Sub-processor List
Last updated: 15 October 2026 · Version 2.0 (draft, subject to legal review)
Draft, subject to legal review. This list is being reviewed by counsel.
1. Current list
| Provider | What it does for DXAPlay | Data involved |
|---|---|---|
| Cloudflare, Inc. | Website hosting, website forms database, DNS, content delivery, security and cookie-less web analytics | Website visitors and enquiries; platform traffic passing through the network |
| Amazon Web Services, Inc. | Cloud hosting of the platform | Customer and player data |
| Neon, Inc. | Managed PostgreSQL database for the platform | Customer and player data |
| Resend, Inc. | Delivery of transactional and campaign email sent by the platform and by website forms | Email addresses and message content |
| Anthropic, PBC | AI model used by the platform’s AI features | Only the data included in an AI request |
| Google LLC | Sign-in with Google for back-office users and players; optional search-performance sync for the player site | Sign-in identity data; website search statistics |
| Browser push services (Google, Mozilla, Apple) | Delivery of encrypted web push notifications | Encrypted notification payloads and device push addresses |
| Casino content aggregators enabled by the operator | Run third-party casino games on the platform’s wallet | The player identifier, balance and game activity needed to run the game |
| flagcdn.com | Country-flag images shown in player sign-up forms | The player’s IP address when the image loads |
Third-party services that an operator contracts directly, such as its payment providers, KYC vendor, game providers or SMS gateway, are the operator’s own processors and are not listed here.
2. Changes
We update this list before a new sub-processor starts processing personal data, and give customers advance notice of new sub-processors that process player data, as set out in the data processing agreement.