Privacy Policy
UnderOverPredictions
This Privacy Policy explains how personal data may be collected, used, stored and shared when you visit UnderOverPredictions.com, contact us, purchase a paid service, receive football predictions by email, or otherwise interact with the Website.
16 September 2026
Who This Policy Applies To
This Policy applies to visitors, customers and other individuals who interact with UnderOverPredictions.com.
For the purposes of applicable data protection law, the operator of UnderOverPredictions determines the purposes and means of processing personal data collected through the Website and is therefore the data controller for that processing.
The full legal identity and contact details of the controller should be displayed on the published version of this Privacy Policy in accordance with applicable law.
Personal Data We May Collect
Depending on how you use the Website, we may collect or receive:
- name and email address;
- messages and support communications;
- order and service information;
- transaction reference, payment status, amount and currency;
- service-delivery and Performance Protection records where applicable;
- IP address, browser, device and technical log information;
- cookie identifiers and consent choices where applicable.
Payments may be processed by Stripe or PayPal. UnderOverPredictions does not store full payment-card numbers, card security codes or PayPal account credentials.
Stripe or PayPal may provide limited transaction information needed to confirm and administer a purchase, such as payment status, transaction reference, payer or billing information made available through the payment service and other order-related details.
How We Collect Personal Data
We may collect personal data:
- directly from you when you purchase a service or contact us;
- when we administer delivery, support, cancellations, refunds or Performance Protection;
- automatically through the Website and its technical infrastructure;
- through cookies and similar technologies, subject to applicable consent requirements; and
- from Stripe or PayPal in connection with a transaction.
Purposes And Legal Bases
We process personal data only where there is an appropriate legal basis.
A. To provide and administer purchased services Purpose: process orders, deliver paid football predictions, manage service periods, support customers, administer eligible Performance Protection, and handle cancellations or refunds. Legal basis: steps requested before entering into a contract and/or performance of a contract.
B. To process and verify payments Purpose: confirm payments, match transactions to orders, investigate payment issues and process approved refunds. Legal basis: contract performance and, where appropriate, legitimate interests in administering payments and preventing fraud.
C. To respond to enquiries Purpose: answer questions, provide support and respond to complaints. Legal basis: depending on context, pre-contractual steps, contract performance, legal obligation or legitimate interests.
D. To comply with legal obligations Purpose: maintain records and comply with accounting, tax, consumer-protection, fraud-prevention or other legal requirements. Legal basis: compliance with a legal obligation.
E. To operate and secure the Website Purpose: security, fraud prevention, diagnostics, technical logs and protection of Website content. Legal basis: legitimate interests, provided those interests are not overridden by your rights and freedoms.
F. Analytics and non-essential cookies Where consent is legally required, we rely on consent. You may change or withdraw cookie consent through the Website’s cookie settings.
Stripe And PayPal
Payments may be processed through Stripe or PayPal.
Depending on the checkout method, customers may pay by debit or credit card through Stripe, through PayPal, or by card through a PayPal checkout where PayPal offers that option.
UnderOverPredictions does not store full card details, card security codes or PayPal login credentials.
Payment information entered into Stripe or PayPal is handled through their systems and is subject to their own privacy notices, security practices and legal obligations.
Email Delivery And Communications
We may use your email address to:
- deliver a purchased service;
- send order or payment-related messages;
- administer a service;
- respond to support requests;
- send information about cancellations, refunds or Performance Protection where relevant.
Transactional and service communications are separate from optional marketing communications.
A purchase will not be treated as consent to unrelated direct marketing where separate consent is legally required.
Marketing
If optional email marketing or promotional communications are offered, personal data will be used for those purposes only where an appropriate legal basis exists.
Where consent is required, it may be withdrawn at any time.
Cookies And CookieYes
The Website may use cookies and similar technologies for essential functionality, security, consent preferences, checkout functionality, analytics and other disclosed purposes.
CookieYes may be used to display a consent banner, manage consent preferences and provide information about cookies detected on the Website.
Non-essential cookies will be handled in accordance with applicable consent requirements.
For current details, refer to the Cookie Policy and cookie preference centre on the Website.
Who May Receive Personal Data
Personal data may be shared where reasonably necessary and lawful with:
- Stripe and PayPal;
- website hosting, security and technical service providers;
- email and communications providers;
- CookieYes and any analytics services actually enabled on the Website;
- accountants, legal advisers or other professional advisers; and
- public authorities where disclosure is legally required or otherwise lawful.
We do not sell personal data.
Third-Party Services
The Website may contain links to independent third-party services. Those third parties process personal data under their own privacy notices and are responsible for their own privacy practices.
International Data Transfers
Some service providers may process or store personal data outside Bulgaria or outside the European Economic Area.
Where GDPR requires safeguards for a transfer outside the EEA, we will rely on an applicable lawful transfer mechanism, such as an adequacy decision, appropriate contractual safeguards or another mechanism permitted by law.
Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for any period required by law.
Retention may vary by category. Order and transaction records may be kept for accounting, tax, contractual, fraud-prevention and legal purposes. Support communications may be kept while reasonably necessary to resolve an issue and document the interaction. Technical logs and cookie consent records may be retained for periods appropriate to security, operational and compliance needs.
Where data is no longer required, it will be deleted, anonymised or otherwise handled in accordance with applicable law and technical limitations.
Data Security
We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.
No online service or transmission method can be guaranteed to be completely secure.
Your Rights
Depending on applicable law and subject to legal conditions and exceptions, you may have rights including:
- access to your personal data;
- correction of inaccurate data;
- deletion in certain circumstances;
- restriction of processing in certain circumstances;
- objection to certain processing based on legitimate interests;
- data portability where applicable;
- withdrawal of consent where processing is based on consent; and
- rights concerning certain automated decision-making where applicable.
Withdrawing consent does not affect processing carried out lawfully before withdrawal.
How To Exercise Your Rights
Use the contact method published on UnderOverPredictions.com.
We may need to verify your identity where reasonably necessary to protect personal data.
We will respond within the period required by applicable law.
Right To Complain
If you believe your personal data has been processed unlawfully, you may have the right to lodge a complaint with the competent data protection supervisory authority.
Individuals in the European Union may generally complain to the supervisory authority in the Member State of their habitual residence, place of work, or place of the alleged infringement, subject to applicable law.
Children And Minors
UnderOverPredictions provides betting-related content intended only for adults who meet the applicable legal gambling age.
The Website and paid services are not directed to children, and we do not knowingly seek to collect personal data from minors for paid betting-tip services.
Automated Decision-Making
UnderOverPredictions does not currently use personal data to make solely automated decisions that produce legal effects or similarly significant effects on customers, unless clearly disclosed otherwise.
Routine automated processes such as payment authorisation, fraud screening or email delivery may be performed by third-party service providers under their own systems and terms.
Changes To This Policy
We may update this Privacy Policy to reflect changes to the Website, services, technology providers, cookie and analytics tools, business practices or legal requirements.
The current version will be published with a revised “Last updated” date.
Contact And Controller Details
The published version of this Privacy Policy should contain the identity and contact details of the data controller as required by applicable data protection law.
Privacy enquiries and data-subject requests may be submitted using the contact details published on UnderOverPredictions.com.
Privacy Policy