Comprehensive Data Protection and Privacy Guidelines at GGBet

This policy outlines the exact methods utilized to collect, process, and protect the personal information of individuals using the GGBet platform. Operations are governed by Brivio Limited (registered in Cyprus under HE315896) and Invicta Networks N.V., which holds the master Curaçao eGaming license (8048/JAZ). The platform is strictly dedicated to upholding the highest standards of data security and adhering to all relevant privacy regulations, including the General Data Protection Regulation (GDPR). For any privacy-related concerns, inquiries should be directed to the Data Protection Officer at [email protected], while general assistance is available through the support team at [email protected].

Core Principles of Data Collection and Processing

The GGBet ecosystem gathers specific types of data essential for service delivery, identity authentication, and overall system integrity. This collected information encompasses:

Personal Identifiers: Full name, email address, phone number, date of birth, and residential address.
Financial Transaction History: Records of deposits and withdrawals, along with limited payment metadata (e.g., the last four digits of a card or the issuing bank). Complete financial details are securely processed by external, certified gateways utilizing SSL encryption.
Regulatory Compliance Documents (KYC/AML): Copies of official identification (passport, national ID), proof of residence, and source-of-wealth declarations to satisfy Anti-Money Laundering and Counter-Terrorist Financing mandates.
Technical and Device Data: IP addresses, hardware specifications, operating systems, browser versions, geolocation tags, and platform usage logs.
Responsible Gaming Indicators: Details regarding self-exclusion requests, customized deposit limits, and behavioral patterns, utilized exclusively to ensure player safety and regulatory adherence.

Legal Foundations for Information Processing

User data is processed based on the following legal justifications:

Contractual Necessity: To facilitate account creation, manage financial transfers, and deliver betting and casino entertainment services.
Statutory Compliance: To verify legal age (18+), prevent illicit financial flows (AML/CFT), detect fraudulent behavior, and fulfill mandatory reporting duties to regulatory authorities.
Legitimate Business Interests: To improve platform performance, ensure IT cybersecurity, personalize the user interface, and defend the legal rights of the operator.
Explicit User Consent: To distribute promotional content and marketing communications (consent can be revoked at any moment).

Data Retention and Archival Policies

Personal records are preserved for a period of six years following account closure and the termination of the user agreement. This timeframe complies with AML/CFT regulations, which mandate a minimum five-year retention for financial logs, and aligns with standard legal statutes of limitations. Marketing data is stored only until the user revokes their consent. Once these statutory deadlines expire, all records are permanently erased or fully anonymized.

Third-Party Sharing and International Transfers

GGBet strictly prohibits the commercial sale of personal user data. Information is exclusively disclosed to carefully vetted partners who maintain robust security standards, including:

Financial institutions and payment processors executing monetary transfers.
Identity verification specialists and gaming content suppliers.
Law enforcement agencies, regulatory bodies, or external auditors, if legally mandated or in cases of suspected malicious activity.
Successor entities in the event of a corporate merger, acquisition, or asset sale.

For any data transfers occurring beyond the European Economic Area (EEA), the operator enforces standard contractual clauses endorsed by the European Commission to guarantee an equivalent level of protection.

Robust Security Measures

The operator deploys advanced technical and organizational safeguards. These measures include end-to-end SSL encryption, strict role-based access controls, and routine security assessments designed to prevent unauthorized exposure, data loss, or malicious tampering.

User Rights Under GDPR

In full compliance with the General Data Protection Regulation, individuals possess the following entitlements regarding their personal data:

Right of Access: To request a complete copy of the processed personal information.
Right to Rectification: To correct any outdated or inaccurate records.
Right to Erasure ("Right to be Forgotten"): To demand data deletion, barring conflicting legal obligations (such as AML retention rules).
Right to Restriction or Objection: To halt data processing for specific purposes, including direct marketing campaigns.
Right to Data Portability: To receive personal data in a structured, commonly used, machine-readable format.
Right to Withdraw Consent: To revoke permission at any point, without invalidating the lawfulness of prior processing.

To exercise these privileges, individuals must contact the Data Protection Officer. Users also retain the right to lodge a formal grievance with a national supervisory authority, such as the President of the Personal Data Protection Office in Poland.

Cookie Technology and Tracking Mechanisms

The platform utilizes cookies to ensure operational stability, enforce security protocols, and analyze web traffic. Individuals can adjust their cookie preferences directly within their browser settings, although restricting certain cookies may impair specific site functionalities.

Cookie Identifier	Functional Objective
_locale	Remembers the preferred interface language.
gfrcoid	Tracks the current active user session.
_auth	Confirms user authorization and login status.
paseto	Holds the encrypted security authentication token.
_ga*, _gid	Facilitates anonymous traffic analytics via Google Analytics (opt-out available via the official Google browser extension).

Future Modifications to This Policy

The operator reserves the authority to revise this document to accommodate legislative shifts or internal procedural updates. Any revised text will be published on the portal alongside a new effective date. Continued utilization of GGBet services following the publication of such modifications signifies full agreement with the updated stipulations.