GGBet Privacy Policy and Data Protection Standards

This document details the protocols for gathering, handling, and safeguarding user information on the GGBet platform. The service is delivered by Brivio Limited (Cyprus, HE315896) and Invicta Networks N.V. (Curaçao, license 8048/JAZ). We are strictly dedicated to maintaining top-tier information security and adhering to regulatory frameworks, including the GDPR.

Inquiries regarding data privacy should be sent to the Data Protection Officer at [email protected]. For general assistance, reach out to our support team via [email protected].

1. Categories of Processed Information

The GGBet ecosystem collects specific information required to deliver services, authenticate identities, and maintain platform integrity. The gathered details encompass:

Identifying Details: First and last names, email addresses, mobile numbers, dates of birth, and physical residences.
Transaction Records: History of deposits and withdrawals, alongside restricted payment metadata (such as the final four digits of a card or the issuing bank). Complete financial details are handled by external, certified gateways utilizing SSL protocols.
Compliance Documentation (KYC/AML): Scanned copies of identification (passports, national IDs), residence proofs, and source-of-wealth declarations to satisfy Anti-Money Laundering and Counter-Terrorist Financing mandates.
System Metrics: IP addresses, hardware specifications, operating systems, browser types, geolocation tags, and interaction logs.
Safer Gambling Metrics: Records of self-exclusion requests, customized deposit caps, and behavioral patterns, utilized exclusively for player safety and regulatory adherence.

2. Legal Grounds and Objectives for Data Handling

We process user information based on the following legal justifications:

Execution of Agreements: Facilitating account registration, managing financial transfers, and delivering betting and casino entertainment.
Statutory Compliance: Confirming legal age (18+), preventing illicit financial flows (AML/CFT), identifying fraudulent behavior, and submitting mandatory reports to regulatory bodies.
Legitimate Operational Interests: Enhancing system performance, maintaining cybersecurity, tailoring the user interface, and protecting the legal rights of the operator.
Explicit Consent: Distributing promotional content and marketing communications (which can be revoked at any moment).

3. Third-Party Information Disclosure

GGBet strictly prohibits the commercial sale of user data. Information is only disclosed to vetted partners who guarantee robust security measures, such as:

Financial institutions and payment processors executing monetary transfers.
Identity verification specialists and gaming content suppliers.
Legal authorities, regulatory agencies, or external auditors when mandated by law or in cases of suspected malicious activity.
Successor entities in the event of a corporate merger, acquisition, or asset sale.

When transferring data beyond the European Economic Area (EEA), the operator enforces standard contractual clauses endorsed by the European Commission to ensure equivalent protection levels.

4. Information Retention Timelines

Personal records are preserved for six years following account closure and the termination of the user agreement. This duration satisfies AML/CFT mandates (which dictate a minimum five-year retention for financial logs) and aligns with legal statutes of limitations. Promotional data is kept until the user revokes their consent. Once these statutory deadlines pass, all records are permanently erased or fully anonymized.

5. Information Security Protocols

The operator deploys sophisticated organizational and technical safeguards. These include end-to-end SSL encryption, strict role-based access controls, and routine security assessments to prevent unauthorized exposure, data loss, or malicious alterations.

6. Consumer Rights Under GDPR

In strict alignment with the General Data Protection Regulation, individuals possess the following entitlements:

Access: Requesting a complete copy of the held personal information.
Correction: Updating inaccurate or obsolete records.
Deletion (Right to be Forgotten): Demanding the removal of data, barring conflicting legal requirements (such as AML retention rules).
Restriction and Objection: Halting data processing for specific uses, including direct marketing campaigns.
Portability: Receiving personal data in a structured, machine-readable format.
Consent Revocation: Withdrawing permission at any point, without invalidating prior lawful processing.

To invoke these privileges, contact the Data Protection Officer. Individuals also retain the right to file a grievance with a national supervisory body, such as the President of the Personal Data Protection Office in Poland.

7. Cookie Utilization and Management

The platform deploys cookies to maintain operational stability, enforce security protocols, and analyze web traffic. Individuals can adjust cookie preferences directly within their browser settings, though restricting them may impair certain site functionalities.

Cookie Identifier	Functional Objective
_locale	Stores the preferred interface language.
gfrcoid	Tracks the active user session.
_auth	Confirms user authorization and login status.
paseto	Holds the encrypted security authentication token.
_ga*, _gid	Facilitates anonymous traffic analytics via Google Analytics (users can opt-out using the official Google browser extension).

8. Policy Amendments and Updates

The operator maintains the authority to revise this document to accommodate legislative shifts or internal procedural updates. The revised text will be posted on the portal alongside an updated effective date. Continuing to utilize GGBet services following the publication of modifications signifies full agreement with the new stipulations.