01Data Controller
The data controller is:
- STOPJEU SAS — operator of the OFFBET platform
- Legal form: Simplified Joint-Stock Company (SAS) — French law
- Share capital: €8,000
- Registered office: 99 avenue Achille Peretti, 92200 Neuilly-sur-Seine, France
- SIREN: 919 454 033
- SIRET: 919 454 033 00011
- Business activity code (APE/NAF): 62.01Z — Computer programming
For any question regarding your personal data, contact us at:
[email protected]
02Data We Collect
We only collect the data strictly necessary to operate our services.
Web application — my.OFFBET.app
| Category | What we collect |
|---|---|
| Account data | Email address, display name, country of residence. |
| Technical data | IP address, User Agent, usage logs. |
| App usage | Chosen settings, blocking preferences. |
OFFBET runs on a small social price, with a 3-day free trial and no card upfront. When you do pay us — your licence, or a subscription taken out earlier — the payment is handled entirely by Stripe, our payment processor. We never see or store your card number. We keep only the amount, the currency, the date and the payment reference, so that we can recognise your payment and answer you if you ask about it.
Android application
| Category | What we collect |
|---|---|
| Anonymous device ID | A random UUID generated locally on first launch. No link to your IMEI, Android ID, or any hardware identifier. |
| Device model + Android version | Used to adapt the app behaviour to your phone (Pixel, Samsung, Xiaomi, etc.). |
| Protection status | Whether OFFBET protection is active or not — transmitted every 5–15 min to the OFFBET server for companion monitoring. |
| Blocked attempts | Names of the gambling domains and apps blocked by the app, with attempt counts, kept 14 days for your statistics and companion reports. When the app detects a page that looks like a gambling site, its address is sent for verification so the site can be blocked for everyone. |
| Installed apps list | Read on your device when you open “Block a custom app”. The full list never leaves your device; only the apps you choose to block are synced to your account. |
| PIN code | If a PIN is set, its bcrypt hash (irreversible) is synced between your devices via the OFFBET server and used to check the code. The code itself is sent to the server over an encrypted connection when you set or change it, and kept as a separate AES-256 encrypted copy, used only to email it back to you after the delay you chose. With the FOR LIFE option, it is never sent back. |
What we do NOT collect
Apart from the names of blocked gambling domains and the addresses of suspected gambling pages described above, we do not collect your browsing history or your DNS queries. We do not collect GPS location, contacts, photos, messages, or any other sensitive personal data. No financial data is stored on our servers.
03How We Use Your Data
Your data is used exclusively to:
- Block access to gambling websites and apps via local DNS filtering on your device.
- Ensure the PIN-protected uninstall prevention works correctly.
- Monitor protection status and notify your companion in case of bypass attempts.
- Synchronise your settings and blocklist between your devices.
- Improve the stability and performance of OFFBET services.
- Send you, once, an email inviting you to review OFFBET on Trustpilot, after you have been using the app for at least a week. We don't share any of your data with Trustpilot, and leaving a review is entirely optional.
We never sell your data to third parties.
The support chat is built and hosted by OFFBET — there is no third-party chat provider such as Crisp or Tidio. Your messages stay with us: they are never sold, shared or used for advertising.
04Legal Basis
In accordance with the GDPR, the processing of your data is based on:
| Legal basis | What it covers |
|---|---|
| Contract performance | Ensuring the OFFBET service functions as intended. |
| Your consent | Certain features require your explicit approval (e.g., accessibility permissions, VPN activation). |
| Legitimate interest | Improving security, preventing fraud, and protecting vulnerable users from gambling harm. |
05Your Rights
You have the following rights over your personal data:
| Right | What it means |
|---|---|
| Access | Obtain a copy of the data we hold about you. |
| Rectification | Correct any inaccurate information. |
| Deletion | Request complete deletion of your data. |
| Restriction | Temporarily limit certain processing activities. |
| Objection | Refuse certain uses, such as automatic renewal. |
| Portability | Transfer your data to another provider. |
| Withdrawal of consent | Revoke any specific authorisation at any time. |
To exercise your rights, contact us at: [email protected]
06Technical Operations & Security
DNS filtering (100% local)
On Android, OFFBET uses the Android VpnService API to create a local VPN connection on your device. This VPN does not route your traffic to any external server.
Instead, it intercepts DNS queries locally on your phone, blocks gambling-related domains by returning an empty response, and forwards all other queries to public DNS resolvers (Google 8.8.8.8, Cloudflare 1.1.1.1 or Quad9 9.9.9.9).
No DNS query is ever sent to an OFFBET server — the same approach used by well-known apps such as AdGuard, Blokada and Freedom.to. Only the names of blocked gambling domains are reported, with counts, for your statistics.
Data transmission security
All communication between the OFFBET app and the OFFBET server (my.OFFBET.app) is encrypted using HTTPS / TLS 1.3.
The heartbeat signal sent every 5–15 minutes contains your anonymous device ID, the protection status, technical diagnostics (device model, app version, permission and battery state), your protection settings (PIN status, your custom blocked sites and apps) and the names of blocked gambling domains with attempt counts — never the rest of your browsing or your DNS queries.
AccessibilityService API (optional)
If enabled by the user, OFFBET uses the AccessibilityService API exclusively to:
- Detect attempts to activate a third-party VPN that would bypass the gambling protection.
- Detect changes to the device Private DNS settings.
- Detect when a blocked gambling app is launched in the foreground and bring you back to the home screen.
This service only reads what it needs on screen — system settings screens, the address bar of browsers and which app is in the foreground — to detect bypass attempts and gambling pages. When a page looks like a gambling site, its address is sent for verification so the site can be blocked for everyone. It never reads your messages, passwords or the content of other apps, and collects nothing else. It is optional and can be skipped during setup.
Device Administrator (optional)
If enabled by the user, OFFBET registers as a Device Administrator to prevent accidental or impulsive uninstallation of the app.
The user can always disable this protection by entering their PIN code. This feature is voluntary and can be skipped during setup.
PIN code protection
When you enable PIN protection:
- Disabling the protection or uninstalling the app requires entering the PIN code.
- The PIN is checked against a bcrypt hash (irreversible). When you set or change it, it is also sent to the OFFBET server over an encrypted connection: a separate AES-256 encrypted copy is kept only to email you the code after the delay you chose. With the FOR LIFE option, it is never sent back.
- If the hidden PIN option is chosen, nobody knows the code. Recovery by email is possible after the delay you chose (12 h, 24 h or 48 h); with the FOR LIFE option, the code can never be recovered.
- After 3 failed attempts, PIN entry is blocked for a while — longer after each new series of failures — and your Companion, if you have one, is alerted.
07Android Permissions Explained
The OFFBET Android app requests the following permissions. Each permission is explained below with its purpose.
| Permission | Purpose |
|---|---|
| Internet | Communicate with the OFFBET server (heartbeat, blocklist updates, account sync). |
| VpnService | Create a local VPN connection to filter gambling DNS queries on your device. No traffic is sent to an OFFBET server. |
| Foreground Service | Keep the DNS filtering and app blocking services running reliably in the background. |
| Boot Completed | Automatically restart protection after your phone reboots. |
| Notifications | Show a persistent notification confirming that protection is active. |
| Query All Packages | Allow you to select custom apps to block in OFFBET settings. |
| Ignore Battery Optimizations | Prevent Android from killing the protection service to save battery. |
| Device Administratoroptional | Prevent uninstallation of the app without entering the PIN code. |
| Accessibility Serviceoptional | Detect bypass attempts (third-party VPNs, Private DNS changes, blocked gambling apps launched) and trigger the PIN-protected tamper screen. |
All optional permissions can be skipped during setup. The app will remind you of missing permissions with a banner, but will never force you to enable them.
GDPR note: OFFBET never sees your DNS queries: filtering is done locally. The only browsing data sent are the names of blocked gambling domains, with counts, kept 14 days for your statistics, and the address of a page that looks like a gambling site, sent for verification so the site can be blocked for everyone. Nothing else of your browsing is collected, stored or transmitted.
08Data Retention
Technical data (logs, IP, GUID) is retained for a maximum of 12 months, unless required by law or in case of a dispute.
Account-related data is deleted immediately upon your deletion request.
No data is retained beyond what is necessary for the service.
09International Transfers
Our servers may be hosted by providers located outside the European Union (e.g. AWS).
In such cases, we ensure that appropriate safeguards (European Commission standard contractual clauses) are in place to protect your data.
10Policy Changes
We may update this privacy policy to reflect changes in our services or applicable regulations.
Any updated version will be published on our website with a new effective date.
11Contact
For any question about your personal data or this privacy policy:
STOPJEU SAS — 99 avenue Achille Peretti, 92200 Neuilly-sur-Seine, France