Your data

Privacy Policy for BetXS

How we collect, use, and safeguard your personal information.

Last updated: 1 September 2026

Thank you for choosing BetXS. Your privacy and the security of your personal data are very important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

General Information

At BetXS, we are dedicated to protecting your privacy and safeguarding your personal data. Our commitment extends to explaining in clear terms how we process your data, ensuring accountability and compliance with the General Data Protection Regulation (GDPR).

This Privacy Policy serves as a foundation for understanding how any personal data we collect from you, or that you provide to us, is processed by us. It outlines our practices for managing your data and informs you of your rights regarding your personal information.

Who We Are — the Data Controller

The data controller for the personal data described in this policy is BetXS . You can contact us about anything in this policy, or to exercise any of your rights, by phone on 0877725423 or through your account.

Our betting platform is operated and maintained on our behalf by Dove Shield Tech Limited , which acts as a data processor under our instructions — see “Who We May Share Your Personal Information With?” below.

We also encourage you to review our Cookie Policy, which provides detailed information about the cookies we use on our website. Understanding these details will help you manage your privacy preferences effectively.

Furthermore, our Terms of Use outline the legal terms under which we deliver our services to you. We recommend reviewing this document to understand fully the terms and conditions of accessing and using our services.

Information Collection

We collect various types of information from and about users of our website, including:

  • Personal data, such as name, email address, and contact details, that you provide by filling in forms on our website, and identity, biometric, and address data provided through our identity-verification provider (see “Identity Verification with Sumsub” below).
  • Transactional details about your bets, deposits, and withdrawals.
  • Technical data, including internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser types, and versions, operating system, and platform.

Use of Your Information — Purposes and Legal Bases

The information we collect from you is used for the following purposes, each with the legal basis we rely on under the GDPR:

  • To provide you with our betting services — operating your account, accepting and settling bets, and processing deposits and withdrawals. Legal basis: performance of our contract with you (Art. 6(1)(b)).
  • To verify your identity, age, and residence, and to protect our operations from fraud, money laundering, and other illegal activities — including anti-money laundering checks and safer-gambling controls. Legal basis: compliance with our legal obligations (Art. 6(1)(c)), and our legitimate interest in preventing fraud (Art. 6(1)(f)).
  • To notify you about changes to our service, and to send bet placement and settlement messages you have opted into. Legal basis: performance of our contract with you (Art. 6(1)(b)).
  • To improve our website's usability, security, and services — including server-side error monitoring. Legal basis: our legitimate interests in maintaining and improving a secure, working service (Art. 6(1)(f)).

Where we rely on legitimate interests, those interests are the prevention of fraud and abuse, the security of our platform, and the maintenance and improvement of our service. You have the right to object — see “Your Rights as a Data Subject” below.

When You Must Provide Data

Some personal data is a statutory requirement: we are legally obliged to verify your identity, age, and residential address before providing gambling services, and to hold records of your transactions. If you do not provide this data — or do not complete identity verification — we cannot open or continue to operate your account. Other data, such as optional contact preferences, is up to you.

Who We May Share Your Personal Information With?

Protecting your privacy is paramount to us. We do not sell, rent, or lend individual information to any third parties for marketing purposes. However, there are certain circumstances under which we may need to share your personal information:

  • Requests by Government Agencies: We may disclose any information in our possession to law enforcement, regulatory bodies, or other governmental authorities if required for legal proceedings or if we, in our sole discretion, believe it necessary to investigate or address illegal activities or to prevent legal liability.
  • Lawful Disclosures: In compliance with legal obligations, we may disclose your information if legally required to do so under any law, regulation, or by a court order. This includes sharing information for the purposes of fraud protection and credit risk reduction.
  • Service Providers (Data Processors): Companies that process personal data on our behalf, under written contracts and only on our instructions, to deliver parts of our service:
    • Dove Shield Tech Limited — operates and maintains the betting platform on our behalf.
    • Sum and Substance Ltd (Sumsub) — identity verification (see “Identity Verification with Sumsub” below). United Kingdom.
    • Amazon Web Services — cloud hosting and secure file storage.
    • Brevo — delivery of the emails we send you (account and bet notifications). European Union.
    • Twilio — delivery of SMS messages and phone calls. United States.
    • Pusher — real-time updates in your browser (for example live odds and bet status). United Kingdom.
    • SmartBear (Bugsnag) — server-side error monitoring that helps us find and fix faults; error reports may include technical data connected to your account activity. United States.

We are committed to ensuring that your information is secure and only shared in accordance with our policies and in compliance with applicable privacy laws.

International Transfers

Some of the providers above are based outside the European Economic Area. Where personal data is transferred internationally, we do so only where the destination is covered by a European Commission adequacy decision — as with the United Kingdom (Sumsub, Pusher) — or subject to appropriate safeguards required by the GDPR, such as the EU–U.S. Data Privacy Framework or Standard Contractual Clauses for providers in the United States (Twilio, SmartBear). You can contact us for more information about the safeguard applying to a particular transfer.

How Long We Keep Your Data

We keep personal data only as long as necessary for the purposes above and to meet our legal obligations. The main retention periods are:

  • Identity and AML verification records: at least 5 years from the end of our business relationship, as required by anti-money laundering law.
  • Betting, transaction, and financial records: at least 6 years after the relevant financial year, for accounting and tax purposes.
  • Self-exclusion and safer-gambling records: for the duration of any exclusion; for permanent self-exclusion, limited identifiers only, kept as long as needed to prevent re-registration.
  • Disputes, fraud, and regulatory matters: until the matter is resolved and any statutory period has expired.

When these periods end, we delete or irreversibly anonymise the data. The Data Retention section of our Terms of Use describes what happens after your account closes.

Identity Verification with Sumsub

We are required by law — including anti-money laundering (AML) legislation, age-verification requirements, and the residency conditions of our licence — to verify the identity of our customers before they can make full use of our services. To carry out these checks we use a specialist identity-verification provider, Sumsub (Sum and Substance Ltd, a company registered in the United Kingdom). When handling your verification data, Sumsub acts as a data processor on our behalf and under our instructions.

This section explains what happens to your data when you complete identity verification. Please read it before starting the verification process.

What Information You Provide Through Sumsub

During verification, the following information is collected directly by Sumsub through the verification step on our website:

  • Identity document data: photographs of your government-issued identity document (passport, ID card, residence permit, or driving licence) and the information it contains, such as your name, date of birth, nationality, document number, and expiry date.
  • Biometric data: a selfie captured during a liveness check — facial images used to confirm that you are a real, present person and that the identity document belongs to you.
  • Proof of address: a recent document (for example a utility bill or bank statement) showing your residential address.
  • Technical data: your IP address and information about the device and browser used during verification.
What We Receive and Store

Your document images, selfies, and biometric data are held by Sumsub — we do not receive or store them on our own systems. From the verification process, we receive and store only:

  • The outcome and status of your verification (for example: in progress, under review, verified, or failed), together with the date of the decision.
  • Once your verification is approved: your verified name, date of birth, and residential address, as extracted from your approved documents. These details are stored in encrypted form on our systems.

Where our staff need to review the underlying verification evidence, they do so within Sumsub's secure platform under access controls; the evidence is not copied into our own systems.

Legal Basis, Retention and International Transfers

We process your verification data because we are legally obliged to do so. Biometric processing during the liveness check is carried out on the basis of your explicit consent, which Sumsub asks for before the check begins. If you choose not to complete verification, we will be unable to provide our services to you.

Verification records are retained in line with our legal obligations — at least 5 years from the end of our business relationship, as described in the Data Retention section of our Terms of Use. Sumsub retains data in accordance with our agreement with them and their own privacy notice.

Sumsub is based in the United Kingdom, which the European Commission has recognised as providing an adequate level of data protection. Where verification data is transferred internationally, it is protected by appropriate safeguards required under the GDPR.

Your Rights and More Information

We remain the data controller for your verification data, and you can exercise all of the rights described in the "Your Rights as a Data Subject" section below by contacting us. You can read more about how Sumsub handles personal data in Sumsub's Privacy Notice.

Automated Decision-Making

Identity verification involves automated processing. Sumsub's checks — document authenticity, and the biometric comparison of your liveness selfie against your identity document — run automatically, and where every check passes, your account can be verified without a person reviewing the decision. Because we cannot provide our services without a completed verification, this automated approval has a significant effect on you.

You are protected in the following ways: verifications that cannot be approved automatically are reviewed rather than automatically refused; and for any verification outcome you may contact our support team to obtain human intervention, express your point of view, and contest the decision.

We do not make automated decisions about your bets — all bets placed through our platform are subject to human review — and we do not use automated profiling for marketing purposes.

Use of Cookies

Cookies are small pieces of data stored on your computer by your web browser at the request of a website you're visiting. They are used to improve your online experience by almost every website, including ours. Below is how we use cookies on our website:

For more detailed information on how we use cookies, please refer to our Cookie Policy.

Security – How We Store Your Information

At BetXS we take the security of your personal information very seriously. We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls. Here’s how we work to protect the data you entrust to us:

  • Secure Storage: All personal information you provide is stored on our secure servers. We use a variety of security technologies and procedures to help protect your personal data from unauthorized access, use, or disclosure.
  • Password Protection: Access to your personal account on our website is secured with a password. This is to ensure that your private information remains confidential and is accessible only by you or those you have authorized.

Despite our efforts to ensure the security of your information, no system can be completely secure. Therefore, we cannot guarantee the absolute security of any information you transmit to us online. Transmitting personal information is done at your own risk.

What does all this mean? Just like in the real world, it is crucial that you take steps to protect yourself online:

  • You are responsible for keeping your passwords and account details secret.
  • Always be cautious about the information you provide in public areas of our website, as these can be accessed by other users.
  • Ensure that you use a strong, unique password for your accounts and do not share it with others.

Your vigilance in protecting your personal information plays a crucial role in helping us maintain a safe and secure platform.

Your Rights as a Data Subject

We are committed to upholding your rights as provided under data protection laws. You have several rights concerning your personal information, and we facilitate the exercise of these rights through our data protection policy and subject access request procedure, both of which are available upon request.

  • Right of Access: You have the right to request a copy of the personal information we hold about you, ensuring you can check we are using your information in accordance with data protection law.
  • Right of Rectification: You can ask us to correct any inaccuracies in the personal information we hold about you, enhancing the accuracy of your data.
  • Right to be Forgotten: You have the right to request the deletion or removal of personal data where there is no compelling reason for its continued processing.
  • Right to Restriction of Processing: Under certain conditions, you have the right to restrict the processing of your personal information.
  • Right of Portability: You have the right to have the data we hold about you transferred to another organization, where technically feasible.
  • Right to Object: You have the right to object to certain types of processing, such as direct marketing, processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority, and processing for purposes of scientific/historical research and statistics.
  • Right to Object to Automated Processing, Including Profiling: You have the right not to be subject to the legal effects of automated processing or profiling.
  • Right to Withdraw Consent: Where we rely on your consent — the optional “Keep me signed in” cookie, or the biometric liveness check during identity verification — you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. Signing out removes the “Keep me signed in” cookie, and you can simply leave the box unticked when you next sign in. Note that identity verification is a legal requirement: if consent for the liveness check is withdrawn or refused, we will be unable to verify your account or provide our services.

To exercise any of these rights, please contact us using the details in the “Who We Are” section at the top of this policy.

Please note that some of these rights might be limited where we have an overriding interest or legal obligation to continue to process the data or where data is needed for the establishment, exercise or defense of legal claims.

Complaints

We strive to meet the highest standards when processing your personal information. However, if you are not satisfied with our use of your personal data, or our response to any requests you have made to exercise your rights, you have the right to lodge a complaint with the Data Protection Commission (DPC).

Before reaching out to the DPC, we encourage you to contact us first with any concerns, as we may be able to resolve them directly. If you do choose to proceed with a formal complaint, here are the contact details for the DPC:

The DPC is Ireland's authority responsible for upholding the fundamental right of individuals to data privacy through the enforcement and monitoring of compliance with data protection legislation.

Changes to Our Privacy Policy

We regularly review and update this Privacy Policy to reflect changes in technology, legislation, our services, or how we operate our business. These updates are crucial for ensuring that we continue to protect your data and keep you informed about how we use it.

Any changes we make to this policy will be posted on this page with an updated “Last updated” date. Where a change is material, we will actively notify you — for example by email or a notice on the website — rather than relying on you noticing the change.

Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact BetXS by phone on 0877725423 or through your account.