Compliance by design, stated plainly
What we do, what we do not do, and where each registration stands today.
Licensed operators only
We contract exclusively with operators holding a valid licence in the jurisdiction where they offer games. We check the licence against the regulator's public register before signing and periodically after.
KYC/AML as technology support
Our mobile signals support the operator's KYC and AML processes. They are inputs to the operator's decisions. They do not constitute, and are not a guarantee of, regulatory compliance — which remains the operator's responsibility.
Zero custody
We never receive, hold or transfer player funds. Payments flow between players and the operator through the operator's own providers.
Privacy
We process the minimum data needed for each check, as a processor on behalf of the operator, with retention limits defined by contract and local law.
Security
Encryption in transit and at rest, scoped API keys, signed webhooks, least-privilege access and per-request audit trails.
Traceability
Every request carries a trace ID end to end, so any decision can be reconstructed during an audit.
Registrations and certifications
Read from a versioned file. We do not claim any licence or certification until it is issued.
| Item | Scope | Status |
|---|---|---|
| MINCETUR — technology provider registration | PE | |
| Coljuegos — technology provider requirements | CO | |
| ISO/IEC 27001 — information security | Global | |
| Independent test lab review (platform) | Global | |
| Peru — personal data bank registration (Law 29733) | PE | |
| Colombia — national database registry (RNBD) | CO |