Privacy Policy

This Privacy Policy explains how Blaze, as made available through blezers.com, collects, uses, shares, and protects personal data of players and website visitors. It applies to anyone who accesses, registers for, or uses the Blaze-branded services on blezers.com (the "Website" and "Services"), including users located in the United Kingdom and other relevant jurisdictions. This Privacy Policy is effective from 6 November 2025 and is intended to remain in force until at least 31 December 2026. It was prepared and last reviewed by Oliver Hughes.

Who We Are

The Blaze-branded Services for Blaze on blezers.com are operated by Prolific Trade N.V., a public limited liability company (Naamloze Vennootschap) established under the laws of Curaçao. Prolific Trade N.V. operates the Blaze online casino and betting platform under Curaçao eGaming supervision via Antillephone, under licence number GLH-OCCHKTW0709172018, Master Licence 365/JAZ. The licence status can be checked through the Antillephone validator linked on blezers.com and at the validator URL referenced in our terms.

For payment processing and certain support services, we may act together with, or through, a group subsidiary or service provider based in Cyprus, which processes payments and related data on our behalf.

Where this Privacy Policy refers to "Blaze", "we", "us" or "our", it means Prolific Trade N.V. and, where relevant, its affiliates and service providers involved in operating the Blaze Services on blezers.com for Blaze.

Our registered office and full corporate details (including corporate address and registration number) are published in the legal notices and terms-of-service sections of blezers.com and in our licensing information. These details form part of this Privacy Policy by reference.

Please note that Blaze does not hold a remote-gambling licence issued by the UK Gambling Commission, is not part of the GamStop self-exclusion scheme, and does not provide access to UK dispute bodies such as IBAS or the UK gambling ombudsman. This offshore status concerns gambling regulation only and does not limit your data protection rights under applicable privacy laws, which we explain below.

For privacy-related matters, our primary contact is our Data Protection Officer (DPO) or data protection team:

Data Controller: Prolific Trade N.V., Curaçao (operator of Blaze on blezers.com)
Data Protection Officer / Data Protection Team: Blaze DPO
Email: privacy@blezers.com (or any updated address published in the Privacy or Contact sections of blezers.com)
Postal contact: "Data Protection Officer, Prolific Trade N.V." at the corporate address indicated in the legal notices on blezers.com

What Personal Data We Collect

We collect and process different categories of personal data when you visit or use Blaze on blezers.com. The exact data collected depends on how you interact with the Website and Services.

Identification and Contact Data

Account details: full name, username, password (stored in hashed form), date of birth, nationality and country of residence.
Contact information: email address, phone number, communication language, and any contact details you provide to customer support or in forms.
Verification data (KYC): copies or data from identity documents, proof of address, selfies, and other information needed to confirm your identity and eligibility.

Technical and Device Data

Technical identifiers: IP address, device identifiers, browser and operating system information, settings, time zone, and language preferences.
Usage logs: login and logout times, pages visited, features used, clicks, referral URLs, error logs, and security-related logs (such as failed login attempts and session time-outs).
Network and access characteristics: approximate location derived from IP address, VPN or proxy indicators, and information on how you connect to the Website.

Payment and Financial Data

Transaction data: deposits, withdrawals, bonuses, winnings, balances, and internal transaction identifiers.
Payment method data: limited card or bank information (where applicable), masked card numbers, issuing country, payment provider identifiers, and payment status.
Cryptocurrency data: wallet addresses, transaction hashes, cryptocurrency type (e.g., BTC, ETH, USDT, LTC), deposit and withdrawal amounts, timestamps, and network confirmation status. We do not control network fees but may record them.
Anti-fraud and AML information: risk scores, checks against internal or third-party databases, sanctions screening results where legally required, and internal notes created as part of risk management.

Behavioral and Gaming Data

Betting and gaming history: games played, stakes, outcomes, frequency of play, session durations, and bonus usage.
Interaction data: pages viewed, navigation paths, clicks on banners or offers, response to promotions, and interactions with customer support.
Responsible gambling behaviour: self-imposed limits (where available), cooling-off or self-exclusion choices on the platform, and patterns that may indicate risky behaviour, as far as permitted by law.

Communication and Support Data

Customer support records: chat transcripts, emails, tickets, call summaries, and any attachments or screenshots you provide.
Complaints and dispute data: details of complaints, internal investigation notes, and correspondence relating to dispute handling or regulatory inquiries.

Cookies and Similar Technologies

Cookies: small files placed on your device that store preferences, session information, and other data as described in the "Cookies & Tracking Technologies" section.
Similar technologies: web beacons, pixels, SDKs, and local storage used for security, functionality, analytics, and marketing (where permitted).

Legal Basis for Processing

We process personal data only where we have a lawful basis to do so. Because we operate globally and serve users located in the UK and other regions, we align our practices with the UK General Data Protection Regulation ("UK GDPR"), the EU GDPR where applicable, and, for certain users, relevant Mexican privacy laws. Depending on your relationship with Blaze on blezers.com, we rely on the following legal grounds:

Performance of a contract: We process data that is necessary to create and manage your account, provide games and betting services, process payments and withdrawals, verify your identity, communicate with you about your account, and fulfil any other contractual obligations under our Terms of Service.
Compliance with legal obligations: We process data to meet obligations arising from applicable law, including anti-money laundering (AML) and counter-terrorist financing rules, sanctions and fraud-prevention regulations, accounting and tax laws, and obligations imposed by our gambling licence in Curaçao and any other relevant regulatory guidance.
Legitimate interests: We process data for purposes that are necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. These interests include improving and securing the Website, preventing fraud and abuse, protecting the integrity of games, performing analytics, enforcing our terms, managing business operations and group structure (including use of Cyprus-based payment entities), and defending or establishing legal claims.
Consent: We rely on your consent where required by law, for example for certain categories of cookies, for direct electronic marketing where local rules demand consent, or for using particular optional features. You can withdraw your consent at any time via the tools provided on the Website or by contacting us, without affecting the lawfulness of processing based on consent before its withdrawal.
Protection of vital interests and legal claims: In rare cases, we may process data to protect your vital interests or those of another person (for example, in connection with potential self-harm related to gambling) or to establish, exercise, or defend legal claims.

Purpose of Processing

We use your personal data only for specified, explicit, and legitimate purposes and do not further process it in a manner incompatible with those purposes. In particular, we process data for the following purposes:

Providing and operating the Services: to register and maintain your Blaze account on blezers.com, enable you to place bets and play games, manage balances, process deposits and withdrawals (including cryptocurrency transactions), apply bonuses, and provide customer support.
Account administration and communication: to send you transactional messages (such as account confirmations, security alerts, changes to terms or this Privacy Policy), respond to your inquiries and complaints, and notify you about service-related issues.
Legal and regulatory compliance: to perform identity verification (KYC), to comply with AML and counter-terrorist financing rules, sanctions screening, and other obligations under Curaçao licence GLH-OCCHKTW0709172018 and any applicable laws relevant to where you are located.
Fraud prevention and security: to detect and prevent fraud, abuse, collusion, bonus misuse, money laundering, account takeovers, and other prohibited activities; to ensure the security and integrity of systems and games; and to investigate suspicious behaviour or breaches of our Terms of Service.
Analytics and service improvement: to understand how users interact with blezers.com, identify technical issues, optimise user workflows, develop new features, evaluate promotions, and generally improve performance and user experience.
Marketing and personalisation: to send you promotional communications, offers, and tailored content about Blaze where permitted by law and your preferences; to personalise the Website (for example, recommended games or offers based on your activity); and to measure the effectiveness of campaigns and affiliates.
Responsible gambling and risk management: to monitor certain behavioural patterns, to apply internal risk controls and protective measures where available and appropriate, and to document steps taken in relation to responsible gambling initiatives.
Business operations: to manage internal reporting, audits, compliance checks, corporate restructuring, transfers of business or assets, and to maintain business continuity.

Disclosure & Sharing

We treat your personal data as confidential but may disclose it to selected third parties where necessary and lawful. We do not sell your personal data. Depending on your use of Blaze and the Services, we may share data as follows:

Group companies and affiliates: with our affiliated entities (including Cyprus-based payment processing entities) that support payment handling, risk management, customer service, and other operational functions for blezers.com.
Payment service providers and banks: with financial institutions, card schemes, cryptocurrency payment gateways, and other payment intermediaries to process deposits, withdrawals, chargebacks, and related financial operations.
Technology and service providers: with third-party vendors that provide hosting, cloud infrastructure, security services, analytics, email delivery, customer support platforms, identity verification tools, AML/sanctions screening, and other outsourced services. These providers are bound by contracts to process data only on our instructions and to maintain appropriate security.
Gaming and content providers: with game studios and platform providers that supply casino games, betting content, or technical integration services, where they require limited access to certain data to provide their services (for example, to resolve a technical problem or verify game fairness).
Marketing partners and advertising networks: with affiliates, marketing agencies, and, where consent or another lawful basis exists, advertising networks and analytics providers that help us promote Blaze and measure campaign performance. When required, we share identifiers, device and cookie data, and limited behavioural data in pseudonymised form.
Professional advisers: with lawyers, auditors, accountants, and consultants where necessary for legal, compliance, or business purposes, subject to confidentiality obligations.
Regulators and authorities: with gambling and licensing authorities (including Curaçao eGaming / Antillephone), law enforcement bodies, courts, tax authorities, and other public authorities where we are required to do so by law, licence conditions, or legal process, or where disclosure is necessary to protect our rights or the rights of others.
Business transfers: with potential or actual buyers, investors, or other parties in the context of mergers, acquisitions, restructurings, or transfers of all or part of our business. In such cases, we take steps to ensure that your privacy is protected and that any successor entity respects this Privacy Policy or provides materially similar protection.

Where we share data with third parties, we limit the data disclosed to what is strictly necessary and ensure, through data processing agreements or equivalent arrangements, that your personal data is handled securely and in accordance with applicable law.

International Transfers

Because Blaze is operated on a cross-border basis, your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as the UK or the European Economic Area (EEA). In particular, data may be transferred to:

Curaçao: where Prolific Trade N.V., the main operator of Blaze, is established and licensed. Core operational, compliance, and hosting functions may be conducted from or via Curaçao.
Cyprus: where group entities or payment-processing partners may be located, especially for handling deposits and withdrawals and related support services.
Other countries: where technology providers, game providers, analytics services, or customer support centres are based, including jurisdictions in the EEA, Latin America (such as Brazil), or other regions as needed for service provision.

For transfers from the UK or EEA to countries that are not subject to an adequacy decision, we implement appropriate safeguards, such as:

Standard Contractual Clauses (SCCs): we enter into SCCs or equivalent UK-approved international data transfer mechanisms with relevant recipients to ensure an adequate level of protection and enforceable rights.
Contractual and organisational measures: we apply internal policies, access controls, and security standards to ensure that only authorised personnel can access your data and only for legitimate purposes.
Data minimisation and pseudonymisation: where feasible, we minimise the amount of data transferred and use pseudonymisation or encryption to reduce potential risks.

You can contact us for more information on the specific safeguards we use for international transfers, including copies of the Standard Contractual Clauses where legally permissible.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including satisfying legal, accounting, and reporting obligations, and resolving disputes. Because of our obligations under gambling and AML regulations, we cannot always delete your data immediately upon request. As a general guideline, and subject to applicable law:

Account and identification data: we typically retain core account information (such as your identity details, contact information, and KYC documentation) for the duration of your account and for up to five (5) years after account closure, or longer where required by AML/CTF or other statutory obligations.
Transaction and payment data: we retain financial records, including deposits, withdrawals, and betting histories, for at least five (5) years from the relevant transaction, or longer where tax, accounting, or AML laws require a longer period.
Technical and log data: we generally retain security logs and technical data for 12 - 24 months, unless a longer retention is necessary to investigate security incidents, fraud, or legal claims.
Marketing data: we retain marketing preferences and related contact data until you withdraw your consent or object to marketing, and for a short period afterwards to record your opt-out.
Complaints and disputes: we retain complaint files, correspondence with regulators, and dispute records for the duration of the dispute and for up to six (6) years afterwards, or as required by limitation periods under applicable law.

When data is no longer needed for the purposes for which it was collected, and no longer required by law, we either securely delete or anonymise it. Where immediate deletion is not possible (for example, due to backup systems), we ensure that the data is securely stored and isolated from further processing until deletion is possible.

Your Rights

Depending on your place of residence and the laws that apply to you, you may have various rights in relation to your personal data. For users in the UK and EEA, these rights are primarily set out in the UK GDPR and EU GDPR. For certain users in Mexico, additional rights may arise under Mexican privacy law. We honour these rights to the extent required by applicable law and, where appropriate, on a voluntary basis for consistency.

Rights Under UK GDPR and EU GDPR

Right of access: you can request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how and why it is processed.
Right to rectification: you can request that we correct inaccurate or incomplete personal data. Where possible, you can update certain details directly via your account settings.
Right to erasure ("right to be forgotten"): you can request deletion of your personal data where, for example, it is no longer necessary for the purposes for which it was collected, or you have withdrawn consent and there is no other legal basis for processing. This right is subject to legal and regulatory limits, including our obligations to retain data for AML, licensing, or tax purposes.
Right to restriction of processing: you can request that we restrict processing of your data in certain circumstances, such as where you contest its accuracy or object to our legitimate interests, while we verify or balance these factors.
Right to object: you can object to processing based on our legitimate interests, including profiling related to those interests. You can also object at any time to processing of your data for direct marketing (including profiling for marketing), and we will stop such processing.
Right to data portability: where processing is based on your consent or on a contract and carried out by automated means, you can request that we provide your personal data in a structured, commonly used, and machine-readable format or, where technically feasible, transmit it to another controller.
Right to withdraw consent: where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

Rights Under Mexican Privacy Law (Where Applicable)

If you are located in Mexico and interact with Blaze in a manner that brings you within the scope of Mexican privacy regulations (for example, the Federal Law on Protection of Personal Data Held by Private Parties), you may have specific ARCO rights:

Access: to know what personal data we hold about you and how we use it.
Rectification: to request corrections of inaccurate or incomplete data.
Cancellation: to request that we delete or cancel certain data when it is no longer necessary or when you withdraw consent, subject to legal exceptions.
Opposition: to object to certain processing of your data for legitimate reasons, including for marketing.

We will handle such requests in line with applicable Mexican law, while also considering any overriding legal obligations we may have in other relevant jurisdictions.

Exercising Your Rights and Response Times

How to submit a request: you can exercise your rights by contacting our DPO or data protection team at privacy@blezers.com, or through any dedicated data rights or privacy tools made available in your account area on blezers.com.
Information we may request: to protect your privacy, we may need to verify your identity before processing your request (for example, by asking you to log in to your account or provide certain verification details).
Timeframe: we aim to respond to your request within one (1) month of receipt. Where a request is complex or numerous, we may extend this period by up to two (2) additional months, informing you of the extension and reasons for the delay.
Fees: we handle rights requests free of charge. We may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, in line with applicable law.

Cookies & Tracking Technologies

We use cookies and similar technologies on blezers.com to operate and secure the Website, improve its performance, and provide a better user experience. Some cookies are essential, while others are optional and used only where permitted by law and your preferences.

Types of Cookies We Use

Session cookies: temporary cookies that exist only while your browser is open. They are used to manage your session, keep you logged in, and remember selections during your visit. They are deleted when you close your browser.
Persistent cookies: cookies that remain on your device for a specified period or until you delete them. They help us remember your preferences (such as language), recognise you across visits, and measure how you use the Website over time.
First-party cookies: cookies set directly by blezers.com to provide core functionality and security.
Third-party cookies: cookies set by service providers and partners (such as analytics providers or, where permitted, advertising networks) to provide statistics, measure campaigns, or deliver personalised content.

Purposes of Cookies

Strictly necessary / functional: required for the Website to function, including security features, load balancing, login sessions, and ensuring that account functions work correctly. These cookies cannot be switched off in our systems.
Performance and analytics: used to understand how visitors use the Website, which pages are popular, how users move around the site, and to improve performance and usability.
Advertising and personalisation (where permitted): used to deliver relevant marketing content, limit the number of times you see the same advertisement, measure campaign effectiveness, and personalise offers on blezers.com in connection with Blaze.

Managing Cookies

Cookie settings on the Website: where required by law, we present a cookie banner and/or preference centre that allows you to accept or reject categories of cookies (other than strictly necessary cookies).
Browser settings: most browsers allow you to block or delete cookies by changing your settings. However, blocking certain cookies may affect the functionality of the Website and your ability to use the Services.
Third-party tools: some third-party services provide their own opt-out mechanisms. Information on these may be accessible from their privacy notices or via links in our cookie or privacy information pages.

Data Security

We take the security of your personal data seriously and implement technical and organisational measures designed to protect it against unauthorised access, loss, misuse, or alteration. While no system can be guaranteed to be 100% secure, we strive to maintain a level of security appropriate to the risks associated with online gambling and payment processing.

Technical and Organisational Security Measures

Encryption in transit and at rest: data transmitted between your device and blezers.com is protected using Transport Layer Security (TLS) 1.2 or higher. Where feasible, we encrypt personal data at rest and apply strong cryptographic standards to sensitive information such as passwords (hashed) and payment-related data.
Access controls and authentication: access to personal data is restricted to authorised personnel and service providers who need it for their work. We apply role-based access control, strong authentication procedures, and, where appropriate, multi-factor authentication for administrative access.
Network and infrastructure security: we use firewalls, intrusion detection and prevention systems, DDoS protections, and regular vulnerability management to safeguard our systems. Production environments are separated from test environments, and access is logged and monitored.
Secure development and configuration: we follow secure coding practices, conduct internal reviews of significant changes, and apply security patches and updates in a timely manner, subject to testing and stability checks.

Governance, Training, and Incident Response

Policies and governance: we maintain internal policies and procedures for data protection, information security, and incident management. These policies reflect principles aligned with recognised security standards (such as ISO/IEC 27001 and SOC 2) even where we may not hold formal certification.
Staff training: employees and relevant contractors receive training on data protection, confidentiality, and security practices appropriate to their role, with regular refreshers and updates.
Incident detection and response: we monitor systems for potential security incidents and have processes for assessing and responding to them. Where a data breach poses a risk to your rights and freedoms, we will notify you and, where required, relevant supervisory authorities, in accordance with applicable law.

Complaints & Contacts

If you have questions, concerns, or complaints about how we handle your personal data in connection with Blaze on blezers.com, you have several options for contacting us and, if necessary, escalating your complaint.

Contacting Blaze

Email: you can contact our Data Protection Officer or data protection team at privacy@blezers.com for any privacy-related query, including exercising your rights, requesting information, or raising concerns.
Online support: you may also contact customer support via the help or support section of blezers.com (for example, live chat or ticket tools), indicating that your request relates to privacy or data protection.
Postal mail: you can write to "Data Protection Officer, Prolific Trade N.V." at our corporate address listed in the legal notices on blezers.com. Please clearly mark your correspondence as "Data Protection / Privacy".

Internal Complaint Procedure

Step 1 - Submission: send us your complaint or concern using one of the channels above, providing as much detail as possible (including account details, relevant dates, and any supporting documentation).
Step 2 - Acknowledgement: we will acknowledge receipt of your complaint, typically within seven (7) days, and may ask for additional information if required to understand the issue.
Step 3 - Investigation: we will investigate your complaint, involving relevant internal teams (such as security, compliance, or customer support) as appropriate.
Step 4 - Response: we aim to provide a substantive response within one (1) month of receiving your complaint or of receiving any additional information we reasonably requested. Where more time is needed due to complexity, we will inform you of the delay and reasons.

Escalation to Supervisory Authorities

United Kingdom: if you are located in the UK and believe that we have violated data protection laws or that your complaint has not been adequately addressed, you can lodge a complaint with the Information Commissioner's Office (ICO). Further information is available on the ICO website (ico.org.uk), including contact details and guidance on how to complain.
European Union / EEA: if you are within the EU/EEA, you can lodge a complaint with your local data protection authority, particularly in the member state of your habitual residence, place of work, or where an alleged infringement occurred.
Mexico: if Mexican privacy law applies to you and you are not satisfied with our response, you may contact the Mexican data protection authority (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales - INAI) using the channels set out on its official website.

Please note that gambling-related disputes (for example, about game outcomes, bonuses, or withdrawals) may fall under different procedures and are not handled by UK bodies such as IBAS or the UK gambling ombudsman, as Blaze is not licensed by the UK Gambling Commission. However, you can still pursue your data protection rights and complaints as described above.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, legal or regulatory developments, industry practices, or technical changes. When we make material changes, we will take appropriate steps to inform you in advance where required by law.

How We Notify You of Changes

On-site notices: we may display banners, pop-ups, or notices on blezers.com, or present updated information in your account area, highlighting key changes.
Email or in-account messages: where appropriate, we may send email notifications or secure messages to registered users explaining material updates to this Privacy Policy.
Effective date and versioning: the "Last updated" date at the beginning of this Privacy Policy indicates when it was most recently revised. We may also maintain a brief changelog or summary of material changes within the policy or in an associated notice.

Advance Notice and Your Choices

Advance notice: for changes that materially affect your rights or the way we process your personal data, we will, where required or appropriate, provide at least thirty (30) days' advance notice before the new version takes effect, unless immediate changes are required by law or to address security or compliance issues.
Your continued use: by continuing to use Blaze on blezers.com after the effective date of an updated Privacy Policy, you acknowledge that you have read the updated terms. Where consent is required for particular changes, we will seek your consent separately.
Account closure: if you do not agree with the updated Privacy Policy, you may be able to stop using the Services and, where applicable, close your account in accordance with our Terms of Service. We will continue to process your data only as permitted by law and this Privacy Policy, including its later versions to which you have agreed.

Last updated: November 2025. This version is intended to remain valid, subject to further updates, until at least 31 December 2026.