1. Who we are and what this policy covers
1.1 Data controller. Infinity Poker is a brand operated by Checkmate International L.L.C-FZ, a company registered in the Meydan Free Zone, Dubai, United Arab Emirates (trade licence no. 2653739.01), ("Infinity Poker", "we", "us", "our"). We are the controller of the personal data described in this policy.
1.2 Who this policy applies to. This policy applies to anyone who: - visits our website, apps or social media pages; - creates an Infinity Poker account or registers for, qualifies for or plays in any Infinity Poker tournament, festival, satellite, side event or cash game (each an "Event"); - buys an event, travel or hospitality package from us; - attends an Event as a spectator, guest, media representative or content creator; - contacts us, enters a promotion or subscribes to our communications.
1.3 Venues. Our Events are held at licensed casinos and resorts (each a "Venue"). The Venue operates the gaming, holds player funds, pays prizes and may collect your personal data under its own licence and privacy notice. Where a Venue collects or uses your data for its own purposes, the Venue is responsible for that data. Where we and a Venue each decide how certain data is used, we are each responsible for our own use.
1.4 Our commitment. We do not sell or rent your personal data. We collect only what we need to run safe, fair and well-organised Events, and we handle it in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and the other data protection laws that apply where we operate.
1.5 How this policy works with our Terms. This policy forms part of the Infinity Poker Terms and Conditions. By using our services or attending an Event you acknowledge that we will handle your data as described here. Where the law requires your consent (for example for marketing or for certain transfers), we will ask for it separately and you are free to refuse.
2. What personal data we collect
2.1 Identity data: full name, date of birth, nationality, gender, photograph, and copies and numbers of your passport, national ID card or other identity document.
2.2 Contact data: email address, phone number, messaging app handles, country and address of residence.
2.3 Account and participation data: player ID or card number, login details, registration and entry history, seat assignments, chip counts, finishing positions, prize amounts, rankings and player-of-the-year points.
2.4 Payment and transaction data: details of packages purchased, payment references and status from our payment gateway, and, where needed for prize transfers, your bank or payout account details. We do not store full card numbers; these are handled by our payment provider.
2.5 Compliance data: results of identity, age, sanctions, politically-exposed-person and anti-money-laundering checks, and source-of-funds or source-of-wealth information where a Venue, a regulator or the law requires it.
2.6 Event, image and media data: photographs, video, live-stream and broadcast footage, audio, interviews, hand histories and hole-card footage from featured tables, and quotes or results published in live reporting.
2.7 Security data: CCTV footage, incident and disciplinary records, investigation notes, and exclusion or self-exclusion information shared with us by Venues or regulators.
2.8 Technical and usage data: IP address, device and browser type, approximate location derived from IP, pages viewed, links clicked, app usage and cookie identifiers.
2.9 Communications and preference data: messages you send us, customer-support records, survey responses, marketing preferences, and travel or dietary preferences you give us for packages.
2.10 Data from third parties: satellite and qualifier results from our online and club qualification partners; booking confirmations from hotels and travel providers; screening results from identity-verification providers; and registration data from Venues.
2.11 Sensitive data. We do not ask for sensitive data such as health, religious or biometric information unless it is necessary, for example accessibility or dietary needs you choose to tell us, or where a Venue uses facial recognition for entry or security under its own notice. Where the law requires, we will only process such data with your explicit consent.
2.12 Accuracy. You must give us accurate details in your own name and tell us promptly when they change. We are not responsible for problems caused by incorrect or out-of-date information you have given us.
2.13 If you do not give us data. Some data is required to register you, verify your age and identity, and pay prizes. If you do not provide it, we may be unable to let you play or pay your winnings.
3. How we use your data and our legal grounds
We use your personal data only where the law allows. For each purpose below, the legal ground is shown in brackets.
Running your account and Events: creating and managing your account, registering you for Events, seat draws, publishing results and rankings, and customer support (performance of our contract with you).
Packages: selling and delivering event, travel and hospitality packages, arranging hotel bookings with our partners and issuing receipts (performance of our contract with you).
Prizes: passing winner details to the Venue so it can pay prizes, and arranging prize transfers (performance of our contract; legal obligation).
Identity, age and anti-money-laundering checks: verifying who you are and that you are old enough to play, sanctions and politically-exposed-person screening, and fraud prevention (legal obligation; our legitimate interest in protecting our Events).
Integrity and security: keeping Events safe and fair, investigating cheating, collusion, use of prohibited devices or software, and incidents, and enforcing bans and exclusions (legitimate interests; legal obligation).
Event coverage: photographing, filming, live-streaming and reporting on Events, and promoting Infinity Poker with that content (legitimate interests; performance of our contract under Terms section 13).
Individual promotion: featuring you personally in advertising or sponsor campaigns (your consent).
Marketing from us: sending schedules, news and offers about our Events (your consent, or legitimate interests where the law allows for existing players, always with the option to opt out).
Partner offers: sharing your contact details with sponsors or partners for their own offers (your consent only).
Responsible gaming: honouring self-exclusion and exclusion requests passed to us by Venues or regulators, and responding to concerns about problem gambling (legitimate interests; legal obligation).
Improving our services: analysing attendance, website use and survey results to improve Events and services (legitimate interests).
Legal and regulatory: meeting licensing, tax, accounting and reporting duties, responding to authorities, and establishing or defending legal claims (legal obligation; legitimate interests).
If we want to use your data for a new purpose that is not compatible with the original one, we will tell you first and ask for consent where required. You can withdraw consent at any time; this does not affect what we did before you withdrew it.
4. Who we share your data with
We share personal data only where needed for the purposes above. We distinguish between providers who process data on our behalf (outsourcing) and recipients who use it for their own purposes (provision to third parties).
4.1 Providers acting on our behalf. These process data only on our instructions and under contract: tournament registration and management software, website and cloud hosting, payment gateways, email, SMS and messaging tools, identity-verification and screening services, customer-support tools, analytics providers, live-reporting, photography and broadcast production teams, and travel and booking agents. A current list of key providers and the countries where they process data is available on request from privacy@infinitypoker.co.
4.2 Recipients using data for their own purposes.
Venues hosting the Event, for registration, entry control, gaming compliance, security, exclusion checks and prize payment.
Hotels and travel providers included in a package you buy, to fulfil your booking.
Qualification partners such as online poker rooms and clubs, to confirm satellite winners and seat packages.
Media and broadcast partners, for coverage of the Event.
Sponsors and marketing partners, only with your consent.
Regulators, licensing and tax authorities, police, courts and financial- intelligence units, where the law requires it or where we reasonably believe disclosure is needed to investigate fraud, money laundering, cheating or other unlawful activity, or to protect our rights, players or staff. We may be prohibited by law from telling you about such a disclosure.
Professional advisers such as lawyers, accountants, auditors and insurers.
A buyer, investor or successor if we sell, merge or reorganise all or part of our business, under confidentiality obligations.
4.3 Public information. Your name, nickname, nationality, photo, chip counts, finishing positions and prize amounts may be published on our website, apps, social channels, live reports, broadcasts and third-party results databases. This is a normal and expected part of tournament poker.
5. International transfers
We are based in the UAE and run Events in several countries, including South Korea and the Manila. Your data may therefore be transferred to and stored in countries other than your own, including the UAE, the country of the Venue, and the countries where our service providers operate (such as cloud servers in any country).
When we transfer data, we rely on one of the following: the recipient country offers adequate protection; the transfer is needed to perform our contract with you (for example to register you at a Venue abroad or book your hotel); you have consented; or we have put in place contractual safeguards with the recipient. We share only what each recipient needs.
Details of specific transfers, including the recipient, country, data involved, purpose and retention period, are available on request and, for Korean residents, are set out in our Korean-language privacy policy.
6. How long we keep your data, and how we destroy it
We keep personal data only as long as we need it for the purposes above or as the law requires, then delete or anonymise it. As a guide:
Account, registration and results data: while your account is active, and for 5 years after your last Event.
Identity, anti-money-laundering and prize-payment records: at least 5 years after the last transaction, or longer if the law requires.
Package purchases and financial records: as long as required by UAE accounting and tax law.
CCTV footage we control: up to 60 days, unless needed for an incident, dispute or investigation.
Event results, photos and footage: kept indefinitely as part of the public record and archive of the Event.
Marketing preferences: until you unsubscribe or withdraw consent, plus a minimal suppression record so we do not contact you again.
Exclusion records: for the length of the exclusion and as required by the Venue or regulator.
When the retention period ends, electronic records are permanently deleted so they cannot be recovered, and paper records are shredded or securely destroyed. Where we must keep data for legal reasons after you ask us to delete it, we store it separately and restrict its use.
7. How we protect your data
We use technical and organisational measures suited to the risk, including access controls and staff permissions on a need-to-know basis, confidentiality duties for staff and contractors, encrypted connections, secure hosting and backups, careful selection and contracts with service providers, and regular review of our systems.
No system is completely secure. Please keep your login details and player card private and tell us at once at support@infinitypoker.co if you think they have been misused.
If a personal data breach is likely to put your rights at risk, we will notify the relevant data protection authority and, where required, you, within the time limits set by applicable law.
8. Your rights
Depending on where you live and the law that applies, you may have the right to:
- be informed about how we use your data (this policy);
- access the personal data we hold about you and receive a copy;
- have inaccurate or incomplete data corrected;
- have your data deleted where we no longer need it or you withdraw consent;
- restrict or suspend certain processing;
- object to processing based on our legitimate interests, and to direct marketing at any time;
- receive your data in a structured, machine-readable format and have it sent to another organisation;
- withdraw any consent you have given;
- not be subject to a decision based solely on automated processing that significantly affects you;
- complain to a data protection authority.
To use any of these rights, email privacy@infinitypoker.co. We may ask you to verify your identity first. We aim to respond within 30 days, or sooner where local law requires. We do not charge for requests unless they are clearly unfounded or excessive. Some rights are limited; for example, we may need to keep certain records to meet anti-money-laundering, tax or legal obligations, or to protect the integrity of our Events.
9. Marketing communications
We will only send you news and offers where you have agreed or the law otherwise allows. You can opt out at any time by:
- clicking the unsubscribe link in any email;
- replying STOP to an SMS or messaging-app message;
- changing your preferences in your account; or
- emailing support@infinitypoker.co.
We will action your request within 7 working days. Messages already scheduled may still reach you during that time. Opting out of marketing does not stop service messages about Events you have registered for. If you agreed that partners could contact you, you must unsubscribe from them directly as well.
10. Cookies and similar technologies
Our website and apps use cookies and similar technologies. We use:
Essential cookies to make the site work, keep you logged in and keep it secure; Preference cookies to remember your language and settings; Analytics cookies to understand how visitors use the site, for example through Google Analytics; Marketing cookies and pixels to track referrals, measure our advertising and show relevant ads on other sites and social networks.
We use non-essential cookies only with your consent, which you can give or withdraw at any time through our cookie banner or settings. You can also block cookies in your browser, though parts of the site may not work properly.
11. CCTV, filming and photography at Events
Event areas are covered by CCTV, usually operated by the Venue under its own policy. Signs will tell you where recording takes place. Footage is used for security, gaming integrity, dispute resolution and investigations.
Events are also photographed, filmed and streamed by us and our media partners. If you attend an Event, you may appear in this content. Feature tables use hole-card cameras and broadcasts may be delayed. If you have a specific concern about appearing in coverage, speak to the media team or the Tournament Director at the Event; we will consider reasonable requests, but it may not be possible to remove you from wide shots, results or live reports, and featured-table rules in our Terms apply.
12. Automated decisions and profiling
We may use automated tools to help detect fraud, multiple accounts, sanctions matches or unusual activity, and to segment marketing by interests and location. We do not make decisions that have a legal or similarly significant effect on you based solely on automated processing; a member of staff reviews any decision to refuse entry, close an account or withhold a prize.
13. Minors
Our Events and services are only for adults aged 18 or over, or older where the law of the Venue's country sets a higher age. We do not knowingly collect data from anyone below that age. If we learn that we have, we will delete it, except where we need to
keep a record to prevent future access. If you believe a minor has given us data, contact privacy@infinitypoker.co.
14. Links to other websites
Our website, apps and messages may link to Venues, partners, payment providers, hotels and social networks. They have their own privacy practices, which we do not control. Please read their policies before giving them your data.
15. Additional information for specific countries
15.1 United Arab Emirates. We process data in line with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and its implementing rules. You may complain to the UAE Data Office.
15.2 European Union and United Kingdom. If the EU or UK GDPR applies to you, the legal grounds in section 3 are our lawful bases under Article 6. Transfers out of the EU or UK are protected by adequacy decisions or the European Commission's standard contractual clauses (with the UK addendum where relevant). You may complain to your local supervisory authority, such as the UK Information Commissioner's Office.
15.3 Republic of Korea. If you are in Korea, or attend an Event in Korea, the Personal Information Protection Act applies. A Korean-language privacy policy, which sets out the details required by that Act (including the items of data transferred overseas, the recipients, destination countries, timing and method of transfer, retention periods, how to refuse a transfer, our privacy officer and, where required, our domestic representative in Korea). If the English and Korean versions differ for Korean residents, the Korean version prevails. You may also contact the Personal Information Protection Commission or the Personal Information Infringement Report Center (privacy.kisa.or.kr, call 118).
15.4 Manila. If you are in the Manila, or attend an Event there, the Data Privacy Act of 2012 applies. You have the rights to be informed, to access, to object, to erasure or blocking, to rectification, to data portability and to damages. You may contact our Data Protection Officer at privacy@infinitypoker.co or complain to the National Privacy Commission.
15.5 Other countries. Where the law of your country gives you additional rights, we will respect them. Contact us to exercise them.
16. Changes to this policy
We may update this policy from time to time to reflect changes in our services, Events or the law. The latest version will always be on our website with its "last updated" date, and earlier versions are available on request. If we make significant changes, we will highlight them on our website or notify you directly.
17. Contact us and our privacy officer
If you have any questions about this policy or how we handle your data, or wish to make a complaint, contact our Privacy Officer:
Privacy Officer, Checkmate International L.L.C-FZ (Infinity Poker), Meydan Free Zone, Dubai, United Arab Emirates Email: privacy@infinitypoker.co
We will try to resolve any complaint directly. If you are not satisfied, you may contact the data protection authority in your country.