burger icon
Sportium United Kingdom
Log In

Privacy Policy

This Privacy Policy explains how sportiyms.com (the "Website") collects, uses, discloses, and protects personal data relating to visitors and users who access our informational content about online gambling brands, including the dedicated review page for Sportium. It applies to all Website visitors, individuals who contact us, and anyone who interacts with our services, regardless of whether they open an account with any gambling operator we describe. This version is effective from 6 November 2025 and is intended to remain in force, with updates as required, throughout 2026.

Who We Are

The Website is an independent comparison and review service that operates under the domain sportiyms.com. We are not owned by, controlled by, or part of Sportium or Cirsa, and we do not provide remote gambling services, accept bets, or hold player funds. Our role is limited to publishing reviews, guides, and educational materials, including content relating to Sportium, for users located in the United Kingdom and other regions.

For the purposes of applicable data protection laws, including the UK General Data Protection Regulation ("UK GDPR") and, where relevant, the EU General Data Protection Regulation ("EU GDPR"), the operator of sportiyms.com is the "data controller" in respect of the personal data processed through this Website (the "Website Operator"). The Website Operator is responsible for determining how and why your personal data is processed when you use sportiyms.com.

The full legal name, legal address, and registration details of the Website Operator are provided in the legal notice, imprint, or similar section available via the footer of sportiyms.com. Those details form an integral part of this Privacy Policy.

The Website Operator has appointed a dedicated contact point for privacy and data protection matters (the "Data Protection Contact"). You can reach this contact point using the communication channels indicated on the Website, which may include an online form or a dedicated email address referenced in the "Contact" or "Privacy" sections of sportiyms.com. When you contact us, please indicate that your query concerns "Privacy" or "Data Protection" so that it is routed correctly.

For context only, and without changing the scope of this Privacy Policy, we note that SPORTIUM APUESTAS DIGITAL, S.A. is a separate Spanish-licensed gambling operator (DGOJ licenses 26-11/G/A65640252/SGR and 27-11/GO/A65640252/SGR) that operates under the Sportium brand in Spain and certain Latin American markets. The Website Operator is independent from that entity, and this Privacy Policy covers only data processing carried out on sportiyms.com in connection with content such as our Sportium review.

What Personal Data We Collect

When you use sportiyms.com and access pages such as the Sportium review, we may collect and process the following categories of personal data. The exact data collected will depend on how you interact with the Website and which features you use.

Identity and Contact Data

  • Basic identifiers: If you choose to contact us, subscribe to a newsletter (if offered), or otherwise provide information via forms on sportiyms.com, we may collect your name, username or nickname, country of residence, and preferred language.
  • Contact details: We may collect your email address and, if you choose to provide it, your telephone number or other contact details so that we can respond to queries, feedback, or complaints.
  • Professional details: For business partners, media, or regulatory contacts who reach out to us, we may collect job title, company name, and related professional details contained in your communication.

Technical and Usage Data

  • Technical identifiers: We automatically collect certain technical data from your device when you visit sportiyms.com, such as IP address, approximate geographic location (based on IP), device type, operating system, browser type, browser language, and time zone settings.
  • Usage logs: We may record server logs and similar technical logs (for example, the date and time of access, pages viewed, referral URLs, error logs, and interaction with banners or consent tools). This data helps us ensure security, detect abuse (such as repeated automated scraping or suspicious VPN activity), and maintain the stability of the Website.
  • Device and performance data: We may collect data about loading times, page responsiveness, and similar metrics to improve the technical performance and user experience of sportiyms.com.

Behavioural and Interaction Data

  • Click-stream data: Subject to your cookie and tracking preferences, we may collect data about your clicks on links, navigation paths, time spent on pages (including pages discussing Sportium), scroll depth, and interactions with comparison tables or outbound links to third-party gambling operators or regulatory resources.
  • Preference data: We may collect information about your content preferences (for example, which sports betting, casino, or responsible gambling pages you visit most frequently) in order to tailor the Website's content and layout.
  • Marketing and communication preferences: Where we offer newsletters or similar communications, we may record your opt-in/opt-out choices and related preferences.

Payment and Transaction Data

  • Limited website-related transactions: sportiyms.com does not operate as an online casino, sportsbook, or payment processor and does not collect your deposits, withdrawals, or betting transactions with Sportium or any other gambling operator.
  • Business and affiliate payments: If you are a business partner, advertiser, or affiliate counterparty, we may process limited payment-related data (such as invoicing details, bank account identifiers, and payment status) in connection with our commercial relationship, in accordance with contractual and legal requirements.
  • Non-collection of player banking data: We do not have access to, and do not collect, the card, e-wallet, or banking details that you use with third-party gambling operators (for example, Sportium's EUR-only payment options). Any such data is processed by those operators under their own privacy policies.

Cookies and Similar Technologies

  • Cookies: We use cookies (small text files stored on your device) and similar technologies to operate the Website, remember your preferences, measure usage, and, where you consent, personalise content and advertising.
  • Analytics tools: Subject to your consent, third-party analytics providers may place cookies or use similar technologies to collect aggregated data about how users interact with sportiyms.com, including visits to pages dealing with Sportium and other brands.
  • Tracking pixels and tags: We may use pixels, tags, or URL-based identifiers to track the performance of outbound links, affiliate relationships, and campaigns, in order to understand which content is most useful and to ensure fair attribution for referrals.

Legal Basis for Processing

Our processing of personal data on sportiyms.com is grounded in the legal bases provided by the UK GDPR, and, where applicable, the EU GDPR and Mexican data protection law (including the Ley Federal de Protección de Datos Personales en Posesión de los Particulares, "LFPDPPP"). Depending on the specific processing activity, one or more of the following legal bases will apply:

  • Consent: We rely on your consent where required by law, for example:
    • placing or reading non-essential cookies (such as analytics or advertising cookies) on your device;
    • sending you direct electronic marketing communications (such as newsletters) where these are not based on an existing customer relationship; and
    • using certain analytics or profiling features that go beyond our strict legitimate interests.
    You may withdraw your consent at any time using the controls provided (for example, the cookie banner or unsubscribe links), without affecting the lawfulness of processing before withdrawal.
  • Performance of a contract or steps taken at your request: We may process your personal data when it is necessary to enter into or perform a contract with you, such as:
    • responding to your enquiries about our services or your business relationship with us;
    • managing agreements with advertisers, affiliate partners, or other commercial counterparties; and
    • providing any user accounts or subscription-based services, if such features are offered on sportiyms.com.
  • Legitimate interests: We process certain personal data because it is necessary for our legitimate interests or those of a third party, provided that these interests are not overridden by your rights and freedoms. These include:
    • operating, maintaining, and improving the Website;
    • measuring the performance of our content (including pages related to Sportium) and affiliate links;
    • preventing fraud, abuse, and misuse of our systems, including attempts to manipulate geo-restrictions or circumvent regional compliance measures;
    • defending our legal rights and complying with standards of accurate reporting about licensed and unlicensed operators; and
    • personalising the Website's presentation to make it more relevant and useful for you, within reasonable expectations.
  • Compliance with legal obligations: We process personal data where necessary to comply with legal obligations to which we are subject, such as:
    • record-keeping and accounting obligations;
    • responding to lawful requests from courts, regulators (for example, the UK Information Commissioner's Office), or law enforcement authorities; and
    • cooperating with cross-border enforcement of gambling advertising rules or consumer protection standards, where applicable.
  • Consent and legitimate bases under Mexican law: Where we interact with individuals located in Mexico, we endeavour to align with the principles of the LFPDPPP by:
    • obtaining consent where required for the use and transfer of personal data;
    • respecting ARCO rights (access, rectification, cancellation, and opposition); and
    • maintaining appropriate safeguards when personal data is transferred internationally.

Purpose of Processing

We process personal data on sportiyms.com, including on pages dedicated to brands such as Sportium, for clearly defined and legitimate purposes. These include:

  • Providing and operating the Website: To make sportiyms.com available, ensure it functions properly, and present content (including reviews, guides, and responsible gambling information) in a way that is stable, secure, and accessible to users, including those located in the UK.
  • Offering accurate and responsible information: To research and publish up-to-date information about online gambling operators, such as Sportium's presence in Spain, Colombia, Panama, and Mexico, and its lack of a UK Gambling Commission (UKGC) licence for UK consumers as of 2025, thereby enabling users to make informed choices and avoid unlicensed or high-risk options.
  • Improving the Website and user experience: To understand how users interact with sportiyms.com, which pages are most frequently visited (for example, those highlighting that Sportium is blocked/restricted for UK residents), and where we can improve clarity, navigation, and functionality.
  • Marketing, communication, and affiliate relationships: To manage relationships with advertisers and affiliate partners, including tracking referrals and the performance of outbound links, and, where lawful, to provide newsletters or targeted content about new reviews, regulatory updates, or changes to brands we feature.
  • Analytics and performance measurement: To use aggregated data to analyse Website performance, measure the success of responsible gambling information and warnings, and monitor regional trends (for example, increased geo-blocking and regulatory changes expected around Q3 2025).
  • Fraud prevention, security, and legal compliance: To monitor and protect the security of the Website, detect suspicious activity (such as automated scraping or attempts to manipulate tracking systems), prevent misuse of our content (for example, using our information to promote illegal gambling activity), and meet our legal and regulatory obligations.
  • Handling queries, complaints, and legal claims: To respond to your questions or complaints, manage disputes (for example, concerning the accuracy of our descriptions of Sportium's licences or geo-restrictions), and establish, exercise, or defend legal claims.

Disclosure & Sharing

We do not sell your personal data. However, we may share personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy, subject to appropriate safeguards and, where required, your consent.

  • Service providers (processors): We engage trusted third-party service providers to support the operation of sportiyms.com, such as hosting providers, cloud infrastructure and security providers, analytics services, content delivery networks, email distribution platforms, and customer support tools. These providers process personal data on our behalf and under our instructions.
  • Affiliate and advertising partners: Where we participate in affiliate programmes or display advertising, we may share limited data (such as click identifiers or anonymised identifiers) with affiliate networks and advertising partners to track referrals, campaign effectiveness, and to ensure that commissions are properly attributed. Any targeted advertising or advanced profiling will only take place where permitted by law and, where required, based on your explicit consent.
  • Regulators and supervisory authorities: We may disclose relevant information to data protection authorities (such as the UK Information Commissioner's Office), gambling regulators, and other competent authorities when legally required or when we consider such disclosure necessary to protect our rights or the rights of others. This may include supporting investigations into unlicensed gambling operations or misleading advertising involving brands we describe, including Sportium.
  • Professional advisers: We may share personal data with our legal, financial, or compliance advisers where necessary to obtain professional advice, manage risk, or respond to legal claims.
  • Corporate transactions: In the event of a proposed or actual merger, acquisition, restructuring, or sale of assets relating to the Website Operator, personal data may be shared with potential or actual purchasers and their advisers, subject to appropriate confidentiality obligations and applicable law.
  • Third-party websites and gambling operators: When you follow outbound links from sportiyms.com to third-party websites (for example, to Sportium's official site or regulatory resources such as the UKGC public register), the operators of those external sites will process any data you provide under their own privacy policies. We do not control, and are not responsible for, their use of your data.
  • With your consent or at your direction: We may share your information with other third parties when you explicitly request or consent to such sharing, for example if you ask us to introduce you to a particular partner or service.

International Transfers

Because sportiyms.com serves users in multiple regions and relies on global service providers, your personal data may be transferred to, and processed in, countries outside of your country of residence, including outside the United Kingdom and the European Economic Area ("EEA"). These countries may have data protection laws that differ from those in your jurisdiction.

  • Transfers within the EEA and to the UK: Where we transfer personal data between the EEA and the UK, we do so on the basis of applicable adequacy decisions or standard contractual clauses, as appropriate, to ensure an equivalent level of protection.
  • Transfers to other regions (for example, the United States or Latin America): Some of our service providers may be located in, or operate from, countries such as the United States or Latin American jurisdictions (including, potentially, Spain, Colombia, Panama, or Mexico, where Sportium itself operates for gambling services). When transferring personal data to such countries, we implement appropriate safeguards, such as:
    • standard contractual clauses approved by the European Commission or the UK authorities;
    • additional technical and organisational security measures (including encryption in transit and at rest); and
    • careful vendor due diligence to ensure that your data is treated securely and in accordance with this Privacy Policy.
  • Mexican data protection alignment: For users located in Mexico, we aim to handle international transfers in line with the principles of the LFPDPPP, including informing you of cross-border transfers and implementing appropriate safeguards where personal data is transferred out of Mexico.

Details about specific transfer mechanisms and safeguards can be obtained by contacting us via the channels specified on the Website, subject to our obligations to protect security and commercially sensitive information.

Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. We regularly review our retention periods to ensure they remain appropriate in light of regulatory changes and best practice.

  • General website usage data: Technical logs and aggregated analytics data are typically retained for a period of up to 24 - 36 months, after which they are deleted or irreversibly anonymised, unless a longer retention period is required for security, fraud-prevention, or legal purposes.
  • Contact and correspondence data: Records of enquiries, support requests, or complaints (including data you provide when you contact us about Sportium or other brands) are usually retained for up to 3 - 5 years from the date of our last meaningful interaction, to allow us to respond to follow-up queries and to establish, exercise, or defend legal claims.
  • Marketing data: Information relating to your subscription to newsletters or marketing communications is retained for as long as you remain subscribed and for a limited period (usually up to 2 years) afterwards to evidence your preferences and our compliance with applicable marketing rules, unless a longer period is legally required.
  • Business partner and contractual data: Data relating to contracts with advertisers, affiliates, or other commercial partners (including limited payment and invoicing data) is retained for the duration of the contractual relationship and for a subsequent period (typically 5 - 10 years) as required by applicable tax, corporate, and accounting laws.
  • Security and fraud-prevention data: Where data is processed to detect or prevent fraud, abuse, or misuse of our systems, it may be retained for as long as necessary to investigate and mitigate potential risks, and in some cases for up to 5 years or longer where this is required to comply with legal or regulatory obligations.

When personal data is no longer needed for the purposes for which it was collected and there is no legal requirement to retain it, we will delete or anonymise it in a secure manner. If you exercise your right to erasure, we will also act in accordance with that request provided that the conditions set out in applicable law are met.

Your Rights

Depending on your place of residence and the applicable law, you may have various rights in relation to your personal data. We respect and will seek to facilitate these rights in accordance with the UK GDPR, the EU GDPR, and, where applicable, Mexican data protection law (including ARCO rights under the LFPDPPP).

Rights under UK and EU Data Protection Law

  • Right of access: You can request confirmation as to whether we process your personal data and, if so, obtain a copy of that data and certain related information.
  • Right to rectification: You can ask us to correct inaccurate personal data and to complete incomplete data, taking into account the purposes of processing.
  • Right to erasure: In certain circumstances, you can request the deletion of your personal data, for example where the data is no longer necessary for the purposes for which it was collected, or you have withdrawn consent and no other legal basis applies.
  • Right to restrict processing: You can ask us to restrict the processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to our use of it, while we assess your request.
  • Right to object: You can object at any time to processing based on our legitimate interests, on grounds relating to your particular situation. You also have an absolute right to object to processing for direct marketing purposes.
  • Right to data portability: Where the processing is based on consent or the performance of a contract and is carried out by automated means, you can request that we provide your personal data in a structured, commonly used, machine-readable format, or transfer it directly to another controller where technically feasible.
  • Right to withdraw consent: Where we rely on your consent (for example, for non-essential cookies or certain marketing communications), you may withdraw that consent at any time via the mechanisms provided (such as cookie settings or unsubscribe links), without affecting the lawfulness of processing before withdrawal.

Rights under Mexican Data Protection Law (ARCO Rights)

  • Right of access (Acceso): You can request information about whether we hold personal data about you, and, where we do, obtain access to such data and learn about the conditions of its processing.
  • Right to rectification (Rectificación): You may request the correction or update of your personal data when it is inaccurate or incomplete.
  • Right to cancellation (Cancelación): You may request that we cancel or delete your personal data when you consider that it is not being processed in accordance with applicable principles, duties, and obligations.
  • Right to opposition (Oposición): You can object to the processing of your personal data for specific purposes, particularly for marketing or profiling purposes, and we will cease such processing unless we have compelling legitimate grounds or are required to continue by law.

How to Exercise Your Rights

  • Submission of requests: You can exercise your rights by contacting us using the privacy or contact channels indicated on sportiyms.com. Please provide enough information to identify yourself and specify the right you wish to exercise and the processing to which your request relates.
  • Verification of identity: To protect your privacy, we may need to request additional information to verify your identity before responding to your request, especially where we hold limited data or receive a request from an email address unfamiliar to us.
  • Timeframes: We aim to respond to all legitimate requests within one month (30 days) of receipt. In complex cases or where we receive numerous requests, this period may be extended by a further two months, in which case we will inform you of the extension and the reasons for the delay.
  • Cost: Exercising your rights is generally free of charge. However, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, particularly because of their repetitive character, as permitted by applicable law.
  • Limitations: Your rights may be subject to certain limitations under applicable law, for example where fulfilling your request would adversely affect the rights and freedoms of others, or where we are required to retain certain data for legal or regulatory reasons.

Cookies & Tracking Technologies

We use cookies and similar technologies to make sportiyms.com work, to understand how it is used, and, where permitted, to tailor content and advertising. In the UK, we comply with the Privacy and Electronic Communications Regulations ("PECR") and UK GDPR requirements relating to the use of cookies.

  • Types of cookies we use:
    • Strictly necessary (session) cookies: These cookies are essential to provide core Website functionality, such as load balancing, security, and remembering your cookie preferences. They are typically stored only for the duration of your browsing session.
    • Functional (persistent) cookies: These cookies remember choices you make (such as language preferences) and customise the Website for you over multiple sessions.
    • Analytics (persistent and session) cookies: Where you consent, these cookies collect aggregated information about how visitors use the Website (for example, which pages about Sportium are visited most often), to help us improve content and navigation.
    • Advertising and affiliate (third-party) cookies: With your consent, third-party partners may set cookies to measure the effectiveness of campaigns, track referrals through affiliate links, and, in some cases, personalise advertising displayed on third-party platforms.
  • Managing your cookie preferences: On your first visit, and from time to time thereafter, you will be presented with a cookie banner or preference centre that allows you to accept or reject non-essential cookies and change your settings. You can update your preferences at any time by using the cookie management tools available on the Website, if provided.
  • Browser settings: You can also configure your browser to block or delete cookies. However, disabling certain cookies (particularly strictly necessary cookies) may impact the functionality or performance of sportiyms.com.

Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures designed to protect it against unauthorised access, loss, misuse, alteration, or destruction. While no system can be guaranteed to be completely secure, we work continually to maintain a level of security that is appropriate to the risks associated with our processing activities.

  • Encryption: We use modern encryption protocols (such as TLS 1.2 or higher, with TLS 1.3 being preferred where supported) to protect data in transit between your browser and our servers. Where feasible and proportionate, we also apply encryption or pseudonymisation to data at rest.
  • Access controls: Access to personal data is strictly limited to personnel and service providers who need such access for legitimate, clearly defined purposes. Access rights are assigned on a "need to know" basis and reviewed periodically.
  • Infrastructure security: We host sportiyms.com with reputable providers that implement industry-standard security safeguards, including firewalls, intrusion detection systems, and robust physical security controls for data centres.
  • Policies and training: We maintain internal policies and guidelines concerning data protection, confidentiality, and information security. Staff who handle personal data receive training and guidance to ensure they understand their responsibilities and follow appropriate procedures.
  • Monitoring and incident response: We monitor our systems for vulnerabilities and indicators of compromise. In the event of a personal data breach, we will assess the impact, take steps to mitigate harm, and, where required by law, notify affected individuals and relevant supervisory authorities (for example, the UK ICO) without undue delay.
  • Alignment with recognised standards: We design our security controls by reference to recognised frameworks, such as ISO/IEC 27001 and comparable international standards. For context, we note that Cirsa (the parent group associated with the Sportium brand) holds ISO 27001 certification covering security protocols used for the Sportium platform, including TLS 1.3. This certification relates to Sportium's own systems, which are separate from sportiyms.com, but we consider similar principles when shaping our own security programme.

Complaints & Contacts

If you have any questions, concerns, or complaints about how we handle your personal data on sportiyms.com, including in connection with our content concerning Sportium, we encourage you to contact us first so that we can seek to resolve the issue directly.

  • Contacting us: You can reach our Data Protection Contact using the methods described on the Website (for example, via a dedicated contact form or email address on the "Contact" or "Privacy" pages of sportiyms.com). Please provide a clear description of your concern and, where relevant, identify the specific page or processing activity to which your complaint relates.
  • Initial response: We aim to acknowledge receipt of your complaint or query within 7 working days and to provide a substantive response within 30 days, where possible. If we are unable to meet this timeframe due to the complexity of your request, we will inform you of the delay and the expected timeframe for our full response.
  • Escalation within our organisation: If you are not satisfied with the initial response, you may request that your complaint be reviewed by a more senior member of our team or by our designated privacy lead. We will consider any additional information you provide and seek to resolve the matter fairly and transparently.
  • Right to lodge a complaint with a supervisory authority (UK/EU): You also have the right to lodge a complaint with a data protection supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO). Details include:
    • Website: https://ico.org.uk
    • Helpline (UK): +44 303 123 1113
    • Postal address (as of 2025): Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
    If you are located in the EEA, you may contact your local data protection authority or, for example, the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) if Spain is most relevant to your situation.
  • Right to lodge a complaint in Mexico: For individuals located in Mexico, you may lodge a complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales, INAI) regarding alleged breaches of Mexican data protection law:
    • Website: https://www.inai.org.mx

We encourage you to contact us first so that we can attempt to address your concerns. However, you may contact a supervisory authority at any time, particularly if you believe your rights have been infringed or that we have not handled your complaint appropriately.

Updates

We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal or regulatory developments (including changes affecting gambling advertising and cross-border access to operators such as Sportium), or improvements in our data protection practices. The "Last updated" date at the end of this document indicates when the latest version took effect.

  • Notification of changes: When we make material changes, we will take appropriate steps to inform you in advance, which may include:
    • publishing a prominent notice on sportiyms.com (for example, a banner or highlighted message);
    • updating the Privacy Policy link in the Website footer; and
    • where we have your contact details and the changes are significant, sending you an email or in-account notification (if applicable) at least 30 days before the changes take effect.
  • Your options: If you do not agree with the updated Privacy Policy, you may choose to discontinue using sportiyms.com and, where applicable, exercise your rights (such as requesting deletion of your data) using the contact methods described above. Continued use of the Website after the effective date of any update will constitute your acknowledgement of the updated terms, to the extent permitted by law.
  • Version control and record of material changes: We maintain internal records of previous versions of this Privacy Policy and the dates on which they were in effect. Material changes may include updates to the categories of personal data we collect, new purposes for processing, significant changes in our use of cookies or analytics, or changes in the jurisdictions to which data may be transferred.

Last updated: November 2025.