Last updated: 15 August 2026
Oddsight Ltd (England & Wales) is the data controller for personal data collected through the Oddsight platform. Contact: privacy@oddsight.com.
| Data | Purpose | Basis |
|---|---|---|
| Email address and name | Account authentication | Contract |
| Age (18+) and country declarations | Eligibility for a UK-only, 18+ service | Legal obligation |
| Payment details | Subscription billing via Stripe | Contract |
| Subscription status and billing identifiers | Managing your access, renewals and cancellation | Contract |
| Budget limits and settings | Applying the spend limits you set for yourself | Contract |
| Risk scores and behavioural insights | Pattern analysis and gambling-harm indicators derived from your imported history | Explicit consent |
| Selection history | Risk score calculation | Legitimate interest |
| Imported betting history | Pattern analysis, harm scoring | Explicit consent |
| Usage analytics | Product improvement (PostHog) | Consent |
| IP address | Rate limiting and abuse prevention. Held for a one-minute counter window, not stored in our database. | Legitimate interest |
| Import filenames and draft extractions | Letting you review an import before you confirm it | Explicit consent |
| Consent and declaration records | Evidencing what you agreed to and when | Legal obligation |
When you import betting history, we extract: date, bookmaker, league, match, bet type, selection, odds, stake, result, and payout. We do not collect bookmaker login credentials, payment card details, or personal messages.
Account data is retained for the duration of your subscription plus 30 days. After account deletion we permanently remove your account, your imported betting records and everything derived from them within 30 days.
Two things necessarily outlive that. Payment and invoice records are held by Stripe and by us for six years, because UK tax law requires it. And anonymised, aggregated statistics that can no longer identify you may be retained, since they are no longer personal data.
Under UK GDPR, you have the right to:
To exercise these rights, email privacy@oddsight.com or use the controls in Settings → Privacy.
Oddsight uses only essential cookies for authentication. Analytics cookies (PostHog) are only set with your explicit consent via the Privacy settings page.
Oddsight’s Harm Score and Pattern Insights use deterministic, explainable rules. They are not generative-AI outputs. AI-assisted processing is limited to:
Model-generated summaries are labelled in the interface. Imported records include confidence context and remain reviewable and deletable. These systems do not place bets or make legal, payment, or account decisions on your behalf. You may request review by contacting privacy@oddsight.com.
Your account data and imported history are stored and processed in the UK: the database is in London and the application servers that read it are pinned to London.
Two processors operate outside the UK, both in the European Union or the United States. The PostHog analytics project is hosted in the EU and is used only after consent. Stripe processes payments in the United States and the European Union. Applicable provider data-processing terms and transfer safeguards are recorded in Oddsight’s subprocessor register.
We will notify you of material changes to this policy via email. Continued use of the platform after notification constitutes acceptance.
If you are unhappy with how we handle your data, email privacy@oddsight.com. We will acknowledge your complaint within 30 days, investigate it fairly, keep you updated where more time is needed, and provide an outcome without undue delay. You can also lodge a complaint directly with the Information Commissioner's Office (ICO).