This policy explains how the Buddy Bet platform collects, processes, stores and protects users' personal data. The document has been drawn up in line with international rules on the protection of personal information.
1. Terms
Personal data means any information about a natural person who is identified or can be identified. Processing of personal data means any action performed on it: collection, recording, organisation, storage, correction, use, transfer and deletion.
The personal data controller is Winever B.V., the company that runs the platform and decides the purposes and means of processing. The data subject is the user whose data is processed.
2. What Data We Collect
The operator collects the following types of information:
Identification data provided by the user:
- Full name
- Date and place of birth
- Citizenship
- Registered address and home address
- Contact phone number
- Email address
- Identity document details
Financial data:
- Bank card details
- E-wallet numbers
- Cryptocurrency wallet addresses
- Payment history
Technical data collected automatically:
- IP address and geolocation
- Browser type and version
- Device operating system
- Session start time and duration
- Activity on the website and history of games and bets
3. Why We Process Data
Personal data is used for the following purposes:
- Identifying the user and meeting licence requirements
- Providing services under the user agreement
- Processing payments and payouts
- Protecting the account and preventing fraud
- Meeting anti-money laundering requirements
- Improving the service and tailoring it to the user's needs
- Sending service notifications and, with consent, promotional messages
- Handling disputes and complaints
4. Legal Grounds
Personal data is processed on the following grounds:
- Performance of the contract between the operator and the user
- Compliance with legal requirements binding on the operator
- The operator's legitimate interests, where they do not override the data subject's rights
- The data subject's explicit consent to specific types of processing
5. Who Receives the Data
The operator may share personal data with the following recipients:
- Payment services — to process transactions
- Verification services — to check identity
- Game providers — to run game content
- Infrastructure providers — to store and process data
- Public authorities — on official request in accordance with the law
All partners with access to personal data sign confidentiality undertakings and process information only within the tasks set by the operator.
6. Transfers Abroad
If data is transferred to countries without an adequate level of protection, the operator uses additional safeguards: standard contractual clauses, binding corporate rules or other mechanisms recognised by supervisory authorities.
7. Cookies
To run the service, the platform uses the following types of cookies:
- Essential — needed for basic functions, including signing in and security
- Functional — remember the user's settings and preferences
- Analytics — collect anonymised visit statistics
- Marketing — help show relevant advertising
Cookies can be configured in the consent window on the first visit to the website or in the browser settings.
8. Data Protection
The operator applies organisational and technical measures to protect personal data:
- SSL/TLS encryption of data in transit
- Encryption of data at rest
- Staff access limited to the data they need for their work
- Regular security system checks
- Penetration tests
- Staff training in information security rules
9. Retention Periods
Personal data is kept for as long as needed for the purpose of processing. After an account is closed, data is kept for the periods set by law:
- Identity documents — at least five years
- Payment history — at least five years
- Correspondence with support — three years from the date of the last request
Once these periods expire, the data is permanently deleted.
10. User Rights
With respect to their personal data, users have the following rights:
- Right of access — find out what data is processed and receive a copy of it
- Right to rectification — ask for inaccurate or incomplete data to be corrected
- Right to erasure — ask for data to be deleted where there are legal grounds
- Right to restrict processing — temporarily stop actions with the data
- Right to portability — receive data in a structured machine-readable format
- Right to object — refuse processing of data for marketing purposes
To exercise these rights, send a request to the support team. Requests are handled within thirty days.
11. Data of Minors
The platform is not intended for persons under 18. The operator does not knowingly collect data of minors and deletes such data immediately if it is found.
12. Policy Changes
The operator may change this policy. Significant changes are announced on the website and by email at least fourteen days before they take effect.
13. Contacts
For questions about the processing of personal data, contact the support team via live chat or email. A complaint about a breach of data subject rights can also be filed with the competent personal data protection authority.
