CCTV Rush Hour Betting Data Protection Policy

This Data Protection Policy describes how Rush Hour Games ("we," "us," or "our") collects, uses, stores, and protects your information when you visit our website at rushhours.net (the "Platform"). Safeguarding your privacy is fundamental to our operations, and we are committed to handling all personal data with openness and accountability. By continuing to use this Platform, you acknowledge the data practices described in this document.

Effective Date: January 15, 2026

1. Information We Collect About You

The types of information we handle depend on how you interact with our Platform. We collect data through two primary channels: automated technologies and direct submissions from you.

1.1 Automatically Collected Technical Data

When you browse our Platform, we collect certain technical data using Google Analytics. This includes your anonymised IP address, the type and version of browser you are using, your operating system and device type (whether desktop, mobile, or tablet), your screen dimensions, which pages you view and how long you spend on each, the website or search engine that referred you to us, your approximate geographic location (country and city only), and when your visit occurred. All of this data is captured via cookies and similar technologies. None of it can be used to identify you as an individual, and we only review it in aggregated form to understand overall visitor behaviour.

1.2 Cookie Technology

Our Platform relies on cookies — small data files stored on your device during browsing. Cookies enable us to provide a smooth, personalised experience. We use three distinct categories of cookies, each serving a different purpose. Full details on every category appear in Section 4 below.

1.3 Data You Provide Directly

If you use our contact form, we receive the information you choose to supply: your name, email address, the subject of your message, and the message itself. Our form processing is handled by Formspree. When you submit a form, your data travels to Formspree's servers before being forwarded to us. Formspree operates under its own privacy policy regarding data it processes. We never passively collect form data — it only reaches us when you actively choose to send it.

2. Our Purposes for Using Your Data

We use the data we collect strictly for the reasons outlined here, and we do not repurpose your information for anything beyond these stated objectives.

2.1 Platform Improvement and Optimisation

Technical data from analytics allows us to see which sections of our Platform visitors find most useful. We apply these insights to improve navigation, reduce page load times, produce content that better matches what visitors are looking for, and identify and fix technical problems. For instance, if we notice that many visitors leave a certain page very quickly, we investigate whether the content needs updating or whether there is an underlying technical error.

2.2 Understanding Visitor Trends

We use aggregated analytics data to gain a picture of overall traffic patterns, the times of day when usage peaks, where our visitors are located geographically, and how well our content performs. This analysis is always performed at an aggregate level and never involves tracking specific individuals across the internet. We do not create behavioural profiles of individual visitors based on their activity on our Platform.

2.3 Responding to Your Messages

When you fill out a contact form, we use your name and email address solely to answer the question or concern you raised. We do not add your email to any newsletter or marketing list, send you unsolicited promotional content, or pass your contact information to any third party unless required to do so by law. Your message data serves one purpose only: addressing whatever you wrote to us about.

3. Legal Grounds for Processing Under GDPR (Article 6)

Our processing of personal data relies on the following legal bases:

• Your Consent (Article 6(1)(a)): Analytics cookies are activated only after you click "Accept All" on our cookie consent notice. You can revoke this consent at any time using the "Cookie Settings" link in the footer.
• Legitimate Interest (Article 6(1)(f)): Essential cookies that support core Platform functionality, such as remembering your cookie preferences. These do not need consent because the Platform cannot function properly without them.
• Your Consent (Article 6(1)(a)): By submitting our contact form, you consent to us processing the name and email address you provide so we can respond to your message.

4. Our Cookie Practices

Cookies play a key role in how our Platform operates. Here is a detailed breakdown of every cookie category we use, what each does, and how you can control them.

4.1 Strictly Necessary Cookies

These cookies are indispensable for basic Platform operations. They handle tasks like recording your cookie consent choice, maintaining your session as you move between pages, and enabling security features to function. Strictly necessary cookies cannot be turned off without breaking core functionality. They do not collect personal data and are typically deleted when you close your browser or shortly after.

4.2 Traffic Analysis Cookies

We use Google Analytics cookies to capture anonymised statistics about how visitors interact with our Platform. These cookies track metrics such as page views, session duration, bounce rates, and the paths visitors take through the site. Google Analytics cookies typically persist for up to 26 months. The resulting data is processed by Google under Google's own privacy policy. We have configured Google Analytics to mask IP addresses, meaning your full IP address is never logged in any of our analytics reports.

4.3 User Preference Cookies

These cookies remember selections you make on our Platform, including your cookie consent decision and any display settings you configure. Preference cookies make your experience more consistent by carrying your choices forward between visits. They generally last for up to 12 months and do not track your activity on other websites.

4.4 Controlling Your Cookie Settings

You have full authority over which cookies are stored on your device. There are several ways to manage them. First, when you first arrive at our Platform, a cookie consent notice lets you either accept all cookies or refuse non-essential ones. Second, most web browsers allow you to inspect, manage, and delete cookies through their settings — typically found under Privacy, Security, or Cookies in your browser preferences. Third, you can opt out of Google Analytics specifically by installing the Google Analytics Opt-Out Browser Add-on from tools.google.com/dlpage/gaoptout. Fourth, you can wipe all cookies at any time through your browser settings, which will reset your preferences on our Platform and every other site you visit.

Bear in mind that turning off strictly necessary cookies may prevent certain parts of our Platform from working as intended.

5. External Links and Third-Party Services

Our Platform contains links to external websites, including online betting platforms where Rush Hour by 155.io can be played. All betting links carry rel="nofollow" attributes and open in separate browser tabs. Once you follow a betting link and leave our Platform, the privacy policy and terms of the destination site govern your experience. We accept no liability for the privacy practices, data collection methods, or content of any external website.

We urge you to read the privacy policy of any betting platform or other external site before sharing personal details, creating an account, or making financial transactions. Every betting platform has its own data handling procedures, which may differ significantly from ours. Linking to these platforms does not constitute an endorsement of their privacy standards.

Third-party services integrated into our Platform are Google Analytics for visitor statistics and Formspree for processing contact form submissions. Each of these services has its own privacy policy governing how it handles data gathered through our Platform.

6. How Long We Keep Your Data

Different types of data are kept for different lengths of time, depending on why we collected it and any applicable legal requirements.

6.1 Technical and Analytics Data

Data held in Google Analytics is retained for up to 26 months from the date it was collected. After that window closes, Google automatically removes the data from its servers. We selected this retention period within our Google Analytics configuration as the maximum we consider necessary for evaluating long-term visitor trends. Anonymised summary reports generated from this data may be preserved indefinitely, but these reports cannot be used to identify any individual visitor.

6.2 Contact Form Submissions

Information you submit through our contact form — your name, email address, subject line, and message body — is stored for a maximum of 12 months from the submission date. This period allows us to reference earlier correspondence if you contact us again about a related issue. After 12 months, contact form data is permanently deleted from both our systems and Formspree's servers in line with their own retention policies.

6.3 Cookie Lifespans

Cookies expire at different times depending on their category. Strictly necessary cookies are session-based and vanish when you close your browser. Traffic analysis cookies persist for up to 26 months. User preference cookies last for up to 12 months. You can delete every cookie at any time through your browser settings, regardless of its scheduled expiry.

7. Cross-Border Data Transfers

Some of the service providers we work with are based outside the UK and the European Economic Area (EEA):

• Google Analytics (Google LLC, USA): We run Google Analytics 4 with IP anonymisation enabled. Data is transferred to the United States under Standard Contractual Clauses (SCCs) approved by the European Commission. Google's data processing agreement includes commitments to protect EU/UK personal data.
• Formspree (USA): Contact form submissions are processed by Formspree Inc. Form data (name, email, message) is transferred to the United States under SCCs. Data is held for 12 months before being deleted.

We only use processors that provide adequate safeguards for international transfers as required by UK GDPR and EU GDPR Chapter V.

8. Your Data Protection Rights

If you live in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) and the UK GDPR grant you specific rights over your personal data. Regardless of where you are located, we extend these same rights to every visitor as a matter of principle.

8.1 Right to See Your Data

You may ask us for a copy of all personal data we hold about you. We will supply this information in a commonly used electronic format within 30 days of receiving your request.

8.2 Right to Correct Inaccuracies

If any personal data we hold about you is wrong or incomplete, you may ask us to fix or update it. We will make the necessary corrections within 30 days of your request.

8.3 Right to Deletion

You may ask us to erase any personal data we hold about you, subject to certain legal exceptions. Once we receive a valid deletion request, we will remove your data within 30 days and send you written confirmation. This includes requesting the removal of contact form submissions and any analytics data that could be linked to you.

8.4 Right to Transfer Your Data

You may obtain any personal data you have given us in a structured, commonly used, machine-readable format. You may also ask us to send this data directly to a different data controller where it is technically feasible to do so.

8.5 Right to Object

You may object to us processing your personal data for specific purposes, such as analytics or direct marketing. If you object to analytics processing, we will stop collecting data about your visits. You can exercise this right at any time by contacting us or by using the cookie consent controls on our Platform.

8.6 Right to Limit Processing

You may ask us to restrict the processing of your data while we verify its accuracy, while we assess a legitimate interest claim, or if processing is unlawful but you prefer restriction over deletion.

8.7 Right to File a Complaint

If you believe your data protection rights have been violated, you may lodge a complaint with a supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO) at ico.org.uk. If you are located in the EU/EEA, you may contact the data protection authority in your member state.

To exercise any of these rights, please get in touch using the details listed below. We will act on all legitimate requests within 30 days. If your request is particularly complex, we may extend this deadline by up to an additional 60 days, but we will notify you of any extension and explain why it is needed.

9. How We Protect Your Information

We implement appropriate technical and organisational measures to safeguard the data we collect. Our Platform is served over HTTPS, which encrypts all data transmitted between your browser and our servers. Only authorised team members have access to analytics data. Contact form submissions are transmitted securely via Formspree's encrypted infrastructure. We regularly review our data handling processes to identify and address potential weaknesses.

That said, no method of internet transmission or electronic storage can be guaranteed to be completely secure. Although we strive to protect your information, we cannot promise absolute security. If you become aware of any security incident involving your data, please inform us immediately.

10. Protecting Minors

Our Platform is intended exclusively for people aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18. If we learn that we have inadvertently received data from a minor, we will take immediate steps to delete that information. If you are a parent or guardian and believe your child has shared personal data with us, please contact us so we can take appropriate action.

11. Updates to This Policy

We may revise this Data Protection Policy from time to time to reflect changes in our practices, legal obligations, or regulatory guidance. Whenever we make material changes, we will update the "Last Updated" date shown at the bottom of this page. We encourage you to check this page periodically so you remain aware of how we handle your data. For any processing based on consent, significant changes will require us to seek your fresh consent. We will not treat your ongoing use of the Platform as acceptance of altered processing terms.

12. Getting in Touch About Data Protection

If you have questions about this Data Protection Policy, want to exercise your data rights, or have concerns about how we handle your information, please contact us at:

Email: [email protected]

Please put "Data Protection Enquiry" in your subject line so we can route your request promptly. We aim to reply to all data protection queries within 5 working days and to complete formal data rights requests within 30 days as required by GDPR.

Information for EU/EEA Visitors: As a small-scale operation based in the United Kingdom, we are committed to handling data protection requests from EU/EEA residents within the timeframes mandated by the EU GDPR. If you need a local representative in your member state, please contact us and we will provide the relevant details.

Last updated: February 21, 2026