Privacy Policy

1. Who is the Data Controller?

BMC BONUSBALL (“we”, “us”, “our”) is the controller of your personal data when you use our website and enter our paid, skill-based competitions.

2. Data we collect

• Account & identity: name, email, phone number, age/ID verification data.
• Contact & support: messages you send via forms, email, or Instagram.
• Competition data: entries, answers to skill questions, purchase history.
• Payment data: payment method token/IDs from payment providers (we don’t see full card numbers).
• Technical data: device, IP, browser, and cookies or similar technologies for essential site functions, analytics, and fraud prevention.
• Publicity content (winners): first name, initial of surname, general location, prize details, photos/video where you consent.

3. Sources

We collect data directly from you, automatically from your device, and from third-party services (e.g., payment providers, identity verification services, social platforms where you contact us).

4. How we use your data (Lawful Bases)

• Provide services (contract): create/manage your account, process competition entries and payments, select/notify winners, deliver prizes.
• Safety & integrity (legitimate interests/legal obligation): prevent fraud/abuse, verify age and identity, enforce terms.
• Communications (contract/ legitimate interests/consent): service emails, support, and (if you opt in) marketing.
• Analytics & improvement (legitimate interests): monitor performance and enhance user experience.
• Legal & compliance (legal obligation): record-keeping and responding to lawful requests.

5. Sharing your data

• Service providers: hosting, security, analytics, communications, payment processing, ID checks.
• Public winner details: first name, initial of surname, general location, prize description published on our website/socials for transparency.
• Legal/authorities: where required by law or to protect rights/safety.
• Business transfers: if we undergo a reorganisation or similar.

6. International transfers

Where data is transferred outside the UK, we use lawful transfer mechanisms (e.g., UK IDTA or standard contractual clauses) with appropriate safeguards implemented by our service providers.

7. Retention

We keep personal data only as long as necessary for the purposes set out in this policy, including to comply with legal and tax obligations, resolve disputes, and enforce agreements. Typical retention: customer and transaction records up to 6 years; support messages up to 2 years; marketing preferences until you opt out.

8. Your rights

• Access, rectification, and erasure
• Restriction or objection to certain processing
• Data portability
• Withdraw consent (where relied upon)
• Complain to the UK ICO. We’d appreciate the chance to address concerns first at contact@bmcbonusball.com.

9. Marketing

We may send you marketing if you opt in, or where permitted by law. You can opt out at any time via unsubscribe links or by contacting us. Service and transactional messages are not marketing.

10. Cookies & similar tech

We use necessary cookies for core functionality (e.g., security, login), and may use analytics to understand usage. You can control non-essential cookies via your browser or any consent tools we provide. For details, see our Cookie Notice if available.

11. Children

Our services are for adults 18+. We do not knowingly collect data from children. If you believe a child has provided data, contact us to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post changes on this page and revise the “Last updated” date above.