect:
- Full name
- Date of birth
- Email address
- Telephone number
- Country of residence and nationality
- Company details (where applicable)
- Payment details, including bank account information and/or cryptocurrency wallet details
- Traffic sources, websites, and business-related information
This information is required to create and manage your affiliate account and to establish a commercial relationship.
3.2 Verification and compliance data
In order to comply with regulatory and internal requirements, we may request:
- Government-issued identification documents
- Proof of address
- Corporate documentation
- Source of funds or additional verification information where necessary
This data is processed strictly for compliance with KYC and AML obligations.
3.3 Technical and usage data
We automatically collect certain technical data when you use the Website or Affiliate Platform, including:
- IP address
- Device and browser information
- Login activity and timestamps
- Tracking data, including clicks, registrations, deposits, and performance metrics
This data is essential for accurate tracking, fraud prevention, and platform optimisation.
3.4 Communication data
We may collect and store communications between you and the Company, including:
- Emails and correspondence
- Support requests and responses
- Platform messages
This is necessary to provide support and maintain a record of our business relationship.
The Company does not intentionally collect special categories of personal data such as data relating to health, political opinions, or religious beliefs.
4. PURPOSE AND LEGAL BASIS FOR PROCESSING
Your Personal Data is processed only where a valid legal basis exists.
4.1 Performance of a contract
We process your data to:
- Create and manage your affiliate account
- Track referrals and calculate commissions
- Process payments and manage financial transactions
4.2 Compliance with legal obligations
We are required to process certain data to:
- Perform identity verification (KYC)
- Comply with anti-money laundering (AML) regulations
- Fulfil tax, accounting, and regulatory obligations
4.3 Legitimate interests
We process data where necessary for our legitimate business interests, including:
- Operating and improving the Affiliate Program
- Preventing fraud, abuse, and misuse
- Analysing platform usage and performance
Such processing is carried out only where it does not override your fundamental rights and freedoms.
4.4 Consent
Where required, we may rely on your consent to:
- Send marketing communications
- Provide updates about products, services, or promotions
You may withdraw your consent at any time.
5. SHARING OF PERSONAL DATA
We may share your Personal Data with trusted third parties where necessary to operate the Affiliate Program.
This includes:
- Affiliate platform providers, including Affnook
- Payment service providers, including banks and cryptocurrency processors
- Compliance, KYC, and anti-fraud service providers
- Analytics and tracking service providers
- Group companies and business partners
- Regulatory authorities or law enforcement where required by law
All third parties are contractually bound to process Personal Data securely and only in accordance with the Company’s instructions and applicable laws.
6. INTERNATIONAL TRANSFERS
Given that the Company is incorporated outside the European Economic Area (EEA), and may use service providers, partners, or systems located in other jurisdictions, your Personal Data may be transferred to and processed outside the EEA.
Where such transfers occur, the Company shall ensure that appropriate safeguards are implemented, including:
- Transfers to jurisdictions recognised as providing an adequate level of protection;
- The use of standard contractual clauses or equivalent legal mechanisms.
7. DATA RETENTION
Personal Data shall be retained only for as long as necessary to fulfil the purposes for which it was collected.
Retention periods include:
- Duration of the contractual relationship
- Up to six (6) years following termination for legal and contractual purposes
- Up to ten (10) years where required for tax, accounting, or regulatory compliance
Once Personal Data is no longer required, it will be securely deleted or anonymised.
8. DATA SECURITY
We implement appropriate technical and organisational measures to protect Personal Data against unauthorised access, loss, misuse, or disclosure.
Access to Personal Data is restricted to authorised personnel and handled on a strict need-to-know basis. We also maintain procedures to address any suspected data breaches in accordance with applicable legal requirements.
9. YOUR RIGHTS
Subject to applicable data protection laws, you may have the following rights:
- The right to access your Personal Data
- The right to request rectification of inaccurate data
- The right to request erasure of Personal Data
- The right to restrict processing
- The right to object to processing based on legitimate interests
- The right to data portability
- The right to withdraw consent at any time
- The right to lodge a complaint with a supervisory authority
To exercise your rights, please contact: [email protected]
10. COOKIES
The Website uses cookies and similar technologies to support functionality and performance.
These include:
- Affiliate tracking and attribution
- Website performance and analytics
- User experience improvements
Further details are available in the Cookie Policy.
11. CONTACT DETAILS
If you have any questions regarding this Privacy Policy or the processing of your Personal Data, please contact: [email protected]