Privacy Policy sm506 — Your Data, Our Responsibility

1Information We Collect

Sm506 collects various types of information to provide each member with a secure, seamless and personalised experience. The information collected can be grouped into three main categories:

Information You Provide Directly

When you register an account or interact with the sm506 platform, you provide information such as:

• Full name, date of birth, and gender
• Email address and mobile number
• Residential address and postcode
• Copy of identity document for KYC purposes (national ID or passport)
• Bank account or digital wallet details used for deposits and withdrawals
• Any information you share when communicating with our support team

Automatically Collected Information

When you use the sm506 platform — whether via web browser or mobile app — our systems automatically record certain technical information:

• IP address and general geolocation data
• Device type, operating system, and browser version
• Pages visited, time spent, and navigation patterns
• Game session data including bets, wins, and play duration
• Technical error logs and app performance data

Information from Third Parties

In certain cases, sm506 may receive information about you from trusted third-party sources, including payment providers that verify transactions, independent identity verification services used in the KYC process, and relevant regulatory bodies where required by law.

2How We Use Your Data

Sm506 uses collected data for legitimate and specific purposes only. We do not use your data for any purpose beyond what is stated below without first obtaining your consent.

Purpose of Use	Data Type	Legal Basis
Account management & identity verification	Name, email, ID document	Contractual necessity
Deposit & withdrawal processing	Financial and banking information	Contractual necessity
Fraud prevention & security	IP, session, geolocation	Legitimate interests
Responsible gaming	Gaming behaviour data	Legal obligation
Customer support	Communication records	Contractual necessity
Platform improvement	Technical usage data	Legitimate interests
Regulatory & legal compliance	All relevant categories	Legal obligation

3Data Storage & Security

Sm506 takes our responsibility to protect your personal data seriously. We implement a range of technical and organisational measures to prevent unauthorised access, disclosure, modification or destruction of data.

Technical Security Measures

• Transit encryption: All communications between you and the sm506 platform are protected with TLS 1.3 protocol and 256-bit SSL encryption.
• Storage encryption: Sensitive data, including financial information and identity documents, is stored in encrypted form using AES-256 algorithms.
• Two-factor authentication: Members are encouraged to enable 2FA for an additional layer of account protection.
• Continuous monitoring: sm506 systems are monitored 24/7 to detect and respond to any security threats promptly.
• Penetration testing: Security audits and penetration testing are conducted periodically by accredited independent parties.

Data Retention Period

Sm506 retains your personal data only for as long as needed to fulfil the purposes stated in this policy, or as required by applicable law. In general:

• Active account data: Retained for the duration the account remains active, plus 5 years after account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with financial regulatory requirements.
• Support communication logs: Retained for 3 years from the date of communication.
• Technical data and system logs: Retained for 12 months, then securely deleted.

4Information Sharing

Sm506 does not sell, rent or trade member personal data to any third party for their own marketing purposes. However, there are limited situations in which we may need to share certain information:

Trusted Service Providers

Sm506 works with carefully selected third parties to support platform operations, including payment providers and transaction gateways, identity verification and KYC service providers, server and cloud computing service providers, and customer support service providers. All service providers are bound by strict confidentiality agreements and may only use shared data for the specific agreed purposes.

Legal requirement

Sm506 may disclose member personal data where required by law, court order, or a legitimate request from a relevant government authority. In such circumstances, we will notify you where permitted to do so under applicable law.

5Cookies & Tracking Technologies

The sm506 platform uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled.
• Performance cookies: Helps us understand how members use the platform so we can keep improving it. This data is collected in aggregate and does not identify individuals.
• Functionality cookies: Saves your preferences such as language, display settings, and other options to deliver a more personalized experience.
• Analytics cookies: Used to analyse usage patterns and help us understand which parts of the platform are most frequently visited.

You can manage and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of the sm506 platform and your gaming experience.

6Your Rights as a Member

Sm506 respects your rights over your own personal data. As a sm506 member, you have the following rights, which you may exercise at any time:

• Right of Access — You have the right to request and receive a copy of all personal data we hold about you in a readable format.
• Right to Rectification — If the data we hold is inaccurate or out of date, you have the right to request prompt correction.
• Right to Erasure — In certain circumstances, you may request that we delete your personal data, subject to any applicable legal retention obligations.
• Right to Restrict Processing — You may request that we restrict how we process your data in certain situations, such as while you are disputing the accuracy of the data.
• Right to Data Portability — You have the right to receive your personal data in a structured, machine-readable format for transfer to another platform.
• Right to Object — You may object to the processing of your personal data for specific purposes, such as direct marketing, at any time.

To exercise any of the above rights, please contact the sm506 data protection team. We will process your request within 30 business days of receipt. All requests will be handled free of charge unless they are repetitive or unreasonable.

7Children's Data

The sm506 platform is strictly for individuals aged 18 and above. sm506 does not knowingly collect or process personal data of anyone under 18. If we discover that data belonging to a person under 18 has been collected inadvertently, we will promptly delete that data and close the relevant account.

If you believe a minor has registered an account on the sm506 platform, please contact us immediately so we can take the appropriate action.

8Privacy Policy Amendments

Sm506 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technology requirements, or legal obligations. Any material amendments will be communicated to members via:

• Prominent notice on the sm506 platform homepage
• Email notification to the address registered on your account
• Pop-up or informational banner on first login after the amendment takes effect

The effective date of the latest version of this Privacy Policy is stated at the top of the document. Continued use of the sm506 platform after any amendments constitutes your acceptance of the updated terms.

9Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how sm506 handles your personal data, our data protection team is ready to assist:

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex issues or formal data rights requests, the processing period is up to 30 business days.

This Privacy Policy was updated in January 2026 and supersedes all previous versions.