Privacy Policy

Version: 1.0  |  Last Updated: 1 September 2025

At ZizoBet ("we", "us", "our"), we are committed to protecting your personal data and respecting your privacy rights. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you visit and use the Platform at zizo-bet-casino.org.uk.

This Policy is drafted in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It should be read together with our Terms & Conditions and our Responsible Gaming Policy.

1. Introduction

1.1. Who We Are

ZizoBet is the operator of the online gaming platform accessible at zizo-bet-casino.org.uk. For the purposes of UK data protection law, ZizoBet acts as the Data Controller in respect of personal data collected through the Platform.

1.2. Scope

This Policy applies to all personal data collected from players, website visitors, and other individuals who interact with us through the Platform, email, live chat, telephone, or any other channel. It does not apply to the data practices of third-party websites linked from our Platform.

1.3. Updates

We may update this Privacy Policy from time to time. Where changes are significant, we will notify you by email or by a prominent notice on the Platform. Continued use of the Platform after the effective date of an updated Policy constitutes your acknowledgement of the changes.

2. Data We Collect

2.1. Personal Data You Provide Directly

When you register an account, use our services, or contact us, we may collect the following categories of personal data:

• Identity Data: Full name, date of birth, gender, username;
• Contact Data: Email address, telephone number, postal address;
• Verification Data: Copies of identity documents (passport, driving licence, national ID), proof of address, and payment method documentation collected as part of KYC procedures;
• Financial Data: Payment card details (processed by PCI-DSS-compliant third parties), bank account information, transaction history, deposit and withdrawal records;
• Account Data: Login credentials (passwords stored in encrypted form), account preferences, responsible gaming settings;
• Communications Data: Records of your correspondence with us via email, live chat, or other channels.

2.2. Data We Collect Automatically

When you visit or interact with the Platform, we automatically collect certain technical and behavioural data, including:

• Technical Data: IP address, browser type and version, operating system, device identifiers, time zone and location settings;
• Usage Data: Pages visited, games played, session duration, click-through data, wagering activity, and game history;
• Cookie Data: Information collected via cookies and similar tracking technologies (see Section 6);
• Fraud Prevention Data: Device fingerprint, login timestamps, and behavioural analytics used to detect suspicious activity.

2.3. Data from Third Parties

We may receive personal data about you from third-party sources, including:

• Identity verification and KYC service providers;
• Fraud detection and anti-money laundering screening agencies;
• Credit reference agencies (where applicable);
• Marketing and affiliate partners (in line with their own privacy notices);
• Publicly available sources, including sanctions lists and politically exposed persons (PEP) databases.

3. How We Use Your Data

3.1. Purposes of Processing

We use your personal data for the following purposes:

• Account Creation & Management: To register your account, verify your identity, and provide access to our services;
• Service Delivery: To process deposits, withdrawals, and gameplay, and to administer your account and bonus entitlements;
• Legal & Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and consumer protection laws, including age and identity verification;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account abuse, and other illegal activities;
• Responsible Gambling: To monitor gaming activity for signs of problem gambling and to administer player protection tools in accordance with our Responsible Gaming Policy;
• Customer Support: To respond to your enquiries, resolve disputes, and manage complaints;
• Marketing & Communications: To send you promotional offers, newsletters, and personalised recommendations, where you have provided your consent or where we have a legitimate interest to do so;
• Analytics & Improvement: To analyse usage patterns and Platform performance in order to improve our services;
• Legal Claims: To establish, exercise, or defend legal claims.

4. Legal Bases for Processing

4.1. UK GDPR Legal Bases

We process your personal data under the following legal bases, as defined by the UK GDPR:

• Contract Performance (Article 6(1)(b)): Processing necessary to perform our contractual obligations to you, including account registration, deposit processing, and game provision;
• Legal Obligation (Article 6(1)(c)): Processing required to comply with applicable law, including AML/CTF obligations, age verification, and data retention requirements;
• Legitimate Interests (Article 6(1)(f)): Processing for fraud prevention, network security, responsible gambling monitoring, and service improvement, where our interests do not override your fundamental rights and freedoms;
• Consent (Article 6(1)(a)): Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

4.2. Special Category Data

We do not intentionally collect special category personal data (such as health data or data relating to criminal convictions) unless required by applicable law or where you voluntarily disclose such data to us (for example, in the context of a responsible gambling self-referral). Any such data will be handled with additional safeguards.

5. Data Sharing & Third Parties

5.1. Who We Share Data With

We may share your personal data with the following categories of third parties:

• Payment Processors: To facilitate deposits and withdrawals (e.g., Visa, Mastercard, PayPal, Skrill, Neteller, Trustly, Apple Pay, Google Pay, Paysafecard, and banking partners);
• Identity Verification Providers: To conduct KYC checks and verify your identity and age;
• Fraud & AML Service Providers: To screen your account against sanctions lists, PEP databases, and fraud networks;
• Game Software Providers: To deliver casino games and share relevant gameplay data for licensing and compliance purposes;
• Analytics & Marketing Technology Providers: To measure campaign performance and analyse user behaviour (subject to your cookie consent preferences);
• Customer Support Platforms: To manage live chat and email communications;
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or regulatory authority.

5.2. No Sale of Personal Data

ZizoBet does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5.3. Third-Party Data Controllers

Where third-party providers act as independent data controllers (for example, payment processors), your data will be processed in accordance with their own privacy policies. We recommend reviewing those policies directly.

6. Cookies & Tracking Technologies

6.1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. We use cookies and similar technologies (such as web beacons, pixels, and local storage) to operate the Platform, remember your preferences, and analyse how you use our services.

6.2. Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled and do not require consent;
• Functional Cookies: Used to remember your preferences (e.g., language, currency), enhancing your experience;
• Analytics Cookies: Used to collect anonymised information about how visitors interact with the Platform, enabling us to improve our services;
• Marketing & Targeting Cookies: Used to deliver relevant advertisements and track campaign effectiveness. These are only placed with your explicit consent.

6.3. Managing Cookies

You can manage your cookie preferences at any time through the cookie consent banner presented when you first visit the Platform, or through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information, visit www.aboutcookies.org.

7. Data Security

7.1. Security Measures

ZizoBet implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser and the Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols;
• Encryption at Rest: Sensitive data, including passwords, is stored in encrypted form using industry-standard hashing algorithms;
• Access Controls: Access to personal data is restricted on a need-to-know basis, with role-based permissions and audit logging;
• PCI-DSS Compliance: Payment card data is handled exclusively by PCI-DSS-certified payment providers;
• Regular Security Assessments: We conduct periodic vulnerability assessments and penetration testing to identify and address security risks.

7.2. Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority (the Information Commissioner's Office in the UK) in accordance with our obligations under the UK GDPR.

8. Data Retention

8.1. Retention Periods

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and reporting obligations. Standard retention periods include:

• Account Data: Retained for the duration of your account plus five (5) years following account closure, in line with AML regulatory requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction;
• KYC Documents: Retained for a minimum of five (5) years following the end of the customer relationship;
• Marketing Consents: Retained until you withdraw your consent;
• Support Communications: Retained for up to three (3) years following the closure of the relevant support case.

At the end of the applicable retention period, your personal data will be securely deleted or anonymised.

9. Your Rights

9.1. Your UK GDPR Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data we hold about you (a Subject Access Request);
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data;
• Right to Erasure: You may request that we delete your personal data, subject to applicable legal retention obligations;
• Right to Restriction of Processing: You may request that we restrict how we process your data in certain circumstances;
• Right to Data Portability: You may request a copy of your data in a structured, commonly used, machine-readable format, where technically feasible;
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

9.2. How to Exercise Your Rights

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to all valid requests within one (1) calendar month. In complex cases, we may extend this by a further two months and will notify you accordingly.

9.3. Right to Lodge a Complaint

If you believe that we have processed your personal data unlawfully or have failed to respond adequately to your rights request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

10. International Data Transfers

10.1. Transfers Outside the UK

Some of our third-party service providers may process your personal data outside the United Kingdom. Where such transfers occur, we ensure that appropriate safeguards are in place, including:

• Transfers to countries with an adequacy decision from the UK Secretary of State;
• Use of UK-approved Standard Contractual Clauses (SCCs) or International Data Transfer Agreements (IDTAs);
• Binding Corporate Rules (BCRs) where applicable.

You may request further information about international transfer safeguards by contacting [email protected].

11. Minors

11.1. No Services to Minors

The Platform is not directed at, and is not intended for use by, persons under the age of 18 years. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected personal data from a minor, we will take immediate steps to delete that data and close the relevant account. If you are a parent or guardian and believe that a minor in your care has provided us with personal data, please contact us immediately at [email protected].

12. Changes to This Policy

12.1. Policy Updates

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be published on this page with a revised "Last Updated" date. Where changes are material, we will provide additional notice. We encourage you to review this Policy periodically.

13. Contact Information

13.1. How to Reach Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us using the details below:

• General Support: [email protected]
• Data Protection / Privacy Enquiries: [email protected]

We are committed to resolving data privacy concerns promptly and transparently.