Betti's Data Protection and Privacy Policy

What personal data we collect

When players register with Bettis Casino we ask for a full name, address, email, date of birth, phone number, username and password through the registration form, or via Electronic ID data where supported. Further information is requested only when it is needed to verify an account or process a payment.

• Identity details given at registration: name, address, date of birth, phone number
• Contact preferences for optional email and SMS offers, which players can decline when accepting the terms
• Verification documents: an ID card, driver's licence or passport, and a utility bill no older than three months
• Payment method proof, requested when we need to confirm ownership of a deposit or withdrawal method
• Account activity relevant to deposits and withdrawals, used to meet our compliance checks

How we protect and use account data

We secure personal data with 256-bit SSL encryption, under a certificate issued by DigiCert. Access is additionally limited through firewalls and restricted staff data access, so information submitted during sign-in and verification is only reachable by the teams who need it to run an account.

Why verification is requested

Identity, age, location and phone number checks are carried out before a withdrawal is paid, and full verification is triggered once an account reaches £2,000 in deposits or withdrawals within a rolling 180 days, or earlier at our discretion. Documents are uploaded through the AI verification tool in the cashier, and in some cases a notarised or certified copy of an ID document may be requested; details on what is asked for sit on our verification page.

Accounts with no activity for 12 months are marked inactive and carry a £10 monthly fee until the balance reaches zero, so we hold the related data for as long as an account remains open or inactive. Data protection enquiries can be raised with our support team by email, using 'DPO' as the subject line, and players retain their rights under the General Data Protection Regulation over data we hold on them.

Data categories and retention triggers

The table below sets out the main categories of data we process, why we process them, and what triggers us to request or retain them.

Each category is only requested when the related trigger applies, so most players only submit identity and contact data at registration.

Player rights and account closure

Players hold rights under the GDPR over the personal data we hold, and any request connected to those rights can be sent to our support team by email with 'DPO' in the subject line, in addition to reaching us through live chat for general account queries. Our registered office sits at Fransche Bloemweg 4, Willemstad, Curaçao, and we operate under Curaçao licence OGL/2024/842/0350 as Sefiarray B.V.

Each player may hold one account, under one name and one IP address; anyone sharing a computer with another player should contact support before registering a second account, since this is checked against the data we hold. Employees, affiliates, providers and insiders are excluded from holding a playing account at all, which limits who inside and around the business can access player data in any capacity.

Account closure requested by a player remains valid for six months, during which the related personal data stays on file in line with our retention practice; players wanting a longer self-exclusion can arrange this by email. Any unresolved matter connected to how we handle personal data can also be escalated through the same channel used for other unresolved issues, described on our complaints page.