Spreadex Privacy Policy

This Privacy Policy explains how Spreadex collects, uses and protects the personal information of its customers, and how you can exercise your rights under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

We collect the following categories of personal data:

Identity data: full name, date of birth, nationality and government-issued identification documents
Contact data: email address, telephone number and home address
Financial data: bank details and payment method records, processed by our regulated payment partners
Transactional data: betting history, spread positions, deposits, withdrawals and account statements
Technical data: IP addresses, device identifiers, browser type and activity logs
Communication data: records of any correspondence with our support team

Lawful Basis for Processing

Spreadex processes your data under the following lawful bases:

Contract: to operate your account and deliver the services you have signed up for
Legal obligation: to comply with UK Gambling Commission, FCA and anti-money-laundering requirements
Legitimate interest: to prevent fraud, maintain site security and improve our services
Consent: to send you marketing communications (which you may withdraw at any time)

Cookies

Spreadex uses essential cookies to maintain your logged-in session and keep the site secure. We also use analytics cookies, with your consent, to understand how customers use our platform. You can manage your cookie preferences at any time through the settings link in the footer.

Data Sharing

We share your personal data only when necessary:

With payment processors and banking providers for transaction handling
With identity verification and fraud detection agencies
With our technology and hosting infrastructure partners
With the UK Gambling Commission, FCA, HMRC or law enforcement when required by law

We never sell or rent your data to third parties for their own marketing use.

Your Rights

Under UK GDPR, you have the right to access, correct and erase your personal data (subject to legal obligations), as well as the right to data portability, the right to restrict processing and the right to object to processing based on legitimate interests. To make a request, email [email protected]. We will respond within 30 days. If you are unhappy with our response, you can raise a complaint with the ICO at ico.org.uk.

Retention

Account and transactional records are retained for a minimum of five years following account closure, in line with our regulatory obligations. Records relating to financial spread betting may be held for up to seven years in accordance with FCA requirements. Once the applicable retention period ends, your data is securely deleted.