Introduction

Setrabet is committed to safeguarding personal data and applying clear, enforceable practices for its collection, use, retention, and disclosure of information in relation to its online gambling services. This Privacy Policy describes how we handle personal data across Setrabet websites, apps, and related services.

Data Controller and Legal Framework

Setrabet acts as the data controller for the personal data processed in connection with its services. We process personal data in accordance with applicable data protection laws and regulatory obligations. By using our services or submitting information to us, you acknowledge processing of your data as described in this Policy. Where processing relies on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Categories of Personal Data We Collect

• Identification and contact details: name, date of birth, address, email address, mobile number, and related identifiers.
• Account credentials and profile data: username, password, security questions, language preferences, and time zone.
• Financial and transaction data: deposits, withdrawals, payment methods, transaction history, and related validation documents.
• Technical and usage data: IP address, device type, browser, operating system, log files, pages viewed, and interaction data.
• Location data: login location and geolocation information as needed for service delivery and fraud prevention.
• Identity verification documents: government-issued IDs, proof of address, and other documents required for age and eligibility checks or AML/CFT compliance.
• Communications with Setrabet: messages to customer support, chat transcripts, and survey responses.
• Other data provided voluntarily: information submitted through forms or correspondence to support or Compliance teams.

Purposes of Processing

• To provide and operate Setrabet services, process bets and payments, and manage user accounts.
• To verify identity and age, prevent fraud, and comply with anti-money laundering (AML) and combating the financing of terrorism (CFT) requirements.
• To analyze usage, improve functionality, and enhance security across the platform.
• To communicate with users about account-related matters, security, and operational notices.
• To inform users about promotions or new products where consent or lawful basis for marketing exists.

Legal Bases for Processing

We rely on several lawful bases for processing personal data, including the performance of a contract, compliance with legal and regulatory obligations (including AML/CFT), legitimate interests in maintaining security and service quality, and, where applicable, consent for marketing activities. You may withdraw consent for marketing at any time; withdrawal does not affect prior processing.

Marketing Communications

We may send promotional communications to you via email or other channels if you have opted in or not opted out, depending on applicable law. You may opt out at any time through your account settings or by contacting our Privacy Officer. Even after opting out, we may send essential transactional communications related to your account or our services.

Data Sharing and Recipients

We may disclose personal data to:

• Internal Setrabet entities and affiliated groups as necessary to provide services.
• Service providers (for example, payment processors, IT services, fraud prevention, analytics, and customer support) under data processing agreements that require them to protect your information.
• Regulators, licensing authorities, and law enforcement as required by law or to protect the rights and safety of Setrabet and its users.
• Business partners with your consent or as necessary to deliver services, including promotional partners where you have opted in.
• Entities in the event of corporate transactions (merger, reorganization, sale). In such cases, we will notify you and ensure the transfer retains data protection standards.

We may transfer data across borders, including to jurisdictions outside your residence. In all cross-border transfers, we implement safeguards to protect your data in line with applicable law.

Data Retention

We retain personal data for as long as necessary to provide the services and to meet legal and regulatory obligations. In particular, AML regulations in many jurisdictions require us to retain information relating to a player’s registration and activity for a minimum of five years from the date of the last transaction or account closure. After the retention period, data will be securely deleted or anonymized, except for anonymized derivatives kept for legitimate analytics purposes where no individual data can be identified.

Security of Your Data

Setrabet maintains appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. Security controls include TLS encryption for data in transit, encryption of sensitive data where feasible, access controls, audit logging, and regular security reviews. Users should maintain the confidentiality of their login credentials and enable two-factor authentication where offered.

Your Rights

You may exercise certain rights regarding your personal data, subject to applicable law, including:

• Right of access to confirm whether we process your data and to obtain a copy.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure where processing is no longer necessary or unlawful, subject to regulatory retention requirements.
• Right to restriction of processing in certain circumstances.
• Right to data portability where applicable.
• Right to object to processing based on legitimate interests or for direct marketing, including profile-based advertising.
• Right to withdraw consent for processing based on consent.
• Right to lodge a complaint with a supervisory authority and to seek a remedy where applicable.

To exercise these rights or for questions about your data, contact our Data Protection Officer at [email protected]. We may require verification before processing requests.

Cookies and Tracking Technologies

We and our service providers use cookies and similar technologies to operate the site, analyze usage, and personalize experiences. We classify cookies as essential (required for site operation), functional (remember preferences), performance/analytics (understanding usage), and advertising (targeting). You may manage your cookie preferences through the site’s cookie banner or settings; incidentally, some cookies are necessary for service delivery and cannot be disabled without affecting functionality.

Minors

Setrabet’s services are not directed to individuals under 18 years of age or under the legal age for online gambling in their jurisdiction. We implement identity and age verification measures. Any account found to belong to a minor will be blocked and subject to security checks and regulatory requirements.

Third-Party Links and Social Features

Our site may integrate with third-party services and social features. We are not responsible for the privacy practices of those third parties. Data collected by such services is governed by their respective privacy policies.

Cross-Border Data Transfers

Where data is transferred outside the jurisdiction in which you reside, Setrabet implements appropriate safeguards to ensure ongoing protection of your personal data, including contractual protections and, where applicable, recognized transfer mechanisms.

Policy Changes

We may update this Privacy Policy from time to time. We will publish the date of the latest revision and, where required, notify users of material changes. Continued use of the services after changes constitutes acceptance of the revised policy.

Contact Us

For questions about this Policy, to exercise rights, or to report privacy concerns, contact Setrabet’s Privacy Officer at [email protected]. You may also reach out via our designated support channels for privacy inquiries.