01Data Controller
The data controller is:
- STOPJEU SAS — operator of the OFFBET platform
- Legal form: Simplified Joint-Stock Company (SAS) — French law
- Share capital: €8,000
- Registered office: 99 avenue Achille Peretti, 92200 Neuilly-sur-Seine, France
- SIREN: 919 454 033
- SIRET: 919 454 033 00011
- Business activity code (APE/NAF): 62.01Z — Computer programming
For any question regarding your personal data, contact us at:
[email protected]
02Data We Collect
We only collect the data strictly necessary to operate our services.
Web application — my.OFFBET.app
| Category | What we collect |
|---|---|
| Account data | Email address, display name, country of residence. |
| Technical data | IP address, User Agent, usage logs. |
| App usage | Chosen settings, blocking preferences. |
OFFBET is currently provided free of charge with no in-app purchases or subscriptions. No payment data is collected or processed at this time.
Android application
| Category | What we collect |
|---|---|
| Anonymous device ID | A random UUID generated locally on first launch. No link to your IMEI, Android ID, or any hardware identifier. |
| Device model + Android version | Used to adapt the app behaviour to your phone (Pixel, Samsung, Xiaomi, etc.). |
| Protection status | Whether OFFBET protection is active or not — transmitted every 5–15 min to the OFFBET server for companion monitoring. |
| Blocked attempts | Lists of gambling domains and apps blocked by the app, with attempt counts. Used to generate companion reports. |
| Installed apps list | Only accessed when you open “Block a custom app”. The list never leaves your device. |
| PIN code hash | If a PIN is set, its bcrypt hash (irreversible) is synced between your devices via the OFFBET server. The PIN itself is never transmitted. |
What we do NOT collect
We do not collect browsing history, DNS queries, GPS location, contacts, photos, messages, or any other sensitive personal data. No financial data is stored on our servers.
03How We Use Your Data
Your data is used exclusively to:
- Block access to gambling websites and apps via local DNS filtering on your device.
- Ensure the PIN-protected uninstall prevention works correctly.
- Monitor protection status and notify your companion in case of bypass attempts.
- Synchronise your settings and blocklist between your devices.
- Improve the stability and performance of OFFBET services.
We never sell your data to third parties.
04Legal Basis
In accordance with the GDPR, the processing of your data is based on:
| Legal basis | What it covers |
|---|---|
| Contract performance | Ensuring the OFFBET service functions as intended. |
| Your consent | Certain features require your explicit approval (e.g., accessibility permissions, VPN activation). |
| Legitimate interest | Improving security, preventing fraud, and protecting vulnerable users from gambling harm. |
05Your Rights
You have the following rights over your personal data:
| Right | What it means |
|---|---|
| Access | Obtain a copy of the data we hold about you. |
| Rectification | Correct any inaccurate information. |
| Deletion | Request complete deletion of your data. |
| Restriction | Temporarily limit certain processing activities. |
| Objection | Refuse certain uses, such as automatic renewal. |
| Portability | Transfer your data to another provider. |
| Withdrawal of consent | Revoke any specific authorisation at any time. |
To exercise your rights, contact us at: [email protected]
06Technical Operations & Security
DNS filtering (100% local)
On Android, OFFBET uses the Android VpnService API to create a local VPN connection on your device. This VPN does not route your traffic to any external server.
Instead, it intercepts DNS queries locally on your phone, blocks gambling-related domains by returning an empty response, and forwards all other queries to Google Public DNS (8.8.8.8).
No DNS query ever leaves your device to reach an OFFBET server. This is the same approach used by well-known apps such as AdGuard, Blokada, and Freedom.to.
Data transmission security
All communication between the OFFBET app and the OFFBET server (my.OFFBET.app) is encrypted using HTTPS / TLS 1.3.
The heartbeat signal sent every 5–15 minutes contains only your anonymous device ID, protection status, and blocked attempt counts — never your browsing history or DNS queries.
AccessibilityService API (optional)
If enabled by the user, OFFBET uses the AccessibilityService API exclusively to:
- Detect attempts to activate a third-party VPN that would bypass the gambling protection.
- Detect changes to the device Private DNS settings.
- Detect when a blocked gambling app is launched in the foreground and bring you back to the home screen.
This service is never used to read, interact with, or collect data from any other application. It is optional and can be skipped during setup.
Device Administrator (optional)
If enabled by the user, OFFBET registers as a Device Administrator to prevent accidental or impulsive uninstallation of the app.
The user can always disable this protection by entering their PIN code. This feature is voluntary and can be skipped during setup.
PIN code protection
When you enable PIN protection:
- Disabling the protection or uninstalling the app requires entering the PIN code.
- The PIN is hashed using bcrypt (irreversible) and verified locally — no network connection is needed.
- If the hidden PIN option is chosen, only a trusted person knows the code. The user can request recovery via email after a configurable delay (12 h, 24 h, 48 h, or never).
- After 3 failed PIN attempts, the app locks and notifies the companion.
07Android Permissions Explained
The OFFBET Android app requests the following permissions. Each permission is explained below with its purpose.
| Permission | Purpose |
|---|---|
| Internet | Communicate with the OFFBET server (heartbeat, blocklist updates, account sync). |
| VpnService | Create a local VPN connection to filter gambling DNS queries on your device. No traffic is sent to an OFFBET server. |
| Foreground Service | Keep the DNS filtering and app blocking services running reliably in the background. |
| Boot Completed | Automatically restart protection after your phone reboots. |
| Notifications | Show a persistent notification confirming that protection is active. |
| Query All Packages | Allow you to select custom apps to block in OFFBET settings. |
| Ignore Battery Optimizations | Prevent Android from killing the protection service to save battery. |
| Device Administratoroptional | Prevent uninstallation of the app without entering the PIN code. |
| Accessibility Serviceoptional | Detect bypass attempts (third-party VPNs, Private DNS changes, blocked gambling apps launched) and trigger the PIN-protected tamper screen. |
All optional permissions can be skipped during setup. The app will remind you of missing permissions with a banner, but will never force you to enable them.
GDPR note: OFFBET never sees your DNS queries. Since filtering is 100% local, no browsing data is collected, stored, or transmitted. This eliminates the privacy risks associated with filtering DNS on a remote server.
08Data Retention
Technical data (logs, IP, GUID) is retained for a maximum of 12 months, unless required by law or in case of a dispute.
Account-related data is deleted immediately upon your deletion request.
No data is retained beyond what is necessary for the service.
09International Transfers
Our servers may be hosted by providers located outside the European Union (e.g. AWS).
In such cases, we ensure that appropriate safeguards (European Commission standard contractual clauses) are in place to protect your data.
10Policy Changes
We may update this privacy policy to reflect changes in our services or applicable regulations.
Any updated version will be published on our website with a new effective date.
11Contact
For any question about your personal data or this privacy policy:
STOPJEU SAS — 99 avenue Achille Peretti, 92200 Neuilly-sur-Seine, France