Privacy Policy

Welcome to SquiBet. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access or use our cryptocurrency sports betting and casino platform, including our website, mobile applications, APIs, and all related services (collectively, the “Platform”).

By creating an account, depositing funds, placing bets, playing casino games, or otherwise interacting with the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, you must not use the Platform.

This Privacy Policy applies to all users of the Platform worldwide and is designed to comply with the General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and other applicable data protection and privacy laws. Where local laws impose additional requirements, we will comply with those requirements for users in the relevant jurisdictions.

SquiBet is the data controller responsible for your personal data. As the data controller, we determine the purposes and means of processing your personal information in connection with the Platform.

For any privacy-related inquiries, you may contact us at:

• Data Controller: SquiBet
• Privacy Email: [email protected]
• Data Protection Officer: [email protected]

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact the DPO using the details above.

We collect and process the following categories of personal data:

We process your personal data on the following legal grounds under the GDPR and equivalent legislation:

• Performance of a Contract (Article 6(1)(b)): Processing is necessary to provide the Platform services you have requested, including account management, bet placement, casino gameplay, wallet operations, deposits, withdrawals, and customer support.
• Legal Obligation (Article 6(1)(c)): Processing is required to comply with applicable laws and regulations, including AML and counter-terrorism financing (CTF) requirements, KYC identity verification obligations, gambling licensing conditions, tax reporting obligations, and law enforcement requests.
• Legitimate Interest (Article 6(1)(f)): Processing is necessary for our legitimate interests, including fraud detection and prevention, platform security and integrity, risk management, service improvement and analytics, and enforcement of our terms and conditions. We ensure our legitimate interests do not override your fundamental rights and freedoms.
• Consent (Article 6(1)(a)): Where required, we obtain your explicit consent before processing, including for marketing communications and promotional offers, non-essential cookies and analytics tracking, and sharing data with selected promotional partners. You may withdraw consent at any time without affecting the lawfulness of prior processing.

We use your personal data for the following purposes:

• Service Delivery: Operating your account, processing bets and casino game rounds, managing wallet transactions (deposits, withdrawals, swaps), calculating and distributing winnings, VIP tier progression, rakeback, and promotional rewards.
• Identity Verification: Verifying your identity through KYC procedures, confirming your age and eligibility to use the Platform, and validating cryptocurrency wallet ownership.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, multi-accounting, collusion, bonus abuse, and unauthorized access. Monitoring suspicious betting patterns and transaction anomalies.
• AML & Regulatory Compliance: Fulfilling anti-money laundering reporting obligations, maintaining records as required by gambling regulators, and responding to lawful requests from regulatory authorities and law enforcement.
• Platform Improvement: Analyzing usage patterns to improve the user experience, optimizing game performance and odds delivery, conducting A/B testing and feature development, and generating aggregate statistical reports.
• Marketing (with Consent): Sending promotional offers, bonuses, and event notifications via email or push notifications. You can opt out of marketing communications at any time through your notification preferences or by using the unsubscribe link in any marketing email.
• Responsible Gambling: Monitoring gambling behavior, enforcing self-imposed limits, identifying players who may be at risk of problem gambling, and facilitating cooling-off periods and self-exclusion.

We do not sell, rent, or trade your personal data to third parties for their marketing purposes. We may share your data with the following categories of recipients, solely for the purposes described in this Policy:

• Payment & Blockchain Service Providers: Cryptocurrency payment processors and blockchain analytics firms that facilitate deposits, withdrawals, and transaction monitoring.
• KYC & Identity Verification Providers: Third-party services that assist with document verification, facial recognition, and identity checks to fulfill our regulatory obligations.
• Odds & Data Providers: Sports data and odds providers that supply live scores, odds, and event information to power our sportsbook.
• Analytics & Performance Tools: Services that help us understand Platform usage, monitor performance, and detect errors. Data shared with analytics providers is aggregated and pseudonymized where possible.
• Legal & Regulatory Authorities: Gambling regulators, law enforcement agencies, tax authorities, and other governmental bodies when required by law, regulation, or legal process such as a subpoena or court order.
• Professional Advisors: Auditors, legal counsel, and consultants who require access to personal data to provide their professional services to us, subject to confidentiality obligations.

All third-party service providers are contractually required to process your data only for the specified purposes and in accordance with applicable data protection laws. We conduct due diligence on all processors to ensure adequate data protection standards.

As a global platform, your personal data may be transferred to and processed in countries outside your country of residence, including jurisdictions that may not offer the same level of data protection as your home country.

When we transfer personal data internationally, we implement appropriate safeguards to ensure your data remains protected, including:

• Standard Contractual Clauses (SCCs): We use EU-approved Standard Contractual Clauses with our data processors and partners in third countries to ensure equivalent data protection standards.
• Adequacy Decisions: Where applicable, we transfer data only to countries that have been recognized as providing an adequate level of data protection by the European Commission or the UK Government.
• Additional Safeguards: We implement supplementary technical measures, including encryption in transit and at rest, to protect data during international transfers.

You may request a copy of the safeguards we have in place for international data transfers by contacting us at [email protected].

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, and resolve disputes. The specific retention periods are:

After the retention period expires, we securely delete or anonymize your data so that it can no longer be associated with you. In some cases, anonymized data may be retained indefinitely for statistical and analytical purposes.

We use cookies and similar tracking technologies to operate, secure, and improve the Platform. The types of cookies we use are:

• Strictly Necessary Cookies: Required for the Platform to function. These enable core features such as authentication, session management, security tokens, and load balancing. They cannot be disabled.
• Functional Cookies: Remember your preferences and settings, such as language, timezone, odds format (decimal, fractional, or American), theme preferences, and bet slip state.
• Analytics Cookies: Help us understand how users interact with the Platform by collecting aggregated, anonymized usage data. This includes page views, navigation paths, feature engagement, and performance metrics.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed information about the specific cookies we use, please refer to our Cookie Settings, accessible via the footer of every page.

Under the GDPR and other applicable data protection laws, you have the following rights with respect to your personal data:

• Right of Access (Article 15): You may request a copy of the personal data we hold about you, along with information about how it is processed. We will provide this within 30 days of receiving your verified request.
• Right to Rectification (Article 16): You may request correction of inaccurate or incomplete personal data. You can update most account information directly through your Account Settings.
• Right to Erasure (Article 17): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to our legal obligations to retain certain records (see Section 8).
• Right to Restriction of Processing (Article 18): You may request that we restrict the processing of your data in certain circumstances, such as when you contest its accuracy or object to processing.
• Right to Data Portability (Article 20): You may request your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) and have it transferred to another service provider.
• Right to Object (Article 21): You may object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease such processing immediately.
• Rights Related to Automated Decision-Making (Article 22): You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects. Where automated decisions are made (such as risk scoring or fraud detection), you may request human review.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at [email protected] with your request. We may need to verify your identity before processing your request. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

The Platform is strictly intended for individuals who are at least 18 years of age, or the legal gambling age in their jurisdiction, whichever is higher. We do not knowingly collect, solicit, or process personal data from anyone under the age of 18.

Age verification is a mandatory part of our registration and KYC processes. If we discover that we have inadvertently collected personal data from a minor, we will take immediate steps to delete the data, close the associated account, and void any transactions. Any funds deposited will be returned to the originating source where possible.

If you believe that a minor has provided personal data to us, please contact us immediately at [email protected] so we can take appropriate action.

We take the security of your personal data seriously and implement comprehensive technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Passwords are hashed using bcrypt with appropriate salt rounds and are never stored in plain text.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis. We employ role-based access controls (RBAC), multi-factor authentication for all administrative access, and least-privilege principles.
• Infrastructure Security: Our servers are protected by firewalls, intrusion detection systems, DDoS mitigation, and network segmentation. Database access is restricted to internal networks only.
• Regular Audits & Testing: We conduct regular security audits, vulnerability assessments, and penetration testing. Our provably fair casino system undergoes independent verification.
• Monitoring & Detection: We maintain 24/7 monitoring of our systems for suspicious activity, unauthorized access attempts, and anomalous transaction patterns.
• Breach Notification: In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours as required by the GDPR, and notify affected users without undue delay. Notifications will include the nature of the breach, the data involved, the likely consequences, and the measures taken to address it.

While we employ extensive security measures, no method of transmission over the internet or electronic storage is 100% secure. We encourage users to protect their accounts by enabling two-factor authentication (2FA), using strong unique passwords, and keeping their login credentials confidential.

We may update this Privacy Policy from time to time to reflect changes in our practices, the Platform’s features, legal requirements, or regulatory guidance. When we make changes, we will:

• Update the “Last updated” date at the top of this page.
• Post a prominent notification on the Platform for at least 30 days following any material changes.
• Send an email notification to registered users for significant changes that affect how your personal data is collected, used, or shared.
• Where required by law, obtain your renewed consent before applying changes that materially alter the basis on which your data is processed.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after changes are posted constitutes your acceptance of the revised policy. If you do not agree with any changes, you should discontinue use of the Platform and contact us to close your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please reach out to us through any of the following channels:

If you believe we have not adequately addressed your privacy concern, you have the right to lodge a complaint with your local data protection supervisory authority. For users in the European Union, a list of supervisory authorities is available on the European Data Protection Board website.