Acceptable Use Policy

1. Scope

This policy applies to everyone who touches GAMB·8 — anonymous web visitors, signed-in users, paid subscribers, API consumers, Chrome-extension users, desktop-overlay users, affiliate partners, and third-party integrations acting on your behalf. By using any of these surfaces you agree to follow the rules below.

2. Prohibited Uses

You may not use GAMB·8 to:

• Break the law. Anything illegal in your jurisdiction, or in the jurisdiction where the content is hosted or where the target of the activity lives.
• Facilitate harm to minors. Any activity involving under-18s in a gambling-adjacent context. See Terms §4.
• Impersonate another person or entity, including streamers, casinos, regulators, or GAMB·8 itself.
• Harass, threaten, dox, or target any person, including streamers profiled by the Truth Engine, GAMB·8 staff, or other users.
• Post or transmit malware, viruses, worms, trojans, spyware, keyloggers, or any code designed to interfere with systems or collect credentials.
• Circumvent geo-blocks, self-exclusion, age gates, or other access controls — whether ours or a third-party operator's we link to. See Restricted Territories.
• Attempt to defraud the platform — including chargeback abuse, fabricated affiliate referrals, self-referrals, bonus abuse against connected operators, or account sharing to manipulate free-tier limits.
• Infringe intellectual property — ours or a third party's. See Terms §13 (DMCA).
• Upload or link to illegal, sexually exploitative, or hate-speech content.
• Abuse integrations — use of Discord webhook URLs, Telegram chat IDs, or casino account links to spam third parties or bypass their terms.
• Resell, sublicense, or redistribute paid-tier outputs without a written agreement with GAMB·8.

3. Automation & Scraping

GAMB·8 publishes most data publicly because transparency is part of the brand. That doesn't mean anything goes.

• Allowed: reading public pages at a human-reasonable rate; citing published GAMB·8 data in research, journalism, or product commentary with attribution; using the official API (see §4) within its rate limits and terms.
• Not allowed: hammering endpoints faster than a reasonable human, ignoring rate-limit responses (HTTP 429), evading rate limits via rotating IPs / user agents / headless-browser fingerprints, bulk-scraping entire datasets and re-publishing them without attribution, removing watermark metadata or attribution blocks, training an AI model or derivative product on our published content without a licence.
• If in doubt, email legal@gamb8.com — we'd rather grant a research licence than chase you after the fact.

We may use technical countermeasures (canary entries, request signing, rate-limit tiers, honeypots) to detect and track scraping. Circumventing a countermeasure we have put in place is itself a violation.

4. API Use

Use of the public API requires an API key obtained through your account settings (when that surface ships). Each key is bound to a specific user and tier.

• Do not share API keys across customers, products, or companies.
• Respect the rate limits published with your tier and advertised via the X-RateLimit-* response headers. Exceeding them may result in throttling, temporary lock-out, or termination.
• Attribute GAMB·8 as the source of the data in your product's UI where reasonable — this is a soft requirement for free-tier keys and a contractual requirement for paid tiers.
• Do not use the API to rebuild a directly-competing listing of casinos, streamers, deals, or scores.
• Cache responses for at least the duration indicated by the Cache-Control header; do not bypass caching to force fresh fetches.

5. Content You Submit

When you submit content to GAMB·8 (streamer corrections, reviews, forum posts, dispute evidence, support tickets) you represent that:

• You own or have the right to share the content.
• It does not violate any law or third-party right.
• It is accurate to the best of your knowledge.
• You are not uploading it on behalf of a covert commercial interest (e.g. posing as an independent reviewer while being paid by an operator).

You grant GAMB·8 a non-exclusive, worldwide, royalty-free licence to host, display, excerpt, and moderate your submission for the purpose of operating the platform and its editorial functions. This licence survives your account deletion only to the extent reasonable for historical record-keeping (e.g. a published investigation that cites your tip); personal identifiers in submissions are erased in accordance with the Privacy Policy.

6. Security Testing & Vulnerability Disclosure

We welcome good-faith security research. The following activities are allowed without prior approval, provided they are conducted on your own account and do not disrupt the service:

• Testing for common web vulnerabilities (XSS, CSRF, IDOR, SQLi, SSRF, misconfig) on endpoints you are authenticated against.
• Inspecting JavaScript, network traffic, and client-side storage for your own account.
• Running lightweight rate-limit and authentication-boundary tests that stop at the first successful proof-of-concept.

Not allowed, even in the name of research:

• Attacks against other users' accounts or data.
• Denial-of-service tests, traffic floods, or resource-exhaustion attempts.
• Social engineering of staff, contractors, affiliates, or other users.
• Physical attempts against infrastructure.
• Public disclosure of an unpatched vulnerability before we've had a reasonable chance to fix it.

Report findings to security@gamb8.com with reproduction steps. We respond within five (5) business days, credit researchers at their request, and have a published bug-bounty programme in preparation.

7. Enforcement

Depending on the severity and context of a violation, GAMB·8 may:

• Issue a warning.
• Rate-limit, throttle, or temporarily suspend access.
• Remove or annotate specific content.
• Revoke API keys.
• Terminate the account permanently without refund.
• Notify law enforcement, regulators, or affected third parties where required by law or warranted by public interest.

We try to apply the lightest effective remedy and prefer dialogue over enforcement, except for abuse that endangers users or the integrity of the platform (fraud, harassment, CSAM, security violations). Terminations may be appealed by emailing legal@gamb8.com within thirty (30) days.

8. Reporting Abuse

To report a violation of this policy:

• Abuse, harassment, illegal content: legal@gamb8.com
• Copyright / DMCA: dmca@gamb8.com — see Terms §13 for the notice format
• Security vulnerability: security@gamb8.com
• Fraudulent affiliate activity: partners@gamb8.com

Please include the URL, a description of the issue, and any supporting evidence. We acknowledge reports within 72 hours.