PRIVACY POLICY

Effective Date: December 19, 2025

Last Updated: December 19, 2025

1. GLOBAL INTRODUCTION

This Privacy Policy governs the collection, processing, storage, and disclosure of personal data by Lazio Betting Tips (hereinafter "we," "us," "our," or the "Data Controller"). This Policy applies to all users worldwide who access or use our website, services, and content, regardless of geographic location. We are committed to safeguarding your privacy in accordance with applicable data protection laws, including but not limited to the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR, the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), the Personal Information Protection and Electronic Documents Act ("PIPEDA"), and other applicable international, federal, state, and provincial privacy regulations.

By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. DATA CONTROLLER IDENTIFICATION

The Data Controller responsible for your personal data is Lazio Betting Tips. All inquiries regarding this Privacy Policy, data protection matters, or the exercise of your rights should be directed to:

Email: [email protected]

Data Protection Officer (DPO): [email protected]

We do not provide a physical address in this Policy to ensure jurisdiction-neutral compliance and operational flexibility across multiple regulatory frameworks.

3. INFORMATION WE COLLECT

We collect and process the following categories of personal data:

3.1 Identity Data

3.2 Technical Data

3.3 Usage Data

3.4 Marketing and Communications Data

3.5 Financial and Transactional Data (if applicable)

4. LEGAL BASIS FOR PROCESSING (GDPR ARTICLE 6)

We process your personal data only where we have a lawful basis to do so under Article 6 of the GDPR and equivalent provisions in other jurisdictions. The legal bases we rely upon include:

4.1 Consent (Article 6(1)(a))

Where you have provided explicit, informed, and freely given consent for specific processing activities, including:

You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

4.2 Contractual Necessity (Article 6(1)(b))

Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract, including:

4.3 Legal Obligation (Article 6(1)(c))

Processing is necessary to comply with legal obligations to which we are subject, including:

4.4 Legitimate Interests (Article 6(1)(f))

Processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your fundamental rights and freedoms, including:

We have conducted a Legitimate Interest Assessment (LIA) for each processing activity relying on this basis, which is available upon request.

5. INTERNATIONAL DATA TRANSFERS AND CROSS-BORDER PROCESSING

As a global iGaming affiliate, we may transfer your personal data to countries outside the European Economic Area (EEA), the United Kingdom, Canada, and other jurisdictions where data protection laws may differ from those in your country of residence.

5.1 Transfer Mechanisms

When transferring personal data internationally, we implement appropriate safeguards to ensure adequate protection:

Standard Contractual Clauses (SCCs): For transfers from the EEA or UK to countries without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (2021 version) or the UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU SCCs.

Adequacy Decisions: Where available, we rely on adequacy decisions issued by the European Commission or the UK Information Commissioner's Office recognizing that certain countries provide an adequate level of data protection.

Transfer Risk Assessments: In compliance with the Schrems II ruling, we conduct transfer risk assessments to evaluate whether the laws of the destination country could undermine the protections afforded by SCCs or other transfer mechanisms. Where necessary, we implement supplementary measures to ensure adequate protection.

5.2 Third-Country Recipients

Your personal data may be transferred to service providers, betting operators, affiliate networks, cloud hosting providers, and analytics platforms located in the United States, Asia-Pacific, and other regions. All such transfers are subject to contractual data protection obligations and transfer mechanisms as described above.

5.3 PIPEDA and Canadian Data Transfers

For data subjects with a "real and substantial connection" to Canada, international transfers are conducted in accordance with PIPEDA's requirements, ensuring adequate data protection measures are in place in the receiving country.

6. STATE-SPECIFIC US RIGHTS (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

6.1 Your California Privacy Rights

Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collection, and the categories of third parties with whom we share personal information.

Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.

Right to Correct: You have the right to request correction of inaccurate personal information.

Right to Opt-Out of Sale or Sharing: You have the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising.

Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information, you have the right to limit its use to purposes necessary to provide the services you requested.

Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights, including by denying goods or services, charging different prices, or providing a different level or quality of services.

6.2 "Do Not Sell or Share My Personal Information"

We may share personal information with third parties, including affiliate partners, betting operators, and advertising networks, in a manner that may constitute a "sale" or "sharing" under the CCPA/CPRA.

Categories of Personal Information Sold or Shared:

How to Opt-Out: To exercise your right to opt out of the sale or sharing of your personal information, please click the "Do Not Sell or Share My Personal Information" link on our website homepage or contact us at [email protected]. We will honor your request within 15 business days and will not request authorization to sell or share your personal information again for at least 12 months.

6.3 Authorized Agent Requests

You may designate an authorized agent to submit requests on your behalf. We may require verification of the agent's authority and your identity before processing such requests.

6.4 Nevada Privacy Rights

Nevada residents have the right to opt out of the sale of certain covered information. To exercise this right, please contact us at [email protected].

7. COOKIE POLICY AND TRACKING TECHNOLOGIES

We use cookies, web beacons, pixels, and similar tracking technologies to collect Usage Data and Technical Data.

7.1 Types of Cookies We Use

Essential Cookies: Necessary for the operation of our website, including authentication, security, and session management. These cookies do not require consent.

Affiliate Tracking Cookies: Used to attribute conversions and track commissions when you click on affiliate links and complete actions (e.g., sign up or deposit) with betting operators. Under recent EU guidance, certain affiliate tracking cookies may not require consent if they are limited to anonymous purchase attribution and do not track behavior beyond the transaction.

Analytics Cookies: We use Google Analytics, Google Tag Manager, and similar tools to collect aggregated data on website performance, user behavior, and traffic sources. These cookies require opt-in consent for EU/UK users.

Marketing and Retargeting Cookies: Used by us and third-party advertising networks (e.g., Facebook Pixel, Google Ads) to deliver personalized advertisements and measure campaign effectiveness. These cookies require opt-in consent for EU/UK users.

7.2 Consent Mechanisms

EU/UK/EEA Users (Opt-In): In accordance with the ePrivacy Directive and GDPR, we obtain your explicit opt-in consent before placing non-essential cookies on your device. You may manage your cookie preferences through our Cookie Consent Manager, accessible at any time via the cookie banner or website footer.

US Users (Opt-Out): For users in the United States (excluding California residents exercising CCPA rights), we may place cookies upon your first visit, but you retain the right to opt out at any time through our Cookie Consent Manager or browser settings.

California Users: As described in Section 6.2, you have the right to opt out of cookies used for the sale or sharing of personal information.

7.3 Third-Party Tracking

We use the following categories of third-party tracking technologies:

Each third-party provider operates under its own privacy policy. We recommend reviewing their policies for details on their data practices.

7.4 Managing Cookies

You may disable cookies through your browser settings or opt out of third-party tracking using tools such as the Network Advertising Initiative Opt-Out Tool, the Digital Advertising Alliance's WebChoices Tool, or the European Interactive Digital Advertising Alliance's Your Online Choices portal. Note that disabling essential cookies may impair website functionality.

8. DATA RETENTION

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

8.1 Retention Periods

Account Data: Retained for the duration of your active account plus 6 years following account closure to comply with financial record-keeping and tax obligations.

Marketing Data: Retained until you withdraw consent or unsubscribe from marketing communications, after which it is deleted within 30 days, except where retention is required by law.

Usage and Technical Data: Retained for up to 26 months for analytics purposes, after which it is anonymized or deleted.

Legal and Compliance Data: Retained for up to 10 years where required by gambling regulations, tax laws, or other legal obligations.

Cookies and Tracking Data: Retention periods vary by cookie type (ranging from session cookies deleted upon browser closure to persistent cookies retained for up to 24 months, subject to consent refresh requirements).

8.2 Deletion and Anonymization

Upon expiration of the applicable retention period, we securely delete or anonymize your personal data in accordance with industry best practices. Anonymized data may be retained indefinitely for statistical and research purposes.

9. THIRD-PARTY DISCLOSURE AND DATA SHARING

We may disclose your personal data to the following categories of third parties:

9.1 Betting Operators and Affiliate Partners

We share referral data, including unique identifiers and conversion information, with licensed betting operators and gambling platforms to facilitate affiliate tracking and commission attribution.

9.2 Cloud Hosting and Infrastructure Providers

We use third-party cloud hosting services (e.g., Amazon Web Services, Google Cloud Platform, Microsoft Azure) to store and process your personal data securely.

9.3 Analytics Providers

We share Usage Data and Technical Data with analytics platforms (e.g., Google Analytics, Mixpanel) to analyze website performance and user behavior.

9.4 Marketing and Advertising Networks

We share personal data with advertising networks and social media platforms for retargeting, lookalike audience creation, and campaign measurement.

9.5 Payment Processors

If you engage in financial transactions, we share necessary payment information with third-party payment processors. We do not store full payment card details.

9.6 Legal and Regulatory Authorities

We may disclose personal data to law enforcement, regulatory bodies, courts, and government agencies where required by law, legal process, or to protect our rights, property, or safety.

9.7 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.

All third-party recipients are contractually obligated to maintain the confidentiality and security of your personal data and to process it only for the purposes for which it was disclosed.

10. YOUR DATA PROTECTION RIGHTS

Depending on your jurisdiction, you may have the following rights:

10.1 Rights Under GDPR (EU/UK/EEA)

Right of Access (Article 15): Request a copy of the personal data we hold about you.

Right to Rectification (Article 16): Request correction of inaccurate or incomplete personal data.

Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten"), subject to legal exceptions.

Right to Restriction of Processing (Article 18): Request that we limit the processing of your personal data in certain circumstances.

Right to Data Portability (Article 20): Request a copy of your personal data in a structured, commonly used, and machine-readable format.

Right to Object (Article 21): Object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time.

Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

10.2 Rights Under CCPA/CPRA (California, USA)

As described in Section 6, California residents have the right to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and non-discrimination.

10.3 Rights Under PIPEDA (Canada)

Canadian residents have the right to access, correct, and challenge the accuracy of their personal data, as well as the right to withdraw consent for certain processing activities.

10.4 Rights Under Australian Privacy Principles

Australian residents have the right to access and correct their personal data and to lodge a complaint with the Office of the Australian Information Commissioner.

10.5 Exercising Your Rights

To exercise any of your rights, please contact us at [email protected]. We will respond to your request within the timeframes required by applicable law (generally within 30 days for GDPR requests and 45 days for CCPA requests, subject to extensions where permitted).

We may require verification of your identity before processing your request to ensure the security of your personal data.

11. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Despite our security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your personal data.

12. CHILDREN'S PRIVACY

Our services are not intended for individuals under the age of 18 (or the legal gambling age in your jurisdiction, whichever is higher). We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal data from a minor, we will take steps to delete such information promptly.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify you of material changes by posting the updated Policy on our website with a revised "Last Updated" date. Your continued use of our services after such changes constitutes your acceptance of the updated Policy.

14. CONTACT INFORMATION AND COMPLAINTS

For questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, please contact:

Email: [email protected]

Data Protection Officer: [email protected]

EU/UK Users: You have the right to lodge a complaint with your local supervisory authority if you believe we have violated your data protection rights.

California Users: You may contact the California Attorney General's Office regarding CCPA compliance.

Canadian Users: You may file a complaint with the Office of the Privacy Commissioner of Canada.

Australian Users: You may lodge a complaint with the Office of the Australian Information Commissioner.

15. GOVERNING LAW AND JURISDICTION

This Privacy Policy shall be governed by and construed in accordance with Applicable Law. Any disputes arising out of or relating to this Policy shall be subject to the exclusive jurisdiction of the courts of the jurisdiction in which the Data Controller is established, except where mandatory consumer protection laws require otherwise.

Where conflicts arise between the requirements of different jurisdictions, we will apply the law that provides the highest level of protection to the data subject.

16. DEFINITIONS AND INTERPRETATION

"Personal Data" means any information relating to an identified or identifiable natural person, as defined under applicable data protection laws.

"Processing" means any operation performed on personal data, including collection, recording, organization, storage, use, disclosure, and deletion.

"Data Controller" means the entity that determines the purposes and means of processing personal data.

"Data Processor" means the entity that processes personal data on behalf of the Data Controller.

"Third Country" means any country outside the EEA or UK that does not have an adequacy decision from the European Commission or UK ICO.