Privacy Policy

1. Who We Are

MADECAPITAL LIMITED, trading as MyReadyMade ("MyReadyMade", "we", "us", "our"), operates the closed M&A marketplace at myreadymade.com (the "Platform"), connecting iGaming operators for business sales, partial exits, mergers, and capital raises.

MyReadyMade was built by the team behind MyGamingLicense.

Questions about this policy: deals@myreadymade.com

2. Scope

This policy applies to personal information we collect through the Platform and in connection with our advisory services. It does not apply to:

• Third-party websites we may link to
• Information collected offline or through channels not connected to the Platform
• Deal counterparties acting as independent data controllers in connection with a transaction

3. What Information We Collect

3.1 Information you provide directly

• Account data: name, email address, phone number, company name, title, jurisdiction of incorporation
• Identity verification data: government-issued ID, proof of beneficial ownership, corporate documentation collected as part of our KYC and counterparty verification process
• Business information: financial data, operating metrics (GGR, NGR, player counts), licence details, corporate structure, valuation materials, and deal-related documentation you submit to the Platform
• Communications: messages sent through the Platform, emails, and records of meetings or calls with our advisors

3.2 Information collected automatically

When you access the Platform, we automatically collect:

• IP address, browser type, operating system, device identifiers
• Pages visited, time on page, referral source
• Session data and interaction logs

Some of this technical data, such as IP address and device identifiers, constitutes personal data under applicable law. We process it for security, fraud prevention, analytics, and site administration.

3.3 Information from third parties

We may receive information about you from:

• Public corporate registries and regulatory databases (for counterparty verification)
• Our partners and advisors involved in a transaction, where you have authorised their involvement
• KYC and AML compliance providers

4. How We Use Your Information

We process personal information only where we have a lawful basis to do so.

We do not use your personal information for automated decision-making or profiling that produces legal or comparable effects.

5. Deal Data and Counterparty Disclosure

5.1 Sell-side process

Access to a seller's confidential information and publication of any listing follows a two-document process.

Step 1: Mutual Non-Disclosure Agreement (MNDA). Before MyReadyMade reviews any confidential materials, the seller signs an MNDA with MyReadyMade. This agreement governs how we access and protect the seller's confidential materials: internal documents, financial data, corporate records, and operating metrics. We do not access confidential seller materials without a signed MNDA.

Step 2: Seller Agreement (SA). Before any information about the business is published or shared with potential buyers, the seller signs a Seller Agreement. This document is the seller's explicit consent for MyReadyMade to prepare and publish an anonymised description of the listing. No identifiable information is shared with the market without this authorisation.

5.2 Listing anonymisation

All published listings are anonymised. The seller's identity, brand, legal entity name, and directly identifying operational details are withheld until the seller explicitly authorises disclosure to a specific verified buyer.

5.3 Buy-side process

Before receiving any confidential deal details, a prospective buyer signs two documents with MyReadyMade:

• Non-Disclosure Agreement (NDA): covering the buyer's handling of confidential information received in connection with the transaction
• Non-Circumvention Agreement: prohibiting the buyer from approaching the seller directly, outside of this process

MyReadyMade discloses deal details only after both documents are signed.

5.4 Restrictions on use of counterparty data

Information received about a counterparty (including financials, valuations, corporate structure, licence history, or identity) may only be used to evaluate or complete the specific transaction for which it was disclosed. Any other use (including competitive intelligence, unsolicited outreach, third-party disclosure, or any other commercial purpose) is prohibited and constitutes a breach of the applicable NDA and Seller Agreement.

5.5 Advisor access

Advisors assigned to a transaction access deal data solely to facilitate that transaction, under binding confidentiality obligations.

6. How We Share Information

We do not sell personal information or share it with third parties for their own marketing purposes.

We share information only in the following circumstances:

• Transaction counterparties: as described in Section 5, subject to NDA and verification
• Service providers: third-party vendors who support our operations (hosting, analytics, KYC verification, legal counsel) under data processing agreements that restrict their use of your data
• Affiliates: where MyReadyMade establishes genuinely affiliated entities in future, data may be shared with them where necessary to perform services, subject to equivalent confidentiality obligations and appropriate transfer safeguards
• Legal obligations: where required by applicable law or by order of a court or regulatory authority; or where necessary to protect the rights or safety of MyReadyMade, our users, or third parties
• Business restructuring: if MyReadyMade is acquired, merged, or its assets substantially transferred, user information may transfer as part of that transaction; we will notify affected users in advance where possible

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy, or as required by law.

When retention periods expire, data is securely deleted or anonymised. If immediate deletion is not possible, data is isolated from further processing until deletion can occur.

8. International Transfers

Where we use service providers located outside the EEA, we transfer personal data only under Standard Contractual Clauses approved by the European Commission, or another mechanism permitted under applicable law, and we assess whether additional safeguards are required in the destination country.

9. Security

We apply technical and organisational measures appropriate to the sensitivity of the information we process, in particular, the confidential business and financial data involved in M&A transactions.

These measures include:

• Encryption in transit (TLS) and at rest
• Access controls limiting deal data to authorised personnel and verified counterparties
• Audit logging of access to confidential materials
• Confidentiality obligations binding all staff and service providers

No transmission or storage method is fully secure. If you become aware of a security concern, contact us at deals@myreadymade.com.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information, subject to our legal retention obligations
• Restrict how we process your information in certain circumstances
• Object to processing based on legitimate interests
• Portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing

To exercise any right, contact us at deals@myreadymade.com. We will respond within 30 days. We may need to verify your identity before acting on your request.

Deletion requests cannot override our legal obligations to retain certain records.

11. Cookies and Tracking

We use strictly necessary cookies to keep the Platform functional and secure. We use analytics cookies only with your prior consent, which you may give or withdraw at any time through our cookie banner. We do not use cookies for behavioural advertising.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect how the Platform works.

12. Minimum Age

The Platform is for business use by adults only. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information through the Platform, contact us at deals@myreadymade.com and we will delete it.

13. Updates to This Policy

We may update this policy when our practices or applicable law changes. Material changes will be communicated by email or notice on the Platform. The "Last updated" date at the top reflects the most recent revision.

14. Contact

MADECAPITAL LIMITED (trading as MyReadyMade)

[Registered address]

Email: deals@myreadymade.com

For GDPR-related inquiries, contact our data protection representative at the same address.