Privacy policy: how we handle your personal data on Betmica
This is our privacy policy. It explains what personal data we hold about you as a Betmica account holder, why we hold it, how long we keep it and what your rights are under UK data protection law. We publish this policy in plain language because the two laws that apply here, the UK General Data Protection Regulation and the Data Protection Act 2018, require a clear description of processing rather than a hidden set of legal small print. If any part of this page is unclear we ask you to contact us through the account inbox and we will provide a clarification in writing.
The data controller
Betmica is the data controller for the personal data described on this page. Our operator address is available on request through the account inbox and it is also included in the account terms served to you at the moment of registration. Data protection questions can be sent to us through the account inbox and we will route them to the desk that handles the request. Where a request is a formal data subject access request under Article 15 of the UK GDPR, please mark the message with the phrase Data Subject Access Request in the subject line so the desk can log it against our internal timer.
What personal data we collect
We collect the personal data you provide at registration: the email address you register with, the password you set on the account (which we store in a hashed form on our side so that we do not hold the plain text), the country of residence you pick from the drop down, and the age tick that confirms you are 18 or over. We also collect the personal data you provide on the verification desk, which includes a copy of a government issued photo identification document, a copy of a proof of address document, and where required, a copy of a proof of funds document.
On top of the data you provide we collect the data our platform records during play. This includes the wallet balance, the deposit and withdrawal history, the stake and settlement history on the game floor, the bonus ledger on the account, the responsible play tool settings and the log of sign in events. We also collect a limited set of technical data on every request served to your browser: the IP address of the request, the user agent string of the browser and the timestamp of the request.
Lawful basis for processing
We process the account registration data and the transaction data on the basis of the contract between you as the account holder and us as the operator. The verification data is processed on the basis of a legal obligation, because UK anti money laundering law requires us to verify the identity of the account holder before we release a withdrawal. Marketing communications, where they are sent to you at all, are sent on the basis of consent, which you can withdraw at any time from the notification tab on the account.
Retention
We keep the account data for the duration of the account and for the period we are required to keep it after the account is closed, which under UK anti money laundering law is a minimum of five years from the moment the account is closed. Verification documents are held on the same period. Technical logs of sign in events and cashier requests are held for a shorter period on the platform log store, and they are held under the same access controls as the account data.
Your rights under UK GDPR
As a data subject under the UK GDPR you have the right of access to the personal data we hold about you, the right to rectification of inaccurate data, the right to erasure in the circumstances set out in the regulation, the right to restriction of processing, the right to portability of the data you provided to us, and the right to object to processing on certain grounds. You can exercise any of these rights by sending us a request through the account inbox. We respond to a valid data subject access request inside one month of receipt, and where a request is complex we may extend the response window by up to two further months and we will notify you of the extension inside the first month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe our handling of your personal data is not in line with UK data protection law. The ICO can be reached at ico.org.uk. We would appreciate the chance to address a concern first through the account inbox, because most complaints can be resolved without escalation to the regulator, but the ICO route is always available to you.
Sharing with third parties
We share personal data with a limited set of third parties where the sharing is necessary to run the platform or to meet a legal obligation. This includes the payment processors that handle the deposit and withdrawal routes we support, the identity verification desk that reviews the documents you upload, and, where required, the studios that supply the game floor for the technical settlement of a game round. We do not sell personal data to third parties, and we do not share personal data with advertising networks for the purpose of targeting.
Where a third party is located outside the United Kingdom we ensure the transfer is made under a valid legal mechanism under UK GDPR, including the standard contractual clauses issued by the ICO. The list of processors we use is available on request through the account inbox.
Changes to this policy
We may update this policy from time to time where the platform changes materially or where UK data protection law changes materially. Where a change is material we notify you through the account inbox and we ask you to read the updated policy before you continue to use the account. The version date of the policy is printed at the foot of this page.
Contact us on this policy
To contact us on any part of this policy please open a message from the account inbox on the platform. The operator address is available on request through the same inbox. Where you would rather use a specific route for a formal request please mark the message with the request type in the subject line so the receiving desk can log it against the correct internal timer.