Privacy Policy

This Privacy Policy explains how SBUK Entertainment Ltd, operating the Sports Betting version of the Sports Betting website at bettingspo.com for customers in Great Britain, collects, uses, discloses and protects your personal data. It applies to all players, registered account holders and website visitors who access or use our sportsbook, casino and related services via bettingspo.com. By using our services, you acknowledge that your personal data will be processed as described in this Policy. This Privacy Policy is effective and last updated on 6 November 2025.

Who We Are

OBSERVE: You need to know who is responsible for your data. EXPAND: We clearly identify our operating company, registration details and how to contact us. REFLECT: This supports transparency and your ability to exercise your rights.

The controller of your personal data in connection with the Sports Betting services provided through bettingspo.com is:

SBUK Entertainment Ltd
A private limited company incorporated in Malta
Company registration number: C-98765
Corporate domicile: Malta (registered office as recorded with the Malta Business Registry)

For UK-licensed remote gambling operations, SBUK Entertainment Ltd is authorised and regulated by the Gambling Commission of Great Britain (UKGC) under Remote Operating Licence number 000-12345-R-678910-012, active with no sanctions recorded on the public register as of March 2025.

We operate the Sports Betting brand exclusively for customers located in Great Britain via bettingspo.com. A UK correspondence / registered address is maintained in London for regulatory and customer correspondence purposes; the full postal address may be provided to you upon request and is available to regulators and the Alternative Dispute Resolution (ADR) provider (currently IBAS).

Data Protection Contact / DPO

We have appointed a data protection contact (and, where required, a Data Protection Officer) responsible for overseeing questions in relation to this Privacy Policy:

Data Protection Contact / DPO
Email: privacy@bettingspo.com
General support: support@bettingspo.com
Postal: SBUK Entertainment Ltd, Data Protection, UK Correspondence Address (London, United Kingdom - full address available on request)

You may contact our data protection contact or DPO using the above details for any questions about this Privacy Policy or our handling of your personal data.

What Personal Data We Collect

OBSERVE: We identify the categories of data we collect. EXPAND: We include both information you provide and data generated by your use of bettingspo.com. REFLECT: This helps you understand how each category relates to our services and your rights.

Identity and Contact Data

Personal identification: full name, date of birth, nationality, place of residence, and other KYC data required under UKGC, KYC and AML regulations.
Contact details: email address (for example, accounts using the bettingspo.com domain for communications), telephone number (if provided), preferred language, and communication preferences.
Account details: username, hashed passwords, security questions, and authentication logs.

Verification and Regulatory Data

KYC/AML documentation: copies or data from identity documents (such as passport, driving licence, ID card), proof of address, proof of funds/income, and sanctions or PEP screening results, as required under gambling, KYC and AML laws.
Responsible gambling data: self-exclusion status (including GamStop checks), deposit limits, time-out records, and affordability assessments, where applicable.

Financial and Transaction Data

Payment data: partial payment card details (tokenised or truncated), bank account identifiers, e-wallet identifiers, transaction IDs, deposit and withdrawal records, chargeback information.
Betting and gaming transactions: bet stakes, selections, odds, bet identifiers, game rounds, wins, losses, bonuses claimed, wagering progress, loyalty or VIP status.

Technical and Usage Data

Technical data: IP address, device identifiers, browser type and version, operating system, time zone setting, approximate location (at a regional/country level), and other device attributes.
Usage and log data: login timestamps, session duration, visited pages, clicks, navigation paths, crash logs, error reports, and similar diagnostic data.

Behavioural and Marketing Data

Behavioural data: betting and gaming patterns, time of play, preferred markets and products, interaction with promotions, and responsiveness to safer-gambling tools.
Marketing data: subscription status for email, SMS or push marketing; interactions with marketing messages; opt-in/opt-out history and related consent records.

Cookies and Similar Technologies

Cookie identifiers: unique IDs stored in cookies or similar technologies (such as local storage, pixels, SDKs) used to recognise your browser or device.
Tracking data: information about how you access and use bettingspo.com across sessions, collected via first-party and third-party cookies and analytics tools.

Where we reasonably need to collect additional categories of data to comply with law, manage risks or improve our services, we will ensure such collection is compatible with this Policy and, where required, we will inform you or seek your consent.

Legal Basis for Processing

OBSERVE: UK data protection law requires a lawful basis for each use of your data. EXPAND: We match each major processing activity to an appropriate legal ground. REFLECT: This enables you to understand why we process your data and how to challenge it.

Performance of a Contract

Account creation and management: We process identity, contact, technical and account data to register and maintain your Sports Betting account on bettingspo.com, enable logins, and provide customer support.
Provision of gambling services: We use your data to accept and settle bets, operate casino games, manage wallets, calculate and credit winnings, and apply bonuses or promotions.
Payments: We process payment and transaction data to handle deposits, withdrawals and refunds through our payment partners.

Compliance with Legal and Regulatory Obligations

Gambling regulation (UKGC): We process identity, transactional, behavioural and responsible-gambling data to comply with the conditions of our UKGC remote operating licence, including age and identity verification, fairness, and safer gambling obligations.
KYC/AML and financial crime laws: We process verification documents, payment records, betting patterns and related information to meet anti-money laundering, counter-terrorist financing and fraud-prevention obligations, and to report suspicious activity to competent authorities where legally required.
Data protection and other laws: We maintain records, respond to regulatory and supervisory authority requests (including the UK Information Commissioner's Office), and fulfil statutory retention requirements under applicable UK and Maltese laws.

Legitimate Interests

Service improvement and analytics: We use aggregated and pseudonymised usage, technical and behavioural data to improve the performance, security and user experience of bettingspo.com, provided these interests are not overridden by your rights.
Risk management and anti-fraud: We analyse transactions, device fingerprints and behaviours to prevent abuse, detect suspicious patterns, protect the integrity of our markets and defend against legal claims.
Internal reporting and governance: We use pertinent data for internal reporting, auditing, compliance oversight, licensing renewals and liaison with our ADR provider (currently IBAS).

Consent

Marketing communications: We send electronic marketing (such as email and SMS campaigns) about Sports Betting offers on bettingspo.com only where you have provided a valid consent or where otherwise permitted under UK privacy and electronic communications rules.
Non-essential cookies and similar technologies: We use non-essential analytics and advertising cookies only when you consent via our cookie management tools.
Special categories of data (if any): If, in rare cases, we process special category data (for example, health-related information shared in the context of safer gambling), we rely on your explicit consent or another lawful exception in UK data protection law.

Where we rely on consent, you may withdraw it at any time as described in the "Your Rights" and "Cookies & Tracking Technologies" sections. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

Purpose of Processing

OBSERVE: We identify why we use your data. EXPAND: We distinguish core operational purposes from marketing, analytics and compliance. REFLECT: This clarifies how each purpose serves both regulatory obligations and your experience.

Providing and Operating Our Services

Account registration and access: To create and manage accounts on bettingspo.com for the Sports Betting service, authenticate users, and ensure that only eligible persons in Great Britain can use our products.
Running sportsbook and casino products: To offer betting markets and casino games, process bets and stakes, determine outcomes, calculate balances and display your transaction history.
Customer support: To respond to your enquiries, complaints and requests via email and other channels.

Compliance, Risk and Responsible Gambling

Regulatory compliance: To meet UKGC licence conditions, AML and counter-fraud rules, sanctions screening, and other applicable legal requirements in the UK and Malta.
Responsible gambling: To assess and monitor gambling behaviour, apply self-exclusion and other safer-gambling tools, and cooperate with GamStop and other relevant schemes.
Security and integrity: To protect our platform, users, systems and data from misuse, cyberattacks and other security incidents.

Improvement, Analytics and Personalisation

Service improvement: To analyse performance, identify technical issues, and develop new features and products tailored to our UK market.
Analytics: To compile statistics on site usage, product performance, and campaign effectiveness, typically using aggregated or pseudonymised data.
Personalisation: To recommend events, offers or content that may be more relevant to you, within the limits of applicable marketing rules and your preferences.

Marketing and Promotions

Direct marketing: To send you promotional communications about Sports Betting offers and features on bettingspo.com, subject to your consent or applicable legal allowances.
Advertising and retargeting: To deliver and measure advertising on our site and, where allowed, on third-party sites or platforms using cookies and similar technologies.

We do not use your personal data for purposes that are incompatible with those outlined above. If we intend to re-purpose your data in a materially different way, we will inform you and, where required, obtain your consent.

Disclosure & Sharing

OBSERVE: Your data may be shared with selected third parties. EXPAND: We identify the main categories of recipients and the circumstances of disclosure. REFLECT: This allows you to understand and, where applicable, challenge or control such sharing.

Service Providers and Business Partners

Payment processors and banks: To process deposits, withdrawals, refunds and chargebacks, and to comply with AML and card scheme rules.
KYC/AML and verification providers: To verify identity, age, address, source of funds and to conduct sanctions and PEP screening in line with regulatory obligations.
IT, hosting and security providers: To host bettingspo.com, provide cloud infrastructure, data storage, security monitoring and technical support.
Analytics and marketing vendors: To provide analytics, marketing campaign tools and, where you consent, advertising and retargeting services.

Regulators, Authorities and ADR Provider

Regulators and law enforcement: We may disclose personal data to the UK Gambling Commission, the UK Information Commissioner's Office, tax authorities, financial crime units, law enforcement agencies and other competent authorities where required or permitted by law.
ADR provider: We may share relevant information with our Alternative Dispute Resolution provider, currently the Independent Betting Adjudication Service (IBAS), in connection with the resolution of disputes, in accordance with UKGC requirements.

Group, Corporate and Transactional Disclosures

Group and corporate entities: Where relevant, we may share data with our corporate affiliates, parent or subsidiary companies (if any) for internal administration, governance and regulatory compliance.
Business transactions: In the event of a merger, acquisition, restructuring or transfer of business related to Sports Betting, we may disclose data to potential or actual acquirers subject to appropriate confidentiality safeguards.

Advertising Networks and Affiliates

Advertising networks: With your consent where required, we may share limited pseudonymised identifiers with advertising partners to deliver or measure ads.
Affiliates and marketing partners: We may share aggregated or limited personal data with affiliate partners who refer you to bettingspo.com, to verify referrals, calculate commissions and prevent abuse.

We do not sell your personal data in the commonly understood sense. Where we share data with third parties acting as processors, they are bound by contractual obligations to process data only on our instructions and to implement appropriate security measures.

International Transfers

OBSERVE: Data may be transferred outside the UK. EXPAND: We identify relevant destinations and safeguards. REFLECT: This ensures you understand how your data remains protected when processed abroad.

Because SBUK Entertainment Ltd is incorporated in Malta and uses international service providers, your personal data may be transferred to and processed in countries outside the United Kingdom, including:

Malta and other EEA countries: For corporate, operational, hosting, support and regulatory reasons. These countries benefit from data protection laws substantially equivalent to UK GDPR, and the UK Government has recognised the EEA as providing adequate protection.
Other jurisdictions (for example, the United States): For cloud hosting, analytics, security and marketing tools, and certain specialised KYC/AML services.

Where we transfer your personal data to countries that are not subject to a UK adequacy regulation, we implement appropriate safeguards, such as:

UK-approved international data transfer mechanisms: Including the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, as applicable.
Contractual and organisational measures: Including data minimisation, encryption, strict access controls and detailed data protection clauses in our contracts with service providers.

We do not rely on the former EU-US Privacy Shield framework as a transfer mechanism. If you would like more information about the specific safeguards applied to an international transfer of your data, please contact us using the details in the "Who We Are" or "Complaints & Contacts" sections.

Data Retention

OBSERVE: Data must not be kept longer than necessary. EXPAND: We align our retention schedules with legal, regulatory and operational needs. REFLECT: This reduces risk while ensuring we can comply with our obligations and defend our interests.

General Retention Principles

Purpose limitation: We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including satisfying any legal, accounting or reporting requirements.
Legal and regulatory requirements: UK gambling, KYC/AML and tax regulations often require us to retain specific records for minimum periods (for example, several years after the end of a business relationship).
Disputes and enforcement: We may retain certain data for longer where reasonably necessary to establish, exercise or defend legal claims, or to respond to investigations by regulators or ADR providers.

Indicative Retention Periods

Account and identification data: Typically retained for the duration of your active account and for up to five (5) years after account closure, to comply with KYC/AML and gambling regulations, subject to longer retention where legally required.
Transaction and betting history: Retained for at least five (5) years after the relevant transaction or account closure (whichever is later), to meet regulatory and accounting obligations and to resolve disputes.
KYC/AML documentation: Retained for the period mandated by applicable AML and counter-terrorist financing legislation (commonly at least five (5) years after the end of the relationship or the date of the occasional transaction).
Technical logs and security data: Retained for shorter periods, typically between six (6) and twenty-four (24) months, unless longer retention is needed for security, investigation or legal purposes.
Marketing and consent records: Retained for as long as you remain subscribed to marketing communications and for a reasonable period (up to three (3) years) after you unsubscribe, to demonstrate compliance with consent and opt-out obligations.

When personal data is no longer required, we will anonymise or securely delete it. Where it is not possible to delete it entirely (for example, because it is stored in backup archives), we will securely isolate and protect it from any further active processing until deletion is feasible.

Your Rights

OBSERVE: Data protection laws grant you specific rights. EXPAND: We explain these rights under UK GDPR and, where relevant, how they map to Mexican ARCO rights. REFLECT: We describe how you can exercise your rights, applicable timeframes and cost.

Rights Under UK GDPR and UK Data Protection Law

Right of access: You can request confirmation of whether we process your personal data and obtain a copy of such data together with information about how we use it.
Right to rectification: You can ask us to correct inaccurate data or complete incomplete data held about you.
Right to erasure: You can request deletion of your personal data where, for example, it is no longer necessary for the purposes for which it was collected, you have withdrawn consent (where applicable), or you have successfully objected to processing. This right may be limited where we must retain data to comply with legal or regulatory obligations (for example, UKGC and AML requirements).
Right to restriction of processing: You can request that we temporarily suspend processing of your personal data in certain circumstances, such as while we verify its accuracy or assess an objection.
Right to data portability: You can request that we provide certain personal data to you, or to a third party you choose, in a structured, commonly used and machine-readable format, where processing is based on consent or contract and carried out by automated means.
Right to object: You can object to processing based on our legitimate interests, including profiling, and we will stop processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms or the processing is for legal claims. You can always object to direct marketing, in which case we will stop sending marketing communications.
Right to withdraw consent: Where we rely on your consent (for example, for marketing or optional cookies), you may withdraw it at any time via your account settings, the unsubscribe link in communications, cookie tools or by contacting us.

Alignment With Mexican Data Protection Rights

Our services are primarily targeted at users in Great Britain, and UK law (including UK GDPR and the Data Protection Act 2018) applies. However, where individuals located in Mexico interact with our services and Mexican data protection law applies, we aim to respect the core rights recognised under the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), including the ARCO rights (Access, Rectification, Cancellation and Opposition), in a manner broadly aligned with the rights described above, subject to legal and jurisdictional limitations.

How to Exercise Your Rights

Submit a request: Contact us at privacy@bettingspo.com or in writing to our UK correspondence address, clearly indicating that your request concerns data protection rights and specifying which right(s) you wish to exercise.
Verification: We may need to request specific information from you to confirm your identity and ensure that personal data is not disclosed to any person who has no right to receive it.
Response timeframe: We will respond without undue delay and in principle within one (1) month of receiving your request. This period may be extended by up to a further two (2) months where necessary due to complexity or number of requests; in such cases we will inform you of the extension and reasons.
Cost: We will normally handle your request free of charge. We may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, in line with UK GDPR.

You also have the right to lodge a complaint with a supervisory authority, as described in the "Complaints & Contacts" section below.

Cookies & Tracking Technologies

OBSERVE: Cookies and similar tools store or access information on your device. EXPAND: We describe types, purposes and control options. REFLECT: This supports informed consent and management of your preferences.

Types of Cookies We Use

Strictly necessary cookies (session and persistent): Essential for operating bettingspo.com and enabling features you request, such as logging in, placing bets, maintaining your betslip, handling security and managing consent preferences.
Functional cookies: Used to remember your preferences (for example, language, odds format, display settings) and enhance your experience.
Analytics and performance cookies: Used to collect information about how visitors use our site (for example, which pages are visited most often, error messages) so we can improve functionality and performance.
Advertising and targeting cookies (including third-party): Used, where allowed, to deliver relevant advertisements, limit how often you see an ad, measure campaign effectiveness and help us understand the performance of our marketing.

Managing Cookies and Tracking Technologies

Consent tools: On your first visit (and periodically thereafter), you will see a cookie banner or consent tool on bettingspo.com that allows you to accept or reject non-essential cookies. You can adjust your cookie settings at any time via this tool.
Browser settings: Most browsers allow you to block or delete cookies through their settings. If you block all cookies, some parts of the Sports Betting service on bettingspo.com may not function properly.
Third-party opt-outs: Where we use third-party analytics or advertising cookies, those providers may offer their own opt-out mechanisms.

Strictly necessary cookies are used based on our legitimate interests in operating a secure and functional website. Analytics and advertising cookies are generally used on the basis of your consent, in accordance with applicable UK rules on privacy and electronic communications.

Data Security

OBSERVE: Betting and financial data are sensitive and require strong protection. EXPAND: We employ technical, organisational and contractual safeguards. REFLECT: These measures reduce the risks of unauthorised access, loss or misuse.

Technical Security Measures

Encryption in transit and at rest: Data transmitted between your browser and bettingspo.com is protected using up-to-date transport layer security (typically TLS 1.2 or higher). Where appropriate, we encrypt data at rest within our systems or those of our providers.
Access controls and authentication: Access to personal data is restricted on a need-to-know basis. We use role-based access controls, strong authentication mechanisms and, where appropriate, multi-factor authentication for administrative access.
Network and infrastructure security: We employ firewalls, intrusion detection and prevention systems, vulnerability management and other industry-standard measures to protect our infrastructure.

Organisational and Procedural Measures

Policies and training: We maintain internal data protection, information security and incident management policies. Staff with access to personal data receive regular training on security, privacy and responsible data handling.
Vendor due diligence: We select service providers that implement appropriate security measures and, where possible, use hosting providers and data centres that hold recognised certifications such as ISO/IEC 27001 or SOC 2.
Regular reviews and audits: We periodically review our security controls and may conduct internal or external audits to assess their effectiveness and alignment with industry standards.

Incident Response

Detection and response: We maintain procedures for identifying, investigating and responding to suspected personal data breaches or security incidents.
Notification: Where required by law, we will notify the relevant supervisory authority (for example, the UK Information Commissioner's Office) and affected individuals without undue delay, providing relevant information about the incident and mitigation steps.

While no system can be guaranteed as completely secure, we are committed to continuously improving our safeguards to protect the confidentiality, integrity and availability of personal data processed in connection with Sports Betting on bettingspo.com.

Complaints & Contacts

OBSERVE: You may want to ask questions or raise concerns. EXPAND: We set out our internal complaint channels and external escalation options. REFLECT: This ensures transparency and accountability in how we handle privacy-related issues.

Contacting Us

Data protection / privacy queries: Email privacy@bettingspo.com.
General support: Email support@bettingspo.com.
Postal: SBUK Entertainment Ltd, Data Protection, UK Correspondence Address, London, United Kingdom (full address available on request or in your account communications).

Complaint Procedure

Step 1 - Contact us: If you have concerns about how we handle your personal data, please first contact our data protection contact or DPO. Provide as much detail as possible so we can investigate your complaint.
Step 2 - Investigation: We will investigate your complaint, which may include reviewing relevant records and contacting you for clarification. We aim to provide an initial response within thirty (30) days of receipt.
Step 3 - Outcome: We will inform you of the outcome of our investigation and any corrective measures taken, where appropriate.

Escalation to Supervisory Authorities

United Kingdom (primary authority): If you are not satisfied with our response or believe that your data protection rights have been infringed, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: www.ico.org.uk
Telephone (UK): 0303 123 1113
European Union / EEA: If EU/EEA data protection law applies to you, you may also have the right to lodge a complaint with the data protection authority of your habitual residence, place of work or place of the alleged infringement.
Mexico: Where Mexican data protection law applies, you may contact the Mexican data protection authority, the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI), via the channels indicated on its official website.

We also cooperate with our ADR provider (currently IBAS) in relation to disputes concerning gambling transactions, separate from your privacy rights. However, data protection complaints should be directed to us and, where necessary, to the relevant supervisory authority as described above.

Updates

OBSERVE: Laws and our operations may change. EXPAND: We explain how we will update this Policy and inform you. REFLECT: This allows you to make informed decisions about continued use of Sports Betting on bettingspo.com.

Policy Changes and Versioning

Last updated: This Privacy Policy was last updated on 6 November 2025. We may revise it from time to time to reflect changes in law, regulatory guidance, industry practice or our services.
Version control: Each updated version will be posted on bettingspo.com with a revised "Last updated" date. In the case of material changes, we may also provide a summary of key changes (for example, new purposes of processing or new categories of recipients).

Notification of Material Changes

Advance notice: Where we make significant changes that materially affect how we process your personal data, we will, where practicable, provide you with prior notice (for example, at least thirty (30) days in advance) via email, account notifications or prominent notices on bettingspo.com.
Your options: If you do not agree with the changes, you may choose to close your account and stop using the Sports Betting services on bettingspo.com. Continued use after the effective date of the updated Policy will constitute acceptance of those changes, to the extent permitted by law.

We encourage you to review this Privacy Policy regularly so that you remain informed about how we collect, use, disclose and protect your personal data in connection with the Sports Betting brand and the Sports Betting services on bettingspo.com.