Privacy & Cookies Policy
Last updated: 2 July 2026
This page explains how Oddzilla (“we”, “us”) collects and uses personal data when you use oddzilla.cc, and which cookies and similar technologies the site relies on. This document is provided in English.
Privacy Policy
1. Who we are
The data controller for oddzilla.cc is [OPERATOR LEGAL ENTITY], registered at [REGISTERED ADDRESS]. For any privacy matter, contact us at privacy@oddzilla.cc.
2. Personal data we collect
- Account data: email address, password (stored only as a salted argon2id hash), account status, and settings.
- Optional profile data: nickname, bio, avatar choice, and — if you keep ticket visibility on — your settled bets shown in the community feed under your nickname.
- Betting activity: bets placed, stakes, odds, settlement results, cash-outs, and wallet balances.
- Payment data: deposit transaction hashes and withdrawal addresses on public blockchains (USDC on Ethereum). Blockchain transactions are public by design and cannot be erased from the chain.
- Communications: support chat messages and emails you send us.
- Device data for push notifications (only if you install our Android app and grant notification permission): a push token and platform identifier.
- Technical data: IP address, browser user agent, request identifiers, and timestamps in server logs, used for security and troubleshooting.
- Usage analytics: pages visited, clicks, session length, and sampled mouse movement, tied to a per-tab session identifier and — if you are signed in — to your account. Collected and processed exclusively on our own servers; no third-party analytics vendor is involved.
3. Why we process it
- To provide the service — account management, accepting and settling bets, deposits and withdrawals (performance of our contract with you).
- To meet legal obligations — accounting, anti-money-laundering and responsible-gambling duties where applicable.
- For our legitimate interests — fraud prevention, risk management, platform security, and audit trails.
- To understand and improve the product — first-party usage analytics and third-party embedded media, which are active by default. Push notifications require a device-level permission you can revoke in your device settings at any time.
4. Who we share it with
- Oddin.gg — our licensed esports odds and data partner. Match, market, and settlement data flows between us; widget embeds are served from their infrastructure.
- Hetzner Online GmbH (Germany) — server hosting inside the EU.
- Resend, Inc. (USA) — delivery of transactional emails such as email verification and password resets.
- Google LLC / Firebase (USA) — push notification delivery for the Android app, if you opt in.
- Streaming platforms (Twitch, YouTube, Kick, Gjirafa) — only when you accept cookies and load an embedded stream.
- Public authorities where the law requires it.
We do not sell personal data and we run no advertising or third-party analytics trackers. Usage analytics are collected first-party and stay on our own servers.
5. International transfers
Our servers are in the EU. Where a processor is based outside the EEA (Resend, Google), transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.
6. How long we keep it
- Account and betting records: for the life of the account and afterwards as long as statutory retention (accounting, AML) requires.
- Odds history: 90 days.
- Raw feed message logs: 7 days.
- Database backups: 14 days.
- Usage analytics: sessions and events 90 days, mouse-movement samples 14 days.
- Server logs: rotated automatically (approximately 50 MB per service).
7. Your rights
You can ask us for access to, correction of, or deletion of your personal data, and for a copy of the data you gave us. Write to privacy@oddzilla.cc — we respond within one month. Note that we must retain some records (bets, payments) for accounting and anti-fraud purposes even after an account is closed, and blockchain transactions are public by design and cannot be erased from the chain.
8. Security
All traffic is encrypted in transit (TLS). Passwords are hashed with argon2id. Wallet key material is isolated in a dedicated signing service. Administrative actions are recorded in a tamper-evident audit log.
9. Age requirement
Oddzilla is strictly for adults aged 18 or over. We do not knowingly process data of minors; accounts found to belong to minors are closed.
10. Changes
We will update this page when our practices change and revise the date at the top. Material changes are announced in the product.
Cookies Policy
Cookies are small files stored on your device. We group them into three categories. Strictly necessary cookies are required for the site to function (signing in, security, remembering your language). Third-party media cookies are set by external providers when a match page embeds streams or statistics widgets. First-party analytics storage supports our own usage statistics. All three are active by default — the banner you see on your first visit is an informational notice.
Strictly necessary cookies and storage
| Name | Purpose | Duration |
|---|---|---|
| oddzilla_access | Keeps you signed in (session token) | 15 minutes |
| oddzilla_refresh | Renews your session securely | 30 days |
| oz_locale | Remembers your language | 12 months |
| Local storage (oz:theme, oz:cookie-consent, bet-slip preferences) | Remembers your theme, your cookie choice, and slip settings. Stays on your device; never sent to us. | Until cleared |
Third-party media
Match pages can embed live streams and statistics widgets from Twitch, YouTube, Kick, Gjirafa, and Oddin. These providers may set their own cookies and process your IP address under their own privacy policies whenever a page embedding them is open.
First-party analytics
We record how the site is used — pages visited, clicks, session length, and sampled mouse movement — to improve the product. A random session identifier (oz:analytics:session) is kept in your browser’s session storage for at most 30 minutes of inactivity. The data is processed exclusively on our own servers and is never shared with or sold to anyone.
Managing cookies
The cookie banner is an informational notice. If you prefer not to use these cookies, you can delete or block them at any time through your browser settings (including site data and local storage for oddzilla.cc). Blocking strictly necessary cookies will prevent signing in from working.