Privacy Policy

1. Who We Are

LobbyRanker ("we", "us", "our") operates the website lobbyranker.com ("Platform"). We provide market intelligence and analytics for the iGaming industry. This Privacy Policy explains how we collect, use, store, and protect information when you use our Platform.

For any privacy-related questions, you can reach us at privacy@lobbyranker.com.

2. What Data We Collect

We collect two categories of information:

2.1 Personal Data (from you)

When you create an account or join our waitlist, we collect:

• Email address — for account verification, authentication, and service communications
• Professional role — your self-selected audience type (e.g. casino operator, game provider, marketing professional) to personalize your experience
• Authentication data — login timestamps and session identifiers necessary to keep your account secure

We do not collect names, phone numbers, physical addresses, payment details, or any other personal information beyond what is listed above.

2.2 Market Intelligence Data (publicly available)

Our Platform aggregates and analyzes publicly available information from licensed online casino websites. This includes:

• Game titles and their positioning within casino lobbies
• Game provider names associated with each title
• Lobby category structures (e.g. game sections, featured placements)

This information is visible to any member of the public who visits these casino websites. We do not access any login-restricted areas, personal player data, financial information, or proprietary back-end systems. No user accounts on third-party casino websites are used or accessed in any way.

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent (Art. 6(1)(a)) — when you voluntarily provide your email to join our waitlist or create an account
• Contract performance (Art. 6(1)(b)) — to provide you with the services you have signed up for
• Legitimate interest (Art. 6(1)(f)) — to analyze publicly available market data and provide aggregated industry analytics. This processing does not involve personal data of individuals and serves the legitimate business purpose of market intelligence

4. How We Use Your Data

We use your personal data exclusively to:

• Verify your email address and authenticate your account
• Provide access to our Platform and its features
• Send service-related communications (verification emails, security alerts)
• Send product updates and launch announcements (with your consent)
• Tailor your dashboard experience based on your professional role
• Respond to your support inquiries

We do not use your data for automated decision-making or profiling as defined under GDPR Article 22.

5. How We Process Market Data

Our market intelligence is derived from publicly available information on licensed casino websites. We process this data as follows:

• Collection — We periodically review publicly accessible casino lobby pages to observe game placements and provider information, the same way any visitor would see them
• Aggregation — Individual observations are combined across multiple operators to produce market-level analytics
• Analysis — We apply our proprietary scoring methodology to generate visibility rankings, provider market shares, and positioning insights
• Presentation — Results are displayed on our Platform as aggregated statistics and charts, never as raw copies of casino content

No personal data of casino visitors or players is collected, processed, or stored at any stage. Our analysis is limited to commercially relevant, non-personal information about game catalogue composition and placement.

6. Data Sharing & Third-Party Services

We do not sell, rent, trade, or otherwise share your personal data with third parties for their own marketing purposes.

We use the following service providers to operate our Platform:

All service providers are selected for their compliance with applicable data protection regulations. Data processed by providers located outside the EEA is subject to appropriate safeguards (e.g. Standard Contractual Clauses).

7. Cookies & Tracking

Our Platform uses the following cookies:

• Session cookies — strictly necessary for authentication and maintaining your logged-in state. These expire when you close your browser or after your session ends
• Authentication tokens — secure tokens to verify your identity between requests

We do not use advertising cookies, tracking pixels, social media widgets, or any third-party analytics services that track individual users across websites. We do not participate in any advertising networks.

8. Data Retention

We retain your personal data as follows:

• Account data — retained for as long as your account is active. Upon account deletion, your personal data is permanently removed within 30 days
• Waitlist data — retained until you unsubscribe or request deletion
• Market intelligence data — retained indefinitely as it does not contain personal data. Historical data is used to generate trend analyses and is stored in aggregated, non-personal form

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS encryption for all data in transit
• Encrypted storage for personal data at rest
• Passwordless authentication (magic links) to eliminate password-related vulnerabilities
• Minimal data collection — we only store what is strictly necessary
• Regular review of access controls and security practices

10. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the GDPR:

• Right of access (Art. 15) — obtain a copy of all personal data we hold about you
• Right to rectification (Art. 16) — correct inaccurate or incomplete personal data
• Right to erasure (Art. 17) — request deletion of your personal data ("right to be forgotten")
• Right to restrict processing (Art. 18) — limit how we process your data
• Right to data portability (Art. 20) — receive your data in a structured, machine-readable format
• Right to object (Art. 21) — object to processing based on legitimate interests
• Right to withdraw consent (Art. 7) — withdraw your consent at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, email us at privacy@lobbyranker.com. We will respond to your request within 30 days. If we need more time, we will inform you of the extension and the reasons for the delay.

You also have the right to lodge a complaint with your local data protection authority. For the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). For Spain, this is the Agencia Española de Protección de Datos (aepd.es).

11. Children's Privacy

Our Platform is intended for business professionals in the iGaming industry. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have collected personal data from a minor, we will take steps to delete that data promptly.

12. International Data Transfers

Some of our service providers may process data outside of the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, including:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• EU-U.S. Data Privacy Framework, where applicable

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify registered users via email.

We encourage you to review this page periodically to stay informed about how we protect your information.

14. Contact

The data controller responsible for your personal data is LobbyRanker, based in the Netherlands.

For privacy-related questions, data requests, or concerns:

• Privacy inquiries: privacy@lobbyranker.com
• General inquiries: info@lobbyranker.com