Data Protection Policy

This policy explains how Betcub protects your personal data, in line with the latest UK, EU, and global gambling regulations (2025 update).

Who Does This Policy Apply To?

This policy covers all Betcub users, staff, contractors, and third parties who handle personal data on our platform. It applies to all account, transaction, and marketing data.

Key Definitions

- Personal Data: Any information that can identify you (e.g. name, email, betting history)
- Special Category Data: Sensitive data such as health, risk status, or biometric info
- Processing: Any action on your data (collection, storage, profiling, deletion)

Core Data Protection Principles

We process your data only if:
- You give explicit consent (e.g. for marketing)
- It’s needed for your contract (e.g. betting, payments)
- We have a legal duty (e.g. anti-money laundering)
- We have a legitimate interest (e.g. fraud prevention), always balancing your rights.

Transparency & Your Rights

- We tell you exactly why we need your data and how we use it.
- Our privacy notice lists all third parties and data retention periods.
- Cookie banners let you accept or reject each type of cookie.

Data Minimisation & Retention

- We only collect what’s necessary.
- Account 5 years after last login
- KYC documents: 7 years after account closure
- Marketing consent: reviewed every 12 months

Security Measures

- End-to-end encryption
- Access controls for staff
- Regular security testing
- Immediate breach response and notification within 72 hours

Profiling & High-Risk Processing

- No automated decisions for self-excluded or vulnerable users
- Human review for credit/bonus decisions
- No use of health/risk data for marketing

International Data Transfers

- Data transfers outside the UK/EU use Standard Contractual Clauses or only go to countries with approved data protection standards.
- All vendors must comply with GDPR or equivalent.

Your Data Rights

You can:
1. Access your data
2. Correct errors
3. Request deletion (unless required by law)
4. Restrict processing
5. Object to profiling or marketing
We respond to all requests within 30 days.

Contact The Data Protection Officer (DPO)

Our DPO is responsible for privacy compliance. Contact: dpo@betcub.com.

Accountability & Policy Review

- All staff receive regular privacy training.
- We audit our vendors and review this policy every 12 months or after any regulatory change.
- Serious breaches are reported to regulators and may result in account suspension or termination.

Declaration
I confirm I have read and understood this policy. I will comply and report any violations to the DPO.
Name: ____________
Signature: ____________
Date: ____________

This policy replaces all previous versions. Effective: 25 June 2025. Approved by the Betcub Legal & Compliance Board.