Privacy Policy

We collect only what we need to run the marketplace:

• Account information. Your email address (used for passwordless magic-link sign-in), your role (establishment owner, Terminal Operator, or administrator), and your organization or business name.
• Business and licensing details. Your IGB license number and related eligibility information, so we can confirm you are a licensed participant.
• Listing information. The details establishments provide about a Location’s floor — venue type, county, net terminal income band, and game or coin-op preferences. On the public board this data is always anonymized (see Anonymization below).
• Identity verification. Where verification is required, a government ID and a selfie are captured and checked by our third-party verification provider (Stripe Identity). We receive only a pass/fail result and your verified name — The Gameset never stores images of your ID.
• Payment information. Listing-token purchases are processed by our payment provider (Stripe). We store a payment reference and receipt details; we do not receive or store your full card number.
• Public regulatory data. Where available, we ingest and display public Illinois Gaming Board records about licensed Locations and Operators. This is public record — it is not collected from you.
• Technical and usage data. Server logs, IP address, and basic device/browser information, used to operate and secure the service.

• Operate the marketplace and authenticate your sign-in.
• Confirm eligibility and licensure of participants.
• Process prepaid, non-refundable Listing-token purchases and issue receipts.
• Maintain the append-only transaction ledger we keep as the record of platform activity.
• Send transactional email (sign-in links, listing and offer notifications).
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal, regulatory, and gaming-board obligations.

Protecting the identity of a Listing is core to the product. On the public board, geography is coarsened to the county or a multi-county region, net terminal income is shown only in bands, and small-cell suppression automatically widens geography to a region whenever too few Listings share a county, band, and venue type. These measures are designed so a public Listing cannot be traced back to a specific Location.

We use a single essential cookie to keep you signed in. We do not use advertising cookies or third-party cross-site tracking, and we do not sell your personal information. Our product analytics run entirely on our own servers — there is no analytics cookie and no third-party tracking script on any page.

We share information only in these limited circumstances:

• Service providers. Vendors that operate the service under contract — payments and identity verification (Stripe), transactional email (Resend), database/hosting (Neon and Vercel), and product analytics (Mixpanel), which receives only anonymized activity data: no names, addresses, email addresses, license numbers, or anything you type in a free-text field.
• Legal and regulatory. The Illinois Gaming Board, other regulators, or law enforcement where required by law or to enforce our Terms.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not sell or rent personal information to anyone.

We keep account and Listing information for as long as your account is active. Transaction-ledger events are append-only and retained as required for gaming-compliance recordkeeping, even after an account closes. When information is no longer needed for these purposes, we delete or de-identify it.

You may access or correct your account information, or ask us to delete it, by contacting us. Some records — such as compliance audit events — must be retained by law and cannot be deleted on request. Depending on where you live, you may have additional rights under applicable privacy law; we honor those rights where they apply.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including encryption in transit and scoped access to systems. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you of material incidents as required by law.

The Gameset is a service for licensed businesses and is not intended for, or directed to, anyone under 21. We do not knowingly collect information from minors.

We may update this policy from time to time. When we make material changes, we will revise the effective date above and, where appropriate, notify you. Your continued use of The Gameset after an update means you accept the revised policy.

Questions about this policy or your information? Contact The Gameset LLC at hello@thegameset.com. See also our Terms of Service.