Privacy Policy
This Privacy Policy explains how C Bet, operated through the website cbets.casino, collects, uses, discloses, and protects your personal data when you visit our site, open an account, or use our gambling services. It applies to players and other visitors located in the United Kingdom and, where relevant, to users in other jurisdictions whose data we process, including under UK and applicable international data protection laws. This Privacy Policy is effective from 6 November 2025 and replaces any previous versions published on cbets.casino.
Who We Are
For players in Great Britain using cbets.casino, the data controller responsible for your personal data is:
Nexus Gaming Solutions Ltd.
123, Merchant Street, Valletta, VLT 1171, Malta
Company registration number: C 12345 (Malta)
Operating the brand C Bet for Great Britain under a remote gambling licence issued by the UK Gambling Commission (account number 56789).
For certain non-UK players, services may be provided under a separate licence issued by the Malta Gaming Authority (MGA/B2C/987/2018). In limited cases, historical or non-UK operations may also be associated with Global Gaming Ventures N.V. under a Curaçao licence (GLH-OCCHKTW0701192023). For players in Great Britain, the relevant operator and regulator for gambling services are Nexus Gaming Solutions Ltd. and the UK Gambling Commission.
You can contact us about privacy matters using the following details:
- Data Protection Officer (DPO): Data Protection Officer, Nexus Gaming Solutions Ltd.
- Email: [email protected]
- Website: https://cbets.casino
- Postal address for privacy correspondence: Nexus Gaming Solutions Ltd., 123, Merchant Street, Valletta, VLT 1171, Malta (marked "Data Protection Officer").
What Personal Data We Collect
Identification and Contact Data
- Account and profile data: full name, date of birth, username, password or other login credentials, security questions, and language preferences.
- Contact details: email address, telephone number, residential address, and proof of address where required for verification.
- Verification/KYC data: copies of identification documents (such as passport, ID card, driving licence), proof of address, source-of-funds or source-of-wealth information, and any additional documentation requested under KYC/AML rules.
Technical and Device Data
- Device information: IP address, device identifiers, operating system, browser type and version, screen resolution, language settings, and approximate location derived from your IP address.
- Usage logs: log-in and log-out times, session duration, pages visited, clicks, referring pages, error logs, and other diagnostic information generated by your use of cbets.casino.
Payment and Financial Data
- Payment details: partial payment card details (such as masked card numbers), card expiry date, payment method type (e.g., card, e-wallet, bank transfer), and payment tokens provided by our payment processors.
- Transaction history: deposits, withdrawals, bonuses credited or forfeited, chargebacks, refunds, account balances, and currency.
- Anti-fraud and AML data: risk scores, transaction monitoring flags, sanctions and politically exposed person (PEP) screening results, and supporting documentation.
Behavioural and Gambling Activity Data
- Betting and gaming history: games played, stakes placed, wins and losses, return-to-player statistics at account level, time spent playing, responsible gambling tools used (limits, time-outs, self-exclusions), and participation in campaigns.
- Interaction data: records of communications with customer support, complaints and dispute history, and notes related to safer gambling monitoring.
Cookies and Similar Technologies
- Cookies: small text files stored on your device to recognise your browser and remember your preferences.
- Similar technologies: tracking pixels, tags, SDKs, and local storage used for analytics, fraud prevention, personalisation, and marketing (where permitted).
Special Categories and Sensitive Data
- Safer gambling information: in some cases, we may process information relating to your health or circumstances if you disclose them (for example, in connection with problem gambling or vulnerability assessments). We only use such data with your consent or where necessary to protect your vital interests or comply with regulatory duties.
Legal Basis for Processing
Performance of a Contract
- Account creation and management: we process your identification, contact, and account data to register you as a player, verify your eligibility, and manage your account on cbets.casino.
- Provision of gambling services: we use your payment, transaction, and gameplay data to allow you to deposit funds, place bets, participate in promotions, and withdraw winnings.
- Customer support: we process your contact and communication data to respond to queries, handle complaints, and provide technical assistance.
Compliance with Legal and Regulatory Obligations
- Gambling and licensing laws: as a UK Gambling Commission licensee for Great Britain and as a licensee of other regulators for non-UK players, we must verify your identity, age, and residence, prevent underage and unlawful gambling, and monitor play for signs of harm.
- KYC/AML and sanctions screening: we process identification, financial, and transactional data to comply with anti-money laundering, counter-terrorist financing, sanctions, fraud prevention, and record-keeping duties under applicable laws.
- Tax and reporting obligations: we may process and retain certain transaction and account data for statutory reporting, audit, and accounting purposes.
Legitimate Interests
- Service security and integrity: we use technical, device, and usage data to secure cbets.casino, detect and prevent fraud or cheating, protect our systems from attacks, and safeguard the integrity of games.
- Business analytics and improvement: we analyse gameplay, transaction, and website usage data (in aggregated or pseudonymised form where possible) to improve our products, optimise user experience, and develop new features for C Bet at cbets.casino.
- Defence of legal claims: we may process relevant personal data to establish, exercise, or defend legal claims, including in connection with disputes handled via IBAS or other alternative dispute resolution bodies.
Consent
- Marketing communications: we send electronic marketing (such as emails, SMS, push notifications) about cbets.casino offers and promotions only where you have given your consent or where permitted by law. You may withdraw your consent at any time through your account settings or by following the unsubscribe instructions.
- Non-essential cookies and similar technologies: we use analytics, personalisation, and advertising cookies based on your consent collected through our cookie banner and preference centre.
- Special categories of data: where we process health-related or other sensitive information you voluntarily provide (for example, when discussing gambling-related harm), we do so on the basis of your explicit consent or other applicable legal grounds.
Purpose of Processing
Provision and Management of Gambling Services
- Operating your account: to register and maintain your player account, authenticate you when you log in, apply your preferences, and manage your balances, bonuses, and loyalty rewards.
- Processing transactions: to accept deposits, process withdrawals, verify ownership of payment instruments, and handle payment-related issues in cooperation with our payment processors and banking partners.
- Providing games and betting: to deliver casino games and betting products, ensure proper functioning of game software, settle bets, and credit winnings.
Compliance, Risk Management, and Responsible Gambling
- Regulatory compliance: to satisfy obligations set by the UK Gambling Commission for Great Britain, the Malta Gaming Authority for non-UK players, and other regulators where applicable, including participation in schemes such as GAMSTOP self-exclusion.
- Anti-fraud and AML: to monitor for unusual or suspicious behaviour, prevent money laundering and terrorist financing, and protect both players and the integrity of C Bet.
- Safer gambling: to monitor betting patterns, apply limits, time-outs, and self-exclusion, and intervene where we detect potential gambling-related harm.
Service Improvement and Analytics
- Usage analysis: to understand how visitors interact with cbets.casino, which games are popular, and where technical improvements or design changes are required.
- Performance monitoring: to detect errors, improve load times, and maintain the stability and performance of cbets.casino across devices and regions.
Marketing and Personalisation
- Direct marketing: to provide news, offers, bonuses, and promotions aligned with your preferences, subject to your consent and applicable marketing regulations (including UK PECR).
- Personalised content: to tailor game recommendations, display relevant promotions, and customise your experience based on your gameplay and interaction history.
Disclosure & Sharing
Service Providers and Partners
- Payment processors and banks: we share necessary payment and identification data with authorised payment providers and banking partners (including Euro-Pay Services Ltd. where applicable) to process deposits, withdrawals, and refunds, and to prevent fraud.
- Game providers and technical suppliers: we share certain identifiers, gameplay, and technical data with trusted game studios and platform providers who supply the casino content and technology used by C Bet.
- IT, hosting, and security providers: we use third-party hosting, security, and support services to operate cbets.casino and protect it against cyber threats.
Regulators, Authorities, and Dispute Resolution Bodies
- Regulators: we may share your data with the UK Gambling Commission, the Malta Gaming Authority, Curaçao authorities (for relevant operations), tax authorities, and other public bodies where required by law or licence conditions.
- Self-exclusion and safer gambling schemes: we may share relevant data with GAMSTOP and similar schemes to enforce self-exclusion across participating operators in Great Britain.
- Alternative dispute resolution (ADR): where a dispute is referred to IBAS or another ADR service, we may provide information about your account, transactions, and interactions to enable the dispute to be assessed.
Affiliates and Marketing Partners
- Affiliates: we may share limited data (such as registration and conversion information) with affiliate partners who referred you to cbets.casino, for verification and commission calculation.
- Advertising networks and analytics providers: we may share pseudonymised identifiers and cookie data with advertising or analytics partners where you have consented to such processing.
Corporate Transactions and Legal Obligations
- Corporate restructuring: in the event of a merger, acquisition, sale of assets, or similar corporate transaction involving Nexus Gaming Solutions Ltd. or related entities, your data may be transferred to the new owner or partner subject to appropriate safeguards.
- Legal claims and enforcement: we may disclose personal data to legal advisers, courts, law enforcement, or other competent authorities when necessary to establish, exercise, or defend legal claims or when required by law.
International Transfers
Because Nexus Gaming Solutions Ltd. is based in Malta and offers services internationally, your personal data may be transferred to and processed in countries outside the United Kingdom, including within the European Economic Area (EEA) and, in some cases, in other jurisdictions such as Curaçao and Cyprus, where certain group entities or service providers are located.
Transfers within the UK and EEA
- UK-EEA flows: data transferred between the UK and EEA is currently protected by adequacy arrangements and equivalent data protection standards under UK GDPR and EU GDPR.
Transfers to Other Third Countries
- Contractual safeguards: where we transfer data to countries that are not deemed to provide an adequate level of protection by the UK government, we use appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses (SCCs), supplemented by risk assessments and additional technical and organisational measures where necessary.
- Group and partner transfers: transfers may occur to regulated partners and group entities involved in operating cbets.casino (for example, payment processors in Cyprus or platform providers in other jurisdictions) strictly for the purposes described in this Privacy Policy.
Regional compliance note: irrespective of where your data is processed, we ensure a level of protection consistent with UK data protection standards, and, where applicable, we also take into account requirements under EU and Mexican data protection laws.
Data Retention
General Principles
- Retention limited to necessity: we keep your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, to comply with legal and regulatory obligations, and to resolve disputes.
- Post-closure retention: after you close your account with C Bet at cbets.casino, we typically retain your core account and transaction data for up to five (5) years from the date of closure, unless a longer period is required or permitted by law.
Category-Specific Retention Periods
- KYC and AML data: documents and information collected for identity verification, anti-money laundering, and responsible gambling monitoring are kept for at least five (5) years after the end of the business relationship or the date of the last transaction, in line with applicable AML regulations as of 2025.
- Transaction and gameplay data: betting history, financial transactions, and game logs are retained for up to five (5) years after account closure to comply with gambling, accounting, and regulatory reporting duties.
- Marketing data: we retain data used for marketing until you withdraw your consent or object to processing; we may keep a record of your preference (suppression list) to ensure no further marketing is sent.
- Technical logs and security data: logs used for security, fraud detection, and diagnostics are typically kept for shorter periods, usually between six (6) months and two (2) years, unless a longer period is required for investigation or legal purposes.
Deletion and Anonymisation
- Deletion or anonymisation: when retention periods expire, we securely delete or irreversibly anonymise your data so that you can no longer be identified.
- Exceptions: we may retain certain information for longer where necessary to comply with specific legal obligations, to handle ongoing disputes, or to enforce our terms and conditions.
Your Rights
As of 2025, you have a range of rights over your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where applicable, similar rights may also arise under EU GDPR and Mexican data protection law, including the Federal Law on Protection of Personal Data Held by Private Parties.
Data Protection Rights
- Right of access: you can request confirmation whether we process your personal data and obtain a copy of the data we hold about you, along with information about how we use it.
- Right to rectification: you can ask us to correct inaccurate or incomplete personal data. In many cases, you can update certain details directly in your cbets.casino account.
- Right to erasure: you can request deletion of your personal data where it is no longer needed for the purposes for which it was collected, where you withdraw consent and no other legal ground exists, or where processing is unlawful. This right may be limited where we must retain data to comply with legal obligations (for example, AML and gambling regulations).
- Right to restriction of processing: you can ask us to restrict processing of your data in certain circumstances, such as while we verify its accuracy or assess an objection.
- Right to object: you can object at any time to processing based on legitimate interests, including profiling related to those interests. You also have an absolute right to object to direct marketing.
- Right to data portability: where processing is based on consent or contract and carried out by automated means, you can request a copy of your data in a structured, commonly used, and machine-readable format and ask us to transmit it to another controller where technically feasible.
- Rights under Mexican law (where applicable): if Mexican data protection law applies to you, you may also have ARCO rights (access, rectification, cancellation, and opposition) similar to those described above, as well as rights regarding consent and limitation of data disclosure.
How to Exercise Your Rights
- Submission of requests: you can exercise your rights by contacting our DPO at [email protected] or by writing to our postal address marked "Data Protection Request".
- Verification: to protect your privacy, we may need to verify your identity before acting on your request, for example by asking you to log into your account or to provide certain confirmation details.
- Response timeframe: we aim to respond to all valid requests within one (1) month (30 days) of receipt, as required under UK GDPR and comparable frameworks. For complex or numerous requests, this period may be extended in accordance with the law, and we will inform you of any extension.
- Charges: exercising your rights is generally free of charge. We may charge a reasonable fee or refuse to act on a request only where the request is manifestly unfounded or excessive, as permitted by applicable law.
Cookies & Tracking Technologies
Types of Cookies We Use
- Session cookies: temporary cookies that remain on your device only while your browser is open and are deleted when you close it. They help us keep you logged in and maintain your session during gameplay.
- Persistent cookies: cookies that remain stored on your device for a defined period to remember your preferences and settings between visits to cbets.casino.
- First-party cookies: cookies placed directly by us to support core functionality and security of C Bet.
- Third-party cookies: cookies placed by trusted partners (for example, analytics providers or advertising networks) to provide aggregated statistics or, where permitted, to support marketing activities.
Purposes of Cookies
- Strictly necessary and functional: required for the website to function, enabling features like secure login, account management, and basic gameplay. These cannot be disabled via our systems.
- Analytics and performance: used to measure and improve the performance of cbets.casino, understand how visitors use our services, and fix technical issues.
- Advertising and personalisation: used, where allowed by law and your consent, to deliver relevant promotions, limit how often you see particular offers, and measure the effectiveness of campaigns.
Managing Cookies
- Cookie banner and preferences: when you first visit cbets.casino, you will see a cookie banner that allows you to accept or reject non-essential cookies and access a preference centre to manage your choices at any time.
- Browser settings: you can configure your browser to block or delete cookies. If you block strictly necessary cookies, some features of C Bet may not function correctly.
- Opt-out from third parties: some third-party providers offer their own opt-out mechanisms, which we describe in our cookie information where applicable.
Data Security
Technical and Organisational Measures
- Encryption in transit and at rest: we use industry-standard Transport Layer Security (TLS 1.2 or higher) to encrypt data transmitted between your device and cbets.casino, and we apply appropriate encryption or pseudonymisation to sensitive data stored on our systems.
- Access controls and authentication: access to personal data is restricted to authorised personnel and service providers who need it for legitimate business purposes. We implement strong authentication mechanisms, including multi-factor authentication for critical systems.
- Network and system security: we use firewalls, intrusion detection and prevention systems, anti-malware tools, and regular vulnerability management to protect our infrastructure.
Governance and Oversight
- Policies and training: we maintain internal policies governing data protection, information security, and acceptable use. Staff receive regular training on privacy, security, and responsible handling of player data.
- Audits and assessments: we conduct periodic security reviews, risk assessments, and, where appropriate, engage independent experts to test the robustness of our systems. Our controls are designed to align with recognised international security standards such as ISO 27001 and SOC 2, where appropriate for our operations.
- Incident response: we maintain procedures for detecting, investigating, and responding to suspected personal data breaches. Where required by law, we will notify affected users and relevant regulators, including the UK Information Commissioner's Office (ICO), without undue delay.
Complaints & Contacts
Contacting Us
- General privacy enquiries: for questions about this Privacy Policy or how we handle your data, you can contact our Data Protection Officer at [email protected].
- Postal address: Data Protection Officer, Nexus Gaming Solutions Ltd., 123, Merchant Street, Valletta, VLT 1171, Malta.
Internal Complaint Procedure
- Submit your complaint: send us a detailed description of your concern (including relevant account information and any supporting documents) via email or post, marked "Privacy Complaint".
- Acknowledgement: we will acknowledge receipt of your complaint as soon as reasonably practicable and normally within seven (7) days.
- Investigation: we will review your complaint, gather relevant information, and, if necessary, contact you for clarification.
- Response: we aim to provide a substantive response within one (1) month (30 days) of receiving your complaint, in line with data protection regulations. For complex issues, this period may be extended as allowed by law; we will inform you of any extension and the reasons.
Escalation to Supervisory and Regulatory Authorities
- UK data protection authority: if you are located in the UK and are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom; Website: https://ico.org.uk; Telephone: +44 303 123 1113.
- Mexican data protection authority (where applicable): if Mexican data protection law applies to you, you may also complain to the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). Website: https://www.inai.org.mx.
- EU/EEA supervisory authorities: if you are located in the EEA and EU GDPR applies, you may raise concerns with your local data protection authority or with the authority of the EEA state in which Nexus Gaming Solutions Ltd. operates relevant services.
Gambling-related complaints: this Privacy Policy does not replace your right to raise gambling-related disputes with our ADR provider, IBAS, or with the UK Gambling Commission where appropriate. However, data protection issues should normally be raised with us and the ICO as described above.
Updates
Changes to This Privacy Policy
- Ongoing review: we regularly review and update this Privacy Policy to reflect changes in our processing activities, legal and regulatory requirements, and industry best practices, including those applicable in 2025 and beyond.
- Last updated: this Privacy Policy was last updated on 6 November 2025.
Notification of Material Changes
- Advance notice: where we make material changes that significantly affect how we process your personal data or your rights, we will provide you with prior notice, normally at least thirty (30) days before the changes take effect, unless urgent implementation is required by law or security reasons.
- Communication channels: we may notify you by email, in-account messages, on-site banners, or pop-up notices on cbets.casino, and by updating the "Last updated" date at the top of this Privacy Policy.
- Your options: if you do not agree to material changes, you may close your account and stop using cbets.casino before the changes become effective. Continued use of C Bet after the effective date will constitute your acknowledgement of the updated Privacy Policy, to the extent permitted by law.