Privacy Policy

Last updated: July 2026

At Donbet, protecting your personal data is a priority. This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we keep it and what rights you have. It applies whenever you visit our website, create an account or use any of our services. By registering or using the platform, you acknowledge and accept the practices described below. Because we offer our services to players in the United Kingdom, we process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, alongside the data-protection law of Curaçao, where our operating company is established, and the EU General Data Protection Regulation, which applies to processing carried out by our payment agent in Cyprus.

1. Who We Are

The platform is operated by GTW B.V., registered in Curaçao under Company Number 165433, with its registered office at Zuikertuintjeweg Z/N, Curaçao. GTW B.V. is the data controller for the processing described in this policy and holds gaming licence OGL/2024/250/0115, issued by the Curaçao Gaming Authority on 1 July 2024, with IGA Group acting as trust service representative for the licence holder. Payment processing is carried out on our behalf by CYGTW LTD, registered in Limassol, Cyprus under number HE 462903.

Our Compliance Officer oversees data-protection and anti-money-laundering matters. For any privacy-related enquiry, including a request to exercise the rights set out in Section 7, contact [PRIVACY_EMAIL]. For general assistance, use live chat or write to [SUPPORT_EMAIL]. Our representative for players in the United Kingdom, appointed under Article 27 UK GDPR, can be reached at [UK_REPRESENTATIVE].

2. Information We Collect

We collect different categories of personal data depending on how you interact with our platform.

2.1 Information You Provide Directly

• Registration details – email address, username and password (stored in hashed form).
• Identity details – first name, surname and date of birth, supplied when you complete verification.
• Contact details – email address, mobile telephone number, country, city and residential address.
• Verification documents – copy of your passport, national identity card or driving licence; proof of address dated within the previous three months (bank statement, utility bill or tenancy agreement); proof that the payment method or wallet used belongs to you; documentation evidencing the source of your funds where a transaction requires it.
• Financial details – masked card numbers, bank-account information, e-wallet identifiers, cryptocurrency-wallet addresses and transaction history.
• Responsible-gambling settings – deposit and loss limits, session limits, cooling-off periods and self-exclusion requests.
• Communications – the content of live-chat conversations and emails exchanged with our support team, together with complaints and feedback.

2.2 Information We Collect Automatically

• Technical data – IP address, device type, operating system, browser type and version, screen resolution.
• Location data – approximate geographic location derived from your IP address, used among other things to enforce territorial restrictions.
• Usage data – pages visited, click behaviour, session duration, games played, bet history, deposit patterns.
• Loyalty data – wagering volume, Doncoin and VIP point balances, rank progression and reward redemptions.
• Cookies and tracking technologies – see Section 8 for full details.

2.3 Information from Third Parties

We may receive supplementary information from our payment agent and payment-service providers, KYC suppliers, fraud-prevention databases, identity-verification agencies, sanctions and Politically Exposed Person (PEP) screening providers, game and sportsbook suppliers, and regulatory bodies.

3. How We Use Your Information

Service messages – security notifications, verification requests, payment confirmations and changes to our terms – are sent on the basis of our contract with you and cannot be switched off while your account is open. Marketing messages are separate: you may opt out at any time through your account settings or the unsubscribe link in any such message, without affecting your access to the platform.

4. Who We Share Your Data With

We never sell your personal data to third parties. In certain circumstances, we may share data with:

• Our payment agent and payment-service providers – CYGTW LTD and the card, bank, e-wallet and cryptocurrency processors it engages, to process deposits and withdrawals.
• KYC and identity-verification suppliers – to carry out legally required checks.
• Sanctions and PEP screening providers – to meet our anti-money-laundering obligations.
• Game and sportsbook providers – to deliver games and betting markets.
• Fraud-prevention and risk-management partners – to detect and prevent misuse and money laundering.
• IT, hosting and live-chat providers – for technical support, data storage and customer communication.
• Our trust service representative – IGA Group, in connection with the administration of our gaming licence.
• Legal and financial advisers – where necessary.
• Regulatory authorities and law enforcement – including the Curaçao Gaming Authority and financial-crime authorities, where we are legally required to do so.

All third parties are contractually bound to treat your data confidentially and to use it only for the specific purposes we define.

5. International Data Transfers

Our operating company is established in Curaçao and our payment agent in Cyprus, so personal data collected from players in the United Kingdom is transferred outside the UK as a matter of course. Curaçao is not covered by a UK adequacy regulation, and neither is every country in which our service providers operate.

Where data is transferred to a country that does not provide an equivalent level of protection, we rely on appropriate safeguards such as the International Data Transfer Agreement (IDTA), the UK addendum to the EU Standard Contractual Clauses, the EU Standard Contractual Clauses where the transfer originates in the European Economic Area, or other legally recognised mechanisms, together with a transfer risk assessment. You may request further detail of the safeguards applied to a particular transfer at [PRIVACY_EMAIL].

6. How Long We Keep Your Data

We retain your data only for as long as necessary to fulfil the purposes for which it was collected, and for the minimum periods our anti-money-laundering obligations impose.

After these periods, data is securely deleted or anonymised.

7. Your Data-Protection Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

• Right of access – request a copy of the personal data we hold about you.
• Right to rectification – ask us to correct inaccurate or incomplete data. Note that your username is permanent and cannot be altered once set, although the identity details attached to your account can be corrected.
• Right to erasure – request deletion of your data, subject to legal constraints.
• Right to restriction – ask us to limit how we process your data.
• Right to data portability – receive your data in a structured, machine-readable format.
• Right to object – object to processing based on legitimate interest or direct marketing.
• Right to withdraw consent – revoke any consent you have previously given, at any time.
• Right to lodge a complaint – file a complaint with the Information Commissioner's Office at ico.org.uk if you are in the United Kingdom, or with the data-protection authority of Curaçao in respect of processing carried out by GTW B.V.

To exercise any of these rights, write to [PRIVACY_EMAIL]. We will respond within one month, and will tell you if the complexity of a request means we need longer. Certain rights are limited where a legal obligation prevents us from acting on them: in particular, KYC documents, transaction records and self-exclusion records must be retained for the periods set out in Section 6 even after you ask for erasure, and an active self-exclusion cannot be lifted by withdrawing consent.

8. Cookies and Similar Technologies

We use cookies and similar technologies to ensure the website functions properly, to remember your preferences, to analyse usage patterns and – with your consent – to deliver personalised content and advertising.

You can manage your cookie preferences at any time through the cookie-settings panel on our website or via your browser settings.

9. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure. All connections between your browser and our servers are secured with SSL/TLS encryption, so personal information, financial transactions and account credentials are encrypted in transit. Passwords are stored in hashed form. Access to personal data within our organisation is restricted on a need-to-know basis, and staff handling player data receive AML and data-protection training overseen by our Compliance Officer.

While we take every reasonable precaution to keep your information safe, no method of electronic transmission or storage is entirely risk-free. Your password must contain at least eight characters, including an uppercase letter and an alphanumeric character; we encourage you to choose one that is strong and unique, and never to share your login details with anyone.

10. Children

Our services are intended exclusively for individuals aged 18 or over. We do not knowingly collect data from minors. If we discover that a person under 18 has created an account, the account will be closed immediately, all wagers will be voided and deposited funds returned, and the associated data will be deleted, subject to the record-keeping obligations described in Section 6.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or applicable law. The most recent version will always be available on this page, with the date of the latest revision noted at the top. Where changes are material, we will notify you by email or by a prominent notice on the website. We recommend that you review this policy periodically.