burger icon

Privacy Policy

This privacy policy explains how Psk, operated through the domain psk-uk.com, collects, uses, stores, shares, and protects personal data of players and website visitors, including individuals located in the United Kingdom and other countries. It applies to all use of the psk-uk.com website, related products, and services provided under the Psk brand.

Effective date: 6 November 2025 (this version remains applicable throughout 2026 unless replaced).

OBSERVE: You need to understand what happens to your data when you visit, register, or play on psk-uk.com.

EXPAND: This policy clarifies our legal bases under EU GDPR, UK GDPR, the Croatian legal framework, and, where relevant, Mexican privacy law, and explains your rights and our duties.

REFLECT: By reading this document before using our services, you can make informed decisions about whether and how you wish to share your personal data with Psk.

Who We Are

OBSERVE: The services available on psk-uk.com under the Psk brand are operated by a Croatian company within a wider Central European betting group.

EXPAND: For data protection purposes:

  • Data controller: Hattrick-PSK d.o.o., a Croatian limited liability company (d.o.o.).
  • Registered office / headquarters: Sv. Leopolda Mandića 14, 21204 Dugopolje, Croatia.
  • Country of establishment: Republic of Croatia.
  • Regulatory context: Hattrick-PSK d.o.o. holds a license issued by the Ministry of Finance of the Republic of Croatia (Porezna uprava) for organizing online games of chance within Croatia under license reference UP/I-461-04/20-02/406, registry number 513-07-21-01-21-5. This gambling license applies to Croatian operations and does not provide gambling regulatory protection for players in the United Kingdom.
  • Group affiliation: Hattrick-PSK d.o.o. is a subsidiary of Fortuna Entertainment Group, a Central European betting conglomerate.
  • UK licensing status: Psk / psk-uk.com is not licensed by the UK Gambling Commission (UKGC). UK players therefore do not benefit from UKGC, IBAS, or GamStop protections in relation to gambling activities; this privacy policy only governs data protection, not gambling regulation.
  • Official information sources: Additional corporate and regulatory information is available (in Croatian) via casino.psk.hr and the official PSK pages such as Terms & Conditions, Privacy Policy, and the Croatian Tax Administration (Porezna uprava) at porezna-uprava.hr.

Data protection contact (DPO / privacy team):

  • Email: dpo@psk-uk.com
  • Postal address: Data Protection Officer, Hattrick-PSK d.o.o., Sv. Leopolda Mandića 14, 21204 Dugopolje, Croatia (please mark the envelope "Data Protection").
  • Telephone: not specified in this policy; please use written channels for privacy matters.

REFLECT: For all processing of personal data related to psk-uk.com, Hattrick-PSK d.o.o. acts as the controller and is primarily subject to EU GDPR and Croatian law. Where we target or monitor individuals in the UK, we also comply with the UK GDPR and the UK Data Protection Act 2018, and where we handle personal data of individuals in Mexico, we take into account the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP).

What Personal Data We Collect

OBSERVE: When you interact with Psk on psk-uk.com, we collect different categories of information needed to operate a secure online gambling platform and to comply with legal obligations.

EXPAND: Depending on how you use our services, we may collect and process the following categories of data:

  • Identification and contact data: full name, date of birth, nationality, residential address, email address, mobile and/or landline numbers, preferred language, and copies of identity documents (ID card, passport, driving licence) and proof of address used for KYC/AML checks.
  • Account data: username, encrypted password, security questions/answers, account settings, responsible-gambling preferences (such as deposit or loss limits and any self-exclusion applied on our platform), communication preferences, and account status (active, suspended, closed).
  • Payment and financial data: partial payment card details (such as masked PAN, expiry date), bank account identifiers, e-wallet or other payment instrument identifiers, transaction history, deposits, bets, wins, withdrawals, chargeback information, and any anti-fraud flags. We do not publish our internal bank details in this policy.
  • Technical and device data: IP address, approximate location derived from IP, device identifiers, browser type and version, operating system, language settings, access times, login logs, referrer URLs, and similar technical information collected through server logs and security tools.
  • Usage and behavioural data: login times and duration, pages visited, clicks, scrolling behaviour, games viewed or played, betting history, stakes and outcomes, bonuses claimed, promotional offers viewed or used, interactions with customer support, and responses to surveys.
  • Cookies and similar technologies data: identifiers stored in cookies, web beacons, pixels and similar tools that enable us to recognise your browser or device, remember your preferences, provide core functionality, measure performance, and deliver marketing (where permitted).
  • Communication data: copies or logs of emails, chat transcripts, messages submitted through any contact channels, call recordings (where applicable and permitted by law), complaint records, and notes created by our support or risk teams.
  • Regulatory and dispute data: information related to regulatory inquiries, audits by Porezna uprava or other authorities, anti-money laundering (AML) and counter-terrorist financing (CTF) checks, and data related to disputes, court or administrative proceedings (including those before Croatian courts such as the Municipal Court (Općinski sud)).

REFLECT: We strictly limit the data we collect to what is necessary for providing and improving the Psk services on psk-uk.com, meeting regulatory requirements, preventing fraud, and offering responsible and secure entertainment.

Legal Basis for Processing

OBSERVE: Data protection laws require us to identify a lawful basis before we process your personal data.

EXPAND: We rely on different legal grounds under EU GDPR and UK GDPR (and, where applicable, Mexican law) depending on the purpose:

  • Performance of a contract: We process personal data that is necessary to create and manage your Psk account, verify your identity, provide betting and gaming services, handle deposits and withdrawals, apply bonuses, manage responsible-gambling tools, provide customer support, and enforce the terms and conditions governing your use of psk-uk.com.
  • Compliance with legal obligations: We process data to comply with obligations under Croatian law (including gambling regulations overseen by the Ministry of Finance / Porezna uprava), EU and UK AML/CTF rules, tax and accounting requirements, and other mandatory reporting duties. This includes identity verification, transaction monitoring, record-keeping, and cooperation with competent authorities. For Mexican residents, we also consider obligations under the LFPDPPP where it applies.
  • Legitimate interests: We may process your data where necessary for our legitimate interests, provided these are not overridden by your rights and freedoms. These interests include:
    • maintaining network and information security, preventing fraud and abuse, and protecting the integrity of our systems;
    • detecting and responding to suspicious activity, account misuse, or violations of our terms;
    • improving our products, services, and website performance, including analytics and service development;
    • defending and enforcing legal claims, handling complaints, and managing business risks;
    • coordinating operations within Fortuna Entertainment Group, such as reporting, internal audit, and compliance.
  • Consent: We rely on your explicit consent where required by law, for example:
    • sending you electronic marketing communications (email, SMS, push notifications) that are not covered by the "soft opt-in" exemptions;
    • using certain non-essential cookies and similar technologies for personalised advertising or extended analytics;
    • processing special categories of personal data (if any) in situations where consent is legally required.

REFLECT: When we ask for consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before withdrawal. Where we rely on legitimate interests, you have the right to object, and we will assess your objection in line with EU GDPR, UK GDPR, and, where relevant, Mexican privacy principles.

Purpose of Processing

OBSERVE: Personal data collected through psk-uk.com is used for clearly defined and lawful purposes.

EXPAND: We use your personal data for the following main purposes:

  • Providing and administering services: creating and maintaining your Psk account, enabling access to games and betting services, processing deposits and withdrawals, applying bonuses and promotions, managing responsible-gambling settings, and delivering customer support.
  • Compliance and risk management: conducting identity checks, age verification, AML/CTF screening, transaction monitoring, and record-keeping required by Croatian and EU law (and recognised by UK and other relevant jurisdictions), as well as cooperating with regulators such as Porezna uprava.
  • Website operation and improvement: operating, maintaining, and troubleshooting psk-uk.com, optimising performance, diagnosing technical issues, and enhancing usability and user experience based on aggregated usage statistics and behavioural analysis.
  • Marketing and personalisation: (where permitted) sending promotional offers, bonuses, newsletters, and information about services of Psk and, where appropriate, the wider Fortuna Entertainment Group; tailoring content and offers based on your preferences, account activity, and permitted profiling.
  • Analytics and statistics: analysing aggregated data to understand trends, game performance, user behaviour patterns, campaign effectiveness, and to support responsible business decisions.
  • Fraud prevention and security: detecting and preventing fraudulent transactions, account misuse, money laundering, bonus abuse, unauthorised access, and other threats to the security or integrity of psk-uk.com and related systems.
  • Legal claims and dispute resolution: managing complaints and disputes, responding to claims or investigations, enforcing our terms and conditions, and protecting our rights, property, and the rights and safety of our users and third parties.

REFLECT: We do not use your personal data for purposes that are incompatible with the ones listed here. If we intend to repurpose your data in a materially different way, we will update this policy and, where required, inform you in advance or obtain your consent.

Disclosure & Sharing

OBSERVE: To operate Psk effectively, we share personal data with carefully selected third parties under strict conditions.

EXPAND: We may disclose your personal data to the following categories of recipients, always under appropriate contractual and security safeguards:

  • Payment and financial service providers: banks, payment card processors, e-wallet providers, and other payment institutions that process deposits, withdrawals, chargebacks, and related financial operations.
  • Technical and infrastructure providers: hosting providers, cloud services, IT support, data storage and backup providers, security and anti-fraud tools, and other vendors necessary to operate psk-uk.com.
  • Analytics and marketing partners: providers of analytics, customer relationship management (CRM), email delivery, SMS gateways, and (with your consent where required) advertising networks and social media platforms that help us send communications and measure campaign effectiveness.
  • Group companies: entities within Fortuna Entertainment Group that provide shared services such as risk management, internal audit, compliance, finance, or technology support, subject to intra-group data protection agreements.
  • Regulators and public authorities: Croatian regulators (including the Ministry of Finance / Porezna uprava and other competent authorities), tax administrations, courts (such as the Croatian Municipal Court (Općinski sud)), law enforcement bodies, and - where applicable - supervisory data protection authorities in the EU, UK, and other jurisdictions. We provide information only when legally required or when necessary to protect our rights or those of others.
  • Professional advisers: lawyers, auditors, consultants, and other professionals who assist us with legal, financial, or regulatory matters under confidentiality obligations.
  • Business transfers: in connection with a merger, acquisition, restructuring, sale of assets, or similar corporate transaction involving Hattrick-PSK d.o.o. or Fortuna Entertainment Group, your data may be disclosed to prospective or actual buyers and their advisers, subject to appropriate safeguards.

We do not share your data with the UK Gambling Commission (UKGC), IBAS, or UK self-exclusion schemes such as GamStop in connection with gambling regulation because Psk / psk-uk.com is not licensed or connected to those schemes. Any sharing with advertising partners for targeted marketing occurs only where permitted by law and, where required, with your consent.

REFLECT: All third parties that process personal data on our behalf are bound by contractual data protection obligations and may not use your data for their own independent purposes.

International Transfers

OBSERVE: Because Hattrick-PSK d.o.o. is based in Croatia and operates within an international group, your data may be processed or stored outside your country of residence.

EXPAND: We may transfer your personal data to the following locations:

  • Croatia and other EU/EEA countries: Our main operations and many of our service providers are located in Croatia and within the European Economic Area (EEA). These transfers take place within the EU/EEA, where EU GDPR applies.
  • United Kingdom: Certain partners or group functions may be located in or may access data from the UK. The UK currently benefits from an EU adequacy decision, and transfers between the EU/EEA and UK are treated similarly to intra-EEA transfers.
  • Other countries outside the EU/EEA and UK: Some technology, analytics, or support providers may be located in or access data from countries that do not provide an equivalent data protection level.

When transferring data to countries without an adequacy decision, we implement appropriate safeguards, such as:

  • European Commission Standard Contractual Clauses (SCCs);
  • the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the SCCs where UK law applies;
  • intra-group agreements within Fortuna Entertainment Group that incorporate data protection safeguards;
  • technical and organisational measures such as encryption, access controls, and minimisation.

REFLECT: You may request a copy of the relevant transfer safeguards by contacting our DPO, subject to redactions necessary to protect security and commercial confidentiality.

Data Retention

OBSERVE: We keep personal data only for as long as necessary for the purposes for which it was collected and to meet legal obligations.

EXPAND: Retention periods depend on the type of data and applicable laws (including Croatian, EU, and UK rules, and, where relevant, Mexican legal requirements):

  • Account and identification data: typically retained for the duration of your relationship with Psk and generally for up to five (5) years after account closure, or longer where required by AML/CTF or gambling regulations or to defend legal claims.
  • Transaction and payment data: retained for at least five (5) to ten (10) years after the end of the relevant financial year, in line with accounting and tax laws.
  • Usage and behavioural data: retained in identifiable form for a period necessary for analytics and security purposes, usually up to two (2) years, after which it may be aggregated or anonymised.
  • Marketing data: retained until you withdraw your consent or object to marketing, or for a period (for example, up to two (2) years) after your last meaningful interaction with us, whichever occurs first, unless law requires longer retention.
  • Complaint and dispute data: retained for the duration of the complaint and for up to six (6) years after resolution or the conclusion of any related proceedings.
  • Cookies: stored on your device for periods ranging from a browser session to several months or years, depending on the cookie type and purpose; details are provided in our cookie notices and tools.

Once data is no longer required, we will delete it or irreversibly anonymise it, unless we must keep it for a longer period under applicable law.

REFLECT: Our retention practices are regularly reviewed to ensure they remain aligned with legal requirements and the principle of data minimisation.

Your Rights

OBSERVE: You have a range of rights regarding your personal data under EU GDPR, UK GDPR, and, where applicable, Mexican privacy law (LFPDPPP).

EXPAND: Subject to the conditions and exceptions in applicable laws, you may exercise the following rights:

  • Right of access: to obtain confirmation whether we process your personal data and receive a copy along with information about our processing activities.
  • Right to rectification: to have inaccurate or incomplete personal data corrected or updated.
  • Right to erasure ("right to be forgotten"): to request deletion of your personal data where there is no legal basis for us to continue processing (for example, where it is no longer necessary for our purposes, or where you withdraw consent and no other legal ground applies). We may retain data where required by AML/CTF or gambling regulation or to defend legal rights.
  • Right to restriction of processing: to request that we limit processing under certain circumstances (for example, while we verify accuracy of data or assess an objection).
  • Right to object: to object at any time to processing based on legitimate interests, including profiling related to those interests, and to object specifically to direct marketing at any time. We will stop processing for marketing once you object.
  • Right to data portability: to receive certain personal data you have provided to us in a structured, commonly used, machine-readable format and to request that we transmit it to another controller where technically feasible.
  • Rights related to automated decision-making: where we make decisions solely by automated means that significantly affect you (for example, certain risk or fraud-related decisions), you may request human intervention, express your point of view, and contest the decision, subject to applicable law.
  • Consent-related rights: where processing is based on consent, you may withdraw it at any time without affecting past processing carried out lawfully on the basis of consent.
  • Mexican ARCO rights (for individuals in Mexico): under the LFPDPPP you may exercise rights of Access, Rectification, Cancellation, and Opposition (ARCO), as well as revoke consent and limit the use or disclosure of your personal data. These rights align in substance with the GDPR rights described above, and we will handle such requests in a manner consistent with both frameworks where applicable.

Procedures, timeframes, and cost:

  • You may exercise your rights by contacting our DPO at dpo@psk-uk.com or by sending a written request to the postal address listed in the "Who We Are" section.
  • We may ask you to provide information necessary to verify your identity (for example, account details or proof of identity) before responding.
  • We aim to respond within 30 days of receiving a valid request. This period may be extended by up to two additional months for complex or multiple requests, in which case we will inform you of the extension and reasons within the initial 30 days.
  • We generally handle requests free of charge. We may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, in line with GDPR and applicable local law.

REFLECT: Your rights are central to how we manage personal data. We encourage you to contact us if you have questions or wish to exercise any of your rights under EU GDPR, UK GDPR, or Mexican LFPDPPP.

Cookies & Tracking Technologies

OBSERVE: psk-uk.com uses cookies and similar technologies to operate the site, improve performance, and, where allowed, personalise your experience.

EXPAND: We use the following main types of cookies:

  • Strictly necessary / functional cookies: typically session or short-lived cookies required for core functions, such as keeping you logged in, processing bets, maintaining security, and remembering essential preferences. These are generally set in response to your actions and cannot be switched off without affecting site functionality.
  • Performance and analytics cookies: first-party or third-party cookies that collect aggregated information about how visitors use psk-uk.com (for example, pages visited, time spent, error messages). We use this data to improve the site and services.
  • Advertising and targeting cookies: cookies or similar technologies used to deliver, measure, and optimise marketing campaigns, including personalised offers or ads on our site or third-party platforms, where permitted by law and your consent.
  • Persistent and session cookies: session cookies expire when you close your browser; persistent cookies remain on your device for a specified period or until you delete them, enabling us to remember your settings and recognise your device on subsequent visits.

Managing cookies:

  • You can configure your browser to block or delete cookies, or to alert you when cookies are being used. The method depends on the browser; please refer to your browser's help section.
  • Where available, we may provide on-site tools (such as a cookie banner or preference centre) allowing you to consent to or reject non-essential cookies, especially for analytics and advertising.
  • If you disable certain cookies, some features of psk-uk.com may not function as intended.

REFLECT: By adjusting your browser settings and our on-site cookie controls, you can influence how psk-uk.com uses cookies, while we remain responsible for ensuring that any non-essential tracking is deployed in compliance with applicable law.

Data Security

OBSERVE: Protecting your personal data and maintaining the integrity of psk-uk.com is a priority for Psk.

EXPAND: We apply technical and organisational measures designed to provide a level of security appropriate to the risks associated with online gambling services, including:

  • Encryption in transit and at rest: use of Transport Layer Security (TLS) 1.2 or higher to protect data transmitted between your browser and our servers; encryption or pseudonymisation of sensitive data where feasible in our databases and backups.
  • Access controls and authentication: access to personal data is restricted to authorised personnel and service providers who need it for their duties, applying principles of least privilege and role-based access; administrative systems use strong authentication, and we support secure user authentication mechanisms.
  • Network and system security: deployment of firewalls, intrusion detection and prevention systems, anti-malware tools, logging and monitoring of system events, and segmentation of critical systems.
  • Operational security and audits: regular reviews of our security practices, vulnerability assessments, risk analyses, and technical and organisational controls. We strive to align our information security management with recognised industry standards such as ISO 27001 and SOC 2. This alignment does not imply formal certification unless explicitly stated on psk-uk.com.
  • Staff training and confidentiality: employees and contractors with access to personal data receive training on data protection, confidentiality, and security, and are bound by confidentiality obligations.
  • Incident response: we maintain procedures for detecting, investigating, and responding to suspected security incidents. Where required by EU GDPR, UK GDPR, or other applicable law, we will notify the relevant supervisory authorities and, when necessary, affected individuals without undue delay.

REFLECT: While no online system is completely risk-free, we continuously review and improve our security controls to protect personal data processed in connection with Psk on psk-uk.com.

Complaints & Contacts

OBSERVE: You may wish to raise questions, exercise your rights, or lodge complaints about how we process your personal data.

EXPAND: You can contact us and, if needed, escalate matters to supervisory authorities:

  • Contacting Psk (internal resolution):
    • Email our DPO / privacy team at dpo@psk-uk.com.
    • Write to: Data Protection Officer, Hattrick-PSK d.o.o., Sv. Leopolda Mandića 14, 21204 Dugopolje, Croatia, marking your letter "Data Protection".
    • Provide your full name, contact details, account identifier (if any), and a clear description of your complaint or request.
  • Handling of complaints:
    • We will acknowledge receipt of your complaint or request as soon as reasonably practicable.
    • We aim to provide a substantive response within 30 days. For complex matters or multiple requests, this period may be extended by up to two further months; we will inform you if an extension is needed and why.
  • Supervisory authorities (external escalation):
    • Croatian supervisory authority (primary): If you are dissatisfied with our response, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP): https://azop.hr, email: azop@azop.hr.
    • United Kingdom (for individuals in the UK): You may contact the UK Information Commissioner's Office (ICO): https://ico.org.uk, telephone (UK): +44 303 123 1113.
    • Mexico (for individuals in Mexico): You may contact the National Institute for Transparency, Access to Information and Personal Data Protection (INAI): https://www.inai.org.mx, using the contact channels indicated on its official website.
    • Other EU/EEA countries: If you live in another EU/EEA country, you may have the right to complain to your local data protection authority as well as to AZOP.
  • Court proceedings: Without prejudice to your rights to refer matters to supervisory authorities, you may also bring proceedings before the competent courts, which may include courts in Croatia (for example, the Municipal Court (Općinski sud)) or, in some cases, courts in your country of residence, as permitted by applicable law.

Please note that, because Psk / psk-uk.com does not hold a UKGC licence, gambling disputes cannot be escalated to UK gambling dispute resolution schemes such as IBAS. This does not affect your rights under data protection law.

REFLECT: We encourage you to contact us first so that we can attempt to resolve any issues directly, but you always retain the right to approach a supervisory authority or court.

Updates

OBSERVE: Data protection laws, regulatory expectations, and our services evolve over time, so we may need to update this privacy policy.

EXPAND: When we make material changes to how we process your personal data or to your rights, we will:

  • publish the updated policy on psk-uk.com with a revised "Last updated" date;
  • where appropriate, notify you by email and/or account notifications;
  • display banners or prominent notices on psk-uk.com highlighting key changes.

For significant changes that materially affect your rights or the way we use your data, we will, where reasonably practicable, provide at least 30 days' advance notice before the new version takes effect, unless an earlier update is required by law or to address urgent security or compliance needs.

Version control and change log:

  • Last updated: 6 November 2025.
  • Key changes in this version: clarification of the role of Hattrick-PSK d.o.o. as controller for Psk; explicit information about the lack of a UKGC licence; updated explanations of international transfers and security measures; alignment with UK GDPR and references to Mexican LFPDPPP and INAI for relevant users.
  • Previous versions of this policy may be provided on request, where available.

If you do not agree with an updated policy, you may close your account and request, where allowed, deletion or restriction of your data in line with the section "Your Rights". Continued use of psk-uk.com after the effective date of an update will be treated as acknowledgement of the revised policy, to the extent permitted by law.

REFLECT: By maintaining transparent and up-to-date privacy information, Psk aims to ensure that users of psk-uk.com, including those in the UK, EU, and Mexico, understand how their personal data is handled throughout 2025, 2026, and beyond.