PRIVACY, WITHOUT THE
FINE-PRINT THEATRE.PRIVACY POLICY

B4GAMBLE is a decision-support, educational, comparison and affiliate information service.

The controller responsible for personal data processed through B4GAMBLE is:

Privacy: privacy@7be.io

B4GAMBLE does not operate an online casino, accept wagers or deposits, or hold gambling balances.

This Policy explains how B4GAMBLE handles personal data when you use our website, create an account, use the 10-Step Programme, use safety and control tools, follow an affiliate link, or contact us.

It applies to B4GAMBLE's Great Britain service.

Third-party gambling operators and other external websites have their own privacy practices. If you leave B4GAMBLE, their privacy notices apply to their processing.

B4GAMBLE separates private control and support information from commercial gambling activity.

We do not use:

• Protected Help activity;
• Self-Check answers or results;
• private Programme reflections;
• vulnerability indicators;
• urge-learning information;
• personal control boundaries;

to select casino offers, rank operators for an individual, personalise bonuses, target affiliate marketing, or increase commercial gambling prompts.

We do not sell this information to gambling operators.

Account and authentication data

If you create an account, we may process:

• name;
• email address;
• email-verification status;
• profile image where provided;
• authentication credentials and account identifiers;
• session identifiers;
• session expiry information;
• IP address and browser/user-agent information used for account security.

If you choose Google sign-in, Google supplies the basic identity and account information needed to authenticate you, such as its account identifier, name, email address, email-verification status and profile image where available. Google sign-in does not provide B4GAMBLE with your date of birth, contacts, mailbox contents or a gambling profile. Authentication tokens are restricted to the server-side account system and are not used for Programme or commercial personalisation.

10-Step Programme data

The account may store the minimum facts needed for requested continuity:

• enrollment, mission, task and completion status;
• XP, achievements, streak and activity dates;
• timezone;
• goal direction, review date, confidence and status;
• boundary category, a value you enter, structured method, review date and status;
• neutral technical continuity markers.

Your raw Moment Map, goal wording, early-signal wording, boundary rule, execution detail and coping wording are kept in memory or tab-scoped browser session storage. New Programme routes do not save that narrative to B4GAMBLE's application database. It normally ends with the browser tab session and you can clear it from the Programme Dashboard.

Historic Programme rows created before this local-first change may remain in an account until deletion or an approved legacy cleanup. They are not used to repopulate current narrative inputs and remain available to authenticated access and erasure processes.

Programme information is not commercial targeting data. B4GAMBLE does not require a medical diagnosis or treatment history to use ordinary Programme functionality.

Anonymous Programme sessions

An anonymous Programme session uses an opaque cookie token so the server can maintain neutral task state. The raw narrative is not included in that request.

If you choose Google while saving Mission 01, the browser may keep a marker for up to approximately 10 minutes containing only the exact opaque journey identifier, fixed claim intent, version and timestamps. It is used only to match the same tab after the sign-in return. Local content moves only after the server validates the pending claim.

Access to the current anonymous Programme session expires after approximately 24 hours. A short-lived account-claim token expires after approximately 30 minutes. These are access-expiry periods; physical database cleanup periods are still being verified.

We process account and ordinary Programme information where necessary to provide features you request and perform our agreement with you.

We process security, abuse-prevention, service-reliability and limited diagnostic information where necessary for our legitimate interests in operating a secure and reliable service, balanced against your rights and expectations.

We process information where necessary to comply with legal obligations.

Where we intentionally process special-category information, including health information, we also identify an applicable condition under Article 9 UK GDPR.

Ordinary acceptance of our Terms is not treated as a substitute for an Article 9 condition.

Where explicit consent is required, we ask for it separately and allow you to withdraw it.

Information about physical or mental health can receive additional protection under UK data-protection law.

B4GAMBLE minimises gambling-control and vulnerability information. We do not intentionally create a commercial health or vulnerability profile.

Raw Programme narrative remains in the browser session rather than being cloud-saved. Do not enter a diagnosis or treatment history; it is not needed for the Programme.

Where the legal basis necessary for storing a sensitive field is not established, the field remains local, ephemeral or unavailable for cloud saving in Great Britain.

Protected Help

Protected Help is separated from B4GAMBLE's commercial experience.

Visiting Protected Help, using a support route, or showing possible vulnerability must not cause B4GAMBLE to:

• increase gambling advertising;
• rank a casino differently for you;
• personalise a bonus;
• create an affiliate targeting segment.

Protected Help remains available independently of commercial eligibility and without an age-attested account.

Self-Check

The Great Britain launch version of Self-Check works locally in your browser.

Your individual answers and result state are not sent to B4GAMBLE's application database and are not used for casino, bonus or affiliate recommendations.

The page may still generate ordinary technical request data needed to serve and secure a web page.

Personal Limit Tracker

The Great Britain launch version of the Personal Gambling Limit Tracker processes the amounts you enter locally in the page.

B4GAMBLE does not use those entries to calculate an amount that it considers safe or affordable for you to gamble.

Those entries are not used to recommend casinos or bonuses. The entered values are not stored in B4GAMBLE's application database.

Technical and security data

We may process technical information needed to operate and protect B4GAMBLE, such as:

• IP address;
• browser or device information;
• request time;
• requested URL;
• authentication/security events;
• error and diagnostic information;
• country signals supplied by infrastructure providers where relevant to jurisdiction controls.

We limit technical logs to what is reasonably needed for security, reliability, fraud/abuse prevention and debugging.

Affiliate-link information

Some links on B4GAMBLE are affiliate links.

When affiliate routing is enabled, B4GAMBLE may process information needed to determine whether a commercial destination is available for the relevant jurisdiction, such as:

• affiliate redirect identifier;
• country signal;
• optional currency or language context;
• diagnostic status where a redirect cannot be completed.

Following an affiliate link may take you to an operator or affiliate-network domain. That recipient may receive information normally associated with a web request and may process the referral under its own privacy notice.

B4GAMBLE must not attach Self-Check, Protected Help or Programme vulnerability information to affiliate referrals.

Communications

If you contact B4GAMBLE directly, we process the contact details and content necessary to respond.

The current application defines account-security, specifically user-requested Programme reminder and separately opted-in Programme-engagement purposes. Automated email delivery and Programme reminders are not active because no delivery provider is selected. Google sign-in, age confirmation, Terms acceptance and Programme participation do not create reminder or marketing permission. Commercial marketing email remains disabled.

Future Programme messages must be short and generic, use the current account email resolved by the server and exclude private Programme narrative, Self-Check answers, Personal Limit Tracker amounts, gambling offers and tracking pixels.

B4GAMBLE uses, or may use, storage necessary for features you request, including authentication and short-lived Programme sessions.

Strictly necessary storage does not require opt-in consent where the applicable PECR exception applies.

At this launch stage, B4GAMBLE's application code does not contain a dedicated behavioural advertising or user-level analytics SDK.

If we introduce analytics that qualifies for the statutory statistical-purpose exception, we will provide the required clear information and simple means to object.

If we introduce storage/access technology for advertising, ad affiliation, cross-site tracking or similar non-exempt purposes, we will obtain consent before using it where required.

We will update this Policy if our storage or tracking practices materially change.

Analytics

B4GAMBLE does not use Self-Check answers, Personal Limit Tracker entries or private Programme vulnerability information for analytics about individual users.

We may use aggregate statistics about service performance or usage where permitted by law and designed so that the statistics are not used to identify or profile individual visitors.

We use service providers where needed to host the application and database. Repository evidence currently identifies Vercel hosting and Prisma Postgres database services. If you choose Google sign-in after it is externally configured, Google also processes the authentication request and basic identity information under its own applicable terms and privacy information.

Contracting entities, processing locations, subprocessors, retention and transfer safeguards are under launch verification. B4GAMBLE will not present an unverified safeguard as complete. No email delivery provider has been selected.

When you voluntarily follow a future governed link to a gambling operator or affiliate network, that recipient may process information as a separate controller under its own privacy notice. GB referral activity is currently disabled.

We may also disclose information where required by law, court order or a competent authority, or where reasonably necessary to establish, exercise or defend legal rights.

We do not disclose Protected Help, Self-Check or private Programme vulnerability information to gambling operators for marketing or commercial personalisation.

International transfers

The controller is based in the United States and service-provider processing may occur outside the United Kingdom.

Where a transfer is a restricted transfer, B4GAMBLE must establish and document the applicable lawful mechanism and required transfer assessment before relying on it. That evidence review remains open for launch.

UK representative

A UK representative is required for the intended GB service. B4GAMBLE has not yet appointed or published one. We will add real representative contact details after an appointment is completed.

We keep personal data only for as long as needed for its purpose. Current implemented boundaries include:

• raw Programme narrative: browser tab session only, with an explicit local-clear control;
• Google claim-continuation marker: up to approximately 10 minutes in the current tab only;
• anonymous Programme access: approximately 24 hours;
• pending Programme claim access: approximately 30 minutes;
• Self-Check answers/results and Personal Limit Tracker entries: no B4GAMBLE application-database retention;
• account, authentication-provider metadata, progress, rewards and structured Programme continuity: while needed to provide the requested account and until verified deletion or another applicable event;
• historic Programme narrative: until verified deletion or an approved legacy cleanup;
• information required for a legal claim or obligation: for the required period.

Provider authentication tokens are excluded from ordinary data-subject exports and are deleted from the active database with the linked account row. Provider-side token and record lifecycles still require external verification.

Physical cleanup periods for expired rows, logs and provider backups are still being verified. Deletion applies to the active application database; encrypted provider backups may expire on a separate verified schedule and must not be restored without reapplying relevant erasures.

Security

B4GAMBLE uses controls including authenticated access, private cookies, encrypted OAuth token storage, exact server field allow-lists, restricted server-side access and bounded error responses.

No internet service can guarantee absolute security.

If a personal-data breach occurs, B4GAMBLE will assess risk, keep an incident record and make notifications required by applicable law.

Your rights

Depending on the circumstances, UK data-protection law may give you the right to:

• be informed about our processing;
• request access to your personal data;
• ask us to correct inaccurate personal data;
• request erasure;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive certain data in a portable format where data portability applies;
• withdraw consent where processing is based on consent;
• complain to the Information Commissioner's Office.

Requests: privacy@7be.io

We may need to verify your identity. Some rights are subject to legal exceptions. We respond without undue delay and ordinarily within one month. If a lawful extension is needed because a request is complex or numerous, we will explain this within the first month.

Automated decisions and profiling

B4GAMBLE does not use Self-Check or Programme information to make solely automated decisions that produce legal or similarly significant effects.

Self-Check provides a local, non-clinical reflection summary. It does not determine eligibility to gamble, diagnose a health condition, establish affordability or decide which gambling product you should use.

B4GAMBLE must not turn that result into commercial gambling personalisation.

Children and people under 18

B4GAMBLE's persistent account, Programme saving, casino comparison, bonus and affiliate experience is intended only for adults aged 18 or over. Account creation uses an unchecked self-attestation; this launch does not collect date of birth or perform KYC.

We do not knowingly design gambling marketing for children. Help and harm-prevention information remains open without an account.

If we discover that an under-18 user has created an account contrary to the age requirement, we may close the account and delete information where appropriate.

Affiliate relationships

B4GAMBLE may receive a commission from a future eligible governed link. GB commercial and referral activity is currently disabled.

Affiliate compensation does not determine Editor Score or natural editorial ranking. Commercial relationships do not change factual licensing information, operator terms, Protected Help content or private vulnerability information.

Any sponsored placement must be clearly distinguishable from an editorial conclusion.

Changes to this Policy

We may update this Policy when our product, processing or legal obligations change. We will update the date at the top and provide additional notice where a change materially affects processing.

Complaints and contact

Send a privacy complaint, question or rights request to:

privacy@7be.io

We record and investigate privacy complaints through our rights and complaints workflow. You also have the right to complain directly to the UK Information Commissioner's Office; contacting B4GAMBLE first is not a condition of that right.

An ICO fee/registration assessment remains open. We will not publish a registration claim until it is verified.