Privacy Policy

Kestra is a statistical football-projection service operated by ABACUSUK LTD, a company registered in the United Kingdom (company number 17312039). For the personal data described here, ABACUSUK LTD is the data controller. For any privacy question, or to exercise your rights, contact info@kestra.tips.

• Account data — your email address, and the sign-in state needed to keep you logged in.
• Payment data — handled by our payment provider on their own secure pages. We never see or store your full card number. We keep a record of your subscription status, payment receipts, and a provider reference (such as the last four digits) needed to bill and support you.
• Telegram data — if you connect Telegram, your Telegram user ID (and username, if set) so we can deliver tips and link your membership.
• Usage & technical data — your IP address, browser/device (user-agent), and basic activity, used for security and to detect referral fraud and abuse.
• Referral data — if you join through a referral or refer others, the link between the accounts and the resulting commissions and payouts.

• to provide the service, your account, and tip delivery;
• to take payment and manage your subscription;
• to run the referral programme and prevent and investigate fraud and abuse;
• to send you service messages (such as sign-in codes and billing notices) and, if you choose, occasional product updates you can opt out of at any time;
• to keep the service secure and to improve it; and
• to comply with our legal obligations.

We rely on the following legal bases:

• Contract — to provide the service and take payment;
• Legitimate interests — to keep the service secure, prevent fraud and abuse, and improve what we offer;
• Consent — for optional marketing emails, which you can withdraw at any time; and
• Legal obligation — to keep financial records required by law.

We use only the cookies the service needs to work: an essential sign-in/session cookie, and a referral cookie that records who referred you so a commission can be attributed. We do not use third-party advertising or cross-site tracking cookies.

We do not sell your personal data. We share it only with the service providers that help us run Kestra, each acting on our instructions:

• our cloud database and hosting providers;
• our authentication provider (sign-in);
• our payment provider (card processing and billing);
• our email provider (sign-in and account emails); and
• Telegram, where you choose to receive tips there.

Our automated “why this pick” write-ups are generated from match statistics only — no personal data is sent to those tools. We may also disclose data where required by law.

Some of our providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK/EU adequacy or standard contractual clauses) to protect your data.

We keep your account data while your account is active and for a reasonable period afterwards. Financial records are kept for as long as the law requires (typically up to six years). Marketing consent is kept until you unsubscribe.

Under UK GDPR you have the right to access, correct, delete, restrict, or object to our use of your data, to data portability, and to withdraw consent at any time. To exercise any of these, email info@kestra.tips.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk.

We protect your data with encryption in transit, least-privilege access to our database, and payment pages hosted by our provider so card details never reach our servers. No system is perfectly secure, but we take reasonable steps to keep your data safe.

Kestra is strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18; if you believe a minor has given us data, contact us and we will delete it.

We may update this policy from time to time. When we make material changes we will update the date above and, where appropriate, tell you.

Questions about your privacy? Email info@kestra.tips.