Last updated: 15 July 2026

Operator: 3-102-949193 SRL (“KnuckleKings”, “we”, “us”) Website: https://knucklekings.com

A. General

3-102-949193 SRL, as the entity responsible for the collection and processing of data on the website knucklekings.com, is committed to protecting players' personal data in accordance with applicable law and the recognised principles of the General Data Protection Regulation (GDPR).

This Privacy Policy describes how we process personal data and informs players about their related rights.

Personal data means any information relating to an identified or identifiable natural person. Processing means any operation performed on personal data — whether automated or not — such as collection, recording, organisation, storage, adaptation, retrieval, use, transmission, restriction, erasure or destruction.

We process personal data only where:

• the player has given their consent,
• processing is necessary to provide the services offered (performance of a contract),
• a legal obligation requires it (in particular identity verification and anti-money-laundering), or
• processing is necessary to protect the legitimate interests of us, third parties or the public, provided such interests are not overridden by the player's fundamental rights.

To provide our services and prevent abuse, we carry out automated profiling of players and their activities (e.g. to detect fraud and bonus abuse). However, final decisions with significant effects are taken by natural persons; no solely automated individual decisions are made without human review (see Section I).

The platform is intended exclusively for adults (at least 18 years of age) in jurisdictions where participation in online gambling is lawful, and not for persons from the restricted countries listed in Section H.

B. Contact and Data Protection Point of Contact

For data-protection matters, requests and further information about our processing activities, please contact:

3-102-949193 SRL Operator of the website knucklekings.com Registered address: 11th Street, No. 664, San José, Catedral District, Costa Rica Company registration number: 3-102-949193 Data protection / general enquiries: [email protected] Support: [email protected]

Licensing: knucklekings.com is licensed and regulated by the Government of the Autonomous Island of Anjouan, Union of Comoros and operates under License No. ALSI-202608032-FI2.

C. Processing of Personal Data

1. Legitimate Interests

Except where processing is carried out to comply with legal obligations or where the player has consented, we process personal data to protect the legitimate interests of the company, third parties or the public. These include in particular:

• enabling, optimising and improving the services offered,
• detecting and preventing abuse of the platform and services,
• identifying and remedying technical faults,
• ensuring account and transaction security,
• enforcing contractual agreements and/or legal obligations, and
• marketing the services offered.

The relevant legitimate interest is identified in the sections below.

2. Principles of Processing

We process personal data in accordance with the principles of lawfulness, fairness and transparency; purpose limitation; data minimisation; accuracy; storage limitation; and integrity and confidentiality (cf. Art. 5 GDPR).

We note that personal data is also processed to prevent money laundering and terrorist financing when opening and maintaining an account.

Data collected when visiting the website

When you visit the website, the system automatically collects technical information generated by the visitor's browser and temporarily stores it in log files. This may include:

• the IP address of the accessing device and approximate country/location (used, among other things, to enforce country restrictions),
• the date and time of access,
• the operating system used and device type,
• the browser type and version used.

This data may allow a player to be identified. Legitimate interest: provision, optimisation and protection of the services, and detection of abuse and technical faults.

Registration and account management

When you register and manage your account, we process in particular:

• username,
• email address,
• password (stored exclusively in encrypted/hashed form),
• preferred language and time zone.

Legal basis: performance of a contract; legitimate interest in security and abuse prevention.

Identity verification and anti-money-laundering (KYC/AML)

To meet our legal due-diligence and anti-money-laundering (“Know Your Customer”) obligations, we process:

• first and last name, date of birth, gender,
• nationality (country of citizenship) and country of residence,
• phone number,
• full residential address (address line 1 and 2, postal code, city, state/region),
• a copy of a government-issued photo ID (e.g. passport, driver's licence — front and back where applicable),
• a selfie of you holding the ID document,
• proof of residence (bank statement or utility bill, not older than three months),
• source of funds and source of wealth.

Where appropriate, supplementary information may be obtained from third-party databases (e.g. sanctions, PEP or fraud lists). The full KYC process becomes mandatory at the latest once aggregate lifetime deposits exceed EUR 5,000, upon any withdrawal request, or for transactions deemed suspicious. Further details are set out in our KYC Policy.

Legal basis: compliance with legal obligations.

Payment processing (cryptocurrencies)

Deposits and withdrawals are currently made exclusively via cryptocurrencies (e.g. Bitcoin, Tether/USDT and other supported coins). For this we process:

• deposit and withdrawal wallet addresses,
• transaction identifiers (transaction hashes), amounts, currencies and timestamps,
• the resulting deposit/withdrawal history and account balance.

Depending on the method chosen, payment-related data is transmitted to specialised crypto payment service providers/processors to carry out and secure the transaction. Blockchain transactions are, by their nature, publicly visible; we have no control over the processing of data on public blockchains.

Legal basis: performance of a contract; compliance with legal obligations; legitimate interest in fraud prevention.

Gameplay and usage data

We process data about your use of the platform, in particular gameplay history, bets placed, wins and losses, games and providers used, and the use of bonuses and promotions (including to detect bonus abuse). We also process your responsible-gaming settings (see Section G). Legitimate interest: optimisation of services, abuse detection; in part a legal obligation.

Device fingerprinting and fraud prevention

To ensure fair play and to prevent fraud, money laundering, bonus abuse and the operation of multiple accounts by the same person, we generate and process a device-fingerprint identifier (“visitorId”) using the FingerprintJS library. This identifier is stored in your browser's local storage (localStorage, key jv_device_fp) and transmitted with our requests. It allows devices to be recognised even when other identifiers change. Legitimate interest: security, fraud and abuse prevention; in part a legal obligation.

Player communications

We store and process your communications with our customer service, including support tickets (with content and attachments), live-chat transcripts, and in-app notifications and their delivery logs. Support is available 24/7 and in multiple languages (English and German); ticket updates may be delivered by email. Legitimate interest: improvement of services; fulfilment of contractual and legal obligations.

Marketing and affiliate attribution

Depending on your account settings and/or your consent, we may use your data for marketing activities across various channels (e.g. email, in-app notification). If you reach us via a partner/affiliate link, we process an affiliate click identifier (clickid, stored in the aff_click_id cookie) to account for referred registrations. You can withdraw your marketing consent at any time via your account settings, the unsubscribe link, or customer service. While a self-exclusion is active, we do not send promotional material. Legal basis: consent (revocable) and/or legitimate interest in marketing.

Cookies and local storage technologies

We use cookies and comparable technologies (e.g. browser localStorage) to provide the platform, secure your session and prevent abuse:

You can manage or delete cookies via your browser settings. Disabling strictly necessary cookies may impair the functionality of the platform.

Sharing data with third parties (recipients)

We do not sell personal data. Data is shared only to the extent necessary with the following categories of recipient:

• Game and software providers — to provide the games. Providers represented on the platform include, among others: 1Spin4Win, AvatarUX Studios, Betsoft Gaming, BF Games, BGaming, Clawbuster, Endorphina, Evoplay, Gaming Corps, Gamzix, Hacksaw Gaming, Mancala Gaming, Pateplay, Playson, Popiplay, Pragmatic Play, Quickspin, R. Franco Digital, Spearhead Studios, Swintt, Wazdan and Yggdrasil Gaming. Where games are provided via the providers' own systems, processing there is subject to their own terms.
• Crypto payment service providers/processors — to process deposits and withdrawals.
• Identity-verification/KYC and AML screening providers — for verification and screening against sanctions/PEP lists.
• IT, hosting and infrastructure providers — to operate and secure the platform.
• Fraud-prevention/device-fingerprinting providers — see “Device fingerprinting”.
• Affiliate partners — to account for referred registrations (typically via a click identifier).
• Supervisory, regulatory and law-enforcement authorities — where legally required or necessary to enforce our rights and licence conditions (including Anjouan Licensing Services Inc.).
• Legal/financial advisers and auditors, and acquirers in the context of corporate transactions — where necessary.

All processors are contractually obliged to process data solely on our instructions and subject to appropriate security measures.

International data transfers

We and our service providers may transfer and process personal data in countries outside your country of residence. Data-protection standards in those countries may differ; where necessary, we implement appropriate safeguards.

Other purposes

In exceptional cases, processing of personal data for further purposes may be necessary. However, processing only ever takes place where the conditions set out in Section A are met.

D. Data Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse or alteration, including:

• encrypted transmission (TLS/HTTPS, SSL) of sensitive information,
• hashed storage of passwords,
• multi-factor authentication (MFA) and passkeys (WebAuthn) to secure account access,
• session management with the ability to sign out of all sessions,
• device fingerprinting and anomaly detection for fraud prevention,
• access controls and authorisation concepts; access only for authorised staff and contractually bound service providers.

No method of transmission or storage is completely secure; absolute security therefore cannot be guaranteed.

E. Retention

We store personal data only for as long as is necessary for the stated purposes or as required by legal and regulatory obligations.

• Account, transaction and KYC/AML records: for the duration of the business relationship and thereafter in accordance with applicable anti-money-laundering and bookkeeping obligations.
• Self-exclusion data: at least for the duration of the exclusion (minimum 6 months) to enforce the exclusion within the Anjouan Gaming network.
• Support/communication data: for as long as necessary for handling and record-keeping.
• Marketing preferences: until withdrawal or objection.

After the respective periods expire, data is deleted or anonymised.

F. Player Rights

Subject to applicable law, you have the right at any time to:

• request access to your stored personal data,
• request the rectification of inaccurate or incomplete data,
• request the erasure of your data (unless legal retention obligations — in particular KYC/AML and bookkeeping — apply),
• request the restriction of processing,
• object to processing (in particular direct marketing and processing based on legitimate interests),
• receive your data in a structured, commonly used and machine-readable format (data portability), and
• withdraw any consent given, at any time and with effect for the future.

Some of these rights apply only under certain statutory conditions. To exercise them, contact us at [email protected]. For security reasons, we may require proof of identity before processing your request. We may reject requests that are manifestly abusive or connected to legal disputes with us.

G. Responsible Gaming and Self-Exclusion

As part of our commitment to responsible gaming, we process data to provide you with protective tools (deposit, loss and wager limits, cooling-off periods and self-exclusion) and to detect at-risk gambling behaviour. Self-exclusion requests are handled confidentially; information shared is used solely to enforce the exclusion within the Anjouan Gaming network and is disclosed only where required by law or for official investigations. Details are set out in our Responsible Gaming Policy.

H. Protection of Minors and Country Restrictions

Use of the platform is permitted exclusively to persons aged 18 or over (or the higher minimum age applicable in the relevant jurisdiction). We do not knowingly process data of minors. If we determine that a minor has created an account, we will block the account and delete the associated data unless retention obligations apply.

The platform is not accessible to persons from certain countries. Restricted countries include, among others: Austria, France and its territories, Germany, the Netherlands and its territories, Spain, the Union of the Comoros, the United Kingdom, the USA and its territories, all FATF-blacklisted countries, and any other jurisdictions deemed prohibited by the Anjouan Offshore Financial Authority. We process location/country data to enforce these restrictions.

I. Automated Decision-Making and Profiling

We use automated methods to detect fraud, money laundering, bonus abuse and breaches of our terms, and to meet regulatory obligations (e.g. risk classification as part of due diligence). This may result in transactions being flagged for manual review, restricted, or accounts being blocked. Final decisions with significant effects are taken by natural persons; where applicable law provides for it, affected individuals may request human review, express their point of view, and contest the decision.

J. Requests and Complaints

For requests or complaints relating to the processing of your data, please contact [email protected] (general) or [email protected] (support). You also have the right to lodge a complaint with the competent supervisory or licensing authority.

K. Changes to this Privacy Policy

We may amend or update this Privacy Policy from time to time to reflect changes in our practices, the technologies used or legal requirements. We will inform you of material changes without undue delay — at the latest upon your next login to your player account. The current version is published on the platform with an updated “Last updated” date.

Appendix: Summary of Data Categories Processed