Privacy Notice

Scope and Applicability

This Privacy Notice explains how 23bet collects, uses, discloses and protects personal data in relation to the operation of its online betting and gaming services, including the website and mobile applications, and related customer support. It applies to current, former and prospective customers, and to visitors who interact with the Services, unless a separate privacy notice governs a specific feature.

Information We Collect

• Contact and identity data: name, home address, email address, telephone number, date of birth, and government-issued identification data when required for verification.
• Financial data: payment details, source of funds, and transaction history including deposits, bets placed, winnings, and withdrawals.
• Technical and usage data: IP address, device type, operating system, browser, pages visited, timestamps, betting activity, login attempts, and cookies or other technologies used to track your interactions.
• Marketing and communications data: preferences for communications and responses to campaigns.

How We Use Your Information

• Provide, operate and administer the Services, including account registration, identity verification, processing payments, and handling customer support requests.
• Prevent fraud, money laundering and other unlawful activity; perform Know Your Customer and ongoing monitoring in accordance with legal obligations.
• Protect the security and integrity of the Services and manage risk related to gaming and payments.
• Communicate with you about your account, transactions, service updates, promotions and changes to the terms of service; personalize your experience where permissible.
• Enforce terms and conditions, resolve disputes, and investigate breaches or suspicious activity.

Legal Bases for Processing

• Contractual necessity to provide the Services and manage your account.
• Legitimate interests including security, fraud prevention, compliance, and improvement of the Services, provided such processing does not override your rights.
• Compliance with gambling licensing, anti-money laundering, and counter-terrorism financing requirements.
• Consent for direct marketing where required by law or as otherwise permitted by applicable data protection laws.

Data Sharing and International Transfers

• We may share personal data with service providers that support the operation of the Services (for example, identity verification, payment processing, IT support, customer service) subject to data protection obligations.
• Regulators, law enforcement and other authorities as required by law or to protect the integrity of the Services and users.
• Affiliates and group companies for internal operations, customer support and service development, subject to safeguards.
• Transfers to countries outside the jurisdiction of the data subject, with the use of appropriate safeguards such as standard contractual clauses and recognised transfer mechanisms where required by law.

Data Retention

Personal data is retained for as long as necessary to fulfill the purposes described in this Notice and to comply with legal and regulatory obligations. Transaction data, including deposits and withdrawals, shall be retained for a minimum of five (5) years. Other data are kept for the period required by applicable laws or as needed to enforce or defend legal claims. When data are no longer required, they will be securely deleted or anonymized.

Security of Personal Data

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. This includes Transport Layer Security (TLS) for data in transit, encryption at rest where feasible, access controls, audit logs, and routine security assessments. We limit access to personal data to individuals who require it to perform their duties and provide ongoing training on data protection and security.

Profiling and Automated Processing

We may engage in profiling to assess risk, detect fraud, and tailor the Services in a compliant and responsible manner. No decisions that have legal or similarly significant effects are made solely by automated processing without human involvement. Where profiling or automated processing is used for decisions that affect you, you may request a human review or challenge the outcome.

Your Rights

You may exercise rights under applicable data protection laws, including:

• Right of access to your personal data and related information.
• Right to rectify inaccurate or incomplete data.
• Right to erasure, restriction of processing, and data portability where legally permissible.
• Right to object to processing on grounds relating to your particular situation, including for direct marketing and profiling.
• Right to withdraw consent where processing is based on consent, without affecting processing conducted on another legal basis.
• Right to lodge a complaint with a supervisory authority.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Services, analyse usage, support security, and customise content. You may manage cookie preferences within your account settings or via in-session controls. Continued use of the Services after changes to consent settings constitutes acceptance where permitted by law.

Children and Minors

The Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware of such data, it will be deleted or restricted from processing in accordance with applicable law.

Changes to This Privacy Notice

We may update this Privacy Notice from time to time. We will publish the revised notice and, where required by law, provide notice of material changes to you before they take effect.

Contact Information

For questions about this Privacy Notice or to exercise your rights, contact 23bet at [email protected] or use the contact options available within the Services.