Privacy Notice

This document details how personal information is collected, used, and protected when you use services of BetVictor. It explains your privacy rights and how you can exercise them. This notice applies to all users of our website and all related products and services.

Information We Collect About You

Personal data is any information that can be used to identify an individual. This does not include data where the identity has been removed (anonymous data). We may collect, use, store, and transfer different kinds of personal data about you to provide our services and meet our legal obligations.

Identity Data: Your first name, last name, username, title, date of birth, and gender.
Contact Data: Your residential address, email address, and telephone numbers.
Financial Data: Your bank account and payment card details, as well as information related to affordability checks and sources of income.
Transaction Data: Details about payments to and from your account and other details of products you have used.
Technical Data: Your internet protocol (IP) address, login data, browser type and version, time zone setting, location, and other device technology.
Profile Data: Your username, password, products used, interests, preferences, and survey responses.
Usage Data: Information about how you use our website, products, and services.
Marketing and Communications Data: Your preferences for receiving marketing from us and our third parties.

How Your Personal Data is Collected

We use different methods to collect data from and about you. These methods include direct interactions, automated technologies on our platform, and information received from third-party sources.

Data You Provide to Us Directly

The majority of the personal data we hold is provided directly by you when you fill in forms or correspond with us by post, phone, or email. This includes data you provide when you create an account, make a deposit or withdrawal, use our products, request marketing materials, enter a promotion, or provide us with feedback.

Data We Collect Automatically

As you interact with our website, we automatically collect Technical and Usage Data about your equipment and browsing actions. This data is gathered using cookies, server logs, and similar technologies. This process helps us improve our website, maintain security, and enhance your user experience. Please see our Cookie Notice for further details.

Data We Receive from Third Parties

We may receive personal data about you from various third parties and public sources to supplement the information you provide. This is often necessary for identity verification and fraud prevention. These sources include advertising networks, search information providers, technical and payment service providers, and data from data brokers and credit reference agencies.

How We Use Your Personal Data

We will only use your personal data when the law allows us to. Our use of your information is based on the necessity to perform our contract with you, comply with legal obligations, for our legitimate business interests, or based on your explicit consent.

Lawful Basis for Processing

Most commonly, we will use your personal data in the following circumstances:

Performance of a Contract: Where we need to process your data to fulfill the service agreement we have with you.
Legal Obligation: Where we need to process your data to comply with a legal or regulatory requirement, such as Anti-Money Laundering regulations.
Legitimate Interests: Where it is necessary for our legitimate business interests and your fundamental rights do not override those interests.
Consent: Where you have given us your express opt-in consent for a specific purpose, such as third-party marketing.

Purposes for Which We Use Your Data

The table below provides a description of the ways we use your personal data and which of the legal bases we rely on to do so.

Purpose and Activity	Type of Data	Lawful Basis for Processing
To register you as a new customer and manage your relationship.	Identity, Contact, Profile, Financial, Marketing and Communications.	Performance of a contract; Legal obligation.
To process your deposits, withdrawals, and other financial transactions.	Identity, Contact, Financial, Transaction.	Performance of a contract; Legitimate interests.
To enable your participation in a prize draw, competition, or survey.	Identity, Contact, Profile, Usage, Marketing and Communications.	Performance of a contract; Legitimate interests.
To administer and protect our business and the website (including security and maintenance).	Identity, Contact, Technical.	Legal obligation; Legitimate interests.
To deliver relevant content and advertisements and measure their effectiveness.	Identity, Contact, Profile, Usage, Marketing and Communications, Technical.	Legitimate interests.
To use data analytics to improve our website, products, and customer experiences.	Technical, Usage.	Legitimate interests.

Disclosure of Your Personal Data

We may have to share your personal data with internal and external parties for the purposes outlined above. We require all third parties to respect the security of your personal data and to treat it lawfully. We do not allow our third-party service providers to use your data for their own purposes. Your data may be shared with:

Internal Third Parties: Other companies within the BVGroup who provide IT, system administration, and reporting services.
External Third Parties: Service providers for customer services, compliance, age and identity verification, and fraud prevention.
Professional Advisers: Including lawyers, bankers, auditors, and insurers who provide professional services.
Regulators and Other Authorities: Government departments and regulators who require reporting of processing activities.
Fraud Prevention Agencies: Information will be used by us and these agencies to prevent fraud and money-laundering.

International Data Transfers

Some of our external third parties are based outside the European Economic Area (EEA), so their processing of your personal data will involve a transfer of data outside the EEA. Whenever we transfer your data internationally, we ensure a similar degree of protection is afforded to it by implementing approved legal safeguards, such as using specific contracts approved by the European Commission.

Data Security

We have implemented appropriate technical and organisational controls to protect your data against unauthorised processing and accidental loss or disclosure. Our site uses strong SSL encryption to protect all data. Multiple layers of firewalls are in place, along with other mechanisms to provide strong defence. When creating your account, choose a secure password and keep it confidential. You can further protect your account by enabling two-factor authentication (2FA).

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. By law, we must keep basic information about our customers for five years after they cease being customers. Where a customer has self-excluded, we retain personal data for seven years from the end of the self-exclusion period.

Your Legal Rights

Under data protection law, you have several rights regarding your personal data.

Right to be Informed: To be informed about the collection and use of your personal data.
Right of Access: To access your personal data and receive a copy of it.
Right to Rectification: To have inaccurate personal data rectified or completed if it is incomplete.
Right to Erasure: To request that your personal data be erased, also known as ‘the right to be forgotten’.
Right to Restrict Processing: To request the restriction or suppression of your personal data in certain circumstances.
Right to Data Portability: To request that we transfer a copy of your personal data to another company.
Right to Object: To object to the processing of your personal data, including for direct marketing.
Rights related to Automated Decision-making: To request that a decision made solely by automated means is reviewed by a person.

Our Policy on Minors

This website must not be used by anyone under the age of eighteen (18) years old. We do not knowingly collect personal data relating to children. If we become aware that we hold such data, we will take steps to delete it immediately.

Contact and Complaint Information

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this Privacy Notice. If you have any questions, including any requests to exercise your legal rights, please contact the DPO.

By email: [email protected]
By post: Data Protection Officer, BVGroup, Suite 2:01, World Trade Center, Bayside Road, Gibraltar, GX11 1AA

You have the right to make a complaint at any time to the Gibraltar Regulatory Authority (GRA), which is the supervisory authority for data protection issues in Gibraltar. We would, however, appreciate the chance to deal with your concerns before you approach the GRA, so please contact us in the first instance.1

Changes to this Privacy Notice

We keep our privacy notice under regular review. We will inform you of any significant changes through our website.