Comprehensive Data Protection and Privacy Guidelines at GGBet

1. Legal Framework and Corporate Responsibility

This statement outlines the exact methodologies GGBet utilizes to collect, process, and safeguard the personal details of our users. The platform is managed by Brivio Limited, a company registered in Cyprus (Registration No. HE315896), which operates under the master gaming license (8048/JAZ) held by Invicta Networks N.V. via the Curaçao eGaming authority. We are deeply dedicated to upholding the highest tiers of data security and strictly adhering to all relevant privacy regulations, including the General Data Protection Regulation (GDPR). For any privacy-related inquiries, please contact our Data Protection Officer at [email protected], or reach out to our general support team at [email protected] for broader assistance.

2. Technological Safeguards and System Security

To protect user information, the operator deploys advanced organizational and technical safeguards. These defensive measures include end-to-end SSL encryption, strict role-based access controls, and routine security audits. Such protocols are specifically designed to prevent unauthorized exposure, data loss, or any form of malicious tampering with our systems.

3. Categories of Collected Information and Lawful Processing Grounds

The GGBet ecosystem gathers specific types of data essential for service delivery, identity authentication, and overall system integrity. This collected information encompasses:

Personal Identifiers: Full name, email address, phone number, date of birth, and residential address.
Financial Transaction History: Records of deposits and withdrawals, along with limited payment metadata (e.g., the last four digits of a card or the issuing bank). Complete financial details are securely processed by external, certified gateways utilizing SSL protocols.
Regulatory Compliance Documents (KYC/AML): Copies of official identification (passport, national ID), proof of residence, and source-of-wealth declarations to satisfy Anti-Money Laundering and Counter-Terrorist Financing mandates.
Technical and Device Data: IP addresses, hardware specifications, operating systems, browser versions, geolocation tags, and platform usage logs.
Responsible Gaming Indicators: Details regarding self-exclusion requests, customized deposit limits, and behavioral patterns, utilized exclusively to ensure player safety and regulatory adherence.

User data is processed based on the following legal justifications:

Contractual Necessity: Essential for establishing accounts, managing financial transfers, and delivering betting and casino entertainment services.
Statutory Compliance: Required to verify legal age (18+), prevent illicit financial flows (AML/CFT), detect fraudulent behavior, and fulfill mandatory reporting duties to regulatory authorities.
Legitimate Business Interests: Necessary to improve platform performance, ensure IT cybersecurity, personalize the user interface, and defend the legal rights of the operator.
Explicit User Consent: Used for distributing promotional content and marketing communications (consent can be revoked at any moment).

4. Third-Party Sharing and Cross-Border Transfers

GGBet strictly prohibits the commercial sale of personal user data. Information is exclusively disclosed to carefully vetted partners who maintain robust security benchmarks, including:

Financial institutions and payment processors executing monetary transfers.
Identity verification specialists and gaming content suppliers.
Law enforcement agencies, regulatory bodies, or external auditors, if legally mandated or in cases of suspected malicious activity.
Successor entities in the event of a corporate merger, acquisition, or asset liquidation.

For any data transfers occurring beyond the European Economic Area (EEA), the operator enforces standard contractual clauses endorsed by the European Commission to guarantee an equivalent tier of protection.

5. Data Retention and Archival Policies

Personal records are preserved for a period of six years following account closure and the termination of the user agreement. This timeframe complies with AML/CFT regulations, which mandate a minimum five-year retention for financial logs, and aligns with standard legal statutes of limitations. Marketing data is stored only until the user revokes their consent. Once these statutory deadlines expire, all records are permanently erased or fully anonymized.

6. User Entitlements Under GDPR Regulations

In full compliance with the General Data Protection Regulation, individuals possess the following rights regarding their personal data:

Right of Access: The ability to request a complete copy of the processed personal information.
Right to Rectification: The authority to correct any outdated or inaccurate records.
Right to Erasure ("Right to be Forgotten"): The option to demand data deletion, barring conflicting legal obligations (such as AML retention rules).
Right to Restriction or Objection: The power to halt data processing for specific purposes, including direct marketing campaigns.
Right to Data Portability: The option to acquire personal records in a structured, widely accepted, machine-readable layout.
Right to Withdraw Consent: The freedom to revoke approval at any point, without invalidating the lawfulness of prior processing activities.

To invoke these privileges, individuals must contact the Data Protection Officer. Furthermore, users retain the right to lodge a formal grievance with a relevant national oversight body, such as the President of the Personal Data Protection Office in Poland.

7. Cookie Technology and Web Tracking Mechanisms

The platform utilizes cookies to ensure operational stability, enforce security protocols, and analyze web traffic. Individuals can adjust their cookie preferences directly within their browser settings, although restricting certain cookies may impair specific site functionalities.

Cookie Identifier	Functional Objective
_locale	Remembers the preferred interface language.
gfrcoid	Tracks the current active user session.
_auth	Confirms user authorization and login status.
paseto	Stores the encrypted security authentication token.
_ga*, _gid	Facilitates anonymous traffic analytics via Google Analytics (opt-out available via the official Google browser extension).

8. Future Modifications to This Policy

The operator reserves the authority to revise this document to accommodate legislative shifts or internal procedural updates. Any revised text will be published on the portal alongside a new effective date. Continued utilization of GGBet services following the publication of such modifications signifies full agreement with the updated stipulations.