1. Privacy Notice
Version 1.5
Last revised: 22.09.2026
2. Responsibility for the Processing of Personal Data
FiveoSeven Platform Solutions Limited, a company registered in Malta under company number C50732, with registered address at 4th Floor, Suite 8, Marina Business Centre, Abate Rigord Street, XBX 1129 Ta' Xbiex, Malta, and Exploitatie Casino Middelkerke NV, a public limited company incorporated and registered under Belgian law under company number 0782.601.344, whose registered office is located at Zeedijk 117A, 8430 Middelkerke, are the joint controllers designated for the processing of personal data. For the purposes of this Privacy Notice, references to “Betsson”, “we”, “us” or “our” mean the joint controllers, unless the context requires reference to the wider Betsson Group or another Betsson Group entity.
FiveoSeven Platform Solutions Limited is part of the Betsson Group, which also operates other Group brands. Exploitatie Casino Middelkerke NV acts as licence holder under an A licence bearing number 595153 and an A+ licence bearing number 595153, issued by the Belgian Gaming Commission, and as joint controller for the Betsson services, and is not part of the Betsson Group. Unless otherwise stated, the joint controllers are the data controllers for the use of Your personal data. The joint controllers have entered into an arrangement determining their respective responsibilities for compliance with data protection obligations. You may exercise Your data protection rights against either joint controller by using the contact details set out in this Privacy Notice.
This Privacy Notice sets out how Betsson manages Your personal data in the course of Our iGaming services (“Services”). Betsson collects and processes personal data necessary to provide the Services through Our website and/or mobile application, where available. In using the Services, You understand that Your personal data will be processed in accordance with this Privacy Notice. This Privacy Notice also applies to the other Betsson Group entities, which act as data processors for Betsson. This Privacy Notice does not apply to any websites over which Betsson has no control.
Betsson’s Services are not intended for minors, and We do not knowingly collect personal data relating to minors. In the event that We become aware that a minor has provided Betsson with any information, We may discard such information unless it is required to comply with any legal or statutory obligation binding upon Us. If You have reason to believe that a minor has provided Us with personal data, please contact Us at the details set out in Section 2 below.
3. Contact Us
For questions or comments regarding this Privacy Notice or the processing of Your personal data by Betsson, You may contact Our Data Protection Officer via e-mail at dataprivacy@betssongroup.com or by post at Betsson, ‘Attn: Privacy Officer, 4th Floor, Suite 8, Marina Business Centre, Abate Rigord Street, XBX 1129 Ta' Xbiex, Malta’.
For any general questions, please feel free to contact our customer service department via the Contact Us page.
4. Personal Data Processed
Personal data means any information that can directly or indirectly identify an individual, including any information that constitutes personal data within the meaning of applicable data privacy laws.
We process personal data of visitors to Our website, users of Our mobile applications, and participants in Our iGaming services. We also process personal data of individuals who contact Us, follow Us on social media, request to be kept informed about Our Services, or with whom We otherwise have a relationship.
We receive the personal data either when You register with Us, when You provide data, or any other time You communicate with Us. We also collect and analyse data regarding Your gaming behaviour in order to ensure compliance with the terms and conditions, monitor the integrity of wagering activity, and to meet Our responsible gaming, anti-money laundering, and other legal obligations. We also receive data from third parties, such as providers of Know Your Customer services, that help Us to comply with Our legal obligations.
We also collect certain information about Our customers and visitors to Our website using cookies and other tracking technologies. For further information about cookies, which cookies We use, why We use cookies, and how You can control which cookies are used, please read Our Cookie Policy.
In most cases, the provision of personal data arises either from legal requirements or contractual provisions. Where applicable, failure to comply with these provisions will prevent Betsson from complying with its legal or regulatory obligations; from executing or entering into contracts; and from providing the Services requested.
Below is an overview of the categories of personal data We process and examples thereof:
| Categories of personal information | Examples |
|---|---|
| Identifying data and contact details |
|
| Account details |
|
| Payment details |
|
| Information relating to playing behaviour and (placed) bets |
|
| Information We are required to collect by virtue of Our obligations stemming from anti-money laundering obligations |
|
| Information We are required to collect by virtue of Our duty of care / responsible gaming obligations |
|
| Information relating to criminal offences |
|
| Information on Your use of Our website, applications and online user environment |
|
| Correspondence, call recordings and chat recordings |
|
| Communication preferences and customer engagement data |
|
| Information obtained from third parties and public sources |
|
5. Purpose and Authority for Processing Personal Data
| Purpose & basis | Examples |
|---|---|
| Customer registration Basis: necessary for performance of Our Agreement with You |
|
| Verifying Your identity and whether You are of age Basis: to comply with a legal obligation imposed upon Us |
|
| Enabling participation in Our igaming offering Basis: necessary for performance of Our Agreement with You |
|
| To prevent and/or combat excessive participation and gambling addiction Basis: to comply with legal obligations imposed on Us |
|
| Fighting fraud and preventing money laundering and terrorist financing Basis: to comply with a legal obligation imposed on Us |
|
| Investigating and reporting suspicious (gambling) activities Basis: to comply with a legal obligation imposed on Us |
|
| For the development and improvement of Our business operations, products and services Basis: legitimate interest |
|
| For customer communications and preference management Basis:
|
|
| To provide a personalised experience Basis: legitimate interest |
|
| Account Management Services Basis: necessary for performance of Our Agreement with You |
|
| To ensure the security and stability of Our services and IT systems Basis: legitimate interest |
|
| Legal protection Basis: legitimate interest |
|
6. Communications
Betsson and our appointed service providers may use your personal data, such as your name, contact details, account information and other relevant information, to communicate with you in connection with our Services and our relationship with you. These communications may include information concerning your account, transactions, customer support requests, changes to our Services or terms, security matters, responsible gaming and player protection, legal or regulatory requirements, and other important service-related information. Where permitted by applicable law, we may also use your personal data to provide you with information about our product and services. Any such communications will be carried out in accordance with applicable advertising, gambling, data protection, and Your communication preferences.
Depending on the purpose of the communication, we process your personal data where necessary to perform our Agreement with you, comply with our legal or regulatory obligations, pursue our legitimate interests, or on the basis of your consent where consent is required by applicable law.
We may communicate with you through appropriate channels, including e-mail, SMS, telephone, in-app messages, push notifications and, where appropriate, messaging platforms.
You are entitled to withdraw consent or object to receiving particular categories of communications. You may do so at any time by:
- using the unsubscribe option where available;
- updating Your communication preferences in Your account; or
- contacting Customer Support.
On-Site / In-App Personalisation
We may personalise certain content, features and information presented within our websites, applications and Services based on your interactions with our Services and your account settings.
Where such personalisation involves the use of cookies or similar technologies, we will obtain your consent where required by applicable law. You may withdraw such consent at any time through the relevant cookie or privacy settings, as further described in our Cookie Policy.
7. Recipients of Your Personal Data
We share your personal data with other Betsson Group entities where necessary and proportionate for the purposes described in this Privacy Notice, including to support the provision and operation of our Services, comply with applicable legal and regulatory obligations, prevent and detect fraud and financial crime, manage relevant operational and compliance risks, and establish, exercise or defend legal claims. Such sharing is limited to the personal data necessary for the relevant purpose and is subject to appropriate data protection, confidentiality and security safeguards.
Where You hold, or have previously held, accounts operated under Betsson Group licensing arrangements in Belgium, relevant personal data is also shared and reviewed between those accounts where necessary and proportionate for compliance with applicable legal and regulatory obligations, responsible gaming and player protection, AML/CFT, fraud prevention and risk management. This can include relevant account, identity and verification, transaction, responsible gaming, self-exclusion, fraud, AML/CFT and other risk-related information. In particular, information identified in relation to one account can be taken into account when assessing whether further review or appropriate measures are required in relation to another account. Each licence holder remains responsible for assessing the information relevant to the account it operates and for making and documenting its own decision.
Such sharing is carried out only to the extent necessary and proportionate for the relevant purpose, on an appropriate legal basis as described in this Privacy Notice and in accordance with applicable data protection laws, regulatory requirements and licence conditions. Intra-group sharing is governed by appropriate data protection arrangements and is subject to appropriate confidentiality, security and access controls.
In some cases, We are required by law to share Your personal data with government entities, law enforcement, regulators, sports governing bodies, and other relevant authorities. This may include situations where there are reasonable grounds to suspect that You have breached, or have knowledge of a breach of, Our Terms and Conditions or applicable laws, or where You may otherwise pose a threat to the integrity of a sport, game, or Our Services. Such disclosures may take place for the purposes of enforcing Our Terms and Conditions and sports integrity, combating gambling addiction, and preventing, detecting or investigating suspected criminal activity.
We may also be required to share Your personal data in response to any court subpoena, warrant, judicial order or similar official request. In certain cases, relevant laws may oblige Us to disclose Your personal data to financial institutions such as banks and insolvency services. These bodies may use Your personal data to investigate and act on any such breaches in accordance with their procedures.
Where national legislation establishes self-exclusion registers, We may also be required to communicate relevant data such as self-exclusion status or reactivation of accounts to the competent authority responsible for maintaining such registers, in accordance with applicable legal requirements.
Betsson may engage third parties (data recipients) to process Your data in accordance with this Privacy Notice to provide You with the Services. These parties usually act as processors for Betsson. In some cases, these parties act as joint or independent controllers. This is, for example, the case for payment service providers and social media platforms. In such cases, the privacy statement of the third party in question will apply. We shall only share Your data with these providers subject to appropriate agreements. Categories of recipients with whom We share personal information are:
- Gaming and software providers;
- Risk management providers;
- Third-party vendors that provide technical support and help Us maintain Your account with Us;
- Analytics and search engine providers that help Us improve and optimise Our website;
- Suppliers for communication purposes, such as providers of mobile communication services for telephony and SMS;
- Partners who carry out surveys and market research on Our behalf;
- Interactive media platforms (such as social media platforms);
- Organisations that enable Us to provide relevant advertisements on third party websites and platforms that You visit;
- Payment service providers and payment facilitators;
- Cloud service providers who offer infrastructure, hosting, storage, and other cloud-based solutions that support the operation and availability of Our services;
- Technical service providers, including database administrators and infrastructure specialists, who assist Us in maintaining the performance, integrity, and security of Our systems and applications;
- Anti-fraud, risk and compliance service providers (such as know Your customer (KYC) providers, credit reference agencies);
- Providers of information verification services to validate the information You provide to Us;
- Providers offering professional support for at risk users or allow for cross-operator exclusions;
- Professional advisers such as lawyers, accountants, consultants and insurers, who provide Us with legal, advisory and insurance services;
- Other partners who help Us create a better experience for You.
While using the services You may find links to third-party websites/applications (for example social media platforms). Please note that this Privacy Notice does not apply to such third-party websites/applications. In order to find out more about processing of Your personal data by these third-party websites/applications, We instruct You to carefully read their privacy statements and the terms of use before using their services.
8. Transfer of Personal Data to Other Countries
Where We have service providers or partners located outside the European Union (EU) / European Economic Area (EEA), in a third country, territory or sector that has not been found to provide for an adequate level of data protection by the European Commission (see here the list of third countries offering an adequate level of data protection as per the European Commission), We ensured that the data transfers are subject to appropriate safeguards, such as the Standard Contractual Clauses.
Please be aware that the list of data recipients may differ depending on the brand and country where You make use of Our Service. Hence, on Your request, We can provide you with the categories of data recipients whom we share Your personal data with, and also specific information about data transfers to third countries, if applicable.
9. Retention of Your Personal Data
Betsson will not retain Your personal data for longer than necessary for the purposes for which it was collected or otherwise processed, unless a longer retention period is required or permitted by applicable law. When Your personal data is no longer needed, We will securely delete or anonymise it. The necessary retention period is determined by various criteria including the nature of the data, the purpose of the processing, the legal basis, whether there are any applicable legal or regulatory obligations, and other factors.
We will keep Your personal information for as long as Your account is active to be able to offer you Our Services. If Your account is closed (by Yourself or by Us), we will retain all Your personal data to the extent necessary to comply with Our legal obligations such as applicable tax/revenue laws, AML/CFT, gaming laws and other applicable regulatory requirements as well as to resolve any potential legal disputes as per Our data retention policies. Certain categories of personal data may be retained for longer where required, such as:
- responsible gaming records, including permanent self-exclusions, where retention is required to enforce restrictions;
- AML/CFT-related information where extended retention is necessary to comply with ongoing monitoring or reporting obligations;
- fraud prevention records where We are required to identify or prevent repeat misuse;
- information relevant to an investigation or dispute, which will be retained for the duration of the investigation or proceedings and as long as necessary to protect Our rights.
10. Automated Individual Decision-Making
Betsson uses fully or partially automated tools to support certain decisions and actions that We are required to take under applicable law, licence conditions, or Our contractual obligations with You. Some of these tools may include rules-based systems, statistical models, machine-learning models or other artificial intelligence technologies. These processes help ensure regulatory compliance, protect users, safeguard the integrity of Our Services and prevent misuse, and are used to support the purposes described below, including compliance with legal and licensing obligations, fraud prevention, responsible gaming, service security, personalisation and operational efficiency.
- We use automated tools to check Your information against sanctions lists, adverse media sources and any centralised self-exclusion schemes (where available), in accordance with Our legal obligations under anti-money laundering and responsible gaming legislation.
- We analyse transactions, play data and related behaviour to create a risk profile in line with Our legal and licensing obligations to identify and investigate suspected illegal or fraudulent activity (including potential money laundering, terrorist financing and fraud).
- As required by Our licensing obligations, We use automated systems to identify players who may be experiencing, or at risk of developing, gambling-related harm. This includes analysing behaviour, transactions, patterns of use and relevant interactions or communications, as well as assessing whether any player-set limits have been reached.
- We analyse play patterns and activity to detect potential integrity issues, malpractice or serious inappropriate behaviour in sport, such as possible match-fixing or suspicious betting activity.
- We use automated tools to monitor activity and gameplay to detect behaviour that may breach Our Terms and Conditions or internal policies.
- Based on information relating to Your use of the Services, including game history, We may use automated processes to provide You with personalised recommendations or content. You may object to such personalisation at any time via Your account settings or by contacting Us.
Betsson’s systems are tested on a regular basis to ensure fair, effective, and unbiased operation. We cannot disclose detailed information about Our detection systems, in particular the logic behind them, as this would harm their operation by allowing users to circumvent these mechanisms, which are aimed at protecting users, Betsson and at ensuring compliance with Our legal obligations.
11. What Are Your Rights?
You have a number of rights with regard to the processing of Your personal data, including:
• Right to obtain confirmation that We are processing Your data and have access to or obtain a copy of the same. You are invited to exercise Your right to access conveniently from Your account ‘Support’ – ‘Personal Data’ section (where available). When the data is ready for download, You will be notified via registered email including a secure link to easily and securely access the requested files.
Kindly observe that as a general rule, subject to exemptions provided by applicable laws, We reserve the right to withhold or partially disclose certain information in response to a data subject access request where providing full access would:
- Adversely affect an internal investigation or an investigation by competent authorities, including matters related to suspected fraud, misuse of the Services, money-laundering, terrorist financing, sports integrity issues or other unlawful or improper activities;
- Prejudice the effectiveness of Our AML/CFT, fraud prevention or Responsible Gaming controls, including monitoring processes, alerting systems, scoring models or other detection mechanisms, the disclosure of which could enable individuals to bypass or undermine measures that We are required to maintain under applicable laws and licence conditions;
- Reveal information relating to ongoing dispute resolution or settlement negotiations, where disclosure could reasonably be expected to prejudice the negotiation process or Our legal position;
- Expose confidential or proprietary internal processes, including security measures, risk-management procedures, or other business-critical logic, the disclosure of which may compromise the integrity or security of Our operations;
- Infringe the rights and freedoms of other individuals, including by disclosing personal data relating to third parties;
- Be subject to Legal Professional Privilege (LPP), or equivalent professional secrecy or confidentiality obligations under applicable local laws.
• Right to erasure where:
- Your personal data are no longer necessary for the purposes which they were collected;
- The lawful basis for processing is consent and You withdraw your consent;
- You object to processing based on legitimate interests and there is no overriding interest to continue processing;
- Data processing is done for direct marketing purposes (where legally permitted) and You object to such processing;
- Data processing is unlawful; or
- Personal data must be erased for compliance with a legal obligation.
Kindly note that right to deletion is not absolute and may be limited, for example, due to Our legal obligations, or for the establishment, exercise or defence of legal claims. This means that We will not be able to exercise erasure in relation to personal data that We need to keep as per Our data retention policies.
• Right to restrict processing where:
- You have asked Us to rectify your data and We are in the process of verifying the accuracy of such data;
- Personal data processing has been unlawful and ask for restriction instead of deletion;
- Your personal data is no longer needed for the Services but you request Us to retain it in order to establish, exercise or defend a legal claim; or
- You have objected to Our processing of your data based on legitimate interest and We are evaluating whether Our legitimate interests override yours.
Kindly observe that your data will be stored for the time of restriction and shall be processed only if You gave your consent or in order to establish, exercise or defend legal claims, protect the rights of another natural or legal person and for the reasons of important public interest;
- Right to data portability i.e. right to transmit personal data you have provided Us with in a structured, commonly used and machine-readable format to another controller where the processing is based on consent or contract and carried out by automated means;
- Right to object where processing is based on legitimate interests, tasks carried in public interest and/or where your personal data are processed for direct marketing purposes (where legally permitted), including profiling for these purposes. Whilst the latter is an absolute right, the first will require a balance assessment of your interests, rights and freedoms against Our legitimate interests;
- Right to obtain human intervention, express Your point of view and contest the decision where it is based on solely automated decision making, including profiling, which produces legal effects concerning You or similar significant effects.
Please note that We will respond to any of Your requests about your rights without undue delay and in any case within 30 days from date of receipt of Your request (this period may be further extended in line with applicable law).
When You exercise Your rights by contacting Us, We may request specific information to verify Your identity and confirm that You are entitled to access the personal data (or exercise any of Your other rights). This is a necessary security measure to ensure that personal data is not disclosed to anyone who is not authorised to receive it. Where a request is made on Your behalf by a third party, We may also ask for proof of authorisation.
Finally, please note that you have a right to lodge a complaint to a supervisory authority in the Member State of your habitual residence, place of work or place of alleged infringement. You can lodge a complaint with Our Lead Supervisory Authority, which is the Office of the Information and Data Protection Commissioner (‘IDPC’) in Malta.
12. Protection of Your Personal Data
We take appropriate measures to prevent abuse, loss, unauthorised access, unwanted disclosure, and unauthorised modification of personal information. For example, We use secure network connections, firewalls, encryption, and anonymise data where possible. However, You acknowledge that no method of transmission over the Internet, nor any method of electronic storage, is 100% secure. We do Our best to protect Your personal data, but We cannot guarantee its absolute security. Betsson’s employees, agents, and contractors have restricted access to personal information to a need-to-know basis subject to confidentiality agreements.
In order to protect Your account, You are ultimately responsible for maintaining Your username and password confidential and secure. We will never ask You for Your password except when You log in to Our website and enter Your password at which time it is encrypted. If You become aware of any unauthorized access to or use of Your account, You are required to notify Us immediately. Where Our mobile application(s) require biometric authentication, Your credentials will be securely encrypted by and stored on Your device. They will not be stored in Our mobile application(s) nor held or accessed by Us in any way. We will only know whether You have been successfully identified or not. Please note that if You store fingerprints of other persons on Your device, those persons will also be able to access Our mobile application(s) via fingerprint when fingerprint is enabled.
We have adopted procedures to deal with any actual or suspected breach of security safeguards involving personal data. Unless otherwise prohibited by applicable law, We will promptly notify You in the event of a breach which could reasonably result in a real risk of significant harm to You. We will also report any such breach to the competent authorities as required by applicable laws, and keep a record of any such breach to the extent required by applicable laws.
13. Changes to This Privacy Notice
We reserve the right at Our discretion to change or modify Our Privacy Notice from time to time. To the extent that the Privacy Notice or sections thereof are subject to a material change, We shall inform You of such change through reasonable measures such as email or notice on the website and require re-acceptance of the Privacy Notice. Otherwise, all other changes to this Privacy Notice are effective as of the stated “Last revised” date, and Your continued use of the Services after the Last revised date will constitute acceptance of, and agreement to be bound by, those changes.
- Privacy Notice
- Responsibility for the Processing of Personal Data
- Contact Us
- Personal Data Processed
- Purpose and Authority for Processing Personal Data
- Communications
- Recipients of Your Personal Data
- Transfer of Personal Data to Other Countries
- Retention of Your Personal Data
- Automated Individual Decision-Making
- What Are Your Rights?
- Protection of Your Personal Data
- Changes to This Privacy Notice
Please play responsibly.
© 2026 ECM NV/SA – All rights reserved. Exploitatie Casino Middelkerke is a private limited company with a capital of 27.069.140,00 EUR registered at the Banque Carrefour des Entreprises under number 0782.601.344, and whose registered office is located Zeedijk 117A, 8430 Middelkerke and licensed by the Belgian Gaming Commission under the numbers A595153 and A+595153.
Betsson, in adherence with Belgian regulations, does not allow players aged under 21.