Back to Database

Privacy Policy for iGaming Affiliate Managers Database

Last Updated: August 27, 2026

This Privacy Policy describes how the iGaming Affiliate Managers Database ("the Database," "we," "us") collects, uses, and protects information. Our platform is designed as a professional B2B resource to facilitate networking within the global iGaming affiliate industry.

We act as the data controller for all professional contact records published in the Database, including records submitted to us by other users of the platform ("community contributors"). The fact that a record was added by a community contributor, and not directly by our team, does not change our role or responsibilities as controller of that data, and does not limit the rights available to the individual the data is about (the "data subject").

1. Professional Contact Information

Our database contains business-related contact details (such as Telegram handles, professional emails, and MS Teams IDs) of affiliate managers.

  • Nature of Data: We process only professional, work-related information. We do not collect or display private personal data (home addresses, personal phone numbers, etc.). Community contributors are contractually required not to submit private, non-work-related information about any individual — see our Terms of Use for the Database.
  • Legal Basis (Legitimate Interest): We process this data based on our legitimate interest in connecting affiliate partners with brand representatives to foster industry growth. We have carried out and documented a Legitimate Interest Assessment (LIA) weighing this interest against the rights and reasonable expectations of the individuals listed. As explained in Section 3 below, any individual can object to this processing at any time, and we will honour that objection — this is an absolute right under Article 21 GDPR and is not conditional on us agreeing with the objection.
  • Data Sources:Information is aggregated from public professional profiles, company websites, and industry community contributions. Where a record is submitted by a community contributor rather than sourced directly by us, this is indicated in the record's metadata for internal accountability purposes.

2. User Data (Access Requests)

To access the full, unblurred database, we require users to provide a professional email address.

  • Usage: We use this email solely to verify access and provide occasional industry updates.
  • Privacy Guarantee: We strictly do not sell, rent, or lease our user lists to third parties. Your professional email is safe with us.
  • Distinction: This Section 2 concerns individuals who use the Database to search for contacts. It is separate from Section 3, which concerns individuals whose own contact details are listed in the Database. The two groups have different rights and are treated differently below.

3. Accuracy, Objection and Removal Rights of Listed Individuals

We strive for the highest data accuracy through our community-driven 'Reliability Score'.

  • Who can request removal: If you are a professional listed in our database — regardless of whether your entry was added by our team or by a community contributor — you may object to the processing of your data or request that it be corrected or removed.
  • How to request: Email af@aff.studio from the professional email address or messaging handle associated with the listing (or another means that lets us reasonably verify you are the person the record concerns, or their authorised representative). This verification step protects listed individuals from third parties fraudulently requesting the removal or alteration of someone else's business listing.
  • Response time: We aim to review and action all removal or correction requests within 5 business days. This is a service target, not a guaranteed deadline, and may take longer during periods of high request volume; we will acknowledge receipt of your request within 48 hours.
  • Suppression list: Once a record is removed following a verified request, we add the identifying details to an internal suppression list. Community contributors cannot re-add a suppressed record through the normal submission flow; any attempt to do so is reviewed manually before publication. This is intended to prevent the same listing from reappearing after a valid removal request.
  • Disputed requests: If we have reason to believe a removal request is fraudulent, or if the listed individual and their employer disagree about whether a business contact should remain listed (for example, because the listing is used by affiliate partners to reach an official company channel), we may request additional verification or contact the individual directly before finalising removal.
  • Data Correction: You may also contact us to update your brand association or manager details to ensure your partners can reach you correctly.

This process operates in addition to, and does not replace, any statutory data subject rights you may have under applicable law (see Section 7).

4. Data Security

We employ robust technical measures to secure our industry records and protect our users' information from unauthorized access.

Access to unpublished submissions and suppression-list data is restricted to authorised personnel only. We use row-level security and encryption in transit for data hosted with our infrastructure providers.

5. Data Retention

We retain professional contact records for as long as they remain relevant to the Database's purpose, or until a valid removal request is honoured, whichever is earlier. We review listings periodically and remove records that are no longer accurate or where the individual no longer works in an affiliate-facing role, where this comes to our attention. Suppression-list entries are retained indefinitely to prevent re-submission of removed records. Access-request emails (Section 2) are retained for as long as your access remains active, and deleted no later than 24 months after your last use of the Database.

6. International Data Transfers

Our infrastructure provider(s), including Supabase (hosted on AWS in the eu-west-1 region, Ireland), may process and store data outside your country of residence, including outside the European Economic Area. Where this involves a transfer of personal data from the EEA or UK to a country not covered by an adequacy decision, we rely on Standard Contractual Clauses or another lawful transfer mechanism with our processor(s).

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you;
  • Request correction of inaccurate data;
  • Request erasure of your data (see Section 3 for our process for listed individuals);
  • Object to processing based on legitimate interest, at any time and without needing to give a reason;
  • Request a copy of your data in a portable format, where applicable;
  • Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at af@aff.studio. If you are not satisfied with our response, you have the right to complain to your local supervisory authority.

8. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within the timeframe required by applicable law, and will notify affected individuals directly where the breach is likely to result in a high risk to their rights and freedoms.

9. Minors

The Database is intended for professional, business-to-business use only. We do not knowingly collect or list data belonging to individuals under 18. If you believe a listing concerns a minor, please contact us immediately for removal.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of any changes by posting the new policy on this page.