Privacy Policy
Version 2.0
Last revised: 10/12/2025
1. Responsibility for the Processing of Personal Data
This Privacy Notice is issued by:
i. NetPlay Malta Limited, located at 199, Experience Centre, Ta' Xbiex Seafront, Ta' Xbiex, XBX 1027, Malta;
ii. Rizk Nordic Limited, located at 199, Experience Centre, Ta' Xbiex Seafront, Ta' Xbiex, XBX 1027, Malta; and
iii. Betsson Nordic Limited, located at 199, Experience Centre, Ta' Xbiex Seafront, Ta' Xbiex, XBX 1027, Malta.
Throughout this Privacy Notice, "Betsson", "we", "us" or "the Company" refers to the entity that is the data controller responsible for Your personal data, depending on Your place of residence, as follows:
Although this Privacy Notice applies to both entities, each company independently determines the purposes and means of processing personal data for its respective customer base.
The Company is part of the Betsson Group, which is also operating these Group brands. Unless otherwise stated, the Company is the data controller for the use of your personal data. This Privacy Notice sets out how Betsson manages your personal data in the course of Our iGaming services ("Services"). Betsson collects and processes personal data necessary to provide the Services through Our website and/or mobile application, where available. In using the Services, You understand that Your personal data will be processed in accordance with this Privacy Notice. This Privacy Notice also applies to the other Betsson Group entities, which act as data processors for Betsson. This Privacy Notice does not apply to any websites over which Betsson has no control.
Betsson's Services are not intended for minors, and We do not knowingly collect personal data relating to minors. In the event that We become aware that a minor has provided Betsson with any information, We may discard such information unless it is required to comply with any legal or statutory obligation binding upon Us. If You have reason to believe that a minor has provided Us with personal data, please contact Us at the details set out in Section 2 below.
2. Contact Us
For questions or comments regarding this Privacy Notice or the processing of Your personal data by Betsson, You may contact Our Data Protection Officer via e-mail at dataprivacy@betssongroup.com or by post at Betsson, 'Attn: Privacy Officer, 199, Experience Centre, Ta' Xbiex Seafront, Ta' Xbiex, XBX 1027, Malta'.
3. Personal Data Processed
Personal data means any information that can directly or indirectly identify an individual, including any information that constitutes personal data within the meaning of applicable data privacy laws.
We process personal data of visitors to Our website, users of Our mobile applications, and participants in Our iGaming services. We also process personal data of individuals who contact Us, follow Us on social media, request to be kept informed about Our Services, or with whom We otherwise have a relationship.
We receive the personal data either when You register with Us, when You provide data, or any other time You communicate with Us. We also collect and analyse data regarding Your gaming behaviour in order to ensure compliance with the terms and conditions, monitor the integrity of wagering activity, and to meet Our responsible gaming, anti-money laundering, and other legal obligations. We also receive data from third parties, such as providers of Know Your Customer services, that help Us to comply with Our legal obligations.
We also collect certain information about Our customers and visitors to Our website using cookies and other tracking technologies. For further information about cookies, which cookies We use, why We use cookies, and how You can control which cookies are used, please read Our Cookie Policy.
In most cases, the provision of personal data arises either from legal requirements or contractual provisions. Where applicable, failure to comply with these provisions will prevent Betsson from complying with its legal or regulatory obligations; from executing or entering into contracts; and from providing the Services requested.
Below is an overview of the categories of personal data We process and examples thereof:
4. Purpose and Authority for Processing Personal Data
5. Marketing
Betsson and Our appointed third-party service providers may use Your personal data, such as Your name, home address, email address, telephone number and other relevant information, for promotional purposes, including information about bonuses, special offers and other marketing communications relating to Our Services which We believe may interest You. Such processing is carried out based on Your consent or, where permitted by applicable law, on Our legitimate interest.
Direct Marketing
We may send You direct marketing based on Your consent or, where permitted by applicable law, based on Our legitimate interest. You may opt out of receiving direct marketing at any time, including at the point of registration or at any later stage, and free of charge, by:
Please note that You may continue to receive some marketing communications for a short period while Your preferences are being updated across all of Our systems. Opting out of direct marketing will not affect the receipt of service-related or transactional communications that We are required to send under Our legal obligations and/or Our Agreement with You.
On-Site Advertising
From time to time, We may display on-site or in-app advertising tailored to You based on information collected through Your interactions with Our website, applications, or Services. This type of personalisation may rely on cookies or similar technologies and is carried out based on Your consent, where required by applicable law. You may opt out of receiving personalised on-site advertising at any time. If You do so, You will continue to see ads, but these will not be tailored to Your interests. You can manage Your cookie preferences via Your Account settings or as outlined in Our Cookie Policy.
Advertising on Third-Party Platforms
We may use advertising services provided by third-party platforms to show You ads about Our Services on other websites, applications or social media. These platforms may use their own technologies (such as cookies, pixels or device identifiers) to determine which ads to display and to measure ad performance. Such technologies are used with Your consent, where required by applicable law.
We may purchase advertising space on these third-party platforms, where Our ads may be displayed based on audience segments or profiles that the platform creates from the data it holds. We may also make use of audience-matching or similar advertising tools offered by such platforms to reach existing customers or to identify audiences with similar characteristics, where permitted by law and based on the relevant legal basis.
We do not share Your personal data with third-party advertisers or platforms for their independent use. However, when You interact with those platforms or their content, the platform may collect personal data directly from You in accordance with its own data practices (for example, information about pages visited, ads viewed or clicked, or device-related identifiers). These platforms may then use that information to display Our ads based on their own targeting criteria.
Your ability to control how advertising is personalised on third-party platforms depends on the tools and settings made available by those platforms. We encourage You to review the privacy notices and advertising settings of any platform You use for more information about how they process Your personal data.
6. Recipients of Your Personal Data
For the purposes described in this Privacy Notice, including business and operational purposes, compliance with legal obligations (such as anti-money laundering, responsible gaming and fraud prevention), and the establishment, exercise or defence of legal claims, Betsson may share Your personal data with other Betsson Group entities. This includes, where applicable, the exchange of self-exclusion or verification data to enable cross-network restrictions and protective measures; centralised risk monitoring; coordinated fraud prevention; and fulfilment of licensing and regulatory obligations. Such data sharing is carried out on the basis of our intra-group data processing agreements and in line with applicable laws and licence conditions.
In some cases, We are required by law to share Your personal data with government entities, law enforcement, regulators, sports governing bodies, and other relevant authorities. This may include situations where there are reasonable grounds to suspect that You have breached, or have knowledge of a breach of, Our Terms and Conditions or applicable laws, or where You may otherwise pose a threat to the integrity of a sport, game, or Our Services. Such disclosures may take place for the purposes of enforcing Our Terms and Conditions and sports integrity, combating gambling addiction, and preventing, detecting or investigating suspected criminal activity.
We may also be required to share Your personal data in response to any court subpoena, warrant, judicial order or similar official request. In certain cases, relevant laws may oblige Us to disclose Your personal data to financial institutions such as banks and insolvency services. These bodies may use Your personal data to investigate and act on any such breaches in accordance with their procedures.
Where national legislation establishes self-exclusion registers, We may also be required to communicate relevant data such as self-exclusion status or reactivation of accounts to the competent authority responsible for maintaining such registers, in accordance with applicable legal requirements.
Betsson may engage third parties (data recipients) to process Your data in accordance with this Privacy Notice to provide You with the Services. These parties usually act as processors for Betsson. In some cases, these parties act as joint or independent controllers. This is, for example, the case for payment service providers and social media platforms. In such cases, the privacy statement of the third party in question will apply. We shall only share Your data with these providers subject to appropriate agreements. Categories of recipients with whom We share personal information are:
We may transfer some or all of Your personal data with any subsequent owner, co-owner or operator of the Services and their advisors in connection with a corporate merger, consolidation, restructuring, the sale of substantially all Our stock and/or assets, or in connection with bankruptcy proceedings, or other corporate reorganization. Alternatively, We may seek to acquire other businesses or merge with them. In the event of a change to Our business, We will inform You in accordance with applicable law.
While using the services You may find links to third-party websites/applications (for example social media platforms). Please note that this Privacy Notice does not apply to such third-party websites/applications. In order to find out more about processing of Your personal data by these third-party websites/applications, We instruct You to carefully read their privacy statements and the terms of use before using their services.
7. Transfer of Personal Data to Other Countries
Where We have service providers or partners located outside the European Union (EU) / European Economic Area (EEA), in a third country, territory or sector that has not been found to provide for an adequate level of data protection by the European Commission (see here the list of third countries offering an adequate level of data protection as per the European Commission), We ensured that the data transfers are subject to appropriate safeguards, such as the Standard Contractual Clauses.
Please be aware that the list of data recipients may differ depending on the brand and country where You make use of Our Service. Hence, on Your request, We can provide you with the categories of data recipients whom we share Your personal data with, and also specific information about data transfers to third countries, if applicable.
8. Retention of Your Personal Data
Betsson will not retain Your personal data for longer than necessary for the purposes for which it was collected or otherwise processed, unless a longer retention period is required or permitted by applicable law. When Your personal data is no longer needed, We will securely delete or anonymise it. The necessary retention period is determined by various criteria including the nature of the data, the purpose of the processing, the legal basis, whether there are any applicable legal or regulatory obligations, and other factors.
We will keep Your personal information for as long as Your account is active to be able to offer you Our Services. If Your account is closed (by Yourself or by Us), we will retain all Your personal data to the extent necessary to comply with Our legal obligations such as applicable tax/revenue laws, AML/CFT, gaming laws and other applicable regulatory requirements as well as to resolve any potential legal disputes as per Our data retention policies. Certain categories of personal data may be retained for longer where required, such as:
9. Automated Individual Decision-Making
Betsson uses fully or partially automated tools to support certain decisions and actions that We are required to take under applicable law, licence conditions, or Our contractual obligations with You. These processes help ensure regulatory compliance, protect users, safeguard the integrity of Our Services, and prevent misuse.
Please note that any decision with a legal or material impact on You will not be taken without human intervention, unless it is (i) permitted by law,(ii) necessary for the performance of Our Agreement with You, or (iii) based on Your express consent. In decisions made based on provisions (ii) and (iii), above, You have the right to request a new (manual) assessment by a Betsson employee (right of human intervention).
Betsson’s systems are tested on a regular basis to ensure fair, effective, and unbiased operation. We cannot disclose detailed information about Our detection systems, in particular the logic behind them, as this would harm their operation by allowing users to circumvent these mechanisms, which are aimed at protecting users, Our Company and at ensuring compliance with Our legal obligations.
10. What are your Rights?
You have a number of rights with regard to the processing of Your personal data, including:
• Right to obtain confirmation that We are processing Your data and have access to or obtain a copy of the same. You are invited to exercise Your right to access conveniently from Your account ‘Support’ – ‘Personal Data’ section (where available). When the data is ready for download, You will be notified via registered email including a secure link to easily and securely access the requested files.
Kindly observe that as a general rule, subject to exemptions provided by applicable laws, We reserve the right to withhold or partially disclose certain information in response to a data subject access request where providing full access would:
• Right to request correction or completion of Your incorrect or incomplete personal data to the extent allowed by law. Betsson takes all reasonable measures to ensure Your personal data is accurate, complete and up to date. If You believe that the personal data We hold about You is inaccurate, incomplete or not current, You must either update the information from the “My Account” section on Your profile or contact Us immediately and We will correct the information if We are satisfied that a correction is required;
• Right to erasure where:
Kindly note that right to deletion is not absolute and may be limited, for example, due to Our legal obligations, or for the establishment, exercise or defence of legal claims. This means that We will not be able to exercise erasure in relation to personal data that We need to keep as per Our data retention policies.
• Right to restrict processing where:
Kindly observe that your data will be stored for the time of restriction and shall be processed only if You gave your consent or in order to establish, exercise or defend legal claims, protect the rights of another natural or legal person and for the reasons of important public interest;
• Right to data portability i.e. right to transmit personal data you have provided Us with in a structured, commonly used and machine-readable format to another controller where the processing is based on consent or contract and carried out by automated means;
• Right to object where processing is based on legitimate interests, tasks carried in public interest and/or where your personal data are processed for direct marketing purposes, including profiling for these purposes. Whilst the latter is an absolute right, the first will require a balance assessment of your interests, rights and freedoms against Our legitimate interests;
• Right to obtain human intervention, express Your point of view and contest the decision where it is based on solely automated decision making, including profiling, which produces legal effects concerning You or similar significant effects.
You can exercise Your rights at any time by contacting Us at dataprivacy@betssongroup.com.
Please note that We will respond to any of Your requests about your rights without undue delay and in any case within 30 days from date of receipt of Your request (this period may be further extended in line with applicable law).
When You exercise Your rights by contacting Us, We may request specific information to verify Your identity and confirm that You are entitled to access the personal data (or exercise any of Your other rights). This is a necessary security measure to ensure that personal data is not disclosed to anyone who is not authorised to receive it. Where a request is made on Your behalf by a third party, We may also ask for proof of authorisation.
Finally, please note that you have a right to lodge a complaint to a supervisory authority in the Member State of your habitual residence, place of work or place of alleged infringement. Also you can lodge a complaint with Our Lead Supervisory Authority, which is the Office of the Information and Data Protection Commissioner in Malta.
11. Protection of Your Personal Data
We take appropriate measures to prevent abuse, loss, unauthorised access, unwanted disclosure, and unauthorised modification of personal information. For example, We use secure network connections, firewalls, encryption, and anonymise data where possible. However, You acknowledge that no method of transmission over the Internet, nor any method of electronic storage, is 100% secure. We do Our best to protect Your personal data, but We cannot guarantee its absolute security. Betsson’s employees, agents, and contractors have restricted access to personal information to a need-to-know basis subject to confidentiality agreements.
In order to protect Your account, You are ultimately responsible for maintaining Your username and password confidential and secure. We will never ask You for Your password except when You log in to Our website and enter Your password at which time it is encrypted. If You become aware of any unauthorized access to or use of Your account, You are required to notify Us immediately. Where Our mobile application(s) require biometric authentication, Your credentials will be securely encrypted by and stored on Your device. They will not be stored in Our mobile application(s) nor held or accessed by Us in any way. We will only know whether You have been successfully identified or not. Please note that if You store fingerprints of other persons on Your device, those persons will also be able to access Our mobile application(s) via fingerprint when fingerprint is enabled.
We have adopted procedures to deal with any actual or suspected breach of security safeguards involving personal data. Unless otherwise prohibited by applicable law, We will promptly notify You in the event of a breach which could reasonably result in a real risk of significant harm to You. We will also report any such breach to the competent authorities as required by applicable laws, and keep a record of any such breach to the extent required by applicable laws.
12. Changes to this Privacy Notice
We reserve the right at Our discretion to change or modify Our Privacy Notice from time to time. To the extent that the Privacy Notice or sections thereof are subject to a material change, We shall inform You of such change through reasonable measures such as email or notice on the website and require re-acceptance of the Privacy Notice. Otherwise, all other changes to this Privacy Notice are effective as of the stated “Last revised” date, and Your continued use of the Services after the Last revised date will constitute acceptance of, and agreement to be bound by, those changes.
Last revised: 10/12/2025
1. Responsibility for the Processing of Personal Data
This Privacy Notice is issued by:
i. NetPlay Malta Limited, located at 199, Experience Centre, Ta' Xbiex Seafront, Ta' Xbiex, XBX 1027, Malta;
ii. Rizk Nordic Limited, located at 199, Experience Centre, Ta' Xbiex Seafront, Ta' Xbiex, XBX 1027, Malta; and
iii. Betsson Nordic Limited, located at 199, Experience Centre, Ta' Xbiex Seafront, Ta' Xbiex, XBX 1027, Malta.
Throughout this Privacy Notice, "Betsson", "we", "us" or "the Company" refers to the entity that is the data controller responsible for Your personal data, depending on Your place of residence, as follows:
- If You reside outside the European Union, Your data controller is NetPlay Malta Limited.
- If You reside in the European Union (except for Sweden), Your data controller is Rizk Nordic Limited.
- If You reside in Sweden, Your data controller is Betsson Nordic Limited.
Although this Privacy Notice applies to both entities, each company independently determines the purposes and means of processing personal data for its respective customer base.
The Company is part of the Betsson Group, which is also operating these Group brands. Unless otherwise stated, the Company is the data controller for the use of your personal data. This Privacy Notice sets out how Betsson manages your personal data in the course of Our iGaming services ("Services"). Betsson collects and processes personal data necessary to provide the Services through Our website and/or mobile application, where available. In using the Services, You understand that Your personal data will be processed in accordance with this Privacy Notice. This Privacy Notice also applies to the other Betsson Group entities, which act as data processors for Betsson. This Privacy Notice does not apply to any websites over which Betsson has no control.
Betsson's Services are not intended for minors, and We do not knowingly collect personal data relating to minors. In the event that We become aware that a minor has provided Betsson with any information, We may discard such information unless it is required to comply with any legal or statutory obligation binding upon Us. If You have reason to believe that a minor has provided Us with personal data, please contact Us at the details set out in Section 2 below.
2. Contact Us
For questions or comments regarding this Privacy Notice or the processing of Your personal data by Betsson, You may contact Our Data Protection Officer via e-mail at dataprivacy@betssongroup.com or by post at Betsson, 'Attn: Privacy Officer, 199, Experience Centre, Ta' Xbiex Seafront, Ta' Xbiex, XBX 1027, Malta'.
3. Personal Data Processed
Personal data means any information that can directly or indirectly identify an individual, including any information that constitutes personal data within the meaning of applicable data privacy laws.
We process personal data of visitors to Our website, users of Our mobile applications, and participants in Our iGaming services. We also process personal data of individuals who contact Us, follow Us on social media, request to be kept informed about Our Services, or with whom We otherwise have a relationship.
We receive the personal data either when You register with Us, when You provide data, or any other time You communicate with Us. We also collect and analyse data regarding Your gaming behaviour in order to ensure compliance with the terms and conditions, monitor the integrity of wagering activity, and to meet Our responsible gaming, anti-money laundering, and other legal obligations. We also receive data from third parties, such as providers of Know Your Customer services, that help Us to comply with Our legal obligations.
We also collect certain information about Our customers and visitors to Our website using cookies and other tracking technologies. For further information about cookies, which cookies We use, why We use cookies, and how You can control which cookies are used, please read Our Cookie Policy.
In most cases, the provision of personal data arises either from legal requirements or contractual provisions. Where applicable, failure to comply with these provisions will prevent Betsson from complying with its legal or regulatory obligations; from executing or entering into contracts; and from providing the Services requested.
Below is an overview of the categories of personal data We process and examples thereof:
| Categories of Personal Information | Examples |
|---|---|
| Identifying data and contact details |
|
| Account details |
|
| Payment details |
|
| Information relating to playing behaviour and (placed) bets |
|
| Information We are required to collect by virtue of Our obligations stemming from anti-money laundering obligations |
|
| Information We are required to collect by virtue of Our duty of care / responsible gaming obligations |
|
| Information relating to criminal offences |
|
| Information on Your use of Our website, applications and online user environment |
|
| Correspondence, call recordings and chat recordings |
|
| Direct / Digital marketing and communication data |
|
| Information obtained from third parties and public sources |
|
4. Purpose and Authority for Processing Personal Data
| Purpose & Basis | Examples |
|---|---|
| Customer registration Basis: necessary for performance of Our Agreement with You |
|
| Verifying Your identity and whether You are of age Basis: to comply with a legal obligation imposed upon Us |
|
| Enabling participation in Our igaming offering Basis: necessary for performance of Our Agreement with You |
|
| To prevent and/or combat excessive participation and gambling addiction Basis: to comply with legal obligations imposed on Us |
|
| Fighting fraud and preventing money laundering and terrorist financing Basis: to comply with a legal obligation imposed on Us |
|
| Investigating and reporting suspicious (gambling) activities Basis: to comply with a legal obligation imposed on Us |
|
| For the development and improvement of Our business operations, products and services Basis: legitimate interest |
|
| For communication, promotion and marketing purposes Basis: legitimate interest to promote Our Services and maintain an ongoing customer relationship consent |
|
| To provide a personalised experience Basis: legitimate interest |
|
| VIP loyalty programme Basis: necessary for performance of Our Agreement with You |
|
| To ensure the security and stability of Our services and IT systems Basis: legitimate interest |
|
| Legal protection Basis: legitimate interest |
|
5. Marketing
Betsson and Our appointed third-party service providers may use Your personal data, such as Your name, home address, email address, telephone number and other relevant information, for promotional purposes, including information about bonuses, special offers and other marketing communications relating to Our Services which We believe may interest You. Such processing is carried out based on Your consent or, where permitted by applicable law, on Our legitimate interest.
Direct Marketing
We may send You direct marketing based on Your consent or, where permitted by applicable law, based on Our legitimate interest. You may opt out of receiving direct marketing at any time, including at the point of registration or at any later stage, and free of charge, by:
- using the unsubscribe option in Our marketing communications;
- updating Your “Marketing Settings” in Your account; or
- contacting Customer Support.
Please note that You may continue to receive some marketing communications for a short period while Your preferences are being updated across all of Our systems. Opting out of direct marketing will not affect the receipt of service-related or transactional communications that We are required to send under Our legal obligations and/or Our Agreement with You.
On-Site Advertising
From time to time, We may display on-site or in-app advertising tailored to You based on information collected through Your interactions with Our website, applications, or Services. This type of personalisation may rely on cookies or similar technologies and is carried out based on Your consent, where required by applicable law. You may opt out of receiving personalised on-site advertising at any time. If You do so, You will continue to see ads, but these will not be tailored to Your interests. You can manage Your cookie preferences via Your Account settings or as outlined in Our Cookie Policy.
Advertising on Third-Party Platforms
We may use advertising services provided by third-party platforms to show You ads about Our Services on other websites, applications or social media. These platforms may use their own technologies (such as cookies, pixels or device identifiers) to determine which ads to display and to measure ad performance. Such technologies are used with Your consent, where required by applicable law.
We may purchase advertising space on these third-party platforms, where Our ads may be displayed based on audience segments or profiles that the platform creates from the data it holds. We may also make use of audience-matching or similar advertising tools offered by such platforms to reach existing customers or to identify audiences with similar characteristics, where permitted by law and based on the relevant legal basis.
We do not share Your personal data with third-party advertisers or platforms for their independent use. However, when You interact with those platforms or their content, the platform may collect personal data directly from You in accordance with its own data practices (for example, information about pages visited, ads viewed or clicked, or device-related identifiers). These platforms may then use that information to display Our ads based on their own targeting criteria.
Your ability to control how advertising is personalised on third-party platforms depends on the tools and settings made available by those platforms. We encourage You to review the privacy notices and advertising settings of any platform You use for more information about how they process Your personal data.
6. Recipients of Your Personal Data
For the purposes described in this Privacy Notice, including business and operational purposes, compliance with legal obligations (such as anti-money laundering, responsible gaming and fraud prevention), and the establishment, exercise or defence of legal claims, Betsson may share Your personal data with other Betsson Group entities. This includes, where applicable, the exchange of self-exclusion or verification data to enable cross-network restrictions and protective measures; centralised risk monitoring; coordinated fraud prevention; and fulfilment of licensing and regulatory obligations. Such data sharing is carried out on the basis of our intra-group data processing agreements and in line with applicable laws and licence conditions.
In some cases, We are required by law to share Your personal data with government entities, law enforcement, regulators, sports governing bodies, and other relevant authorities. This may include situations where there are reasonable grounds to suspect that You have breached, or have knowledge of a breach of, Our Terms and Conditions or applicable laws, or where You may otherwise pose a threat to the integrity of a sport, game, or Our Services. Such disclosures may take place for the purposes of enforcing Our Terms and Conditions and sports integrity, combating gambling addiction, and preventing, detecting or investigating suspected criminal activity.
We may also be required to share Your personal data in response to any court subpoena, warrant, judicial order or similar official request. In certain cases, relevant laws may oblige Us to disclose Your personal data to financial institutions such as banks and insolvency services. These bodies may use Your personal data to investigate and act on any such breaches in accordance with their procedures.
Where national legislation establishes self-exclusion registers, We may also be required to communicate relevant data such as self-exclusion status or reactivation of accounts to the competent authority responsible for maintaining such registers, in accordance with applicable legal requirements.
Betsson may engage third parties (data recipients) to process Your data in accordance with this Privacy Notice to provide You with the Services. These parties usually act as processors for Betsson. In some cases, these parties act as joint or independent controllers. This is, for example, the case for payment service providers and social media platforms. In such cases, the privacy statement of the third party in question will apply. We shall only share Your data with these providers subject to appropriate agreements. Categories of recipients with whom We share personal information are:
- Gaming and software providers;
- Risk management providers;
- Third-party vendors that provide technical support and help Us maintain Your account with Us;
- Analytics and search engine providers that help Us improve and optimise Our website;
- Suppliers for communication purposes, such as Our marketing platforms and providers of mobile communication services for telephony and SMS;
- Partners who carry out surveys and market research on Our behalf;
- Interactive media platforms (such as social media platforms);
- Organisations that enable Us to provide relevant advertisements on third party websites and platforms that You visit;
- Payment service providers and payment facilitators;
- Cloud service providers who offer infrastructure, hosting, storage, and other cloud-based solutions that support the operation and availability of Our services;
- Technical service providers, including database administrators and infrastructure specialists, who assist Us in maintaining the performance, integrity, and security of Our systems and applications;
- Anti-fraud, risk and compliance service providers (such as know Your customer (KYC) providers, credit reference agencies);
- Providers of information verification services to validate the information You provide to Us;
- Providers offering professional support for at risk users or allow for cross-operator exclusions;
- Professional advisers such as lawyers, accountants, consultants and insurers, who provide Us with legal, advisory and insurance services;
- Other partners who help Us create a better experience for You.
We may transfer some or all of Your personal data with any subsequent owner, co-owner or operator of the Services and their advisors in connection with a corporate merger, consolidation, restructuring, the sale of substantially all Our stock and/or assets, or in connection with bankruptcy proceedings, or other corporate reorganization. Alternatively, We may seek to acquire other businesses or merge with them. In the event of a change to Our business, We will inform You in accordance with applicable law.
While using the services You may find links to third-party websites/applications (for example social media platforms). Please note that this Privacy Notice does not apply to such third-party websites/applications. In order to find out more about processing of Your personal data by these third-party websites/applications, We instruct You to carefully read their privacy statements and the terms of use before using their services.
7. Transfer of Personal Data to Other Countries
Where We have service providers or partners located outside the European Union (EU) / European Economic Area (EEA), in a third country, territory or sector that has not been found to provide for an adequate level of data protection by the European Commission (see here the list of third countries offering an adequate level of data protection as per the European Commission), We ensured that the data transfers are subject to appropriate safeguards, such as the Standard Contractual Clauses.
Please be aware that the list of data recipients may differ depending on the brand and country where You make use of Our Service. Hence, on Your request, We can provide you with the categories of data recipients whom we share Your personal data with, and also specific information about data transfers to third countries, if applicable.
8. Retention of Your Personal Data
Betsson will not retain Your personal data for longer than necessary for the purposes for which it was collected or otherwise processed, unless a longer retention period is required or permitted by applicable law. When Your personal data is no longer needed, We will securely delete or anonymise it. The necessary retention period is determined by various criteria including the nature of the data, the purpose of the processing, the legal basis, whether there are any applicable legal or regulatory obligations, and other factors.
We will keep Your personal information for as long as Your account is active to be able to offer you Our Services. If Your account is closed (by Yourself or by Us), we will retain all Your personal data to the extent necessary to comply with Our legal obligations such as applicable tax/revenue laws, AML/CFT, gaming laws and other applicable regulatory requirements as well as to resolve any potential legal disputes as per Our data retention policies. Certain categories of personal data may be retained for longer where required, such as:
- responsible gaming records, including permanent self-exclusions, where retention is required to enforce restrictions;
- AML/CFT-related information where extended retention is necessary to comply with ongoing monitoring or reporting obligations;
- fraud prevention records where We are required to identify or prevent repeat misuse;
- information relevant to an investigation or dispute, which will be retained for the duration of the investigation or proceedings and as long as necessary to protect Our rights.
9. Automated Individual Decision-Making
Betsson uses fully or partially automated tools to support certain decisions and actions that We are required to take under applicable law, licence conditions, or Our contractual obligations with You. These processes help ensure regulatory compliance, protect users, safeguard the integrity of Our Services, and prevent misuse.
- We use automated tools to check Your information against sanctions lists, adverse media sources and any centralised self-exclusion schemes (where available), in accordance with Our legal obligations under anti-money laundering and responsible gaming legislation.
- We analyse transactions, play data and related behaviour to create a risk profile in line with Our legal and licensing obligations to identify and investigate suspected illegal or fraudulent activity (including potential money laundering, terrorist financing and fraud).
- As required by Our licensing obligations, We use automated systems to identify players who may be experiencing, or at risk of developing, gambling-related harm. This includes analysing behaviour, transactions, patterns of use and relevant interactions or communications, as well as assessing whether any player-set limits have been reached.
- We analyse play patterns and activity to detect potential integrity issues, malpractice or serious inappropriate behaviour in sport, such as possible match-fixing or suspicious betting activity.
- We use automated tools to monitor activity and gameplay to detect behaviour that may breach Our Terms and Conditions or internal policies.
- We may assess eligibility for VIP status through automated analysis of transaction history and gameplay data (only where permitted under the local licensing framework).
- Based on information relating to Your use of the Services (including game history), We may use automated processes to provide You with personalised recommendations or promotional content. You may object to such personalisation at any time via Your account settings or by contacting Us.
Please note that any decision with a legal or material impact on You will not be taken without human intervention, unless it is (i) permitted by law,(ii) necessary for the performance of Our Agreement with You, or (iii) based on Your express consent. In decisions made based on provisions (ii) and (iii), above, You have the right to request a new (manual) assessment by a Betsson employee (right of human intervention).
Betsson’s systems are tested on a regular basis to ensure fair, effective, and unbiased operation. We cannot disclose detailed information about Our detection systems, in particular the logic behind them, as this would harm their operation by allowing users to circumvent these mechanisms, which are aimed at protecting users, Our Company and at ensuring compliance with Our legal obligations.
10. What are your Rights?
You have a number of rights with regard to the processing of Your personal data, including:
• Right to obtain confirmation that We are processing Your data and have access to or obtain a copy of the same. You are invited to exercise Your right to access conveniently from Your account ‘Support’ – ‘Personal Data’ section (where available). When the data is ready for download, You will be notified via registered email including a secure link to easily and securely access the requested files.
Kindly observe that as a general rule, subject to exemptions provided by applicable laws, We reserve the right to withhold or partially disclose certain information in response to a data subject access request where providing full access would:
- Adversely affect an internal investigation or an investigation by competent authorities, including matters related to suspected fraud, bonus abuse, money-laundering, terrorist financing, sports integrity issues or other unlawful or improper activities;
- Prejudice the effectiveness of Our AML/CFT, fraud prevention or Responsible Gaming controls, including monitoring processes, alerting systems, scoring models or other detection mechanisms, the disclosure of which could enable individuals to bypass or undermine measures that We are required to maintain under applicable laws and licence conditions;
- Reveal information relating to ongoing dispute resolution or settlement negotiations, where disclosure could reasonably be expected to prejudice the negotiation process or Our legal position;
- Expose confidential or proprietary internal processes, including security measures, risk-management procedures, or other business-critical logic, the disclosure of which may compromise the integrity or security of Our operations;
- Infringe the rights and freedoms of other individuals, including by disclosing personal data relating to third parties;
- Be subject to Legal Professional Privilege (LPP), or equivalent professional secrecy or confidentiality obligations under applicable local laws.
• Right to request correction or completion of Your incorrect or incomplete personal data to the extent allowed by law. Betsson takes all reasonable measures to ensure Your personal data is accurate, complete and up to date. If You believe that the personal data We hold about You is inaccurate, incomplete or not current, You must either update the information from the “My Account” section on Your profile or contact Us immediately and We will correct the information if We are satisfied that a correction is required;
• Right to erasure where:
- Your personal data are no longer necessary for the purposes which they were collected;
- The lawful basis for processing is consent and You withdraw your consent;
- You object to processing based on legitimate interests and there is no overriding interest to continue processing;
- Data processing is done for direct marketing purposes and You object to such processing;
- Data processing is unlawful; or
- Personal data must be erased for compliance with a legal obligation.
Kindly note that right to deletion is not absolute and may be limited, for example, due to Our legal obligations, or for the establishment, exercise or defence of legal claims. This means that We will not be able to exercise erasure in relation to personal data that We need to keep as per Our data retention policies.
• Right to restrict processing where:
- You have asked Us to rectify your data and We are in the process of verifying the accuracy of such data;
- Personal data processing has been unlawful and ask for restriction instead of deletion;
- Your personal data is no longer needed for the Services but you request Us to retain it in order to establish, exercise or defend a legal claim; or
- You have objected to Our processing of your data based on legitimate interest and We are evaluating whether Our legitimate interests override yours.
Kindly observe that your data will be stored for the time of restriction and shall be processed only if You gave your consent or in order to establish, exercise or defend legal claims, protect the rights of another natural or legal person and for the reasons of important public interest;
• Right to data portability i.e. right to transmit personal data you have provided Us with in a structured, commonly used and machine-readable format to another controller where the processing is based on consent or contract and carried out by automated means;
• Right to object where processing is based on legitimate interests, tasks carried in public interest and/or where your personal data are processed for direct marketing purposes, including profiling for these purposes. Whilst the latter is an absolute right, the first will require a balance assessment of your interests, rights and freedoms against Our legitimate interests;
• Right to obtain human intervention, express Your point of view and contest the decision where it is based on solely automated decision making, including profiling, which produces legal effects concerning You or similar significant effects.
You can exercise Your rights at any time by contacting Us at dataprivacy@betssongroup.com.
Please note that We will respond to any of Your requests about your rights without undue delay and in any case within 30 days from date of receipt of Your request (this period may be further extended in line with applicable law).
When You exercise Your rights by contacting Us, We may request specific information to verify Your identity and confirm that You are entitled to access the personal data (or exercise any of Your other rights). This is a necessary security measure to ensure that personal data is not disclosed to anyone who is not authorised to receive it. Where a request is made on Your behalf by a third party, We may also ask for proof of authorisation.
Finally, please note that you have a right to lodge a complaint to a supervisory authority in the Member State of your habitual residence, place of work or place of alleged infringement. Also you can lodge a complaint with Our Lead Supervisory Authority, which is the Office of the Information and Data Protection Commissioner in Malta.
11. Protection of Your Personal Data
We take appropriate measures to prevent abuse, loss, unauthorised access, unwanted disclosure, and unauthorised modification of personal information. For example, We use secure network connections, firewalls, encryption, and anonymise data where possible. However, You acknowledge that no method of transmission over the Internet, nor any method of electronic storage, is 100% secure. We do Our best to protect Your personal data, but We cannot guarantee its absolute security. Betsson’s employees, agents, and contractors have restricted access to personal information to a need-to-know basis subject to confidentiality agreements.
In order to protect Your account, You are ultimately responsible for maintaining Your username and password confidential and secure. We will never ask You for Your password except when You log in to Our website and enter Your password at which time it is encrypted. If You become aware of any unauthorized access to or use of Your account, You are required to notify Us immediately. Where Our mobile application(s) require biometric authentication, Your credentials will be securely encrypted by and stored on Your device. They will not be stored in Our mobile application(s) nor held or accessed by Us in any way. We will only know whether You have been successfully identified or not. Please note that if You store fingerprints of other persons on Your device, those persons will also be able to access Our mobile application(s) via fingerprint when fingerprint is enabled.
We have adopted procedures to deal with any actual or suspected breach of security safeguards involving personal data. Unless otherwise prohibited by applicable law, We will promptly notify You in the event of a breach which could reasonably result in a real risk of significant harm to You. We will also report any such breach to the competent authorities as required by applicable laws, and keep a record of any such breach to the extent required by applicable laws.
12. Changes to this Privacy Notice
We reserve the right at Our discretion to change or modify Our Privacy Notice from time to time. To the extent that the Privacy Notice or sections thereof are subject to a material change, We shall inform You of such change through reasonable measures such as email or notice on the website and require re-acceptance of the Privacy Notice. Otherwise, all other changes to this Privacy Notice are effective as of the stated “Last revised” date, and Your continued use of the Services after the Last revised date will constitute acceptance of, and agreement to be bound by, those changes.
- home
- privacy policy