Last written 26 July 2026 · Vivalto

1. Who this page is about

Vivalto publishes this website and supplies the Vivalto platform. Where this page says we, us or our, it means Vivalto.

This page has two halves. The first half covers visitors to this website. The second half covers the platform we supply to a customer, where the customer decides what happens to the information and we act on their instructions.

2. Visitors to this website

2.1 What we collect when you browse

Reading this site requires no account and no form. Our host records the ordinary technical details every web server records, so pages can be served and the service can be kept healthy and safe.

The address of the page you asked for.
The date and time of the request.
Your browser type and version.
Your network address, held for a short period for security reasons.

The site loads no third party analytics, no advertising pixels and no social widgets. Every asset a page needs comes from the same place the page comes from.

2.2 What we collect when you write to us

The contact form asks for your name, your work email address, your company, an optional answer about the number of brands you run, the subject you would like to cover, and your message. A hidden field sits on the form to catch automated submissions, and a value in that field causes the submission to stop.

We use what you send for a single purpose. Replying to you and arranging a demonstration.

2.3 How long we keep it

Server records of page requests: up to ninety days.
Messages sent through the contact form: up to twenty four months from your last contact.
Anything that becomes part of a signed agreement: as long as the agreement and the law require.

2.4 Our legal grounds

We rely on our legitimate interest in running a business website, answering the people who write to us, and keeping the service secure. Where you begin a commercial conversation with us, we also rely on the steps taken ahead of a contract.

3. Cookies and local storage

This site keeps one small item in your browser, and it exists to remember that you have seen the cookie note. It carries the value seen and nothing else. Clearing your browser storage removes it, and the note appears again on your next visit.

The cookie page describes this in full.

4. The Vivalto platform

4.1 The roles

A customer who licenses Vivalto decides which player information enters the platform and what happens to it. In data protection language that customer is the controller, and we act as the processor on their documented instructions.

A player who wants to understand how their information is handled should ask the casino brand they play with. That brand holds the relationship and the answers.

4.2 What the platform processes

The set is agreed with each customer before the connection is built. It commonly covers:

An identifier that lets a player record be matched with the customer platform.
Activity events such as registrations, deposits, sessions and bets.
Values a marketing team builds a segment from, such as country, brand and currency.
The bonuses granted, their progress and the moment each one converts.
Level, experience and badge records where the customer uses those features.

Player balances stay on the customer platform. Vivalto holds the bonus logic, the counters and the record, then signals the customer platform at the moment a bonus converts.

4.3 Sub processors

We use a small number of suppliers for hosting and platform operations. A current list goes to every customer, and a customer receives notice ahead of a change so they can raise an objection.

4.4 Security measures

Access follows the role a person holds and the brands that role covers.
Each brand keeps its own players, journeys and rewards.
Calls between Vivalto and a customer platform carry a signature the receiver checks.
Grants, counts and conversions are written down and stay readable afterwards.
Features stay dark until somebody with back office access at the customer switches them on.

4.5 A personal data breach

A breach affecting a customer gets reported to that customer without undue delay, together with what we know, what we are doing, and what we suggest they do.

5. Sharing

We sell personal information to nobody, and we share it with nobody for advertising. Sharing happens in three cases only: a supplier acting for us under contract, a customer receiving information that belongs to them, and a lawful request we are obliged to answer.

6. Transfers

Where information travels outside the region it was collected in, we put an approved transfer mechanism in place first, and we describe the arrangement to any customer who asks.

7. Your rights

Under the law that applies to you, you may hold rights to:

Ask what personal information we hold about you, and receive a copy.
Have something corrected when it is wrong.
Ask for erasure where the grounds for holding it have ended.
Ask us to restrict what we do with it.
Object to processing that rests on a legitimate interest.
Receive what you gave us in a portable form.
Complain to your supervisory authority.

Write to hello@vivalto.ai and we will answer inside one month. A request about a player record held for a casino brand goes faster if you send it to that brand, because the brand decides the outcome.

8. Children

This website is aimed at businesses and their staff. We collect nothing knowingly from anyone under the age of eighteen through this site.

9. Changes to this page

When this page changes, the date at the top changes with it. A change that materially affects a customer arrives by direct notice as well.

10. Reaching us

Email hello@vivalto.ai for anything on this page, including a request to exercise any of the rights in section 7. That address reaches the people who decide what happens to the information described here.