Privacy Policy

Last updated: April 13, 2026

1. Introduction

Rose ("we", "us", "our") respects your privacy. This policy explains what personal information we collect, why we collect it, and how we protect it. This policy applies to all users of the Rose platform.

2. Information We Collect

When you use Rose, we collect the following:

• Account information: first name, last name, email address, mobile phone number, and password (stored securely hashed).
• Financial information: bank account details you provide for withdrawals, and transaction history on the platform.
• Device information: browser type, device fingerprint, IP address, and operating system for security and fraud prevention.
• Usage data: pages visited, markets viewed, bets placed, chat messages sent, and other interactions with the platform.
• Referral data: information about who referred you and who you refer.

3. How We Use Your Information

We use your personal information to:

• Create and manage your Rose account.
• Process deposits, withdrawals, and market payouts.
• Send you verification codes via SMS to confirm your phone number.
• Detect and prevent fraud, abuse, and multi-accounting.
• Communicate with you about your account, markets, and platform updates.
• Improve the platform experience through analytics.
• Comply with legal obligations under South African law.

4. Legal Basis for Processing

We process your data based on:

• Contract: to provide you with the Rose service you signed up for.
• Legitimate interest: fraud prevention, platform security, and service improvement.
• Consent: where you explicitly opt in (e.g. marketing communications).
• Legal obligation: where required by South African law (e.g. FICA, POPIA).

5. Sharing Your Information

We do not sell your personal information. We may share data with:

• Payment providers: to process deposits and withdrawals securely.
• SMS providers: to deliver verification codes and notifications.
• Law enforcement: when required by a valid court order or subpoena.
• Service providers: hosting, analytics, and error-monitoring tools that process data on our behalf under strict agreements.

6. Data Security

• Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• All connections to Rose are encrypted via HTTPS/TLS.
• Access to personal data is restricted to authorised personnel only.
• We conduct regular security reviews of our systems.

7. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required by law to retain certain records (e.g. financial transaction records).

8. Your Rights Under POPIA

Under the Protection of Personal Information Act (POPIA), you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal data (subject to legal retention requirements).
• Object to processing of your data for direct marketing.
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, email us at privacy@rose.co.za.

9. Cookies & Tracking

Rose uses session cookies to keep you logged in and remember your preferences. We do not use third-party advertising trackers. Analytics data is collected in aggregate and cannot identify individual users.

10. Children's Privacy

Rose is not intended for anyone under the age of 18. We do not knowingly collect data from minors. If we discover that a minor has created an account, we will terminate it and delete the associated data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice. Continued use of the Platform after changes are posted constitutes acceptance.

12. Contact

For privacy-related questions or requests, contact our Information Officer:

• Email: privacy@rose.co.za