Privacy Policy

01Who We Are

NOTOUT Affiliates ("we", "us", or "our") operates the NOTOUT Affiliates Program and the associated affiliate portal at notout.com. We are the data controller responsible for the personal data you provide when applying for and participating in our affiliate programme.

If you have any questions about how we handle your personal data, please refer to Section 14 (Contact & DPO) for details of how to reach us.

02Data We Collect

We collect personal data from you in the following ways:

Data you provide directly:

• Full name and date of birth
• Residential or business address
• Email address and telephone number
• Company name and registration number (if applicable)
• Bank account details, cryptocurrency wallet addresses, or other payment information
• Tax identification number (where required by applicable law)
• Identity verification documents (passport, national ID, utility bill) submitted for KYC/AML compliance
• Communication records: emails, support tickets, and chat messages sent to us

Data collected automatically:

• IP address and approximate geolocation derived from it
• Browser type, version, and device information
• Pages visited on the affiliate portal, session duration, and click paths
• Referral tracking data: clicks, impressions, registrations, and player activity associated with your Tracking Links
• Cookie identifiers and similar tracking technologies (see Section 5)
• Login timestamps and access logs

Data from third parties:

• Identity and fraud-screening data from KYC/AML verification providers
• Payment processing data from our payment partners
• Publicly available business information (company registers, LinkedIn profiles) used to verify affiliate applications

03How We Use Your Data

We use your personal data for the following purposes:

• Account management: Creating and administering your affiliate account, verifying your identity, and communicating with you about your account.
• Commission processing: Calculating, verifying, and paying commissions earned through your referral activity.
• Programme administration: Providing access to the affiliate dashboard, tracking links, reporting tools, and promotional materials.
• Legal compliance: Complying with applicable anti-money laundering (AML), know-your-customer (KYC), tax reporting, and other regulatory obligations.
• Fraud prevention: Detecting and investigating suspicious referral activity, self-referrals, or breaches of our Terms & Conditions.
• Service improvement: Analysing usage of our affiliate portal to improve its features, performance, and user experience.
• Marketing communications: Sending you campaign announcements, programme updates, and promotional opportunities (you may opt out at any time).
• Dispute resolution: Maintaining records necessary to resolve payment disputes or legal claims.

04Legal Basis for Processing

We process your personal data under the following legal bases:

Where we rely on legitimate interests as our legal basis, we have assessed that our interests do not override your fundamental rights and freedoms, taking into account the context and nature of the processing.

05Cookies & Tracking

We use cookies and similar tracking technologies on the affiliate portal for the following purposes:

• Essential cookies: Required for login sessions, security tokens, and core portal functionality. These cannot be disabled without affecting your ability to use the portal.
• Analytics cookies: Used to understand how affiliates navigate the portal, which pages they visit most, and where they encounter difficulty. This helps us improve the platform.
• Affiliate tracking cookies: Our proprietary tracking system uses cookies with a 30-day attribution window to associate referred players with your account and calculate your commissions accurately.
• Preference cookies: Used to remember your language, display, and notification preferences between sessions.

You can manage non-essential cookies through your browser settings. Disabling affiliate tracking cookies may affect the accuracy of your commission reporting. We do not use third-party advertising cookies on the affiliate portal.

06Sharing Your Data

We do not sell your personal data. We share your data only in the following circumstances:

• Service providers: We share data with trusted third-party providers who process data on our behalf under strict data processing agreements. These include payment processors, KYC/identity verification providers, cloud hosting providers, and customer support tools.
• Group companies: We may share data within the NOTOUT group of companies where necessary for programme administration and compliance purposes.
• Legal & regulatory disclosure: We will disclose personal data to law enforcement, regulators, or courts when required by applicable law, court order, or regulatory request.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our business assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.
• With your consent: For any other purpose for which you have given explicit consent.

All third-party service providers are contractually obligated to process your data only as instructed by us and to implement appropriate technical and organisational security measures.

07International Transfers

NOTOUT operates globally and your personal data may be transferred to and processed in countries outside your country of residence. Where such transfers occur to countries not recognised as providing an adequate level of data protection, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the relevant supervisory authority, binding corporate rules, or other lawful transfer mechanisms.

You may request details of the safeguards applicable to any specific international transfer of your data by contacting us using the details in Section 14.

08Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, subject to the following retention guidelines:

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you.

09Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary, or where you withdraw consent (subject to legal retention obligations).
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Receive a copy of data you have provided to us in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: Lodge a complaint with the data protection supervisory authority in your country of residence.

To exercise any of these rights, please contact us as set out in Section 14. We will respond within 30 days of receiving a verifiable request. We may need to verify your identity before processing certain requests.

10Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security assessments and penetration testing
• Multi-factor authentication for access to systems holding personal data
• Incident response procedures to detect, contain, and notify data breaches in accordance with applicable law

While we take all reasonable precautions, no method of transmission over the internet is completely secure. You are responsible for maintaining the confidentiality of your affiliate account credentials and should notify us immediately if you suspect unauthorised access to your account.

11Children's Privacy

The NOTOUT Affiliates Program is intended solely for individuals aged 18 or over (or the legal age of majority in their jurisdiction). We do not knowingly collect personal data from individuals under the minimum age.

If we become aware that we have inadvertently collected personal data from a minor, we will take prompt steps to delete that data. If you believe we have collected personal data from a minor, please contact us immediately using the details in Section 14.

12Third-Party Links

The affiliate portal may contain links to third-party websites, tools, and services. This Privacy Policy applies only to the NOTOUT affiliate portal and our processing of your data. We are not responsible for the privacy practices of any third-party site or service.

We encourage you to review the privacy policies of any third-party sites you visit. The presence of a link does not constitute an endorsement of that site's privacy practices.

13Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by email and by posting a prominent notice on the affiliate portal at least 14 days before the changes take effect.

The "Last Updated" date at the top of this policy indicates when it was most recently revised. We encourage you to review this policy periodically. Your continued use of the affiliate portal after the effective date of any update constitutes acceptance of the revised policy.

14Contact & DPO

If you have questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about how we process your personal data, please contact us:

You also have the right to lodge a complaint directly with the data protection supervisory authority in your country of residence if you believe your data has been processed in violation of applicable law.