Last updated: April 9, 2026
This privacy policy aims to inform users of the EVA Bet site (evabet.gg) about how their personal data is collected, processed and protected, in accordance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679) and the French Data Protection Act of January 6, 1978 as amended.
Data controller : Association GML E-SPORTS, représentée par son collège de gestion (Baptiste Marchal, Frédéric Faraux, Romain Gadani)
Contact for the exercise of GDPR rights : asso.gml.esports@gmail.com
asso.gml.esports@gmail.com (priority and traced channel) or postal mail to the address of the registered office below. The Discord and Instagram channels remain open for general questions but are not recommended for GDPR requests.
Data Protection Officer (DPO) : No DPO has been designated. EVA Bet is not a public authority within the meaning of article 37.1.a of the GDPR, does not carry out large-scale regular and systematic monitoring of persons within the meaning of article 37.1.b (analysis in line with WP243 guidelines of the WP29), and does not process special categories of data on a large scale within the meaning of article 37.1.c. This analysis is reassessed annually by the management board of the association.
Address : 23 allée des Açores, 35200 Rennes, France
As part of the use of the EVA Bet site, the following personal data may be collected:
If you register via Discord or Google, we receive from these services your email address, your public identifier and, in the case of Discord, your avatar. No password is transmitted. This data is collected indirectly within the meaning of article 14 of the GDPR, and you are informed upon redirection to Discord or Google that these providers receive the information that you are registering on EVA Bet (see also §8 recipients and §9 transfers outside the EU). You may at any time choose registration by email + password to avoid these exchanges. For their own terms, see https://policies.google.com/privacy and https://discord.com/privacy.
To ensure the proper functioning and security of the Site, the following technical data may be collected automatically during your browsing:
Personal data is processed for the following purposes:
EVA Bet only uses cookies strictly necessary for the operation of the Site and the service explicitly requested by the user. No advertising, commercial profiling or behavioural tracking cookies are deposited. No consent banner is required, in accordance with article 82.II of the French Data Protection Act and CNIL deliberation no. 2020-091 of 17 September 2020.
These cookies are essential for the operation of the Site and are exempt from prior consent under article 82.II of the French Data Protection Act:
When you are redirected to Stripe (payment, subscription management), Discord or Google (OAuth authentication), these services place their own cookies on their respective domains. These cookies are governed entirely by their respective privacy policies (Stripe: https://stripe.com/privacy — Google: https://policies.google.com/privacy — Discord: https://discord.com/privacy).
Personal data is neither sold nor rented to third parties. It may be communicated to the following recipients, in strict compliance with their purposes and under a data processing agreement (DPA) compliant with article 28 of the GDPR:
By default, your username and your game statistics (points, rankings, success rate, streaks, badges) are publicly visible on the Site and may be indexed by search engines. You may at any time switch your profile to private from your account settings, which removes your username from public rankings and deindexes your profile. Public publication relies on the legal basis of contract execution (article 6.1.b of the GDPR): the competitive nature of the platform implies the diffusion of results.
As part of preventing abuse of the 14-day free trial period offered to new organizer subscribers, we implement a specific processing with the following characteristics:
prevent circumvention of the "one free trial per person" principle through repeated account creation or use of payment methods already used.
your normalized email address (lowercased, without "+suffix" alias, without dots for Gmail addresses) and the pseudonymized fingerprint of your credit card (Stripe "fingerprint" — a stable identifier produced by Stripe, which does not allow tracing back to the card number). No card number, expiry date or CVV is retained.
legitimate interest of the data controller (Article 6.1.f GDPR), for commercial fraud prevention.
three (3) years from the first use of the trial period, in a dedicated registry separate from the user account (the registry survives account deletion — this is what makes it effective).
upon a new subscription attempt from the same email or with the same credit card, you no longer benefit from the free trial period: your subscription starts immediately with a charge at subscription. You remain free to subscribe (the service is never refused), and the limitation automatically lifts after three (3) years.
you may exercise your right to object to this processing by contacting us (see Article 11). However, due to the fraud prevention purpose recognized by law, this request may be refused if it appears manifestly intended to circumvent the limitation.
Some of your data may be transferred outside the European Union as part of the use of our processors' services:
• Sentry (Functional Software, Inc.) — United States: transfers governed by standard contractual clauses (SCC) approved by the European Commission (art. 46.2.c of the GDPR).
• Google LLC — United States (if you use Google OAuth): transfers governed by the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023).
• Discord Inc. — United States (if you use Discord OAuth): transfers governed by standard contractual clauses (SCC).
• Stripe Payments Europe Limited — headquartered in Ireland (EU), with possible access by Stripe, Inc. (United States) for global technical support: transfers governed by the Stripe clauses (Stripe DPA + SCC).
These safeguards ensure an adequate level of protection for personal data transferred outside the EU. You may obtain a copy of the applicable SCCs on simple request to asso.gml.esports@gmail.com.
In accordance with article 32 of the GDPR, we implement appropriate technical and organisational measures to protect personal data against any unauthorised access, modification, disclosure or accidental or unlawful destruction:
In the event of a data breach presenting a risk to your rights and freedoms, we undertake to notify the French National Commission for Informatics and Liberties (CNIL) within 72 hours of becoming aware of the breach (article 33 of the GDPR), and to inform you as soon as possible if the breach is likely to result in a high risk (article 34 of the GDPR).
In accordance with the GDPR, you have the following rights regarding your personal data:
Obtain confirmation that data concerning you is being processed and receive a copy.
Have inaccurate or incomplete data concerning you corrected.
Request the deletion of your personal data, subject to legal retention obligations.
Receive your data in a structured, commonly used and machine-readable format.
Request the restriction of the processing of your data in certain cases provided by the GDPR.
Object to the processing of your data for legitimate reasons.
To exercise these rights, please contact us primarily by email at asso.gml.esports@gmail.com (recommended channel, traced and accessible to any person), or by postal mail to: GML E-SPORTS Association, 23 allée des Açores, 35200 Rennes, France. We will respond within a maximum period of one (1) month from receipt of your request, in accordance with article 12.3 of the GDPR (extendable by two months for complex requests, with reasoned information within the initial period). Proof of identity will only be requested in case of reasonable doubt as to your identity, in accordance with article 12.6 of the GDPR. The Discord and Instagram channels are available as a complementary means for general questions but are not recommended for transmitting sensitive personal data.
In case of difficulty or unsatisfactory response, you can lodge a complaint with the French National Commission for Informatics and Liberties (CNIL): 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — Telephone: +33 1 53 73 22 22 — Online complaint form: https://www.cnil.fr/fr/plaintes. You may also contact the supervisory authority of your country of residence in the European Union.
Providing an email address and username is necessary to create an account and use the service. If you refuse to provide this data, registration cannot be finalized. Choosing an avatar is optional (a default avatar is assigned).
When processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before this withdrawal. You can exercise this right by contacting us or by deleting your account from the settings.
EVA Bet calculates your game statistics (points, rankings, success rate, streaks, badges) in an automated manner from the results of your predictions. These processing operations constitute profiling within the meaning of article 4.4 of the GDPR, but do not produce a legal effect or a "similarly significant" effect on you within the meaning of article 22 of the GDPR. No purely automated decision having consequences for you is applied. The calculation logic is transparent and accessible in the ToS (article 4.3) as well as in the Site's documentation.
We reserve the right to modify this privacy policy. Any substantial modification is notified to users upon their connection to the Site and their acceptance is collected by explicit validation (acceptance modal). The date of last update as well as the version of the policy are indicated at the top of this page. The history of versions is kept by the editor for evidentiary purposes.
Registration on EVA Bet is open to persons aged 15 and over, in accordance with article 45 of the French Data Protection Act. Upon registration, the user certifies on their honour having reached this minimum age. Any registration of a minor under 15 constitutes a false declaration and will result in the deletion of the account upon its detection.
For users aged 15 to 17, subscribing to a paid "Organizer" subscription requires the express consent of the holder(s) of parental authority. EVA Bet reserves the right to request supporting evidence in case of reasonable doubt.
Holders of parental authority may at any time request the deletion of the account of their minor child by writing to asso.gml.esports@gmail.com, accompanied by proof of their status as a holder of parental authority. The deletion will be handled as a priority and within a maximum period of one month.
In accordance with article 17.1.f of the GDPR, data collected during a user's minority benefits from a reinforced right to erasure: the request for deletion made upon reaching adulthood is honoured without a request for motivation.