Privacy Policy

This Privacy Policy explains how your personal data is collected, used, stored and shared when you use the betflipi.com website, including the UK-facing version referred to as Bet Flip (together, "the Website"). It applies to all visitors, registered players and other individuals who interact with the Website from the United Kingdom and, where relevant, from other countries.

The Policy is designed to comply primarily with the UK General Data Protection Regulation ("UK GDPR") and the UK Data Protection Act 2018, and is also intended to align, where applicable, with other privacy frameworks such as the EU GDPR and relevant Mexican data protection legislation for users accessing the Website from those jurisdictions.

By registering an account or otherwise using betflipi.com, you acknowledge that you have read this Policy. If you do not agree, you should not use the Website or should discontinue use and request closure of your account.

Effective date: 6 November 2025
Last updated: January 2026

Who We Are

Bet Flip is the brand under which online casino services are offered via the Website at https://betflipi.com. For UK-facing content and localisation, this project may be referred to as Bet Flip, which is simply a regional version of the same Website.

The entity responsible for determining how and why your personal data is processed (the "data controller" for UK GDPR purposes) is:

Cybertech B.V.
Registered office / legal address: Schlools-Plein 21, Curaçao
Legal entity type: Private limited company (B.V.)
Gambling licence reference (claimed): 1668/JAZ, issued under Curaçao eGaming

Cybertech B.V. operates betflipi.com for players in various countries, including users located in the UK. The Website and the casino services are not licensed by the UK Gambling Commission and are operated from Curaçao. References you may still see to the legacy domain betflip.io (including on older terms and conditions or footer links) should be read as references to the current Website at betflipi.com.

Data protection contact
We have appointed an internal data protection contact point to handle privacy-related queries:

Email (primary contact for privacy): privacy@betflipi.com
General support email: support@betflipi.com
Postal address for privacy matters: Data Protection, Cybertech B.V., Schlools-Plein 21, Curaçao

We currently provide privacy support primarily via email and post. If we introduce additional contact channels (such as telephone support or online forms), this Policy will be updated to reflect them.

What Personal Data We Collect

When you visit or use betflipi.com (including the Bet Flip regional version), we collect and process various categories of personal data. Depending on how you interact with us, we may collect:

Personal identification and contact data

Identity data: first name, last name, username or player ID, date of birth, gender (if provided), nationality.
Contact data: email address, postal address, country of residence, telephone number (if provided), preferred language.

Account, verification and compliance data

Account data: registration details, login credentials (stored in encrypted/hashed form), security questions, account status, account limits and settings.
KYC/AML documentation: copies of ID documents (e.g. passport, ID card, driving licence), proof of address (e.g. utility bill, bank statement), source-of-funds/source-of-wealth information where requested.
Regulatory and risk data: checks against sanctions lists and exclusion registers, internal risk scores, notes relating to responsible gambling checks and irregular play analysis as described in our terms and conditions.

Technical and device data

Technical identifiers: IP address, device identifiers, browser type and version, operating system, time zone, language settings.
Usage and log data: pages visited, date and time of access, referral URLs, session duration, clicks, scrolls and interactions with site features, error logs and performance data.

Payment and transaction data

Payment details: masked card details, e-wallet identifiers, bank account or IBAN details where required, cryptocurrency wallet addresses where applicable (we do not store full card details if our payment processor handles them directly).
Transaction data: deposits, withdrawals, bonuses credited, wagering activity, balances, chargebacks, payment failures, currency and country of payment origin.

Behavioural and usage data

Gaming behaviour: games played, stakes, wins and losses, betting patterns, time and frequency of play, session length and interruptions.
Marketing and interaction data: records of communications with our support team, campaign interactions, email opens and clicks, preferences regarding marketing and responsible gambling tools.

Cookies and similar technologies

Cookies: small text files placed on your device to support core functionality, remember preferences and analyse usage.
Similar technologies: pixels, tags, SDKs and local storage used for analytics, fraud detection, personalisation and advertising (where permitted).

Publicly available and third-party data

Information obtained from public sources (e.g. sanctions lists, public registers) and from our service providers (e.g. KYC/AML providers, payment processors, analytics services) that support our legal and contractual obligations.

Legal Basis for Processing

For users in the UK, we process personal data in accordance with the UK GDPR and the UK Data Protection Act 2018. Our main legal bases are:

Performance of a contract: We process your data when it is necessary to create and manage your player account, verify your eligibility to use the Website, take deposits, process bets, payout winnings, handle bonuses, provide customer support, and enforce our terms and conditions (including the assessment of irregular play as described in our terms).
Your consent: We rely on consent for certain processing activities, such as:
- Sending you electronic marketing communications that are not based on a soft opt-in.
- Placing non-essential cookies (analytics and advertising cookies) on your device.
- Using some types of optional profiling or personalised offers where required by law.
You may withdraw your consent at any time, as described in the "Your Rights" and "Cookies & Tracking Technologies" sections.
Legitimate interests: We process data where necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. These legitimate interests include:
- Preventing fraud, abuse of bonuses and irregular play that may breach our terms.
- Maintaining IT and network security, including detecting and blocking suspicious logins.
- Analysing how our services are used, improving the Website and our game offering, and performing internal reporting.
- Protecting our legal rights and defending against claims.
Compliance with legal obligations: We must process certain data to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) and counter-terrorist financing laws, responsible gambling and accounting rules, and obligations imposed by regulators or law enforcement in Curaçao or other relevant jurisdictions.
Establishment, exercise or defence of legal claims: We may retain and use data where necessary in connection with potential or actual disputes, investigations or legal proceedings.

For users accessing betflipi.com from other countries, including EU Member States and Mexico, we may additionally rely on legal bases available under those local laws (such as consent and legitimate interest under EU GDPR or the lawful processing grounds under Mexican data protection law), while still prioritising the protections described in this Policy.

Purpose of Processing

We use the personal data we collect for the following purposes:

Providing and managing our casino services: to register and maintain your account, verify your identity and age, process deposits and withdrawals, provide access to games, administer bonuses and loyalty schemes, and deliver customer support.
Compliance, risk management and responsible gambling: to perform KYC and AML checks, prevent fraud and irregular play, monitor for bonus abuse or suspicious transactions, apply self-exclusion and other safer gambling tools, and comply with applicable laws and regulatory requests.
Website operation and improvement: to operate, maintain and secure betflipi.com (including the Bet Flip regional version), fix technical issues, improve the user interface and game portfolio, and conduct internal testing and analytics.
Analytics and statistics: to analyse overall usage, performance and trends across the Website, including aggregate reporting on deposits, withdrawals, game performance and marketing campaigns, without using more personal data than necessary for these purposes.
Marketing and personalisation: to send you promotional messages about Bet Flip offers, bonuses and news, to personalise content and offers displayed on the Website, and to measure the effectiveness of our marketing campaigns, in line with your consent and preferences.
Security and fraud prevention: to detect and prevent misuse of our services, account takeover attempts, unauthorised access, multiple-account abuse, chargebacks and other fraudulent or irregular activities.
Legal and administrative purposes: to respond to lawful requests from authorities, manage and resolve disputes or complaints, enforce our terms and conditions, and maintain appropriate business and financial records.

Disclosure & Sharing

We do not sell your personal data. However, we share personal data with carefully selected third parties where this is necessary for the purposes described in this Policy, in particular:

Group entities and internal teams: authorised employees and departments within Cybertech B.V. who need access to fulfil their duties, such as customer support, risk and fraud, compliance, payments, IT and marketing.
Payment service providers and banks: providers that process card payments, e-wallet transactions, bank transfers, cryptocurrency payments (where applicable), and related fraud and chargeback management.
KYC/AML and verification providers: third-party service providers that help us verify your identity, age, address, source of funds or source of wealth, and screen against sanctions or exclusion lists.
Game providers and technical platforms: casino software suppliers and hosting/platform providers that enable us to deliver games and run the Website.
Analytics, security and anti-fraud providers: tools and services that help us monitor Website performance, detect technical issues, prevent fraud and enhance security (for example, by detecting multiple accounts or unusual device patterns).
Marketing and advertising partners: email delivery services, affiliate networks and advertising partners that send or display marketing communications on our behalf, in line with your consent and preferences; where cookies or tracking technologies are used, this is described in the "Cookies & Tracking Technologies" section.
Professional advisers: lawyers, auditors, consultants and other professionals who provide services to us under appropriate confidentiality obligations.
Regulators, authorities and law enforcement: regulators such as Curaçao eGaming (CEG) and other competent authorities, tax authorities, courts and law enforcement agencies, where we are legally required or where such disclosure is necessary to protect our rights or the rights of others.
Corporate transactions: in connection with a proposed or actual merger, acquisition, sale of assets, restructuring or similar transaction, where the recipient is bound by appropriate confidentiality and data protection commitments.
With your consent: where you explicitly ask us to share your information with a third party or where you have otherwise consented to a particular disclosure.

Whenever we share data with third-party processors, we put in place contracts that require them to protect your personal data in line with this Policy and the UK GDPR or equivalent standards, and to use it only for the specified purposes.

International Transfers

Cybertech B.V. is based in Curaçao, and many of our service providers are located outside the United Kingdom. This means that your personal data may be transferred to and processed in countries that may not provide the same level of data protection as the UK.

Typical destinations for international transfers include:

Curaçao: where our main operations and key systems are located.
European Economic Area (EEA): where some of our technical, payment and analytics partners are based.
Other countries (e.g. the United States or other third countries): where some of our cloud, security or marketing providers may be located.

Where we transfer personal data outside the UK, we take appropriate steps to ensure that your data remains protected, including:

Using countries that have been formally recognised by the UK government as providing an adequate level of data protection, where applicable.
Putting in place standard contractual clauses approved under the UK GDPR (and, where relevant, the EU GDPR), together with the UK International Data Transfer Addendum or equivalent safeguards.
Implementing additional technical and organisational safeguards such as encryption, pseudonymisation and strict access controls.

You may contact us at privacy@betflipi.com for more information on the specific safeguards that apply to the transfer of your personal data and, where relevant, to obtain a copy of the standard contractual clauses in place (with commercially confidential information redacted where necessary).

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, regulatory, accounting and reporting requirements, and for the establishment or defence of legal claims.

In practice, this generally means:

Player account data: retained for the life of your account and normally for up to 5 years after your account is closed, unless longer retention is required for legal or regulatory reasons (for example, AML requirements).
Transaction and payment records: retained for the life of your account and usually for 5 years after closure to comply with financial and anti-money laundering regulations and to resolve any disputes.
KYC and verification documents: retained for as long as necessary to comply with AML and other legal obligations, typically up to 5 years after the end of the relationship, unless a longer period is required in connection with ongoing investigations or legal proceedings.
Marketing data: retained while you remain opted in to marketing and typically for up to 2 years after your last interaction with our marketing communications, unless you withdraw consent earlier.
Technical logs and security data: retained for periods necessary for security, fraud detection and system integrity purposes, usually between 6 and 24 months, depending on the type of log.

When the relevant retention period expires, or when data is no longer needed for the purposes for which it was collected, we will delete or anonymise it. In some cases, we may irreversibly anonymise data (so that it can no longer be associated with you) and use it for statistical or analytical purposes, in which case we may use this information indefinitely without further notice to you.

Your Rights

If you are in the UK, you have a number of rights in relation to your personal data under the UK GDPR and the UK Data Protection Act 2018. If you are in the EEA or in Mexico, you may have similar or additional rights under local law. We aim to respect these rights in a consistent way across our operations.

Right of access: You can ask us whether we process your personal data and request a copy of that data, together with information on how we use it.
Right to rectification: You can request that inaccurate or incomplete personal data be corrected or completed.
Right to erasure ("right to be forgotten"): You can request deletion of your personal data where, for example, it is no longer necessary for the purposes for which it was collected, you withdraw consent (where processing is based on consent), or you successfully object to processing. This right is subject to legal and regulatory retention obligations, particularly in relation to AML and financial record-keeping.
Right to restriction of processing: You can request that we restrict processing of your personal data in certain circumstances, for example while we verify the accuracy of the data or consider an objection you have raised.
Right to object: You may object at any time to processing based on our legitimate interests, including profiling related to those interests. We will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, or the processing is necessary for legal claims. You can also object at any time to the processing of your personal data for direct marketing, including profiling related to direct marketing, in which case we will stop such processing.
Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you may request to receive your personal data in a structured, commonly used and machine-readable format, and to have that data transmitted to another controller where technically feasible.
Right to withdraw consent: Where processing is based on your consent (for example, certain marketing activities or non-essential cookies), you may withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

Additional note for users in Mexico: If you access betflipi.com from Mexico, we aim to respect the core principles of the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), including the ARCO rights (Acceso, Rectificación, Cancelación y Oposición). You may therefore exercise access, rectification, cancellation and opposition rights in a similar way to the rights described above, subject to applicable legal limitations.

How to exercise your rights

Submit your request by emailing privacy@betflipi.com, clearly stating which right you wish to exercise and providing enough information to identify your account (for example, your username, registered email address and country).
We may ask you for additional information to verify your identity and to ensure that we do not disclose data to an unauthorised person.
We will normally respond within one month (30 days) of receiving a valid request. In complex cases or where you have made multiple requests, we may extend this period by up to two further months, in which case we will inform you of the extension and reasons for the delay.
Your requests will generally be handled free of charge. However, we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive, in line with the UK GDPR.

Cookies & Tracking Technologies

Like most online casinos, betflipi.com uses cookies and similar technologies to operate the Website, improve your experience, analyse traffic and, where permitted, deliver personalised content and advertising.

Types of cookies

Strictly necessary cookies: essential for the Website to function properly, enabling core features such as logging in, maintaining sessions, processing payments and keeping your account secure. These cookies are usually set in response to your actions and cannot be switched off via our cookie settings, although you may still block them in your browser (which may break parts of the Website).
Functional cookies: allow the Website to remember choices you make (such as language, region, display settings and other preferences) and provide enhanced, more personalised features.
Analytics and performance cookies: help us understand how visitors use the Website, which pages are most popular, and whether there are errors or delays. We use this information, often in aggregated form, to improve performance and user experience.
Advertising and marketing cookies: set by us or our third-party partners to build a profile of your interests and show you relevant ads or offers on betflipi.com or on other websites. These cookies may rely on unique identifiers and may track your browsing activity across different sites and devices.

Session, persistent and third-party cookies

Session cookies: temporary cookies that are deleted when you close your browser.
Persistent cookies: remain on your device for a set period or until you delete them.
Third-party cookies: placed by third-party service providers (for example, analytics providers, advertising networks or social media platforms) to support the services they provide to us.

Managing cookies

You can manage your cookie preferences via your browser settings, where you can choose to block or delete some or all cookies. The method depends on the browser you use; please consult your browser's help section for details.
Where available, you may also use our internal cookie settings panel or consent management tool displayed when you first visit the Website (or after significant changes) to accept or reject different categories of cookies, except for strictly necessary cookies.
If you disable certain cookies, some features of betflipi.com - including secure login or game performance - may not work properly.

Data Security

We take the security of your personal data seriously and implement technical and organisational measures designed to protect it against unauthorised access, loss, misuse, alteration or disclosure.

Encryption and secure transmission: data transmitted between your browser and our servers is protected using transport layer security (TLS 1.2 or higher), helping to prevent interception or tampering in transit.
Protection at rest: we use a combination of encryption, access controls and secure storage practices to protect personal data stored on our systems, including hashing or encrypting sensitive information such as passwords.
Access controls and authentication: access to personal data is limited to authorised personnel who require it for their job role and is governed by role-based access controls and authentication mechanisms. Administrative access is protected by strong passwords and, where feasible, multi-factor authentication.
Network and system security: our infrastructure is protected by firewalls, intrusion detection and prevention systems, anti-malware solutions and monitoring tools designed to identify and respond to suspicious activity.
Security governance and training: staff who handle personal data are subject to confidentiality obligations and receive training on data protection and security best practices appropriate to their role.
Vendor security: we select third-party service providers who can demonstrate appropriate security measures and we include security and confidentiality obligations in our contracts with them.
Incident response: we maintain procedures for detecting, investigating and responding to potential data breaches. Where required by law, we will notify affected individuals and relevant supervisory authorities of certain breaches without undue delay.

We aim to align our information security practices with recognised standards such as ISO 27001 and SOC 2 where appropriate for our operations, although we do not claim formal certification under any specific standard unless explicitly stated. No system can be guaranteed to be 100% secure, but we continuously work to maintain and improve our security posture.

Complaints & Contacts

If you have questions, concerns or complaints about how we handle your personal data, or if you wish to exercise any of your rights, you can contact us using the details below.

Primary contact for privacy matters

Email: privacy@betflipi.com
Postal address: Data Protection, Cybertech B.V., Schlools-Plein 21, Curaçao

For general customer support (not specifically related to data protection), you can contact us at support@betflipi.com.

Internal complaint procedure

Submit your complaint: Send a detailed description of your concern to privacy@betflipi.com, including your username, registered email address, and any relevant supporting documentation.
Acknowledgement: We will normally acknowledge receipt of your complaint within 7 days, confirming that we are investigating the matter.
Investigation and response: We will investigate your complaint and aim to provide a substantive response within 30 days. If the matter is particularly complex or we receive multiple related complaints, we may need more time, in which case we will inform you and provide an updated timeframe.
Further steps: If you are not satisfied with our response, you may request that your complaint be escalated internally for further review or you may contact the relevant supervisory authority as described below.

Supervisory authorities and escalation

United Kingdom - Information Commissioner's Office (ICO): If you are located in the UK, you have the right to lodge a complaint with the ICO about our processing of your personal data.
Website: https://ico.org.uk
Telephone: +44 303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
European Economic Area: If you are in the EEA, you may be able to lodge a complaint with your local data protection authority. Contact details are available via the European Data Protection Board: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
Mexico - INAI: If you are in Mexico and believe your data protection rights have been infringed, you may contact the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI).
Website: https://www.inai.org.mx

We encourage you to contact us first so we can attempt to resolve your concern directly, but you are not obliged to do so before contacting a supervisory authority.

Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal or regulatory developments, or improvements to our services. The "Last updated" date at the beginning of the Policy indicates when it was most recently revised.

Notification of changes: When we make material changes, we will take appropriate steps to inform you in advance, which may include:
- Sending an email notification to the address associated with your account.
- Displaying a prominent notice or banner on betflipi.com (including the Bet Flip section).
- Providing an in-account notification or dashboard alert.
Advance notice: For significant changes that materially affect your rights or how we process your data, we will, where reasonably practicable, provide at least 30 days' advance notice before the changes take effect.
Your options: If you do not agree with the updated Policy, you may close your account and stop using the Website. Continued use of betflipi.com after the effective date of the updated Policy will be deemed acceptance of the changes.

We recommend that you review this Privacy Policy regularly to stay informed about how we handle your personal data.