01Data Controller
The data controller is:
- STOPJEU SAS — operator of the OFFBET platform
- Legal form: Simplified Joint-Stock Company (SAS) — French law
- Share capital: €8,000
- Registered office: 99 avenue Achille Peretti, 92200 Neuilly-sur-Seine, France
- SIREN: 919 454 033
- SIRET: 919 454 033 00011
- Business activity code (APE/NAF): 62.01Z — Computer programming
For any question regarding your personal data, contact us at:
[email protected]
02Data We Collect
We only collect the data strictly necessary to operate our services.
Web application — my.OFFBET.app
| Category | What we collect |
|---|---|
| Account data | Email address, display name, country of residence. |
| Technical data | IP address, User Agent, usage logs. |
| App usage | Chosen settings, blocking preferences. |
| Sign-in request | When you ask for a sign-in link: your email address, the kind of device (Android, iPhone, computer) and the country, shown to you on the link’s page. Valid for 15 minutes, then erased within 24 hours at most. |
OFFBET runs on a small social price, with a 3-day free trial and no card upfront. When you do pay us — your licence, or a subscription taken out earlier — the payment is handled entirely by Stripe, our payment processor. We never see or store your card number. We keep only the amount, the currency, the date and the payment reference, so that we can recognise your payment and answer you if you ask about it.
Android application
| Category | What we collect |
|---|---|
| Anonymous device ID | A random UUID generated locally on first launch. No link to your IMEI, Android ID, or any hardware identifier. |
| Device model + Android version | Used to adapt the app behaviour to your phone (Pixel, Samsung, Xiaomi, etc.). |
| Protection status | Whether OFFBET protection is active or not — transmitted every 5–15 min to the OFFBET server for companion monitoring. |
| Blocked attempts | Names of the gambling domains and apps blocked by the app, with attempt counts, kept 14 days for your statistics and companion reports. When the app detects a page that looks like a gambling site, its address is sent for verification so the site can be blocked for everyone. |
| Installed apps list | Read on your device when you open “Block a custom app”. The full list never leaves your device; only the apps you choose to block are synced to your account. |
| PIN code | If a PIN is set, its bcrypt hash (irreversible) is synced between your devices via the OFFBET server and used to check the code. The code itself is sent to the server over an encrypted connection when you set or change it, and kept as a separate AES-256 encrypted copy, used only to email it back to you after the delay you chose. With the FOR LIFE option, it is never sent back. |
What we do NOT collect
Apart from the names of blocked gambling domains and the addresses of suspected gambling pages described above, we do not collect your browsing history or your DNS queries. We do not collect GPS location, contacts, photos, messages, or any other sensitive personal data. No financial data is stored on our servers.
03Affiliate programme and coupons
If you take part in the Promote OFFBET programme, or sign up through an affiliate’s link or coupon, we also process the following data.
| Category | What we collect |
|---|---|
| Payout details (affiliates) | The account holder’s name and your PayPal address or IBAN, stored in full so we can pay you and shown masked in your space. |
| Commissions and payouts | For each payment by a subscriber you brought: the date, the country, the net amount, the rate, the commission and its status (on hold, available, paid, cancelled), then the transfers made. |
| Custom coupon request | The coupon you would like and what you tell us about your audience. We receive the request by email in order to answer it. |
| Sign-up through an affiliate | The link between your account and the affiliate, the date and the means (link or coupon), and the amounts you pay, to work out their commission. It changes neither your price nor your trial. |
| Clicks on links | A simple count per day and per link. No IP address, device or identity is stored with the click. |
What an affiliate sees. Only totals: clicks, sign-ups, paying subscribers, commissions, and a breakdown by country in which countries with fewer than 3 sign-ups are grouped together. Never your name, email address, username or activity.
Legal basis. Performance of the affiliate contract, for affiliates (working out and paying commissions); our legitimate interest in fairly paying those who make OFFBET known, for people who signed up through an affiliate; our accounting obligations, for payouts.
Recipients. PayPal or our bank for transfers, and our accountant for the books. Nothing is sold or passed on for advertising.
Retention. Payout details as long as your account exists: they are erased with it, or sooner on request. Commissions and transfers are kept for 10 years, as the law requires for accounting records. The link between an account and its affiliate goes with the account.
Partner coupons. When you use a partner’s coupon (a care service, for example), we note which coupon was applied to your account and your phone, so that it is used only once per phone. The partner receives no data about you.
04How We Use Your Data
Your data is used exclusively to:
- Block access to gambling websites and apps via local DNS filtering on your device.
- Ensure the PIN-protected uninstall prevention works correctly.
- Monitor protection status and notify your companion in case of bypass attempts.
- Synchronise your settings and blocklist between your devices.
- Improve the stability and performance of OFFBET services.
- Send you, once, an email inviting you to review OFFBET on Trustpilot, after you have been using the app for at least a week. We don't share any of your data with Trustpilot, and leaving a review is entirely optional.
- Send you, after your trial ends, a few emails about OFFBET (offers and news), at most once a week. Each one lets you unsubscribe in one click; emails about your account (PIN code, support, licence) keep arriving.
We never sell your data to third parties.
The support chat is built and hosted by OFFBET — there is no third-party chat provider such as Crisp or Tidio. Your messages stay with us: they are never sold, shared or used for advertising.
05Legal Basis
In accordance with the GDPR, the processing of your data is based on:
| Legal basis | What it covers |
|---|---|
| Contract performance | Ensuring the OFFBET service functions as intended. |
| Your consent | Certain features require your explicit approval (e.g., accessibility permissions, VPN activation). |
| Legitimate interest | Improving security, preventing fraud, protecting vulnerable users from gambling harm, and writing to you about OFFBET after your trial (you can object at any time). |
06Your Rights
You have the following rights over your personal data:
| Right | What it means |
|---|---|
| Access | Obtain a copy of the data we hold about you. |
| Rectification | Correct any inaccurate information. |
| Deletion | Request complete deletion of your data. |
| Restriction | Temporarily limit certain processing activities. |
| Objection | Refuse certain uses, such as automatic renewal or our offer emails. |
| Portability | Transfer your data to another provider. |
| Withdrawal of consent | Revoke any specific authorisation at any time. |
To exercise your rights, contact us at: [email protected]
07Technical Operations & Security
DNS filtering (100% local)
On Android, OFFBET uses the Android VpnService API to create a local VPN connection on your device. This VPN does not route your traffic to any external server.
Instead, it intercepts DNS queries locally on your phone, blocks gambling-related domains by returning an empty response, and forwards all other queries to public DNS resolvers (Google 8.8.8.8, Cloudflare 1.1.1.1 or Quad9 9.9.9.9).
No DNS query is ever sent to an OFFBET server — the same approach used by well-known apps such as AdGuard, Blokada and Freedom.to. Only the names of blocked gambling domains are reported, with counts, for your statistics.
Data transmission security
All communication between the OFFBET app and the OFFBET server (my.OFFBET.app) is encrypted using HTTPS / TLS 1.3.
The heartbeat signal sent every 5–15 minutes contains your anonymous device ID, the protection status, technical diagnostics (device model, app version, permission and battery state), your protection settings (PIN status, your custom blocked sites and apps) and the names of blocked gambling domains with attempt counts — never the rest of your browsing or your DNS queries.
AccessibilityService API (optional)
If enabled by the user, OFFBET uses the AccessibilityService API exclusively to:
- Detect attempts to activate a third-party VPN that would bypass the gambling protection.
- Detect changes to the device Private DNS settings.
- Detect when a blocked gambling app is launched in the foreground and bring you back to the home screen.
This service only reads what it needs on screen — system settings screens, the address bar of browsers and which app is in the foreground — to detect bypass attempts and gambling pages. When a page looks like a gambling site, its address is sent for verification so the site can be blocked for everyone. It never reads your messages, passwords or the content of other apps, and collects nothing else. It is optional and can be skipped during setup.
Device Administrator (optional)
If enabled by the user, OFFBET registers as a Device Administrator to prevent accidental or impulsive uninstallation of the app.
The user can always disable this protection by entering their PIN code. This feature is voluntary and can be skipped during setup.
PIN code protection
When you enable PIN protection:
- Disabling the protection or uninstalling the app requires entering the PIN code.
- The PIN is checked against a bcrypt hash (irreversible). When you set or change it, it is also sent to the OFFBET server over an encrypted connection: a separate AES-256 encrypted copy is kept only to email you the code after the delay you chose. With the FOR LIFE option, it is never sent back.
- If the hidden PIN option is chosen, nobody knows the code. Recovery by email is possible after the delay you chose (12 h, 24 h or 48 h); with the FOR LIFE option, the code can never be recovered.
- After 3 failed attempts, PIN entry is blocked for a while — longer after each new series of failures — and your Companion, if you have one, is alerted.
08Android Permissions Explained
The OFFBET Android app requests the following permissions. Each permission is explained below with its purpose.
| Permission | Purpose |
|---|---|
| Internet | Communicate with the OFFBET server (heartbeat, blocklist updates, account sync). |
| VpnService | Create a local VPN connection to filter gambling DNS queries on your device. No traffic is sent to an OFFBET server. |
| Foreground Service | Keep the DNS filtering and app blocking services running reliably in the background. |
| Boot Completed | Automatically restart protection after your phone reboots. |
| Notifications | Show a persistent notification confirming that protection is active. |
| Query All Packages | Allow you to select custom apps to block in OFFBET settings. |
| Ignore Battery Optimizations | Prevent Android from killing the protection service to save battery. |
| Device Administratoroptional | Prevent uninstallation of the app without entering the PIN code. |
| Accessibility Serviceoptional | Detect bypass attempts (third-party VPNs, Private DNS changes, blocked gambling apps launched) and trigger the PIN-protected tamper screen. |
All optional permissions can be skipped during setup. The app will remind you of missing permissions with a banner, but will never force you to enable them.
GDPR note: OFFBET never sees your DNS queries: filtering is done locally. The only browsing data sent are the names of blocked gambling domains, with counts, kept 14 days for your statistics, and the address of a page that looks like a gambling site, sent for verification so the site can be blocked for everyone. Nothing else of your browsing is collected, stored or transmitted.
09Data Retention
Technical data (logs, IP, GUID) is retained for a maximum of 12 months, unless required by law or in case of a dispute.
Account-related data is deleted immediately upon your deletion request.
No data is retained beyond what is necessary for the service.
10International Transfers
Our servers may be hosted by providers located outside the European Union (e.g. AWS).
In such cases, we ensure that appropriate safeguards (European Commission standard contractual clauses) are in place to protect your data.
Our service providers
To run OFFBET, we rely on these providers. Each one receives only what its task requires.
- Amazon Web Services: hosting of our servers and database (United States).
- Cloudflare: delivery and protection of the website (worldwide network).
- Google Firebase: sign-in to your account and app notifications.
- Google Analytics: audience measurement for the offbet.app website (with your consent) and for the screens viewed in your space and in the app, with no identifier in the addresses.
- Google Play and RevenueCat: purchases and subscriptions in the Android app.
- Stripe: card and other payments on the website.
- Resend: sending our emails (sign-in links, support replies, end-of-trial reminders).
- Anthropic: moderation and translation of community chat messages, and help drafting support replies. Texts are sent to it for that task only.
- Sentry: crash and error reports from the app and the website, so we can fix them.
- PayPal: commission payouts to affiliates who chose it.
11Policy Changes
We may update this privacy policy to reflect changes in our services or applicable regulations.
Any updated version will be published on our website with a new effective date.
12Contact
For any question about your personal data or this privacy policy:
STOPJEU SAS — 99 avenue Achille Peretti, 92200 Neuilly-sur-Seine, France