01 数据控制员

数据控制人为

STOPJEU SAS — OFFBET平台运营商
法律形式：简化股份公司（SAS）–法国法律
股本： €8,000
注册办事处： 99 avenue Achille Peretti, 92200 Neuilly-sur-Seine, France
SIREN: 919 454 033
SIRET: 919 454 033 00011
商业活动代码（APE/NAF）： 62.01Z — 计算机编程

如对个人数据有任何疑问，请联系我们：
📧 [email protected]

02 我们收集的数据

We only collect the data necessary to operate our services.

Web application (my.offbet.app)

Account data: email address, display name, country of residence.
技术数据 IP address, User Agent, usage logs.
应用程序使用数据： chosen settings, blocking preferences.
Subscription data: Stripe customer ID and subscription status. No credit card numbers are stored on our servers — Stripe handles all payment data.

Android application

Anonymous device identifier: a random UUID generated locally on first launch. This identifier has no link to your IMEI, Android ID, or any hardware identifier.
Device model and Android version: used to adapt the app behavior to your phone (Pixel, Samsung, Xiaomi, etc.).
Protection status: whether OFFBET protection is active or not, transmitted every 5 to 15 minutes to the OFFBET server for companion monitoring.
Blocked attempts: the list of gambling domains and applications blocked by the app, with attempt counts. This information is used to generate companion reports.
Installed applications list: only accessed when you open the “Block a custom app” screen. This list is never transmitted to the OFFBET server — it remains on your device.
PIN code hash: if you have set a PIN, its bcrypt hash (irreversible) is synchronized between your devices via the OFFBET server. The PIN itself is never transmitted.

What we do NOT collect

We do not collect browsing history, DNS queries, GPS location, contacts, photos, messages, or any sensitive personal data. No financial data is stored on our servers.

03 我们如何使用您的数据

您的数据仅用于以下目的

Block access to gambling websites and apps via local DNS filtering on your device.
确保受密码保护的卸载预防功能正常工作。
Monitor protection status and notify your companion in case of bypass attempts.
Synchronize your settings and blocklist between your devices.
提高 OFFBET 服务的稳定性和性能。

我们绝不会将您的数据出售给第三方。

04 法律依据

根据 GDPR，对您的数据进行处理的依据是

履行合同： 确保 OFFBET 服务发挥预期功能。
您的同意 certain features require your explicit approval (e.g., accessibility permissions, VPN activation).
合法利益： improving security, preventing fraud, and protecting vulnerable users from gambling harm.

05 您的权利

您对自己的个人数据享有以下权利：

访问： 获取我们所持有的您的数据副本。
整改： 更正任何不准确的信息。
删除： 要求完全删除您的数据。
限制条件 暂时限制某些处理活动。
反对： 拒绝某些用途，如自动续订。
便携性 将您的数据传输给另一家供应商。
撤销同意： 随时撤销任何特定授权。

请求删除数据

如需行使您的权利，请联系我们： [email protected]

06 技术运营与安全

DNS filtering (100% local)

On Android, OFFBET uses the Android VpnService API to create a local VPN connection on your device. This VPN does not route your traffic to any external server.

Instead, it intercepts DNS queries locally on your phone, blocks gambling-related domains by returning an empty response, and forwards all other queries to Google Public DNS (8.8.8.8).

No DNS query ever leaves your device to reach an OFFBET server. This is the same approach used by well-known apps such as AdGuard, Blokada, and Freedom.to.

Data transmission security

All communication between the OFFBET app and the OFFBET server (my.offbet.app) is encrypted using HTTPS/TLS 1.3.

The heartbeat signal sent every 5 to 15 minutes contains only your anonymous device ID, protection status, and blocked attempt counts — never your browsing history or DNS queries.

App blocking (UsageStatsManager)

OFFBET uses the UsageStatsManager API to detect when a blocked gambling application is launched and bring the user back to the home screen.

This data is processed locally on your device and is not transmitted to the OFFBET server.

AccessibilityService API (optional)

If enabled by the user, OFFBET uses the AccessibilityService API exclusively to:

Detect attempts to activate a third-party VPN that would bypass the gambling protection.
Detect changes to the device Private DNS settings.

This service is never used to read, interact with, or collect data from any other application. It is optional and can be skipped during setup.

Device Administrator (optional)

If enabled by the user, OFFBET registers as a Device Administrator to prevent accidental or impulsive uninstallation of the app.

The user can always disable this protection by entering their PIN code. This feature is voluntary and can be skipped during setup.

PIN 码保护

启用密码保护后

Disabling the protection or uninstalling the app requires entering the PIN code.
The PIN is hashed using bcrypt (irreversible) and verified locally — no network connection is needed.
If the “hidden PIN” option is chosen, only a trusted person knows the code. The user can request recovery via email after a configurable delay (12h, 24h, 48h, or never).
After 3 failed PIN attempts, the app locks and notifies the companion.

07 Android Permissions Explained

The OFFBET Android app requests the following permissions. Each permission is explained below with its purpose.

Permission	Purpose
Internet	Communicate with the OFFBET server (heartbeat, blocklist updates, account sync).
VpnService	Create a local VPN connection to filter gambling DNS queries on your device. No traffic is sent to an OFFBET server.
Foreground Service	Keep the DNS filtering and app blocking services running reliably in the background.
Boot Completed	Automatically restart protection after your phone reboots.
Notifications	Show a persistent notification confirming that protection is active.
Usage Stats Access	Detect when a blocked gambling app is launched and redirect you to the home screen.
Query All Packages	Allow you to select custom apps to block in OFFBET settings.
Ignore Battery Optimizations	Prevent Android from killing the protection service to save battery.
Draw Over Other Apps optional	Display the PIN entry screen on top of other apps when a bypass attempt is detected.
Device Administrator optional	Prevent uninstallation of the app without entering the PIN code.
Accessibility Service optional	Detect and prevent activation of third-party VPNs that would bypass the gambling protection.

All optional permissions can be skipped during setup. The app will remind you of missing permissions with a banner, but will never force you to enable them.

08 数据保留

技术数据（日志、IP、GUID）最多保留 12 个月，除非法律要求或出现争议。

与账户相关的数据会在您提出删除请求后立即删除。

除了提供服务所需的数据外，不会保留其他数据。

09 国际转账

Our servers may be hosted by providers located outside the European Union (e.g., AWS).

在这种情况下，我们会确保采取适当的保障措施（欧盟委员会标准合同条款）来保护您的数据。

10 政策变化

我们可能会更新本隐私政策，以反映我们服务或适用法规的变化。

任何更新版本都将在我们的网站上公布，并注明新的生效日期。

11 联系方式

如对个人数据或本隐私政策有任何疑问：

📧 [email protected]

📍 STOPJEU SAS — 99 avenue Achille Peretti, 92200 Neuilly-sur-Seine, France