Privacy policy

Scope of this privacy policy

This privacy policy sets out how Betnjet collects, uses and protects your personal data. It applies to all users of our website and mobile applications. Betnjet acts as the controller of the personal data we process. We determine the purposes and means of that processing.

You consent to this policy when you register an account or use our services. It applies to data collected from direct interactions with you as well as automated tracking. We may update this policy from time to time. Any changes will take effect from the date stated at the top of the current version.

We operate under UK law and hold valid licensing with the relevant regulator. This means we have specific legal obligations regarding data protection. You can review our terms and conditions for the contractual rules governing your play. Together with this policy, they form the basis of our data handling practices.

The controller of your personal data is Betnjet Limited. Any questions about how we handle your data should be directed to our data protection officer. You can find contact details on our contacts page. We are committed to transparency in all our data processing activities.

Data collected and why we collect it

We collect specific categories of personal data to provide our services securely and legally. This includes information you provide directly such as your name, address and contact details when registering an account. We also collect data generated by your use of our platform during gameplay sessions, including bet amounts and game outcomes. For example, when you place a bet using Visa, Mastercard, Sofort, Revolut, Google Pay, Apple Pay, MiFinity, Jeton, Bank Transfer, Bitcoin, Ethereum, USDT, Litecoin, Solana, Dogecoin, Cardano, USDC, Tron and Ripple, we record the transaction to ensure compliance with gambling regulations.

Verification documents are required to confirm your identity and age before you can deposit funds. You trade some privacy for the security of knowing your funds are protected and that we operate legally. This distinction matters because each category has different retention schedules under UK law. For instance, identity records must be retained for seven years to satisfy regulatory audits, whereas gameplay data persists only while your account remains active. We maintain a strict separation between data you voluntarily provide and data we generate through your interaction with the system. This operational boundary ensures that sensitive information, such as your home address, is stored separately from behavioural metrics like session duration or game preferences. If you choose to deposit using GBP, we retain those financial records to facilitate potential audits by the Gambling Commission.

Lawful bases for processing your data

We process your data under specific lawful bases defined by UK data protection law. Each category of data has a corresponding legal ground for its processing, which ensures we handle your information responsibly. For instance, we use contract performance to deliver your gaming services but rely on legal obligation for anti-money-laundering checks. When you claim £500, we process your data to fulfil the contractual terms of that bonus offer.

• Service delivery | Performance of contract | Account active
• Compliance | Legal obligation | 7 years
• Marketing | Consent | Until withdrawal
• Security | Legitimate interest | Until deletion

You retain the right to withdraw consent for marketing at any time without affecting your account functionality. However, some processing activities like fraud prevention rely on legitimate interests rather than consent, which cannot be withdrawn. We explain the specific basis for each data category in our internal records and can provide this information upon request. This clarity allows you to understand the legal framework supporting our operations. For example, if we detect suspicious activity during a £20 transaction, we rely on legitimate interest to investigate potential fraud without requiring your consent. Our legitimate interest in maintaining platform integrity outweighs any privacy concerns in such cases.

Who we share your data with

We share personal data only with authorised third parties who assist our operations in delivering services to you. Payment providers receive financial details necessary to process your deposits and withdrawals securely, using encrypted connections. Identity verification services confirm your age and location before account activation to comply with licensing requirements.

Game suppliers receive gameplay records to ensure fair operation of games and to verify jackpot amounts. Regulators and law enforcement receive data when required by law or court order to investigate suspicious activity. All third parties act as processors bound by strict contractual obligations that prohibit further sharing.

We do not sell your personal data to any party for marketing purposes, which is a key distinction from some other platforms. International transfers occur only where safeguards such as adequacy decisions or standard contractual clauses exist to protect your data. We ensure data remains protected across all borders where it moves, regardless of where our processors are located.

Processor agreements define how our partners handle your information on our behalf and cannot use your data for their own purposes without permission. This restriction applies to all vendors and service providers working with us, including those who maintain our gaming infrastructure. We monitor compliance with these agreements through regular audits and reviews to ensure ongoing protection.

Any breach of data protection standards is reported to the regulator immediately as required by law. We maintain a record of all data sharing activities for inspection by auditors or regulatory bodies. This transparency ensures that you can understand exactly who has access to your information at any given time.

How long we retain your data

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy. Account data is kept for the duration of your account plus a statutory period to support dispute resolution. This aligns with our legal obligation to maintain transaction records for regulators who monitor compliance with gambling laws.

Verification documents are retained for seven years following account closure to satisfy anti-money-laundering regulations requiring proof of identity retention. We delete these records after the statutory period expires unless legal proceedings require otherwise to preserve evidence. This period balances regulatory requirements with your right to have data deleted when no longer needed.

Marketing consents are stored separately from account data and deleted when withdrawn or when the consent period expires. You can withdraw consent at any time through your account settings or by contacting our support team directly. Withdrawal does not affect data retention required for legal compliance or to resolve disputes.

Financial records are kept for six years in line with HMRC requirements for tax and accounting purposes. We do not retain payment details beyond the period needed for processing transactions to minimise risk. We review all retention schedules annually to ensure they remain compliant with evolving regulations.

Your data protection rights and how to use them

You have specific rights under UK data protection law regarding your personal information that empower you to control how your data is used. These rights allow you to access, correct or delete your information, subject to certain legal exceptions that protect our operational integrity. We provide these rights to ensure transparency and give you meaningful control over your privacy.

You can exercise these rights by contacting our data protection officer directly via email or post to our registered address. We apply identity checks to verify your request and protect your information from unauthorised access. We respond to all requests within one month, extending to two months for complex cases as permitted by law.

Note that some rights are limited where records must be retained by law, such as fraud prevention or regulatory reporting requirements. For example, we cannot delete transaction data that is required for tax purposes even if you request erasure. We will explain any limitations applied to your request and provide the legal basis for maintaining certain data.

Security measures and how to complain

We implement technical and organisational measures to protect your personal data from unauthorised access or accidental loss. These include encryption, access controls and regular security audits that test our systems against known threats. We maintain staff training programmes on data protection best practices to ensure everyone understands their responsibilities.

We monitor our systems continuously for suspicious activity or unauthorised access attempts across all user accounts. Any breach is reported to the regulator within the required timeframe, typically within 72 hours of discovery. We notify affected individuals where the breach poses a high risk to their rights and freedoms.

Complaints about data handling should first be submitted to our data protection officer for investigation and resolution. We investigate all complaints thoroughly and respond within one month unless we require more time for complex cases. If dissatisfied with our response, you may escalate to the Information Commissioner's Office as the supervisory authority.

We maintain a dedicated team to handle data subject requests and complaints with appropriate training and resources. They are trained to respond accurately and within statutory timeframes to ensure your rights are respected. You can reach them through our contacts page or by post to our registered office address.