PRIVACY NOTICE

DATE 18.09.2026

INTRODUCTION

This Privacy Notice explains how we collect, use, disclose, retain and protect Personal Data when you visit or use the Website, create or use an Account, play casino games, place sports bets, participate in promotions or loyalty features, make payments, contact us or otherwise use our Service.

We value your trust and take reasonable technical, organisational and contractual measures to protect Personal Data. Please read this Privacy Notice together with our Terms and Conditions, KYC Policy, Responsible Gaming rules and any notices presented when we collect specific information from you.

DEFINITIONS

Data Controller - the person or entity that determines why and how Personal Data is processed. For the processing described in this Privacy Notice, the operator of the Website acts as the Data Controller.

Personal Data - any information relating to an identified or identifiable individual.

Processing - any operation performed on Personal Data, including collection, recording, storage, use, disclosure, analysis, restriction or deletion.

Account - a registered player account used to access the Service, including where the Service is made available through different website domains or access points.

Service - the Website, mobile application where available, casino games, sports betting, payments, promotions, loyalty features, customer support and related functionality offered through the Website.

User or you - any visitor, applicant, registered player or other individual using or communicating with the Service.

ABOUT US

This Privacy Notice applies to the GG.BET-branded website on which it is made available (the “Website”). For purposes of this Privacy Notice, “we”, “us” and “our” refer to the operator of the Website.

Payment services may be provided by third-party payment service providers. Depending on the payment method and applicable requirements, those providers may process Personal Data for payment processing, fraud prevention and compliance with their own legal obligations.

For privacy questions, requests concerning your Personal Data or general customer support, please use the live chat available on the Website.

1.    What types of data do we collect?

We collect various types of data when you interact with us and use the Service. Most data is provided directly by you, for example when you register an Account. We may also receive information from third parties or publicly available sources where permitted by applicable law.

Information you provide to us:

• Name, email address, telephone or mobile phone number, postal address, date of birth and gender;
• Documents and information used for identity, age, residence, AML/CTF, sanctions and verification checks, such as photographs, identification documents, proof of address or residence and other supporting information, together with verification status and outcomes;
• Where required, video verification materials used to verify your identity, Account or payment activity, which may include live or recorded video, images, audio and related verification metadata;
• Financial information. Payment transactions are processed through secure payment systems. We may retain deposit and withdrawal history and limited payment information, such as the last four digits of a payment card and the issuing bank;
• Login details, including username and password or other authentication information.

While you are using our services:

• Information regarding how you interact with and use products available through the Website;
• Information about promotions and loyalty features you use, including related rewards or loyalty activity where applicable;
• Communications with our personnel, including messages exchanged through live chat and other communication channels made available through the Service;
• Location and traffic information, including IP address;
• Device and technical information, including operating system, platform, browser type and version, browser language and time zone settings;
• Marketing preferences and information indicating whether you would like to receive marketing communications from us or our partners;
• Publicly available information, for example information you make public on social media, where its use is permitted by applicable law.

We may use aggregated or anonymised data, for example statistical or demographic information, for testing, research, analytics, development and improvement of the Website and the Service. Where information has been irreversibly anonymised so that it can no longer identify an individual, it is not treated as Personal Data.

If you use responsible gambling, time-out or self-exclusion features, we may retain information about those requests, settings and related status or history as necessary to apply them and protect users.

Responsible gambling information: information that may indicate potential problem gambling or gambling-related harm, including self-exclusion status, responsible gambling programme records, deposit, loss or time limits, time-out settings, documented reinstatement requests and behavioural indicators of compulsive or harmful gambling patterns.

AML/CTF, sanctions and financial crime information: information relating to criminal convictions or alleged offences where legally permitted, suspicious activity, fraud indicators, proceeds of crime, sanctions and politically exposed person (PEP) screening results, enhanced due diligence information and other information used for AML/CTF, sanctions, fraud prevention and financial crime compliance.

2.    How do we use collected data?

We process Personal Data where it is necessary to provide the Service, manage your Account, process transactions and communicate with you. If information required by law or by the contract between you and us is not provided, we may be unable to create or maintain your Account or provide some or all of the Service. We may also use certain data to personalise and improve the Service and to send information where we have an appropriate legal basis.

Applicable data protection legislation requires us to identify a lawful basis for processing Personal Data. Depending on the purpose, we may rely on the following bases.

Firstly, we process Personal Data where necessary to perform our contract with you. By using the Website, you agree to our Terms and Conditions and other applicable policies (collectively, the “Terms”), which set out the rules governing use of the Service.

• To register and manage your Account and provide betting, gaming, online content and related features;
• To administer the Website and Service, including password resets, maintenance messages and notices about updates to the Terms;
• To process deposits, withdrawals and other transactions;
• To maintain a consistent Account and Service experience where the Service is made available through different access points or website domains.

Secondly, we may process Personal Data where necessary to comply with applicable legal obligations and to protect the integrity and safety of the Service.

This may include:

• Confirming age, identity, country or place of residence, self-exclusion status and other eligibility requirements applicable to the Service;
• Crime detection, prevention and investigation, including the use of verification procedures where appropriate;
• Verifying identity and residence and, where necessary, source of funds or source of wealth for AML/CTF and financial crime prevention purposes;
• Conducting video verification, where necessary, to verify identity, Account ownership or payment or deposit activity;
• Carrying out anti-fraud, sanctions, PEP screening and security checks, including enhanced due diligence where appropriate;
• Assessing and managing risks related to responsible gambling and player protection.

In addition, for sensitive and legally regulated data, we process the data concerning you for the following purposes and legal bases:

Purpose	Description	Legal basis
Responsible gambling and player protection	We may process information that indicates potential problem gambling or gambling-related harm. This may include self-exclusion status, responsible gambling programme records, player-set limits and behavioural indicators of compulsive or harmful gambling patterns.	Applicable legal obligations relating to player protection and safe use of the Service. Where such information is treated as health-related or other sensitive data, we process it only where permitted by applicable law.
AML/CTF, sanctions and financial crime prevention	We may process information relating to criminal convictions, alleged offences, suspicious activity, fraud indicators, proceeds of crime, sanctions screening results and other information required for AML/CTF, sanctions, fraud prevention and financial crime compliance.	Compliance with applicable AML/CTF, sanctions, fraud prevention and gambling laws. Criminal convictions and offences data is processed only where authorised by applicable law.

Thirdly, we have our legitimate interests in the processing as set below. We shall not process any data if our interests are overridden by your rights, freedoms or interests. This includes the following:

a. To improve our services and products

• To make your usage of the Website user-friendly;
• For testing the new products or upgrading already existing ones;
• In order to analyze the effectiveness of our marketing measures.

b. To make your experience personal

• For instance, we could use the history of games you played to provide a personalized recommendations of games that you might like;
• Or we can get the geolocation data to provide you with the services in your native language, if we have such possibility;

c. To be able to detect and prevent violation of our Terms.

d. Simply, to contact you:

• To respond to the issues, you may have from time to time while using the Website via email, live chat, or by phone;
• From time to time you may be invited to fill a survey about your experience on the Website. Such activities are not mandatory and you may decline the request. Such decline will not in any way affect your ability to use the Website.

Fourthly, under your explicit consent.

If have consented to receive information about offers and news about our products through various means of communication, such as email, SMS, phone, etc., we will send you the relevant information.

You can withdraw your consent at any time by phone or in writing. You can opt out of marketing communications at any time by contacting our customer support team or by following the “Opt out” instructions included in any marketing communications you may have received from us. If you opt out, you will not receive any more marketing materials. To opt out of receiving push notifications, you can simply disable push notifications in your device settings.

3.    Who we share your personal data with

We may need to share Personal Data with third parties in order to operate the Service, process payments, protect users, prevent fraud and comply with applicable legal obligations. Where third parties process Personal Data on our behalf, we take reasonable steps to ensure appropriate data protection and security safeguards are in place.

Personal Data may be shared with banks, payment service providers, financial intelligence units, identity, address, KYC and video verification providers, fraud prevention providers, customer communication tools, game suppliers and other service providers required for the operation of the Service.

We may also disclose Personal Data to police, courts or other competent public authorities where required by applicable law, a lawful request or where we reasonably consider disclosure necessary to investigate or prevent suspected fraud, money laundering or other unlawful activity.

We may share your information with third party entities such as transport companies or other entities with whom we cooperated during our promotional activities in which you took part in order to deliver the winnings or prizes to you;

We may share your information when we are required to establish, exercise or defend our legal rights;

When we are ordered by regulatory body or authorized authority;

With external auditors who may carry out independent checks as part of our accreditations;

To third party entity in case we sell or transfer (or enter into the process of negotiation) of our business or any of our rights or obligations under any agreement we may have with you. If the transfer or sale goes ahead, the organization receiving your personal data can use your personal data in the same way as us;

To any other successors in title to our business.

4.    How we store and when we transfer your personal data

We can globally store, access, and facilitate the transfer of Personal Data. We assess international data transfers and implement appropriate measures to safeguard your Personal Data in compliance with the principles defined in this Privacy Notice.

Measure	Description
Adequacy decision	If your Personal Data is transferred to countries outside the European Economic Area (“EEA”), we ensure the recipient country has received an adequacy decision from the European Commission.
Appropriate safeguards	To transfer personal data to recipients lacking an adequacy decision, we may utilize standard contractual clauses that have been approved by the European Commission or other legally recognized transfer mechanisms.

If you would like further information about the safeguards used for an international transfer of your Personal Data, please contact us through the live chat available on the Website.

5.    How long do we keep your personal data?

We retain Personal Data only for as long as reasonably necessary for the purposes described in this Privacy Notice, including to provide the Service, comply with applicable legal obligations, resolve disputes, prevent fraud, protect users and enforce our agreements and policies.

Usage and technical data is generally retained for a shorter period unless a longer period is necessary for security, fraud prevention, service functionality, dispute resolution or compliance with applicable legal requirements.

Where a specific retention period is required by applicable law or a lawful order, we retain the relevant data for that period. After the applicable retention period expires, Personal Data is securely deleted or irreversibly anonymised unless further retention is legally permitted or required.

6.    Security of the data

We are committed to protecting the Personal Data entrusted to us. We use reasonable technical and organisational measures designed to protect information collected through the Website against unauthorised access, disclosure, alteration, loss or misuse.

Access to sensitive or legally regulated information is restricted to authorised personnel, systems and service providers with a legitimate need to access it for responsible gambling, AML/CTF, sanctions screening, fraud prevention, security, customer support or other permitted purposes.

Where identity documents or video verification materials are requested, they should be submitted through the secure verification or upload flow made available for that purpose. Identity documents should not normally be sent through general customer support channels unless you are specifically instructed to do so as part of an approved verification process.

We recommend using a strong, unique password for your Account, keeping your login credentials confidential and changing your password periodically or whenever you suspect that your credentials may have been compromised. If you suspect unauthorised access to your Account, please contact Customer Support through the live chat available on the Website.

7.    Your rights

Subject to applicable legislation you are entitled to exercise specific rights in regard to your personal information. You can exercise an applicable right by contacting our Data Protection team or Customer Support through the live chat available on the Website and identifying the right you wish to exercise.

1) Right to access

You have the right to know whether we are processing a personal data about you, and obtain a copy of such data if we indeed process it. Please keep in mind that we process various types of data and disclosure of such data to the person to whom such data does not belong may cause harm to a data subject. Thus you may be required to provide additional proof in order for us to be able to identify a person making a request.

2) Right to rectify the information we have about you

You may ask us to correct or update Personal Data that is inaccurate or incomplete. Requests to change Account or profile information may be subject to identity verification. Where available, this may include a secure verification procedure through live chat or another approved communication channel.

3) Right to delete the data we hold about you (“Right to be forgotten”)

You have the right to ask us to delete the data we hold about you if there is no good reason for us to keep processing it.

This right is not absolute, since we have our legal obligations to retain personal information of the users for anti-money laundering, crime prevention, etc. purposes. If we cannot comply with your request, we will let you know about it.

4) Right to restrict processing

You may ask us to stop processing data for particular purpose or as a whole. We will still store your data, but we will not use it for our particular purposes, if you have reasonable grounds to ask for it. Note that this right is not absolute and in certain situations you may be declined in your request.

5) Right to data portability

We will provide you with the copy of data in easily understandable form, so you can use such information for your purposes. We may need additional verification from the person who is making such request due to the reasons described above.

6) Right to object

You may object to our processing of your personal data for marketing purposes, or other situations where you believe we have no legal ground to process information

7) Right to withdraw consent

If we rely on your consent to process your data, you have the right to withdraw such consent at any time. To withdraw your consent, please contact our customer support team or follow the “Opt out” instructions included in any marketing communications you may have received from us.

8.    Cookie Policy

Cookies are files with small amount of data which are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

Types of Cookies we may use:

Cookie category	Description	Lawful basis
Necessary cookies	These cookies are necessary for allowing users to navigate around our website and access features.	Necessary to provide the Service and perform the contract.
Functional cookies	These cookies allow the website to offer enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have included on our pages. If you do not allow these cookies, some or all of these services may not work properly.	Consent (if required under applicable law)
Marketing cookies	These cookies are used to deliver content that is more relevant to you and your interests. They may be used to deliver targeted advertisements as well as help measure the effectiveness of an advertising campaign.	Consent (if required under applicable law)
Performance cookies	To provide functionality to the website and help us deliver our Services.	Consent (if required under applicable law)

You can manage cookie preferences through the settings made available on the Website and through your browser settings. General guidance is also available from aboutcookies.org and the official support pages for commonly used browsers such as Firefox, Chrome, Safari and Microsoft Edge.

9.    The right to lodge a complaint

If you believe that we have mishandled your Personal Data, please contact our Data Protection team through the live chat available on the Website so that we can review your concern.

If you are not satisfied with a response or believe that we process your data not in the accordance with the applicable legislation, you have the right to lodge a complaint with a supervisory authority, in particular in the country of your habitual residence, place of work or of an alleged infringement. We kindly ask that you please attempt to resolve any issues you may have with us first (even though, as stated above, you have a right to contact the competent regulator at any time).

10.    Changes to the Policy

We may amend this Privacy Notice from time to time in order to reflect changes in the legislation or our practices in treating your information.

The latest version will always be available on the website with an Effective Date of such Policy. If you do not agree to the changes made by such updates, you should stop submitting the information and use our services in any way. If you continue to use the Website, it will be deemed as acceptance of the changes to the Privacy Notice.

If there are substantial changes, you will be notified by email or other means of communication.