Privacy Policy

Last updated: 20 August 2026

This Privacy Policy explains what personal information StakeSteps Pty Ltd ("StakeSteps", "we", "us") collects, why, how we use it, and your rights. It should be read together with our Terms & Conditions.

1. Information we collect

Account and profile information: your email address (via our authentication provider), display name, date of birth (collected at sign-up to confirm you meet our minimum age requirement), account preferences (odds format, timezone, language), and your declared country/region.

Checkout and billing information: your billing name and address, collected at checkout for payment processing. This is kept private and is separate from any public display name.

Payment information: we use Stripe to process payments. We never receive or store your full card number, CVV, or bank account credentials — only Stripe-generated references (such as a payment reference and a card fingerprint) and payment status.

Identity verification (KYC) information: before your first Reward payment, we collect your verified full name and address from our identity verification provider, and your payout bank details (only the last four digits of your account number are ever stored by us — the full number is never retained). Any identity document you submit is held by our verification provider, not by us directly.

Activity information: your Picks, Challenge Account activity, settlement and reward history, and support communications with us.

Technical information: login and authentication attempts (including IP address and browser/device information, for security purposes), and limited cookie data (see section 5).

Responsible-participation information: if you use our self-exclusion, cooling-off, or spending-limit tools, or request account closure, we record that request and its details.

2. How we use your information

We use your information to: create and manage your Account and Challenge Accounts; process payments and provide the Platform; verify your identity before paying a Reward; communicate with you about your Account, orders, and Rewards; investigate suspected fraud, abuse, or Rule Breaches; respond to support requests and complaints; comply with our legal obligations; and improve and secure the Platform.

We do not sell your personal information.

3. Who we share information with

We share information only as reasonably necessary to provide the Platform, with:

- Stripe (payment processing); - Supabase (our database and authentication infrastructure); - Vercel (our hosting provider); - our identity verification provider (identity verification, required before your first Reward Request); - our transactional email provider, where used (account, order, and Reward notifications); - The Odds API and, where enabled, PuntersEdge (the source of the real-world sports/racing data our simulated environment mirrors — these providers do not receive your personal information; data flows one way, from them to us); - our error-monitoring provider, where used (technical error monitoring — we apply automatic redaction to strip sensitive fields, such as authentication tokens, passwords, and payment details, before any data reaches this provider); and - law enforcement or regulators, where we are legally required to.

We do not currently use any third-party analytics or advertising-tracking service.

4. Where your information is stored

We use reputable cloud infrastructure providers to store and process your information, which may involve your information being stored or processed outside Australia. Where this occurs, we take reasonable steps to ensure your information continues to be protected consistently with this Privacy Policy.

5. Cookies

We use a small number of cookies:

- an authentication session cookie, to keep you signed in (managed by our authentication provider); - ss_ref, which remembers a referral code for up to 90 days if you arrived via a partner link; - ss_vid, a visitor identifier used for internal product-testing purposes, which persists for up to 12 months; and - if you interact with our support chat widget or review widget (where enabled), those third-party services may set their own cookies under their own privacy terms.

We do not use cookies for third-party advertising.

6. Data retention

We retain your personal information for as long as necessary to provide the Platform to you, comply with our legal and regulatory obligations (including financial record-keeping requirements), resolve disputes, and enforce our agreements. When information is no longer required for these purposes, we take reasonable steps to delete or de-identify it.

7. Your rights

You may: - access and update most of your account information directly through your dashboard; - use our self-exclusion, cooling-off, and spending-limit tools (see our Responsible Participation page); - request closure of your Account, or request access to, correction of, or deletion of your personal information, by contacting support@stakesteps.com.au. We will respond to a request of this kind within a reasonable time.

8. Security

We apply reasonable technical and organisational measures to protect your information, including database-level access controls that restrict staff access to only what is necessary for their role, and encryption of certain highly sensitive internal credentials.

9. Children

The Platform is not intended for use by, and we do not knowingly collect personal information from, anyone under 18 years old. We collect date of birth at sign-up specifically to enforce this.

10. Changes to this policy

We may update this Privacy Policy from time to time. The version in force is the one published on this page, showing its last-updated date.

11. Contact us

Questions about this Privacy Policy, or requests relating to your personal information, can be sent to support@stakesteps.com.au.