Privacy Policy

1. Who We Are

Gambolio is a peer-to-peer micro-betting platform operated by Gambol. Users create and accept real-money and virtual-token bets with friends and groups. You can reach us at support@gambol.io.

2. Information We Collect

• Account info: username, email address, and password (hashed).
• Phone number: collected only when you voluntarily add it to enable SMS notifications. US numbers only.
• Betting activity: bets you create, accept, or resolve, and associated stakes.
• Messages: direct messages and group messages sent through the platform.
• Usage data: standard server logs (IP address, browser, pages visited).

3. How We Use Your Information

• To operate and provide the Gambolio service.
• To send email notifications about your bets (when enabled).
• To send SMS text message notifications about your bets — including bet requests, acceptances, resolutions, and account alerts — when you have verified your phone number and enabled SMS notifications in your profile settings.
• To authenticate your identity (OTP verification codes via SMS).
• To prevent fraud and enforce our Terms of Service.

4. SMS Messaging

We use SMS text messages to send you account alerts and bet notifications only when you have explicitly opted in by (1) verifying your phone number and (2) enabling SMS notifications in your account settings. Message frequency varies based on your betting activity. Message and data rates may apply. You can opt out at any time by replying STOP to any message or by disabling SMS notifications in your profile settings.

We do not sell, rent, or share your phone number with any third party for marketing purposes. Your phone number is used solely to deliver Gambolio notifications and authentication codes to you.

5. Data Sharing

We do not sell your personal information. We share data only as follows:

• Twilio: to deliver SMS messages and OTP verification codes.
• Resend: to deliver email notifications.
• AWS: for hosting and database infrastructure.
• Vercel: for web hosting and deployment.
• When required by law or to protect the safety of our users.

6. Data Retention

We retain your account data as long as your account is active. You may request account deletion by emailing support@gambol.io.

7. Security

We use industry-standard security practices including encrypted connections (HTTPS), hashed passwords, and access controls. No system is perfectly secure; use a strong, unique password.

8. Contact

Questions about this policy? Email us at support@gambol.io.