Privacy Policy
Last updated: 01/01/2026
1. Who we are
This Privacy Policy explains how TOPSTATBETS LTD ("TopStatBets", "we", "us", "our") collects, uses, shares and protects personal data when you use https://www.topstatbets.com (the "Website") and our related tools and services (the "Services").
For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018) and, where applicable, the EU GDPR, the data controller is:
TOPSTATBETS LTD, Company No. 17126267 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ Privacy contact: support@topstatbets.com
Editor note: if you appoint a Data Protection Officer or an EU/UK representative under Art. 27, add their details here. A small UK SME offering analytics tools is unlikely to require a statutory DPO, but confirm with your solicitor.
2. What this policy covers
This policy covers personal data we process about visitors, registered account holders, people who contact us, and people who interact with our analytics tools, betslip simulator, trackers and affiliate links. It does not cover the privacy practices of third-party websites or operators you reach via links from our Website — see section 7 and our Affiliate Disclosure.
3. What personal data we collect
3.1 Data you provide to us
-
Account registration data: name or username, email address, password (stored in hashed form).
-
Profile and preference data you choose to add.
-
Saved analytics data: betslip simulations, saved selections, tracker entries, notes and tags you create.
-
Communications: messages, support requests and any content you send to support@topstatbets.com, sales@topstatbets.com or marketing@topstatbets.com.
3.2 Data collected automatically
-
Usage data: pages viewed, features used, interactions with predictions, event pages and tools, session duration.
-
Device and technical data: IP address, browser type and version, operating system, device identifiers, referring URLs, and server log data.
-
Cookie and similar-technology data: see our Cookie Policy.
-
Analytics data: aggregated and individual usage metrics from Google Analytics, Vercel Analytics, Hotjar and Meta Pixel (where consented).
-
Affiliate click data: the fact that you clicked an affiliate/partner link, the link/campaign clicked, and limited attribution identifiers (where consented).
3.3 Account & verification data
-
Email verification status and verification tokens.
-
Authentication/session identifiers used to keep you logged in.
-
Login timestamps and security-related metadata.
Editor note: confirm with your developer exactly which fields your auth provider stores. List the auth provider in section 6.
4. Where your data comes from
Most data comes directly from you or from your use of the Website. Some technical data is generated automatically. We do not purchase personal data about you from data brokers.
Sports/odds data we display comes from third-party data providers (e.g. the-odds-api.com) and generally does not contain your personal data.
5. Legal bases for processing (UK GDPR Art. 6)
| Purpose | Legal basis |
|---|---|
| Creating and operating your account; providing the tools you request | Performance of a contract (Art. 6(1)(b)) |
| Email verification, security, fraud and abuse prevention | Legitimate interests (Art. 6(1) (f)) and/or legal obligation (Art. 6(1)(c)) |
| Strictly necessary cookies and core site function | Legitimate interests/contract |
| Analytics, performance and marketing cookies; Meta Pixel; affiliate tracking | Consent (Art. 6(1)(a)) |
| Direct marketing emails (if you opt in) | Consent (Art. 6(1)(a)) |
| Responding to support requests | Legitimate interests/contract |
| Complying with legal, tax and regulatory obligations | Legal obligation (Art. 6(1)(c)) |
You can withdraw consent at any time (see section 11). Withdrawing consent does not affect processing carried out before withdrawal.
6. Who we share data with (processors & third parties)
We share personal data only as needed to run the Services. Our key categories of recipients are:
| Recipient/category | Role | Examples |
|---|---|---|
| Hosting & infrastructure | Hosts the Website and data | GoDaddy |
| Payments | Processes any paid features | Stripe |
| Analytics providers | Usage & performance analytics | Google Analytics, Vercel Analytics, Hotjar |
| Marketing/advertising | Conversion and audience measurement | Meta Pixel |
| Sports/odds data providers | Supply odds & event data (not your personal data) | the-odds-api.com |
| AI model providers | Generate analytical outputs/insights | Gemini (Google), ChatGPT (OpenAI), Claude (Anthropic) |
| Affiliate partners | Receive referred-click attribution where you click their links | Cloudbet, Betsson Group Affiliates |
| Professional advisers / authorities | Where legally required | Accountants, regulators, courts, ICO |
We require our processors to act on our instructions and protect your data. We do not sell your personal data.
7. Third-party links and affiliate partners
Our Website may link to third-party sites, including bookmaker/sportsbook affiliate partners. When you follow such a link, the third party becomes responsible for your data under its own privacy policy. We are not responsible for third-party privacy practices. See our Affiliate Disclosure.
8. International data transfers
We are UK-based, but some of our providers (e.g. analytics, AI model providers, affiliate networks) process data outside the UK/EEA, including in the United States and other countries.
Where we transfer personal data internationally, we rely on an appropriate safeguard, such as:
-
a UK "adequacy" decision / EU adequacy decision for the destination country; or
-
the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses; or
-
EU Standard Contractual Clauses, with supplementary measures where needed.
You can request information about the safeguards used by emailing support@topstatbets.com.
9. How long we keep data
We keep personal data only as long as necessary for the purposes set out in this policy, then delete or anonymise it. See our separate Data Retention & Account Deletion Policy for category-by-category periods.
10. Security
We use technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS/TLS), hashed passwords, access controls and reputable hosting/payment providers. No system is completely secure. We cannot guarantee absolute security, and you are responsible for keeping your login credentials confidential.
11. Your rights
Subject to conditions and exemptions under UK/EU GDPR, you have the right to:
-
Access the personal data we hold about you;
-
Rectify inaccurate or incomplete data;
-
Erase your data ("right to be forgotten");
-
Restrict or object to processing;
-
Data portability (receive your data in a portable format);
-
Withdraw consent at any time (for consent-based processing, including cookies);
-
Object to direct marketing at any time;
-
Not be subject to solely automated decisions producing legal/similarly significant effects (our analytical outputs are informational and do not make decisions about you).
To exercise any right, email support@topstatbets.com. We respond within one month (extendable by two further months for complex requests). We may need to verify your identity.
If you are unhappy with how we handle your data you can complain to the UK regulator, the Information Commissioner's Office (ICO) - ico.org.uk - or your local EU/EEA supervisory authority.
12. Children and minors
The Services are strictly for adults aged 18 or over. We do not knowingly collect personal data from anyone under 18. If we learn we have collected data from a minor, we will delete it. If you believe a minor has provided us data, email support@topstatbets.com.
13. Changes to this policy
We may update this policy from time to time. The "Last updated" date shows the latest version. Material changes will be notified on the Website and/or by email where appropriate.
14. Contact
TOPSTATBETS LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Email: support@topstatbets.com
