Privacy Policy

Last updated: 1 September 2026. This policy explains what we collect, why, who we share it with, and what you can ask us to do.

1. Data controller

The controller of your personal data is AUBET33 Entertainment N.V., company number [COMPANY REG. NO.], of [REGISTERED ADDRESS]. Data protection enquiries go to [email protected].

2. What we collect

You give us

  • Identity: name, date of birth, gender where provided, nationality.
  • Contact: email address, mobile number, residential address.
  • Account: username, password hash, currency, communication preferences.
  • Verification: copies of identity documents, proof of address, proof of payment-method ownership, and where required source-of-funds or source-of-wealth evidence.
  • Correspondence: the content of support tickets, live chat transcripts and emails.

We generate or receive

  • Transactions: deposits, withdrawals, bonuses, balances and the masked reference of the payment instrument used. We do not receive or store full card numbers.
  • Gameplay: games opened, stakes, rounds, results, bets placed and settled.
  • Technical: IP address, approximate location derived from it, device type, browser, operating system, and session timestamps.
  • Risk signals: results of fraud, sanctions and politically-exposed-person screening from our third-party providers.

3. Why we use it

  • To open, operate and secure your account, and to process bets and payments.
  • To verify your identity and age, as our licence requires.
  • To detect and prevent fraud, collusion, bonus abuse, money laundering and terrorist financing.
  • To monitor for signs of gambling harm and to apply the limits and exclusions you set.
  • To provide customer support and to handle complaints.
  • To meet legal, regulatory, tax and audit obligations, and to respond to lawful requests from authorities.
  • To send you promotional messages, where you have opted in.
  • To analyse usage in aggregate so we can improve the service.

4. Legal bases

PurposeLegal basis
Operating your account and settling betsPerformance of a contract
Identity, age and AML verificationLegal obligation
Fraud prevention and platform securityLegitimate interests
Responsible-gambling monitoringLegal obligation / legitimate interests
Marketing messagesConsent (withdrawable at any time)
Analytics and service improvementLegitimate interests / consent for optional cookies
Retention after account closureLegal obligation

5. Who we share with

We share personal data only where it is necessary, and only with parties bound by confidentiality and data-protection obligations:

  • Payment providers and acquirers — to process deposits, withdrawals and refunds, and to investigate disputed transactions.
  • Game suppliers — to launch games and record rounds against your account.
  • Verification and screening providers — for identity, address, sanctions and PEP checks.
  • Our regulator and law enforcement — where required by law or licence condition.
  • Professional advisers and auditors — under duties of confidentiality.
  • IT and hosting providers — acting on our instructions as processors.

We do not sell personal data, and we do not share it with advertisers for their own purposes.

6. International transfers

Some of our providers operate outside your country. Where data is transferred internationally we rely on an adequacy decision where one exists, or otherwise on standard contractual clauses together with technical measures such as encryption in transit and at rest. You may request a copy of the safeguards used.

7. How long we keep it

CategoryRetention period
Account and identity records5 years after account closure (AML requirement)
Transaction and betting records5 years after the transaction
Verification documents5 years after account closure, then deleted
Support tickets and chat transcripts24 months
Marketing preferencesUntil consent is withdrawn, plus proof of withdrawal
Self-exclusion recordsRetained indefinitely so the exclusion can be enforced
Server and security logs12 months

8. Security

  • TLS 1.2 or higher on all connections; 256-bit encryption.
  • Encryption at rest for identity documents and sensitive records.
  • Card data handled exclusively by a PCI-DSS Level 1 certified processor — it never reaches our servers.
  • Role-based access control, with access to verification documents limited to trained compliance staff.
  • Logging and monitoring of administrative access, with periodic independent penetration testing.
  • Optional two-factor authentication on player accounts.

No system is perfectly secure. If a breach affects your data and presents a risk to you, we will notify you and the relevant authority without undue delay.

9. Your rights

Subject to the legal obligations described above, you may ask us to:

  • Access — receive a copy of the personal data we hold about you.
  • Rectify — correct inaccurate or incomplete details.
  • Erase — delete data we no longer have a lawful reason to keep. Note that AML and self-exclusion records cannot be deleted on request.
  • Restrict or object — limit processing, including profiling for marketing.
  • Port — receive your data in a structured, machine-readable format.
  • Withdraw consent — at any time, without affecting processing already carried out.

Write to [email protected]. We respond within 30 days and do not charge for a first request. You also have the right to complain to your local data protection authority.

10. Cookies

We use two categories of cookie, and ask your choice on your first visit:

TypePurposeCan you refuse?
Strictly necessarySession management, sign-in state, security, fraud prevention, load balancingNo — the site cannot function without them
AnalyticsAggregate usage statistics to help us improve the siteYes — choose "Essential only"

You can change your mind at any time by clearing cookies for this site in your browser, which will cause the banner to appear again. We do not use advertising or cross-site tracking cookies.

11. Marketing

We send promotional email and SMS only where you have opted in. Every message includes an unsubscribe link, and you can change your preference in My Account → Profile at any time. Withdrawing consent does not stop essential service messages, such as transaction confirmations, verification requests and security alerts.

12. Children

The service is strictly for adults aged 18 or over. We do not knowingly collect data from minors. If we discover that an account belongs to a person under 18 we close it immediately, void any winnings, return stakes, and delete the data except where a record must be retained to prevent the account being reopened.

13. Contact

Data protection enquiries: [email protected]
General support: [email protected]
Postal: AUBET33 Entertainment N.V., [REGISTERED ADDRESS]