Legal Document Versions

Pokerama named in §3 and its play-money position stated explicitly rather than left to inference.

• §3 No Real-Money Wagering now names Pokerama, our poker room, and states that chips cannot be bought, have no value outside the room, and cannot be exchanged for money or anything else of value.
• §3 also states that nothing played on Pokerama is a bet and that no prize awarded there is paid in money.
• No existing commitment was narrowed or removed. Previously the play-money position held only by inference from the platform-wide statement that GAMB·8 does not enable real-money gambling, which required the reader to already know Pokerama is operated by the same company.

Operating entity disclosed: GAMB·8 OÜ, registered in Estonia.

• §1 Operator: replaced "sole trader, incorporation pending" with GAMB·8 OÜ, a private limited company (osaühing) registered in the Republic of Estonia via the e-Residency programme.
• §2 Data controller bullet updated to name GAMB·8 OÜ as the controller.
• §4 Registered Address → renamed to "Correspondence". We operate fully remote and do not publish a physical mailing address; email channels in §3 handle all routine correspondence. A registered address is provided on request where strictly required by legal process (e.g. service of proceedings).

Operating entity disclosed in §16 Contact: GAMB·8 OÜ, registered in Estonia. Cross-link to Company Information page added.

• §16 Contact now names GAMB·8 OÜ (Republic of Estonia) as the operating entity and cross-links to /legal/company for registry details.

Operating entity disclosed in §11 Contact: GAMB·8 OÜ, registered in Estonia.

• §11 Contact now identifies the GDPR Art. 4(7) data controller as GAMB·8 OÜ, Republic of Estonia, and cross-links to /legal/company for full registry and data-controller identifiers.

This changelog shipped.

• Created a public, chronological record of every material change to a GAMB·8 legal document.
• Seeded with April 2026 initial-version entries for all 13 legal documents.

Initial publication.

• 8-section AUP covering prohibited uses, automation / scraping rules, API terms, content-submission licence, security-research boundaries, enforcement ladder, and reporting channels.

Initial publication.

• Canonical list of third-party processors (infrastructure, payments, observability, identity, messaging, AI, data ingestion). Privacy Policy §3 now cross-links here for up-to-date vendor status between policy revisions.

Protection pass. Liability cap introduced, governing law + arbitration seat named, class-action waiver added, DMCA and §230 sections inserted.

• §10 Limitation of Liability: added monetary cap (greater of US$100 or fees paid in preceding 12 months) with statutory carve-outs.
• §12 (new) User-Submitted Content + 47 U.S.C. §230 + EU DSA notice-and-action channel.
• §13 (new) DMCA §512 designated-agent notice at dmca@gamb8.com with 6-part notice requirements + counter-notice flow.
• §14 (rewritten) Governing Law, Dispute Resolution & Class-Action Waiver: England & Wales governing law; LCIA arbitration rules, London seat; informal-resolution-first window; class-action waiver with injunctive-relief carve-out; EU ODR platform linked.
• Self-exclusion options in §6 reconciled with UI (7 / 30 / 90 / 180 days + 1 year).
• TOC added (16 anchors) with scroll-margin-top.
• Date harmonised to "Last updated: April 2026".

Wording and link updates following the 2026-04-19 legal audit.

• Export (Art. 20) and Deletion (Art. 17) links now point to /settings/account with explicit backup-purge timing disclosed (worst-case 60-day total retention).
• Kick OAuth provider correctly attributed (Kick Streaming B.V., not Stream Hatchet).
• Tilt-detection description de-bound from specific vendor stack.
• PostHog retention language aligned estate-wide ("retained for 90 days").
• §3 cross-links to /legal/subprocessors for canonical vendor list between policy revisions.

GPC support disclosed; TOC added.

• §4 now documents Global Privacy Control (GPC) support alongside the legacy Do Not Track (DNT) signal.
• California visitors: GPC is treated as a valid CCPA / CPRA opt-out request; preference persists via localStorage key gamb8:gpc-opt-out.
• TOC added (6 anchors).

Entity, DPA and training-details wording corrected for factual accuracy.

• Data-controller line corrected from "GAMB·8 Ltd." (not incorporated) to "GAMB·8 (sole trader, incorporation pending)".
• Removed unsubstantiated "DPA signed" claim; now reads "DPA per provider terms".
• Removed "Irish DPC lead authority" claim; now reads "Your local EU/EEA DPA".
• AI system training descriptions de-bound from specific architecture numbers to avoid binding ourselves to a stack that may change.
• PostHog retention language aligned ("retained for 90 days").
• "Right to erasure" now points to /settings/account.
• Footer "our legal team" claim removed.

Expanded for full CCPA / CPRA compliance.

• Title updated to "Do Not Sell or Share My Personal Information" (CPRA §1798.140(ad)/(ah) "share" definition).
• (New) Section "Limit the Use of My Sensitive Personal Information" (CPRA §1798.121).
• (New) Section "Global Privacy Control" (California AG guidance).
• (New) Section "Notice of Financial Incentive" (CPRA §1798.125(b)) covering XP, streak, and affiliate tiers.
• (New) Section "Authorised Agents" (CPRA §1798.135(c)).
• Self-serve deletion + export links now point to /settings/account.
• Removed unsupported "betting history" disclaimer (we do not server-side store bet history).

FTC proximity coverage improved in-product.

• Accompanying product change (not a text change to this page): added inline "Ad" chips on 4 outbound affiliate surfaces — /casinos/[slug] hero, /streamers/[handle] hero, /streamers/review/[handle] deal breakdown, /tools/streamer-compare — per FTC 16 CFR Part 255 "clear and conspicuous" proximity test.

Initial publication.

• Operator identity disclosure (sole trader, incorporation pending).
• Data-controller designation, DPO position, EU/UK Art. 27 representative position, DMCA designated agent.
• Contact channels for support / legal / privacy / partners / security / DMCA.

Initial publication.

• Stripe payment-processor disclosure.
• Auto-renewal, cancellation, and EU/UK 14-day right of withdrawal.
• Crypto-irreversibility warning.
• 30-day notice on price increases; tax-exclusive pricing disclosure.

Initial publication of Truth Engine editorial standards.

• Evidence bar: 2 independent primary sources OR 1 primary + 14-day non-response window.
• Right of reply: 14-day response window (72 hours for time-sensitive matters).
• Correction SLA: 72-hour acknowledgement, 14-day resolution.
• Commercial firewall: no partner may review or approve editorial content before publication.
• Legal defences invoked: GDPR Art. 85, UK Defamation Act 2013 §4, US First Amendment + §230, EU DSA.

Initial publication.

• OFAC / HMT / EU sanctions-blocked jurisdictions enumerated (Cuba, Iran, North Korea, Syria, Russia-occupied Ukraine).
• US state-level gambling-legality notes.
• Feature-level restriction rules (real-money links, paid subscriptions, bot overlay, editorial content).

Added educational disclaimer, regulator + verified columns.

• Hero rebadged from "Legal Guide" to "Reference tool" with explicit "Educational reference, not legal advice" banner.
• Added Regulator (source) and Verified (last-updated) columns to the table.
• Backend: /api/codes/countries/ list endpoint now exposes the last_updated field.
• SEO title updated to avoid presenting the page as an authoritative legal source.