Privacy notice

1. Who we are

iRegulate.AI is provided by [COMPANY LEGAL NAME], [REGISTERED ADDRESS] ("we", "us"). You can reach us at ask@iregulate.ai.

For this website, we decide how your information is used. On the platform, the regulator decides, and we act on its instructions.

2. This website

What we collect. When you use our contact form or write to us, we keep what you send: your name, work email, the regulator you work for, your country, your role and your message. When you visit the site, Cloudflare, which protects it, processes technical details such as your IP address and browser to keep out attacks. [COOKIES: confirm whether the site uses only the cookies it needs to work, or also analytics.]

Why. To answer you, arrange a walk-through or a pilot, and keep the site safe. We use your details because you asked us to get in touch, or because we have a legitimate interest in answering enquiries and protecting the site.

Who else sees it. Only the companies that help us run the site and our email, such as our hosting provider and Cloudflare, and only to provide those services. We do not sell your information or use it for advertising.

How long we keep it. As long as we're in touch with you, and for [PERIOD] after, unless the law requires longer.

3. The iRegulate.AI platform

Each regulator that uses iRegulate.AI is responsible for the personal information in its platform, under the law of its own country. We process that information only to provide the platform, on the regulator's instructions and under our agreement with them.

What the platform can hold, depending on how the regulator uses it:

• the regulator's own staff: names, roles, and what they did in the platform;
• applicants, licensees and the people who own or run them: names, contact details, identity documents, ownership and screening results;
• players: exclusions are shared with operators as player tokens, not names, and players appear in operators' data in the form the regulator has chosen;
• people on banned lists that the regulator keeps.

Where it's hosted. Each regulator's platform is hosted on CloudSigma's infrastructure, either in the regulator's own country or in the cloud, as agreed with that regulator.

If your information is on a regulator's platform, for example as an applicant or an excluded player, please contact that regulator. We'll pass on anything we receive to them.

4. Insight, the AI in the platform

When a regulator's staff ask Insight a question, the question and the records needed to answer it are sent to an AI service provider that works for us under contract, only to produce the answer. Insight sees only what the person asking is allowed to see. [CONFIRM: the provider, where it processes data, and that it does not use the data to train its models.]

5. How we protect it

Every request to the platform passes through Cloudflare first. Operators, game providers and payment gateways send data over secured APIs; only senders the regulator has whitelisted can connect, each request is signed and can't be replayed, and a sender can only send data about itself. Inside the platform, access is set by role and area, and every change is kept in an audit trail. Our infrastructure provider, CloudSigma, holds ISO 27001, ISO 27017 and ISO 27018 certification.

6. Your rights

Depending on the law that applies to you, you may ask to see the information we hold about you, have it corrected or deleted, or object to how we use it. You may also complain to the data protection authority in your country. For website enquiries, write to ask@iregulate.ai. For information on a regulator's platform, contact that regulator.

7. Changes and contact

If we change this notice, we'll update it here and change the date at the top. Questions about it are welcome at ask@iregulate.ai.