Privacy Policy

1. Who we are

TopArab.casino is operated by H. Abu Hichmeh, based in Canada ("we", "us"). We run this website and a subscription platform that lets businesses ("tenants") run a free-to-play blackjack tournament through their own Telegram bot and on a web table at blackjack.toparab.casino. For any privacy question, write to collaborate@toparab.casino.

2. Data from website visitors

• Demo request form: your name, email address, Telegram username, role, website, the markets you target, and your consent to be contacted.
• Payment confirmation form on our payment page: your account email, your bot username and the transaction hash of your USDT payment.
• Analytics: we use Google Analytics 4 to understand how the site is used, for example pages viewed, how visitors arrived, device type and approximate country. Advertising features and ad personalisation are switched off. Visitors in the European Economic Area, the United Kingdom and Switzerland get no analytics cookies; Google receives only cookieless signals from them.
• Server logs: our servers record technical data such as IP address, browser type, the page requested and the time of the request, to keep the site secure and working.

3. Data the platform processes

Tenant account data. When a business uses the platform, we hold its account details: contact email, login credentials (stored in protected form), business and bot names, Telegram channel and group identifiers, settings, logos and other uploaded content, and payment records.

Player data, on behalf of tenants. When a player uses a tenant's bot or web table, the platform processes:

• Telegram user ID, the nickname the player chooses and the language they pick;
• chips, points, tournament results and game history;
• web sign-in sessions, including the one-time codes used to sign in and the devices that are signed in;
• the email address a winner chooses to send to claim a prize. This is posted in the tenant's private staff group so the sponsoring casino can credit the prize.

Players are never asked for their real name, and their nickname is what other players see.

4. Our role and the tenant's role

We are the controller for website visitor data and tenant account data: we decide why and how that data is used. For player data, we act on behalf of the tenant that runs the bot. The tenant decides how to run its tournament, who sits in its staff group and what happens with winners' emails, and the tenant is responsible to its players. Players with questions about their data should contact the tenant first. We will help tenants answer those requests.

5. Purposes and legal bases

In Canada, we rely on your consent, given expressly or implied by the context, as required by PIPEDA.

6. Who we share data with

We share data only with providers we need to run the service:

• our hosting provider, which stores the website and platform data;
• our email delivery provider, which sends reminders and service messages;
• Telegram, the messaging platform the bot runs on, which processes messages under its own privacy policy.

Within a tenant, winner emails are visible to the members of that tenant's staff group. We may also disclose data if the law requires it. We do not sell personal data, and we do not share it for other companies' advertising.

7. International transfers

We are based in Canada, and our providers may store or process data in other countries. When data leaves the country where it was collected, we use providers that offer appropriate protection, and where GDPR applies we rely on recognised safeguards such as adequacy decisions or standard contractual clauses.

8. How long we keep data

• Demo requests: 24 months after your last contact with us.
• Payment records: as long as accounting and tax rules require.
• Tenant account data: while the account is active, and for 90 days after the plan ends, as described in our billing policy.
• Player data: while the tenant's account is active and for 90 days after it ends, then deleted.
• Server logs: for a short period needed for security and troubleshooting.

9. Security

We use encrypted connections (HTTPS), protected storage of passwords, access limited to people who need it, and single-use web sign-in codes that expire after 10 minutes. Players can end all their web sessions with the /webLogout command. No system is perfectly secure, so if we learn of a breach that affects you, we will tell you and the relevant authorities as the law requires.

10. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to ask us to delete it and to object to certain uses of it. In Canada these rights come from PIPEDA; in the European Union and the United Kingdom they come from GDPR where it applies. You can withdraw consent to analytics or to being contacted at any time.

To use any of these rights, email collaborate@toparab.casino. We may ask you to confirm your identity, and we will reply within the time the law requires. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or to your local data protection authority.

11. Cookies

We use a small number of necessary cookies to keep the site and the dashboard working, for example to remember your sign-in and your language. The web table stores a sign-in token in the player's browser to keep them signed in for up to 30 days. The marketing site also remembers in your browser which campaign link brought you, so we can see which channels work. We also use Google Analytics cookies (named _ga) to measure visits, except for visitors in the European Economic Area, the United Kingdom and Switzerland. You can delete or block them in your browser settings or with Google's opt-out browser add-on.

12. Children

The service and the game are for people aged 21 and over only. Players must confirm they are 21+ before playing, and tenants must not target minors, as set out in our responsible use policy. We do not knowingly collect data from anyone under 21. If you believe a minor has used the service, contact us and we will delete the data.

13. Changes to this policy

We may update this policy. The date at the top shows the latest version, and if a change materially affects tenants, we will tell them by email or in the dashboard.

14. Contact

Privacy questions and requests: collaborate@toparab.casino. You can also reach us through our contact page. Our terms of service explain the rest of our agreement with tenants.