Tipsterland LLC, a New Mexico limited liability company with its principal place of business at 407 Lincoln Road, Suite 708, Miami Beach, FL 33139, USA ("Tipsterland," "the Company," "we," "us," or "our"), is the data controller (or, for U.S. law purposes, the business) responsible for the personal data processed through tipsterland.com and its associated mobile applications (the "Service").
This Policy applies to all users worldwide. Where you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and, where applicable, the UK GDPR. Where you are a California resident, Section 13 describes your rights under the California Consumer Privacy Act (CCPA/CPRA). Nothing in this Policy limits the rights that applicable mandatory law grants you and that cannot be waived.
This Policy should be read together with our Terms and Conditions, which describe, among other things, our one-account-per-person rule, our right to suspend or terminate any account at our sole discretion, and our refund policy. Section 4 below explains what personal data we process to operate and enforce those rules.
Contact for privacy matters: info@tipsterland.com. See Section 12 (or Section 13 if you are a U.S. resident) for how to exercise your rights, and Section 17 for full contact details.
1. What data we collect
- Account data: name, alias/username, email address, password hash, profile picture, banner, language, time zone, and, if you invoice premium channel earnings, tax identification details.
- Usage and content data: Picks and posts you publish, follows, chat messages, likes/reactions, comments, reports, saved items, channel subscriptions, results history, reviews you write about Tipsters or Bookmakers, and general interaction with the Platform.
- Technical and device data: IP address, device identifiers/fingerprint, browser/OS type, app version, crash logs, and diagnostic data collected via our error-monitoring tooling (e.g., Sentry). As described in Section 4, this data is also used to detect duplicate accounts and enforce our one-account-per-person policy.
- Cookies and similar technologies: as described in Section 9 and in our Cookie Policy.
- Payment and financial data: transaction records, invoice data, subscription status, wallet/points balances, and records of chargebacks or payment disputes. Card and bank details are collected and stored directly by our payment processors (Stripe, PayPal or others); the Company does not store your full card number, CVV, or bank credentials.
- Communications data: messages you send us for support, disputes, or legal notices, and records of our replies, including marketing-preference and unsubscribe records (Section 10).
- Enforcement and moderation data: reports filed against you or by you, moderation actions, suspension or termination history, and the stated or inferred reason for any such action, as described in Section 4.
The Service is intended for individuals aged 18 or over. We do not knowingly collect personal data from minors; if we become aware that we have inadvertently collected data from a minor, we will delete it upon verification.
2. How we use your data (purposes)
- Provide, operate, secure, and maintain the Service, including creating and managing your account.
- Process payments, subscriptions, one-off purchases, promotions, wallet balances, and creator payouts.
- Display a Tipster's public history, statistics, and reviews for transparency (ranking, verification of results).
- Send operational and transactional communications (verification, security alerts, payment receipts, support responses, policy updates).
- Send marketing communications, only where you have opted in (or as otherwise permitted by applicable law), and always with an easy opt-out, as described in Section 10.
- Detect and prevent duplicate/multiple accounts, fraud, chargeback abuse, and other violations of our Terms and Conditions, and enforce those Terms, including through account suspension or termination, as described in Section 4.
- Enforce our Terms and Conditions, resolve disputes, and establish, exercise, or defend legal claims, including in connection with the arbitration process described in the Terms.
- Comply with legal, tax, accounting, and regulatory obligations applicable to a U.S. company, and respond to lawful requests from courts, regulators, or law-enforcement authorities.
- Improve and develop the Service, including aggregated or de-identified analytics.
3. Legal basis for processing (EEA/UK users)
- Performance of a contract (Art. 6(1)(b) GDPR): to provide the Service, your account, and any subscription or purchase you make.
- Consent (Art. 6(1)(a) GDPR): for non-essential cookies and marketing communications, revocable at any time.
- Legitimate interests (Art. 6(1)(f) GDPR): Platform security; fraud, chargeback, and abuse prevention; detecting and linking duplicate or multiple accounts; enforcing our Terms, including suspending or terminating accounts; service improvement; and defending the Company's legal rights — in each case balanced against your rights and freedoms.
- Legal obligation (Art. 6(1)(c) GDPR): tax, accounting, and regulatory record-keeping.
4. Fraud Prevention, Account Integrity, and Enforcement
Our Terms and Conditions require that each natural person hold only one account, prohibit certain conduct, and give the Company broad discretion to suspend or terminate any account. To operate and enforce those rules, we process a specific subset of the data described in Section 1 — in particular device identifiers/fingerprint, IP address, payment instrument identifiers (not full card numbers), behavioral usage patterns, and account- creation metadata — for the following purposes:
- Determining whether two or more accounts are linked, duplicated, or otherwise operated by the same person in breach of the one-account-per-person rule;
- Investigating suspected fraud, promotional/discount-code abuse, wallet or points- system abuse, payment disputes, and chargebacks;
- Applying, documenting, and, where relevant, defending a suspension, restriction, or termination decision made under our Terms and Conditions;
- Preventing a suspended or terminated user from creating a new account to evade a ban ("ban evasion").
This processing is based on our legitimate interest in maintaining the integrity, security, and fairness of the Platform (Art. 6(1)(f) GDPR), and, where applicable, on the performance of our contract with you (the Terms and Conditions you accepted) and on compliance with legal obligations relating to fraud and payment-services regulation.
Where we suspend or terminate an account under our Terms and Conditions, we retain the data reasonably necessary to document the decision, defend it if challenged, and prevent ban evasion, even after the underlying account has been deleted or deactivated, for the period described in Section 7. We are not able to fully anonymize or erase this subset of data upon a mere deletion request where doing so would defeat these fraud-prevention and enforcement purposes, except to the extent applicable law requires otherwise.
5. Who we share data with
We do not sell your personal data. We share the minimum necessary data with service providers who process it on our behalf under a data processing agreement or, where required, standard contractual clauses, including:
- Authentication and infrastructure providers (e.g., Firebase/Google) — sign-in, including social sign-in, and application backend infrastructure.
- Payment processors (Stripe, PayPal or others) — secure processing of subscriptions, purchases, wallet top-ups, chargebacks, and creator payouts.
- Hosting and cloud infrastructure providers — running the servers, databases, and Cloud Functions that operate the Platform.
- Error-monitoring and analytics tooling (e.g., Sentry) — diagnosing crashes and technical issues.
- Fraud-prevention and anti-abuse tooling, where used, to help detect duplicate accounts and payment fraud as described in Section 4.
- Email/communications delivery providers, to send transactional and, where opted in, marketing email (Section 10).
- Professional advisers (lawyers, accountants, auditors) as needed to operate the business or comply with legal obligations.
- Law enforcement, regulators, or other third parties, where required to comply with a legal obligation, court order, or valid governmental request, or to protect the rights, property, or safety of the Company, its users, or the public — including to substantiate a chargeback dispute or a suspension/termination decision.
- A successor entity, in connection with a merger, acquisition, reorganization, or sale of assets, subject to this Policy or a materially similar one.
A current list of the categories of processors above and, on reasonable request, their identities, is available by writing to info@tipsterland.com.
Content you choose to make public on the Platform (e.g., your public profile, Picks, reviews, comments) is visible to other users and, where the Platform is publicly indexable, may be visible to search engines and the general public. You are responsible for what you choose to disclose publicly.
6. International data transfers
Tipsterland LLC is a U.S. company. If you are located outside the United States, your data will be transferred to, stored, and processed in the United States and other countries where our processors operate (including the EEA/UK for certain providers). Where required by the GDPR, we rely on appropriate safeguards for such transfers, such as the European Commission's Standard Contractual Clauses, and we implement supplementary security measures where warranted. By using the Service, you acknowledge and agree to this transfer, storage, and processing of your data in the United States.
7. Data retention
We retain personal data for as long as your account remains active and as necessary to provide the Service. If you delete your account, we will delete or anonymize your data within a reasonable period, except for data we are required or entitled to retain for: (a) legal, tax, or accounting obligations (e.g., invoicing records, for the periods required by applicable law); (b) fraud, multiple-account, and abuse prevention, including enforcement and ban-evasion purposes as described in Section 4; or (c) the establishment, exercise, or defense of legal claims, including any chargeback dispute, arbitration, or litigation. Backup copies may persist for a limited additional period as part of our standard backup cycle before being overwritten.
Where an account has been suspended or terminated for breach of the Terms and Conditions (including multiple accounts, chargeback abuse, or other prohibited conduct), we may retain the enforcement-related data described in Section 4 for a longer period reasonably necessary to prevent recurrence and defend the decision, even if you request deletion of your account.
8. Security and Data Breach Notification
We apply reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction, including encryption in transit, access controls, and secure authentication. No system is completely secure, however, and, to the maximum extent permitted by applicable law, the Company disclaims liability for unauthorized access, use, or disclosure of data resulting from circumstances beyond its reasonable control, including breaches of security measures maintained by independent third-party processors, provided the Company selected and monitored such processors with reasonable care. You are responsible for maintaining the confidentiality of your account credentials.
If a security incident occurs that compromises your personal data in a manner requiring notification under applicable law, we will notify affected individuals and/or the competent regulator within the timeframe required by that law, using the contact information associated with your account.
9. Cookies and Do Not Track
We use cookies and similar technologies for authentication, security, fraud/duplicate- account detection, preference storage, and — with your consent, where required — analytics and marketing. You can manage cookie preferences through your browser settings and, where offered, our cookie-consent tool. Further detail is available in our separate Cookie Policy. Our systems do not currently respond differently to browser "Do Not Track" signals; we rely instead on the cookie-consent controls described above and in the Cookie Policy to let you manage tracking preferences.
10. Marketing Communications
Where permitted by applicable law, we may send you marketing communications about the Service, new features, or promotions. Where consent is legally required (including for users in the EEA/UK), we will only send such communications if you have opted in. Every marketing email includes an unsubscribe mechanism, consistent with the U.S. CAN-SPAM Act and equivalent laws; you may also manage marketing preferences from Settings → Notifications or by writing to info@tipsterland.com. Opting out of marketing communications does not affect transactional or operational messages (e.g., payment receipts, security alerts, legal notices), which we will continue to send as necessary to operate your account.
11. Automated decision-making
Certain features (e.g., ranking calculations, fraud/duplicate-account detection flags, statistics aggregation) rely on automated processing of usage data. Where an automated signal contributes to a suspension or termination decision under our Terms and Conditions, that decision is made or reviewed under the Company's own discretion as described in the Terms, and does not, on its own, produce a legal or similarly significant effect on you within the meaning of Art. 22 GDPR without the possibility of human review upon request, except to the extent our Terms and Conditions expressly reserve that decision to the Company's sole discretion as a matter of contract.
12. Your rights (GDPR / UK GDPR)
Subject to the conditions and exceptions set out in applicable law, you may exercise the right to: access your data; rectify inaccurate data; request erasure; object to processing based on legitimate interests or for direct marketing; restrict processing; and request portability of the data you provided to us under a contract or consent.
- Close active sessions and delete your account: Settings → Privacy and security.
- Rectify your profile data (name, alias, time zone): Settings → Account.
- For any other request, or full data portability, write to info@tipsterland.com. We will respond within the time limits required by applicable law and may request identity verification before actioning a request.
As explained in Sections 4 and 7, an erasure request may be only partially fulfilled where retaining a limited subset of data (e.g., device or payment identifiers linked to a suspended or terminated account) remains necessary for fraud prevention, ban enforcement, or the defense of a legal claim; in that case we will erase or anonymize the remaining data and inform you of the data retained and why, to the extent required by law.
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority (e.g., the Spanish Data Protection Agency, AEPD, for users in Spain, or the relevant supervisory authority in your EEA/UK country of residence).
13. Rights under U.S. state privacy laws
If you are a resident of California, Colorado, Connecticut, Virginia, Utah, or another U.S. state with a comprehensive privacy law in effect, you may have rights to know/access, delete, correct, and, where applicable, opt out of the "sale" or "sharing" of personal data or targeted advertising, and to non-discrimination for exercising these rights. The Company does not sell personal data for monetary consideration. The fraud-prevention and enforcement retention described in Sections 4 and 7 falls within the security, fraud-prevention, and legal- compliance exceptions recognized by these state laws. To exercise your rights, contact info@tipsterland.com; we may need to verify your identity before processing your request, and reserve the right to deny requests to the extent permitted by law.
14. Children's privacy
The Service is not directed to, and we do not knowingly collect personal data from, individuals under 18. If you believe a minor has provided us with personal data, contact info@tipsterland.com so we can investigate and, where warranted, delete it.
15. Third-party links
The Platform may link to third-party websites and services, including betting operators ("Bookmakers") listed in our directory. This Policy does not apply to those third parties, and the Company is not responsible for their privacy practices. Review their respective privacy policies before providing them with personal data.
16. Changes to this Policy
We may update this Policy to reflect legal, technical, or operational changes. We will post the updated version on this page with a new effective date, and, for material changes, provide reasonable additional notice (e.g., in-app notice or email). Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.
17. Contact / how to reach us
For any privacy inquiry, rights request, or complaint, contact: info@tipsterland.com, or by mail at Tipsterland LLC, 407 Lincoln Road, Suite 708, Miami Beach, FL 33139, USA. Any dispute arising from this Policy is subject to the dispute-resolution terms (including the binding arbitration and class-action waiver) set out in our Terms and Conditions.