Last Updated: November 7, 2026
Online Poker Script (“We,” “Us,” “Our”) takes Your privacy seriously. This Privacy Policy explains how We collect, use, store, share, and protect Your personal data when You visit Our website (onlinepokerscript.com), use Our services, or interact with Us. This policy is in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG).
1. Data Controller
Online Poker Script is a trade name of Aron and Sharon VOF.
- Registered address: het Achterveld 31, 4003VG Tiel, The Netherlands
- Chamber of Commerce (KvK): 62745115
- Data Protection Contact: info@onlinepokerscript.com
We are the data controller responsible for Your personal data as described in this policy.
2. Personal Data We Collect
2.1 Data You Provide Directly
When You create an account, make a purchase, or contact Us, We may collect: full name, company name, billing and postal address, email address, telephone number, website URL, FTP/cPanel credentials (for deployment), VAT number, payment details, and the content of support tickets and correspondence.
2.2 Data Collected Automatically
When You visit Our website, We automatically collect: IP address, browser type and version, operating system, device information, referring URL, pages visited, time and duration of visits, and interaction data (clicks, scrolls, form interactions).
Where Google reCAPTCHA is enabled on Our forms, Your IP address, browser and device information, and how You interact with the page are also sent to Google, to tell people from automated bots.
2.3 Data from Third Parties
We may receive data from payment processors (transaction confirmations), analytics providers, and hosting migration services where You have authorised the transfer.
3. Legal Bases for Processing
We process Your personal data on the following legal grounds under Article 6 GDPR:
Contract Performance (Art. 6(1)(b)): Processing necessary to fulfil Our contractual obligations to You, including delivering the Software, providing support, managing Your account, processing payments, and deploying Your installation.
Legitimate Interest (Art. 6(1)(f)): Processing necessary for Our legitimate business interests, including website analytics, service improvement, fraud prevention, protecting Our forms and accounts from spam and abuse, security monitoring, CRM management, and direct marketing to existing clients (with opt-out available).
Legal Obligation (Art. 6(1)(c)): Processing necessary to comply with legal obligations, including tax and accounting requirements (Belastingdienst), anti-fraud regulations, and responding to lawful requests from authorities.
Consent (Art. 6(1)(a)): Where You have given explicit consent, such as subscribing to Our newsletter or accepting non-essential cookies. You may withdraw consent at any time.
4. How We Use Your Data
We use Your personal data to:
- Create and manage Your account
- Process orders and payments
- Deliver, deploy, and maintain the Software
- Provide technical support
- Send transactional emails (order confirmations, licence notifications, support responses)
- Send marketing communications (with opt-out)
- Analyse website usage and improve Our services
- Prevent fraud and ensure security
- Comply with legal and tax obligations
- Manage our CRM system
- Resolve disputes and enforce Our agreements
5. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described above:
| Data Category | Retention Period |
|---|---|
| Account and contract data | Duration of agreement + 7 years (Dutch fiscal retention obligation) |
| Financial and invoicing data | 7 years after the end of the financial year in which the transaction occurred (Dutch tax law) |
| Support and complaint data | 1 year after resolution |
| Marketing data | Until You unsubscribe or withdraw consent |
| Website analytics data | Subject to the retention periods of Google Analytics (26 months by default) |
| CRM data | 7 years after the end of the business relationship |
6. Data Sharing & Third Parties
We do not sell, rent, or trade Your personal data. We may share Your data with the following categories of recipients, solely to the extent necessary:
Payment processors: To process transactions securely.
Hosting and infrastructure providers: To deliver and maintain the Software (e.g., Amazon Web Services).
Analytics services: Google Analytics and similar tools to analyse website performance.
Email service providers: To send transactional and marketing emails.
Google (reCAPTCHA): To protect Our forms from spam and automated abuse, where enabled. Google may process this data outside the EEA. See Google’s Privacy Policy.
Professional advisers: Legal, accounting, and audit firms as required.
Law enforcement: Where required by law, court order, or regulatory obligation.
All third-party processors are bound by data processing agreements and are required to maintain appropriate security measures.
7. International Data Transfers
Some of Our third-party service providers may be located outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, We ensure appropriate safeguards are in place, including:
- EU Standard Contractual Clauses (SCCs)
- European Commission adequacy decisions
- Other mechanisms approved under the GDPR
You may request details of the specific safeguards applied to international transfers by contacting Us at info@onlinepokerscript.com.
8. Your Rights Under GDPR
Under the GDPR, You have the following rights regarding Your personal data:
Right of Access (Art. 15): Request a copy of the personal data We hold about You.
Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data. You may also update certain details directly in Your account.
Right to Erasure (Art. 17): Request deletion of Your personal data, subject to legal retention obligations.
Right to Restriction (Art. 18): Request that We restrict the processing of Your data in certain circumstances.
Right to Data Portability (Art. 20): Receive Your data in a structured, commonly used, machine-readable format.
Right to Object (Art. 21): Object to processing based on legitimate interests, including direct marketing.
Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
Right to Lodge a Complaint: You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
To exercise any of these rights, please email info@onlinepokerscript.com. We will respond within 30 days. We may request identity verification before processing Your request.
9. Automated Decision-Making
We may use automated systems for fraud prevention and account security. These systems may assess login patterns, IP addresses, and usage data to detect suspicious activity. Where automated decisions significantly affect You, You have the right to request human review of such decisions.
10. Data Security
We implement appropriate technical and organisational measures to protect Your personal data, including:
- SSL/TLS encryption for data in transit
- Encrypted storage for sensitive credentials
- Access controls and role-based permissions
- Regular security monitoring and updates
- Secure backup procedures
While We strive to protect Your data, no method of transmission or storage is 100% secure, and We cannot guarantee absolute security.
11. Data Breach Notification
In the event of a personal data breach likely to result in a risk to Your rights and freedoms, We will notify the Autoriteit Persoonsgegevens within 72 hours of becoming aware of the breach, in accordance with Article 33 GDPR.
Where the breach is likely to result in a high risk to Your rights and freedoms, We will also notify You directly without undue delay, in accordance with Article 34 GDPR.
12. Children’s Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If We become aware that We have collected data from a minor, We will take immediate steps to delete such data.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on Our website. We encourage You to review this policy periodically. The date of the most recent revision is displayed at the top of this document.