Terms & Conditions

Last updated: 19 May 2026

These Terms & Conditions ("Terms") govern access to and use of the services provided by Hizi Limited (hizi.io) ("Company", "we", "us", or "our"). By entering into a Plan, creating an account, accessing our platform, or using the Services, you ("Customer", "you", or "your") agree to these Terms.

01 Definitions

Acceptance

means Customer's acceptance of these Terms by signing up for an account, ticking an acceptance checkbox, clicking an "I agree" or equivalent button, or by accessing or using the Services. The date of Acceptance is the "Effective Date" of these Terms.

Affiliate

means any entity that directly or indirectly controls, is controlled by, or is under common control with a party.

Applicable Law

means all laws, regulations, regulatory guidance, licence conditions, and industry standards applicable to a party's performance under these Terms.

Control Plane

means the administrative, configuration, reporting, analytics, billing, dashboard, deployment tooling, and similar back-office interfaces of the Services used by Customer to manage and configure its use of the Services. The Control Plane does not include the runtime game-serving infrastructure, game APIs, wallet integration endpoints, session and round resolution services, or other components used to deliver games and resolve plays for End Users.

Customer Content

means data, content, materials, configurations, game assets, game logic, integrations, or other information submitted to, transmitted through, or hosted on the Services by or on behalf of Customer.

Documentation

means technical documentation, integration guides, API specifications, operational instructions, and other materials made available by Company.

End User

means a player, operator, administrator, or other end user who accesses or interacts with Customer's services, games, systems, or applications through or in connection with the Services.

Game Outcome

means any result, output, payout, win, loss, jackpot, bonus award, free-spin trigger, multiplier, feature trigger, round resolution, settlement, or other determination produced by, calculated from, or arising in connection with the operation of a game, game logic, paytable, mathematical model, random number generator, or feature mechanic deployed on, through, or in connection with the Services, whether or not such determination is correct, intended, expected, certified, or compliant with Applicable Law or any applicable specification.

Generic Mechanics

means general game mechanics, mathematical concepts, statistical patterns, feature types, bonus structures, jackpot architectures, reel configurations, paytable formats, and other commonly used or industry-standard game design elements.

Malfunction

means any error, defect, failure, fault, bug, omission, latency event, timeout, race condition, desynchronisation, integration failure, configuration error, deployment error, data corruption, log loss, network condition, infrastructure failure, sub-processor failure, third-party system failure, security incident, or other technical, operational, or environmental condition that affects, or may have affected, the operation of the Services or the determination, communication, recording, or settlement of any Game Outcome, whether or not the cause is known, identified, or attributable to any specific party.

Plan

means the subscription package, tier, or service configuration selected by Customer at signup or otherwise agreed in writing with Company, including the features, limits, region(s), pricing, billing frequency, and other terms applicable to Customer's use of the Services, as set out on Company's website, in Customer's account dashboard, or in any written agreement between the parties.

Platform

means Company's remote gaming server, game aggregation, hosting, deployment, API, infrastructure, reporting, monitoring, administration, and related technical systems.

Platform Improvements

means new or adjusted features, engine capabilities, APIs, tooling, integrations, documentation, or other Platform components, including in response to Customer's use of the Services, Customer's feature requests, Customer's bug reports, or Customer's general patterns of use.

Services

means the Platform and any related SaaS, hosting, infrastructure, support, maintenance, integration, reporting, or professional services provided by Company.

AUP

means Company's Acceptable Use Policy, as updated from time to time.

02 Scope of Services

Company will provide the Services described in the applicable Plan.

The Services may include access to remote gaming server infrastructure, APIs, hosting environments, deployment tools, integrations, reporting tools, configuration interfaces, monitoring systems, and related technical support.

The Company does not provide gambling operations, player account management, payment processing, customer support to End Users, player verification, responsible gambling services, or regulatory licensing services.

03 Account Registration and Access

Customer is responsible for maintaining the confidentiality of its account credentials and for all activity occurring under its accounts.

Customer must ensure that only authorised personnel access the Services.

Customer must promptly notify Company of any suspected unauthorised access, credential compromise, or security incident affecting the Services.

Company may suspend or restrict access where it reasonably believes that an account has been compromised, is being used unlawfully, or poses a security, operational, regulatory, or integrity risk.

04 Customer Responsibilities

Customer is responsible for:

1. complying with Applicable Law in connection with its use of the Services;
2. obtaining and maintaining all licences, permits, approvals, certifications, and authorisations required for its business;
3. ensuring that its games, operators, integrations, configurations, and End User-facing services comply with Applicable Law;
4. ensuring that Customer Content is accurate, lawful, secure, and suitable for use with the Services;
5. implementing appropriate controls for player protection, responsible gambling, anti-money laundering, fraud prevention, sanctions screening, geolocation, age verification, and identity verification where applicable;
6. ensuring that its systems and integrations are properly configured and maintained;
7. ensuring that its use of the Services complies with the AUP;
8. maintaining appropriate backup, business continuity, and disaster recovery procedures for its own systems and data that may interface with the Services;
9. ensuring that all downstream agreements with operators and End Users include provisions consistent with Section 6A, including malfunction-voids-plays provisions in game rules and applicable end-user terms.

Customer remains solely responsible for its relationship with operators, aggregators, regulators, payment providers, certification bodies, and End Users.

05 Acceptable Use

Customer must comply with the AUP.

Customer must not use the Services in any way that:

1. violates Applicable Law;
2. compromises the security, availability, integrity, or performance of the Services;
3. interferes with other customers or third-party systems;
4. circumvents technical or operational controls;
5. enables unauthorised gambling activity;
6. involves unlawful, fraudulent, misleading, abusive, or harmful conduct.

Company may suspend access to the Services where Customer breaches, or is reasonably suspected of breaching, the AUP.

06 Regulatory and Gambling-Specific Responsibilities

Unless expressly agreed otherwise, Customer is solely responsible for determining whether its use of the Services is permitted in any jurisdiction and for ensuring that all required regulatory approvals, licences, certifications, audits, technical standards, and reporting obligations are satisfied.

Company does not guarantee that the Services, any game, any integration, or any deployment configuration will be approved by any regulator, testing laboratory, certification body, operator, platform, or marketplace.

Customer must not make the Services available in any jurisdiction where doing so would be unlawful or where Customer does not hold the required permissions.

Customer must promptly notify Company of any regulatory inquiry, investigation, enforcement action, suspension, licence issue, or compliance concern that may affect the Services.

6A Game Integrity, RTP, RNG, and Outcomes

6A.1 No responsibility for game outcomes

The Services are infrastructure-based services. The Company does not certify or guarantee the mathematical model, return-to-player percentage ("RTP"), volatility, hit frequency, paytable, bonus mechanics, jackpot logic, random number generation ("RNG") output, or any other game-design parameter of any game, integration, or content operated on or through the Services. Design choices, parameters, and outputs are determined by the Customer, who uses the Services in respect of game outcomes entirely at its own risk.

6A.2 Customer responsibility for game logic

Customer is solely responsible for:

1. the correctness, completeness, fairness, and regulatory compliance of all game logic, mathematics, paytables, RTP configurations, implementations, bonus or jackpot mechanics deployed on or through the Services;
2. all testing, certification, and ongoing audit of such game logic by accredited testing laboratories (e.g. GLI, BMM, iTech Labs, eCOGRA) or regulators, where required;
3. maintaining all required certifications, technical standards, and version controls for each game and each jurisdiction in which it is distributed;
4. any difference between intended and actual game behaviour, including any difference attributable to integration with the Services.

6A.3 Disclaimer of game-outcome warranties

To the maximum extent permitted by Applicable Law, the Company makes no warranty, express, implied, or statutory, that:

1. any game will produce any particular RTP, distribution of outcomes, statistical behaviour, or financial result;
2. the RNG output, when consumed by Customer's game logic, will produce any particular result, sequence, or distribution;
3. any game, configuration, or deployment will be approved, certified, or accepted by any regulator, testing laboratory, operator, aggregator, or platform;
4. the Services will be free of bugs, defects, race conditions, latency, or other technical conditions that may affect game outcomes;
5. any historical game performance will be indicative of future game performance.

6A.4 Malfunctions void plays

In the event of any technical Malfunction (as defined in Section 1), all affected plays, rounds, wins, bets, jackpots, and outcomes shall be void, to the maximum extent permitted by Applicable Law and the rules of the applicable regulator. Customer is solely responsible for communicating this position to operators and End Users (including via terms of service made available to End Users) and for refunding, reconciling, or voiding affected plays in accordance with Applicable Law and operator agreements. The Company has no obligation to honour, pay out, replay, or compensate any party for any Malfunction-affected play.

6A.5 No liability for outcome-based losses

Without limiting Section 24 (Limitation of Liability), the Company shall have no liability whatsoever to Customer, operators, End Users, regulators, or any third party for:

1. sums paid out, withheld, or owed to End Users as a result of any game outcome, including any over-payment, under-payment, misawarded jackpot, miscalculated wins, voided rounds, or disputed outcomes;
2. any claim by an End User, operator, aggregator, or regulator that a game outcome was incorrect, unfair, non-compliant, or differed from advertised parameters;
3. loss of player trust, brand harm, regulatory fines, licence action, or reputational damage suffered by Customer or its operators in connection with game outcomes or Malfunctions;
4. any consequential financial loss arising from divergence between intended and actual RTP, volatility, or other statistical performance of any game.

The above exclusions apply regardless of whether the loss arises from defect, negligence, breach, or any other cause, save for the Company's fraud, wilful misconduct, or gross negligence, and save where Applicable Law does not permit such exclusion.

6A.6 Customer indemnity for game outcomes

In addition to the indemnification in Section 23, Customer shall defend, indemnify, and hold harmless the Company, its Affiliates, officers, directors, employees, contractors, and licensors from and against any and all claims, damages, losses, penalties, fines, costs, settlements, and expenses (including reasonable legal fees) arising from or relating to:

1. any game outcome, RTP variance, RNG dispute, paytable error, jackpot dispute, or Malfunction;
2. any End User claim, chargeback, complaint, or litigation in connection with game outcomes;
3. any regulator, testing laboratory, or certification body action relating to game logic, mathematics, RNG, or game certification;
4. any operator claim that game outcomes did not match Customer's representations.

6A.7 Reconciliation and replay

Customer is solely responsible for transaction reconciliation, replay logs, round audit trails, and End User dispute resolution. The Company may, at its discretion and subject to Section 19 (Audit), provide access to technical logs to assist Customer's investigation, but provision of such logs does not constitute acknowledgement of any defect, fault, or liability.

6A.8 RNG seeded by the Company

Where the Company supplies an RNG component as part of the Services, Customer acknowledges that (i) the Company's RNG is provided in the form certified, where certification has been obtained, and (ii) Customer is responsible for consuming the RNG output correctly within its own game logic. The Company's responsibility, if any, in respect of the RNG is limited strictly to the RNG component itself in the form certified, and does not extend to any downstream game outcome calculated by Customer's game logic.

6A.9 Acknowledgement

Customer acknowledges and agrees that the disclaimers and risk allocation in this Section 6A are a fundamental basis on which the Company has agreed to provide the Services and to set the fees, and that the Company would not provide the Services on the same terms without them.

07 Integrations and Third-Party Systems

The Services may integrate with third-party operators, aggregators, wallet systems, identity providers, payment providers, analytics services, testing laboratories, certification providers, or other third-party platforms.

Company is not responsible for third-party systems, third-party data, third-party outages, third-party APIs, or changes made by third parties.

Customer is responsible for ensuring that its third-party integrations are lawful, properly authorised, secure, and compatible with the Services.

Company may modify or discontinue integrations where reasonably necessary due to security, legal, regulatory, technical, or commercial reasons.

Customer accepts and permits the Company to publish availability of any new integration made by the Customer on the platform, for the benefit of other Customers.

08 Service Availability and Support

Company will use commercially reasonable efforts to provide the Services in accordance with the applicable Plan and Documentation.

Any service levels, uptime commitments, maintenance windows, incident response times, or support obligations apply only if expressly stated in a Plan or in a separate service level agreement. In the absence of a negotiated SLA, 99.9% uptime applies for plans "Basic" and "Standard", while 99.99% uptime applies for Enterprise plan users. The uptime is calculated per calendar month.

Company may perform scheduled or emergency maintenance. Where reasonably practicable, Company will provide advance notice of scheduled maintenance.

Company is not responsible for downtime or performance issues caused by Customer systems, third-party systems, force majeure events, internet connectivity, regulatory actions, Customer misuse, or factors outside Company's reasonable control.

8A Service Level Credits

8A.1 Calculation of Downtime

"Downtime" means the period during which the runtime components of the Services - including game APIs, session services, wallet integration endpoints, and round resolution and settlement services - are wholly unavailable to Customer, measured in minutes.

Downtime does not include:

1. any period during which the runtime components of the Services remain operational and games remain available to End Users, even if the Control Plane (as defined in Section 1) is unavailable, degraded, or partially functional;
2. any period of degraded performance, partial unavailability, or reduced functionality where the runtime components remain operational;
3. scheduled maintenance, emergency maintenance, force majeure events, or any unavailability arising from the matters listed in Section 8 (Service Availability and Support) as being outside Company's responsibility, including Customer systems, third-party systems, internet connectivity issues, regulatory actions, Customer misuse, or factors outside Company's reasonable control.

For the avoidance of doubt, unavailability of the Control Plane alone is not Downtime and does not entitle Customer to a Service Level Credit under this Section 8A, regardless of duration.

8A.2 Measurement

Uptime is measured per calendar month. "Monthly Uptime" is calculated as: (Total minutes in calendar month − Downtime minutes) ÷ Total minutes in calendar month, expressed as a percentage.

8A.3 Service Level Credit eligibility

Where Monthly Uptime in any calendar month falls below the applicable target set out in Section 8, Customer is entitled to claim a Service Level Credit ("SLC") in accordance with this Section 8A. SLCs are Customer's sole and exclusive remedy for any failure to meet the applicable Monthly Uptime target, and apply in place of (not in addition to) any other right to damages, refund, or other compensation arising from such failure.

8A.4 SLC tiers

Where Customer's Monthly Uptime in a calendar month falls below the applicable target, the SLC is calculated as a percentage of the fees paid by Customer for the Services in that calendar month, in accordance with the following table:

The SLC is capped at 25% of one month's fees per calendar month.

8A.5 Claim procedure

Customer must submit a written request for an SLC within thirty (30) calendar days of the end of the calendar month in which the relevant Downtime occurred. The request must include reasonable supporting evidence including the dates, times, and approximate duration of the Downtime. Failure to submit a request within this period results in forfeiture of the right to claim the SLC for that calendar month.

8A.6 Form of credit

SLCs are applied as a credit against future invoices for the Services. SLCs are not redeemable for cash, transferable, or refundable. SLCs expire 12 months after issuance if not applied.

8A.7 Annual cap

Notwithstanding any other provision of this Section 8A, the total SLCs payable to Customer in any rolling 12-month period shall not exceed 50% of one month's fees.

8A.8 Exclusions

No SLC is payable where Downtime arises from, contributes to, or coincides with:

1. any breach by Customer of these Terms or the AUP;
2. any period during which Customer's account is suspended under Section 10 or Section 25;
3. any Malfunction caused by Customer Content, Customer's configuration, or Customer's integrations;
4. beta features under Section 20;
5. any period before Customer's first payment of fees under a Plan; or
6. unavailability of the Control Plane only.

09 Changes to the Services

Company may update, improve, modify, or discontinue features of the Services from time to time.

Company will not materially reduce the core functionality of the Services during an active subscription term without reasonable notice, unless required for security, legal, regulatory, or operational reasons.

Company may make changes without notice where necessary to address vulnerabilities, prevent abuse, comply with Applicable Law, or protect the integrity of the Services.

10 Fees and Payment

Customer must pay all fees set out in the applicable Plan.

Unless otherwise stated:

1. fees are exclusive of taxes;
2. invoices are payable within 14 days of invoice date;
3. overdue amounts may accrue interest at the maximum rate permitted by law or 1.5% per month, whichever is lower;
4. Customer is responsible for any bank charges, withholding taxes, currency conversion fees, or transaction costs.

Company may suspend access to the Services if undisputed fees remain unpaid after written notice and a reasonable cure period.

11 Taxes

Customer is responsible for all applicable taxes, duties, levies, withholding taxes, and governmental charges arising from this agreement, except taxes based on Company's net income.

If Customer is required to withhold tax, Customer must gross up the payment so that Company receives the full amount invoiced, unless prohibited by Applicable Law.

12 Intellectual Property

12.1 Company IP

Company and its licensors retain all rights, title, and interest in and to the Services, Platform, Documentation, software, APIs, tools, technology, systems, know-how, source code, object code, infrastructure, integration protocols, engine architecture, RNG components, and all related intellectual property, including all modifications, improvements, and derivative works thereof made by or on behalf of Company. Nothing in these Terms transfers any ownership of Company IP to Customer.

12.2 Customer Content

As between the parties, Customer retains all rights, title, and interest in and to Customer Content, including the games, game logic, mathematical models, paytables, RTP configurations, RNG seeds (where supplied by Customer), bonus mechanics, narratives, characters, art, audio, animation, trade marks, and source code of any games Customer develops, uploads, or deploys on or through the Services. Company claims no ownership in Customer Content.

12.3 Licence from Customer to Company

Customer grants Company a non-exclusive, worldwide, royalty-free, sublicensable (only to Company's hosting providers, sub-processors, and infrastructure partners, and only as necessary to provide the Services) licence to host, store, transmit, process, display, execute, back up, and operate Customer Content for the sole purpose of providing the Services during the term of the applicable Plan, and for such limited period after termination as is reasonably necessary for orderly transition, backup retention, and legal compliance.

12.4 Licence from Company to Customer

Subject to these Terms, Company grants Customer a limited, non-exclusive, non-transferable, non-sublicensable right to access and use the Services during the applicable subscription term solely for Customer's internal business purposes and as described in the applicable Plan. No rights are granted except as expressly stated.

12.5 No exclusivity

Nothing in these Terms grants Customer any exclusive rights, market exclusivity, territorial exclusivity, or right of first refusal in or to the Services, the Platform, or any feature, capability, or functionality thereof. Customer acknowledges that Company provides the Services to multiple customers, including customers who may be Customer's competitors, and that Company may continue to develop, market, license, and operate the Services and similar services for any party.

12.6 Generic mechanics and game design concepts

Customer acknowledges and agrees that:

1. general game mechanics, mathematical concepts, statistical patterns, feature types, bonus structures, jackpot architectures, reel configurations, paytable formats, and other commonly used or industry-standard game design elements (collectively, "Generic Mechanics") are not protectable as exclusive Customer property, regardless of whether Customer first deploys, requests, or uses such Generic Mechanics on the Services;
2. Company may develop, integrate, support, document, and offer to other customers any Generic Mechanics, including Generic Mechanics that Customer has implemented, requested, or used on the Services, provided Company does not copy Customer's specific implementation, code, art, branding, paytable values, or other expressive elements of Customer Content; and
3. the protections afforded to Customer Content under clause 12.2 apply to Customer's specific implementation, expression, and embodiment of game ideas - not to the underlying ideas, mechanics, concepts, mathematics, or methods themselves, which remain free for Company and other customers to use, develop, and implement independently.

12.7 Platform Improvements arising from Customer use

Customer acknowledges that during the course of providing the Services, Company may develop, build, optimise, or extend Platform features, engine capabilities, APIs, tooling, integrations, documentation, or other Platform components, including in response to Customer's use of the Services, Customer's feature requests, Customer's bug reports, or Customer's general patterns of use ("Platform Improvements"). All Platform Improvements are Company IP and form part of the Services. Customer obtains no ownership, exclusive licence, or other proprietary interest in any Platform Improvement, regardless of whether Customer requested, inspired, contributed to, or co-developed it, and Company may make any Platform Improvement available to any other customer at any time and on any terms.

12.8 Customer's freedom to use the Services elsewhere

For the avoidance of doubt, nothing in these Terms restricts Customer from distributing, licensing, hosting, operating, or otherwise exploiting Customer Content on or through any platform, operator, aggregator, or service other than the Services. Customer's licence to Company under clause 12.3 is non-exclusive.

12.9 Trademark and brand notices

Each party retains its own trade marks, logos, brand names, and trade dress. Neither party may use the other party's branding without prior written consent, except as expressly permitted under a Plan or for factual references (e.g., listing Company as Customer's infrastructure provider, or vice versa where permitted under clause 29 (Publicity)).

12.10 No reverse engineering of Customer Content

Company will not reverse engineer, decompile, disassemble, or attempt to derive the source code of any Customer Content uploaded to the Services, except (i) as expressly authorised in writing by Customer, (ii) to the extent permitted by Applicable Law and not waivable, or (iii) as reasonably necessary to host, operate, debug, audit, or secure the Services in accordance with these Terms.

12.11 Aggregated and anonymised data

Notwithstanding clause 12.2, Company may collect, generate, derive, and use aggregated, anonymised, or de-identified data from Customer's use of the Services and from Customer Content, including (without limitation) transaction volume metrics, performance metrics, latency and uptime statistics, error rates, integration patterns, and feature usage patterns ("Aggregated Data"). Aggregated Data must not identify Customer, any End User, any individual game, or any specific transaction, and must not be capable of being re-identified by reasonable means. Company owns all Aggregated Data and may use it for any lawful purpose, including benchmarking, capacity planning, security analysis, fraud prevention, product development and improvement, and the production of industry reports, statistics, and analytics, including in materials made available to third parties. For clarity, this clause does not authorise Company to disclose Customer Content, identifiable End User data, or Customer-identifying information.

13 Feedback

Any suggestions, ideas, improvements, comments, recommendations, bug reports, or feedback provided by Customer regarding the Services ("Feedback") may be used by Company without restriction, attribution, compensation, or obligation, including to develop and offer Platform Improvements. Customer hereby assigns to Company all right, title, and interest in any Feedback, and waives any moral rights therein.

14 Restrictions

Customer must not, and must not permit any third party to:

1. copy, modify, reverse engineer, decompile, disassemble, or attempt to derive the source code of the Services, except to the extent such restriction is prohibited by Applicable Law;
2. access the Services to build a competing product or service;
3. resell, sublicense, lease, rent, or distribute the Services except as expressly permitted;
4. bypass usage limits, security controls, authentication mechanisms, or technical restrictions;
5. conduct penetration testing, vulnerability scanning, load testing, or similar testing without Company's prior written approval;
6. interfere with the operation, security, or integrity of the Services;
7. remove proprietary notices from the Services or Documentation.

15 Customer Content and Data

The licence in Section 12.3 covers Company's processing of Customer Content for the purposes of providing the Services. Customer represents and warrants that it has all rights, licences, consents, and permissions necessary for Company to process Customer Content in accordance with these Terms.

16 Data Protection

Each party must comply with Applicable Law relating to privacy and data protection.

Where Company processes personal data on behalf of Customer, the parties will enter into a data processing agreement where required by Applicable Law.

Customer is responsible for providing all required notices and obtaining all required consents from End Users and other data subjects.

Customer must not submit personal data to the Services unless permitted under the applicable Plan and data processing agreement.

17 Security

Company will maintain commercially reasonable technical and organisational measures designed to protect the Services.

Customer is responsible for securing its own systems, credentials, integrations, networks, devices, and personnel.

Customer must promptly notify Company of any confirmed or reasonably suspected security incident that may materially affect the Services.

Company may take any reasonable action necessary to protect the Services, including suspending access, blocking traffic, rotating credentials, disabling integrations, or applying emergency patches.

Company will notify Customer without undue delay of any confirmed security incident materially affecting the integrity, availability, or confidentiality of Customer's use of the Services.

18 Confidentiality

"Confidential Information" means non-public information disclosed by one party to the other that is marked confidential or should reasonably be understood to be confidential.

Confidential Information includes business plans, technical information, pricing, security information, product roadmaps, integration details, credentials, trade secrets, and non-public regulatory or compliance information.

The receiving party must:

1. use Confidential Information only to perform under these Terms;
2. protect Confidential Information using reasonable care;
3. not disclose Confidential Information except to personnel, Affiliates, contractors, advisers, or service providers who need to know it and are bound by confidentiality obligations.

Confidentiality obligations do not apply to information that is publicly available, already known without restriction, independently developed, or lawfully received from a third party.

A party may disclose Confidential Information where required by law, regulation, court order, regulator, stock exchange, or governmental authority, provided it gives notice where legally permitted.

19 Audit and Compliance Information

19.1 Company's compliance requests to Customer

Company may request information reasonably necessary to verify Customer's compliance with these Terms, the AUP, security requirements, anti-money laundering obligations, sanctions screening obligations, or regulatory obligations applicable to Customer's use of the Services. Customer must cooperate with reasonable requests relating to security, regulatory compliance, incident investigation, fraud prevention, sanctions screening, or integrity monitoring.

19.2 Customer's compliance requests to Company

Where reasonably necessary to satisfy a request from a regulator, auditor, testing laboratory, certification body, or other competent authority with jurisdiction over Customer or its operations, Customer may request from Company:

1. summary technical, security, and operational documentation about the Services;
2. confirmation of relevant Company certifications and audit reports (e.g., ISO 27001, SOC 2, gaming-jurisdictional certifications), where held; and
3. such other information as Company can reasonably provide to support Customer's regulatory obligations, taking into account Company's confidentiality obligations to other customers, security considerations, and the burden of the request.

Company will respond to reasonable requests within a reasonable time. Company is not required to disclose information that would compromise its security posture, breach obligations to third parties, or reveal commercially confidential information of other customers.

19.3 Logs and audit trail retention

1. Company will maintain logs, records, and audit trails relating to access, usage, transactions, system activity, security events, Game Outcomes, settlement events, and Service performance ("Operational Records") as reasonably necessary to provide, secure, and audit the Services.
2. Company will retain Operational Records for a minimum of five (5) years from the date of creation, or such longer period as is required by the regulator with jurisdiction over Customer's operations, provided Customer has notified Company in writing of the relevant retention requirement and the applicable retention period.
3. Specific retention periods for particular categories of records may be set out in a Plan. Where a Plan and this clause conflict, the Plan prevails to the extent of any longer period.
4. Operational Records may be retained beyond the periods stated above where required by Applicable Law, requested by a regulator, or reasonably necessary for Company to defend or pursue legal claims.
5. The retention obligations in this clause 19.3 survive termination or expiry of the applicable Plan.

19.4 Regulator access and disclosure

1. Customer authorises Company to disclose Operational Records, Customer Content, transaction data, and other Customer-related information to regulators, supervisory authorities, testing laboratories, certification bodies, law enforcement agencies, courts, tax authorities, and other competent authorities ("Authorities") where:
   1. Company is required to do so under Applicable Law, a binding order, or a lawful request from an Authority;
   2. the request relates to Customer's use of the Services, Customer Content, or Customer's compliance with Applicable Law in a jurisdiction where Customer or its operators are licensed or operate;
   3. the Authority has supervisory or investigative jurisdiction over Customer, Customer's operators, or Company; or
   4. disclosure is reasonably necessary to maintain Company's licences, certifications, or regulatory standing in any jurisdiction.
2. Where legally permitted and practicable, Company will notify Customer of any request from an Authority for Customer-related information before responding, so that Customer may seek a protective order or other appropriate remedy. Where prior notice is prohibited (for example, in the case of confidential investigations) or impracticable due to urgency, Company will notify Customer as soon as it is lawful and practicable to do so.
3. Disclosure to an Authority under this clause 19.4 does not breach Company's confidentiality obligations under Section 18 or Company's data protection obligations under Section 16 and the GDPR Policy.
4. Customer must promptly notify Company of any request from an Authority that involves or may involve disclosure of Operational Records, Company information, or Company's Services. Company may, at its discretion, participate in or coordinate the response to such requests, particularly where the request implicates Company's infrastructure, security, or other customers.

19.5 Customer audit of Company

1. Where Company holds independent certifications or audit reports that reasonably address Customer's audit needs (such as ISO 27001 certification, SOC 2 reports, gaming-jurisdictional audit reports, or penetration test summaries), Company may satisfy Customer audit requests by providing such certifications or reports under appropriate confidentiality obligations.
2. Where independent certifications or reports are not sufficient to satisfy a binding requirement of a regulator with jurisdiction over Customer, Company will permit Customer or an independent auditor appointed by Customer and approved by Company (such approval not to be unreasonably withheld) to conduct an audit, subject to:
   1. the parties agreeing in advance the scope, duration, timing, security controls, and confidentiality obligations applicable to the audit;
   2. the auditor not being a Competitor of Company and having appropriate professional qualifications;
   3. no more than one (1) audit per Customer per calendar year, unless required more frequently by a binding regulatory requirement;
   4. Customer bearing all costs of the audit, including any reasonable cost charged by Company for facilitating the audit;
   5. audit results being treated as Confidential Information, save where disclosure is required by a regulator, court, or Applicable Law.

19.6 Continuity of regulator access

Company's obligations under clauses 19.3 (Logs and audit trail retention) and 19.4 (Regulator access and disclosure) survive termination or expiry of the applicable Plan, to the extent and for so long as the underlying retention or disclosure requirement applies.

20 Beta Features

Company may make beta, preview, experimental, or pre-release features available.

Beta features are provided "as is", may be modified or discontinued at any time, and may be subject to additional terms.

Company gives no warranties, commitments, or service levels for beta features unless expressly agreed otherwise.

21 Warranties

Each party represents and warrants that it has the authority to enter into and perform under these Terms.

Company warrants that it will provide the Services in a professional and workmanlike manner.

Customer warrants that its use of the Services, Customer Content, games, integrations, and End User-facing services will comply with Applicable Law and will not infringe third-party rights.

The individual accepting these Terms on behalf of Customer represents and warrants that they are authorised to bind Customer to these Terms.

22 Disclaimer

Except as expressly stated in these Terms, the Services are provided "as is" and "as available".

To the maximum extent permitted by law, Company disclaims all warranties, whether express, implied, statutory, or otherwise, including warranties of merchantability, fitness for a particular purpose, non-infringement, uninterrupted availability, regulatory approval, certification, profitability, game performance, or compatibility with third-party systems.

Company does not warrant that the Services will be error-free, uninterrupted, secure from all threats, or suitable for any specific jurisdiction or regulatory regime.

23 Indemnification

Company will defend Customer against third-party claims alleging that the Services, as provided by Company and used in accordance with the Documentation and these Terms, infringe such third party's intellectual property rights, and will pay damages finally awarded against Customer or agreed in settlement by Company.

Company has no obligation under this clause for any claim arising from:

1. Customer Content;
2. Customer's games, paytables, RNG configurations, or other game logic;
3. Customer modifications to the Services;
4. combinations of the Services with third-party products or services not provided by Company;
5. use of the Services contrary to Documentation or these Terms; or
6. any version of the Services other than the most recent version made available by Company.

If the Services are alleged or held to infringe, Company may, at its option and sole expense:

1. procure for Customer the right to continue using the Services;
2. modify the Services to make them non-infringing while preserving substantially equivalent functionality;
3. replace the Services with substantially equivalent non-infringing services; or
4. terminate the affected Plan and provide a pro-rata refund of prepaid fees for the unused portion of the subscription term.

The foregoing states Company's entire obligation, and Customer's exclusive remedy, for any claim of intellectual property infringement.

24 Limitation of Liability

To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of profits, revenue, goodwill, business, anticipated savings, data, or use.

For the avoidance of doubt, this clause does not limit:

1. Customer's payment obligations,
2. either party's indemnity obligations, or
3. liability arising from the Excluded Claims listed below.

Except for Excluded Claims, each party's total aggregate liability arising out of or relating to these Terms will not exceed the fees paid or payable by Customer to Company under the applicable Plan during the 12 months before the first event giving rise to liability.

"Excluded Claims" means:

1. Customer's payment obligations;
2. breach of confidentiality;
3. infringement or misuse of intellectual property rights;
4. indemnification obligations;
5. fraud, wilful misconduct, or gross negligence;
6. liability that cannot be limited under Applicable Law.

25 Suspension

Company may suspend access to the Services immediately where:

1. Customer breaches these Terms or the AUP;
2. Customer fails to pay undisputed overdue fees;
3. Customer's use creates a security, operational, legal, regulatory, or integrity risk;
4. Company is required to do so by law, regulator, court, operator, hosting provider, or other authority;
5. Customer's licences, approvals, or certifications are suspended, revoked, or materially questioned;
6. Customer's use may expose Company to liability or reputational harm.

Company will use reasonable efforts to notify Customer of suspension and restore access once the issue is resolved, unless prohibited by law or impracticable.

During any suspension under Section 10 or this Section 25, Customer's Operational Records and Customer Content remain retained but inaccessible to Customer. Export of Customer Content under Section 26 is available only following full payment of outstanding fees or upon termination of these Terms.

26 Term and Termination

These Terms begin when Customer first accepts them and continue until Customer's Plan expires or is terminated.

Either party may terminate the Plan if the other party materially breaches these Terms and fails to cure the breach within 30 days after written notice.

Company may terminate immediately if Customer breaches the AUP, violates Applicable Law, fails to pay overdue fees after notice, becomes insolvent, loses required regulatory permissions, or creates material legal, security, or operational risk.

Upon termination or expiry:

1. Company's licence to Customer Content under Section 12.3 terminates, save for limited rights necessary for backup retention and legal compliance;
2. Company will, at Customer's written request made within 30 days of termination, make Customer Content available for export using Company's standard export tools;
3. Customer's IP in Customer Content remains with Customer;
4. Company's IP in the Platform and any Platform Improvements remains with Company;
5. any Platform Improvements developed during the term remain Company's property and may be offered to other customers.

27 Export Controls and Sanctions

Customer must comply with all applicable export control, trade sanctions, and anti-boycott laws.

Customer must not use the Services in, or make the Services available to persons located in, restricted territories or to sanctioned persons where prohibited by Applicable Law.

Customer represents that it is not subject to sanctions and is not owned or controlled by sanctioned persons.

28 Anti-Bribery and Corruption

Each party must comply with applicable anti-bribery, anti-corruption, and anti-money laundering laws.

Customer must not use the Services to facilitate bribery, corruption, money laundering, terrorist financing, sanctions evasion, or other unlawful activity.

29 Publicity

Neither party may use the other party's name, logo, trademarks, or branding in marketing materials without prior written consent.

Company may identify Customer as a customer only if expressly permitted in a Plan or with Customer's prior written approval.

30 Notices

Notices must be sent in writing to:

1. for Customer, the email address associated with Customer's account at the time of sending, and
2. for Company, the contact address published on Company's website.

Either party may update its notice details by written notice to the other.

Notices are deemed received when delivered by hand, confirmed email, courier, or registered mail, subject to Applicable Law.

31 Assignment

Customer may not assign or transfer these Terms or any Plan without Company's prior written consent, except to an Affiliate or successor in connection with a merger, acquisition, corporate reorganisation, or sale of substantially all assets, provided the assignee agrees to be bound by these Terms.

Company may assign these Terms to an Affiliate or successor.

32 Subcontractors

Company may use Affiliates, hosting providers, infrastructure providers, contractors, and other subcontractors to provide the Services.

Company remains responsible for the performance of its obligations under these Terms.

33 Force Majeure

Neither party is liable for delay or failure to perform due to events beyond its reasonable control, including natural disasters, war, terrorism, civil unrest, labour disputes, internet failures, power outages, cyberattacks, government actions, regulatory restrictions, hosting provider failures, or failure of third-party systems.

Payment obligations are not excused by force majeure.

34 Governing Law and Jurisdiction

These Terms are governed by the laws of The Isle of Man, excluding conflict of law rules.

The courts of The Isle of Man have exclusive jurisdiction over disputes arising out of or relating to these Terms, unless mandatory law provides otherwise.

35 Changes to these Terms

Company may update these Terms from time to time.

For material changes, Company will provide reasonable notice. Continued use of the Services after the effective date of updated Terms constitutes acceptance.

Changes will not materially reduce Customer's rights during an active subscription term unless required by law, regulation, security, or operational necessity.

36 Source code purchase

For the avoidance of doubt, source code licensing is not provided under these Terms. Any source-code product is governed by a separate Master Source Licence Agreement. The Master Source Licence Agreement governs ownership, delivery, support, and derivative works arising from any source-code purchase.

37 Miscellaneous

These Terms, together with the applicable Plans, AUP, Documentation, data processing agreement, and any referenced policies, constitute the entire agreement between the parties regarding the Services.

If any provision is invalid or unenforceable, the remaining provisions remain in effect. Failure to enforce a provision is not a waiver.

Nothing in these Terms creates a partnership, joint venture, employment, agency, fiduciary, or franchise relationship.

Headings are for convenience only.