Privacy Policy

This Privacy Policy applies to the processing of personal data of players, visitors, and users of the online platform of BetBuffoon Casino (accessible via betbuffooncasino.org). We attach the utmost importance to the protection of your privacy and the security of your personal data. In this document, we explain in a clear, transparent, and detailed manner how we collect, use, store, share, and protect your information when you use our services.

Within the framework of applicable data protection legislation, BetBuffoon Casino acts as the data controller for the processing of your personal data.

Applicable Legislation and Legal Framework

BetBuffoon Casino processes all personal data in strict compliance with applicable privacy and gambling regulations. This includes, among others:

The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018: Legislation governing the protection of natural persons with regard to the processing of personal data.
The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017: Legislation requiring financial institutions and gambling operators to carry out customer due diligence (KYC) and report suspicious transactions.
The Gambling Act 2005: Legislation regulating gambling in Great Britain and setting requirements regarding player protection, addiction prevention, and identification.
Guidelines from the Information Commissioner's Office (ICO) and the UK Gambling Commission (UKGC): The regulatory authorities supervising compliance with data protection laws and the gambling market rules, respectively.

What Personal Data Do We Collect?

To provide you with access to our online casino services, comply with legal obligations, and ensure a safe gaming environment, we collect various categories of personal data.

A. Identification and Contact Details

When you create an account on our website, we directly collect personal information, including:

Full first name and surname (and any maiden name/birth name);.
Date and place of birth;.
Gender;.
Residential address (street name, house number, postcode, and city);.
Email address;.
Telephone number;.
National Insurance number or a unique identification number (where legally required and permitted for statutory verification checks).

B. Verification and KYC Documentation (Know Your Customer)

In accordance with anti-money laundering and gambling regulations, we are required to formally verify your identity, age, and residential address. For this purpose, we may request:

A valid copy of an identity document (passport, ID card, or driving licence);.
Proof of address (such as a recent utility bill, bank statement, or government letter dated within the last 3 months);.
Documents demonstrating the source of your funds or wealth (such as payslips or bank statements) for transactions exceeding certain statutory thresholds.

C. Financial and Transaction Data

To correctly and securely process deposits and withdrawals, we collect:

Bank account details (sort code and account number) and account holder name;.
Information on chosen payment methods (such as debit cards, Apple Pay, or bank transfer);.
Transaction history (deposits, withdrawals, cancelled transactions, and outstanding balances);.
Payment status and fraud prevention data.

D. Gaming and Usage Data

During your use of BetBuffoon Casino, we automatically record data concerning your activities on the platform:

Betting history, amounts won and lost;.
Selected games, gaming session duration, and gaming frequency;.
Safer gambling settings (such as configured deposit limits, session limits, loss limits, and self-exclusions);.
Interaction with customer support, including email correspondence and live chat logs.

E. Technical and Device Data

When you visit our website, our servers automatically collect technical data from the device you use:

IP address and geographic location data;.
Device type, operating system, and web browser;.
Date, time, and duration of the visit;.
Referring URLs and clicked pages;.
System information and crash reports to improve platform stability.

Purposes and Legal Bases for Processing

We process your personal data only when there is a valid legal basis to do so in accordance with Article 6 of the UK GDPR.

Purpose of processing	Category of personal data	Legal basis under UK GDPR (Art. 6)
Registration and management of player accounts	Identification and contact details	Performance of a contract (Art. 6(1)(b))
Processing of payments and withdrawals	Financial data, IP address	Performance of a contract (Art. 6(1)(b))
Identity and age verification (KYC)	Identity documents, National Insurance number, Address	Legal obligation (Art. 6(1)(c) / AML Regulations)
Addiction prevention and self-exclusion checks	Identification data, Gaming behaviour	Legal obligation (Art. 6(1)(c) / Gambling Act)
Prevention of fraud, money laundering, and financial crime	Transaction history, Device data, KYC	Legal obligation (Art. 6(1)(c)) & Legitimate interests (Art. 6(1)(f))
Sending service emails and account updates	Email address, Name	Performance of a contract (Art. 6(1)(b))
Direct marketing and promotional communications	Contact details, Preferences	Explicit consent (Art. 6(1)(a))
System security and platform optimisation	Technical data, Log files	Legitimate interests (Art. 6(1)(f))

Player Protection, Safer Gambling, and GAMSTOP

As a responsible operator, BetBuffoon Casino places player protection at the heart of its operations. We process data to fulfil our duty of care and protect against gambling-related harm.

GAMSTOP Self-Exclusion

In compliance with UK regulatory requirements, players on the British market are protected by integration with GAMSTOP, the national online self-exclusion scheme.

During registration and prior to starting any gaming session, a check is performed against the GAMSTOP database to verify whether a player has active self-exclusion.
This verification uses your registration details against the register managed by GAMSTOP.
If you are registered with GAMSTOP, access to the platform will be immediately blocked.
We store only the necessary verification results to demonstrate that we have performed the mandatory check.

Analysis of Gaming Behaviour

We automatically monitor gaming behaviour for signs that may indicate problem gambling or a risk of gambling addiction. If our system detects risky behaviour (such as abrupt increases in stakes or prolonged late-night gaming sessions), we may contact you, provide advice, or implement preventative measures, such as mandatory limits or temporary exclusion.

Sharing Personal Data with Third Parties

BetBuffoon Casino never sells, rents, or trades your personal data to third parties for commercial purposes. We share your data exclusively with trusted partners and in the following specific cases:

Payment Service Providers: For the secure processing of deposits and withdrawals (such as licensed payment institutions, banks, and card processors).
Identity and Verification Services: External vendors that perform automated identity and document verification to comply with AML and KYC obligations.
Software and Game Providers: Providers of casino games who require access to anonymous or pseudonymised gaming session data to run the games correctly.
IT and Hosting Providers: Service providers that supply data hosting, server infrastructure, network security, and technical support.
Regulators and Government Authorities: When we are legally obligated to provide data to authorities such as the UK Gambling Commission (UKGC), HM Revenue & Customs (HMRC), or the National Crime Agency (NCA).
Legal and Professional Advisers: Lawyers, accountants, and auditors in the context of statutory audits or defending our legal position.

We enter into written Data Processing Agreements with all external processors, ensuring strict confidentiality, adequate security, and compliance with data protection laws.

International Data Transfers

In principle, your data is stored and processed on secure servers within the United Kingdom or the European Economic Area (EEA).

If personal data is transferred to a service provider located in a country outside the UK or EEA that is not recognised as providing an adequate level of data protection, we ensure appropriate safeguards are in place. We do this by:

Using standard contractual clauses approved by the relevant authorities;.
Implementing additional technical and organisational security measures (such as encryption and pseudonymisation);.
Verifying that the recipient is certified under a recognised international privacy framework.

Retention Periods

We do not retain your personal data longer than is strictly necessary to achieve the purposes for which the data was collected, or to comply with statutory retention requirements.

Active Player Accounts: Data is retained for the entire period your account remains active.
AML and KYC Documents: In accordance with anti-money laundering regulations, identification documents and customer due diligence records are kept for up to 5 years after the business relationship ends.
Financial and Tax Data: Transaction and accounting data are retained for the statutory tax retention period of 6 years.
Player Protection and Safer Gambling Files: Data relating to interventions and limits are retained in accordance with gambling legislation requirements.
Customer Support Communications: Correspondence and chat logs are anonymised or deleted after a maximum of 2 years, unless there is an ongoing dispute.

Upon expiry of the applicable retention period, your personal data will be securely and permanently deleted or irreversibly anonymised.

Security of Your Personal Data

BetBuffoon Casino takes the security of your data extremely seriously. We have implemented appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, misuse, disclosure, and unauthorised alteration.

Our security measures include:

SSL/TLS Encryption: All data transfer between your browser and our servers is secured with high-grade end-to-end encryption.
Access Control: Access to personal data is strictly limited to authorised personnel who require the data to perform their duties (need-to-know basis).
Data Encryption: Sensitive financial and personal data is stored encrypted at rest.
Network Security: Use of advanced firewalls, intrusion detection systems, and continuous security monitoring.
Regular Audits: Independent security and penetration tests to detect and resolve potential vulnerabilities in a timely manner.

Your Privacy Rights Under Data Protection Law

Under data protection legislation, you have extensive rights regarding your personal data. You can exercise these rights at any time.

Overview of Your Rights:

Right of Access: You have the right to obtain confirmation as to whether or not your personal data is being processed, and to receive a copy of the data we hold about you.
Right to Rectification: You have the right to have inaccurate or incomplete personal data corrected or completed.
Right to Erasure ("Right to be Forgotten"): You can request the deletion of your personal data. Please note: this right is not absolute. If we are legally required to retain your data (for example under AML or tax legislation), we cannot comply with all requests for deletion.
Right to Restriction of Processing: You can ask to temporarily halt the use of your data, for example while you contest the accuracy of the data.
Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to transfer it to another service provider.
Right to Object: You can object to processing based on our legitimate interests. You also have the right to object to processing for direct marketing purposes.
Right to Withdraw Consent: If processing is based on your consent (such as receiving newsletters), you always have the right to withdraw this consent at any time.

How Do You Exercise Your Rights?

To submit a request, send an email to our Data Protection Officer at: [email protected].

To ensure the request is made by you, we may ask you to complete an identity verification check before processing your request. We will respond as quickly as possible and at the latest within one month of receiving your request. In complex cases, this period may be extended by up to two additional months.

Cookies and Tracking Technologies

BetBuffoon Casino uses cookies and similar technologies (such as pixels and local storage) to ensure website functionality, improve the user experience, and analyse the use of our platform.

Categories of Cookies:

Necessary Cookies: Essential for the basic operation of the website, such as logging in, navigation, and account security. No consent is required for these.
Functional Cookies: Remember your preferences (such as language settings) to make your visit more convenient.
Analytical Cookies: Collect anonymised statistical data on website use to measure and improve performance.
Marketing and Tracking Cookies: Used to track browsing behaviour and display personalised adverts or offers. These cookies are only placed after you have given explicit consent via our cookie banner.

You can change your cookie preferences at any time via the cookie settings on our website or through your web browser settings.

Profiling and Automated Decision-Making

To comply with legal requirements regarding anti-money laundering regulations and addiction prevention, BetBuffoon Casino uses automated data processing and profiling:

AML Risk Profiles: Transaction patterns are automatically analysed for suspicious activity. If a transaction deviates from your normal profile, it may trigger a manual review by our compliance team.
Detection of Risky Gaming Behaviour: Gaming behaviour is monitored to recognise signs of compulsive or excessive gambling.

No automated decision-making takes place that produces legal effects concerning you based solely on automated processing without human intervention or review, except where specifically authorised by law or necessary for contract performance.

Protection of Minors

The services of BetBuffoon Casino are strictly restricted to individuals aged 18 and over (or the legal minimum gambling age in the relevant jurisdiction).

Minors are strictly prohibited from creating an account or playing on our platform.
We carry out strict age verification procedures during registration and payment processing.
If we discover that a person under 18 has provided personal data to us, we will immediately block the account concerned and delete the associated data from our systems as quickly as possible.

Changes to This Privacy Policy

BetBuffoon Casino reserves the right to modify this Privacy Policy from time to time, for example due to changing laws and regulations, new functionalities, or adjustments to our processing activities.

The most current version of the Privacy Policy can always be consulted on our website. In the event of substantial changes that affect your rights or the way we process your data, we will inform you in advance via email or through a clear notification on the platform. We advise you to check this Privacy Policy regularly to stay informed of how we protect your data.

Contact and Complaints Handling

If you have any questions, comments, or requests regarding this Privacy Policy or the processing of your personal data by BetBuffoon Casino, you can contact our customer support and privacy officer via:

Email address: [email protected].

Lodging a Complaint with the Regulator

We do our utmost to resolve any complaints or concerns regarding your privacy in consultation with you. If you nevertheless believe that we are not processing your personal data in accordance with applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

In the UK, this is the Information Commissioner's Office (ICO). You can contact the ICO or complete a complaint form via the official website of the regulator.