Privacy Policy

Privacy Policy

bet-at-home undertakes to protect the personal data of its customers. Therefore, we exclusively process your data based on the legal provisions. This Data Protection Directive contains (together with the General Terms and Conditions as well as all other documents which concern this) the basis on which bet-at-home handles personal data.

All collected data is only used for the purpose indicated respectively. Data that does not serve that purpose is not collected. Misuse as well as any kind of abuse is therefore ruled out.

bet-at-home’s offer can be accessed via both a desktop and mobile version of bet-at-home’s website, as well as via apps. When references to the website, apps, or services of bet-at-home are made in this Policy, it is to be understood that bet-at-home’s entire offer is being referenced. This shall apply no matter which means (desktop version, mobile version, or apps) are used to access this offer.

The terms used in our Privacy Policy and our data protection practice are based on the provisions of the EU General Data Protection Regulation ("GDPR") and other relevant national legal provisions.

1. Contact

bet-at-home*
Cornerstone Business Centre, Level 2, Suite 1
Pjazza s -16 ta’ Settembru
Mosta, MST 1180
MALTA

If you want further information on data protection or additional information on how your personal data is processed, please contact our data protection officer at dataprotection@bet-at-home.com.

2. Protection of your personal data

We always strive to protect your personal data. Protection is ensured by the high quality expectations and standards of bet-at-home as well as by legal provisions due to which we are obligated to strict data protection. This means that your personal data is only processed within these legal provisions. Processing is permitted based on the following legal bases:

• to fulfil a contract or for pre-contractual measures,
• legal obligation,
• consent,
• legitimate interest,
• public interest,
• vital interest.

Legitimate interest

It can happen that we process your data out of our legitimate interest due to business or company strategic reasons. However, measures have been taken and considerations made to protect your data and ensure your rights and interests are protected.

If we process your personal data out of our legitimate interest, we will inform you about it and also about our legitimate interest. If you have questions or objections, please contact us. In this case, we check whether your interests outweigh ours.

3. We process the following of your personal data

On the one hand, personal data is collected from you when you expressly communicate such data to us, on the other hand, data, especially technical data, is automatically collected when you visit our website. Some of this data is collected to ensure that our website functions without errors. Other data may be used for analysis purposes. However, you can use our website without a need to provide personal information.

Personal data that you provide

Name, e-mail address, country, address, post code, payment method, date of birth, phone number, ID data, bank details, transaction details, credit card details, bank account details, playing details, playing preferences, playing behaviour, your communication with our customer support, information you provide in the course of customer surveys, verification information or information regarding anti-money laundering and fraud prevention activities.

We collect these data in various ways, e.g. when you enter your data during the registration of your player account, make deposits or withdrawals, interact with our customer support, participate in bonus offers or customer surveys, provide data for verification purposes or use our services.

Automatically collected information

Technical information, including the IP address the user uses for the connection of his computer to the internet, his login data, type and version of the user’s browser, type of device (PC, smartphone, tablet), name of the device, serial number (unique finger print based on the device of the player), device identifier (serial number for the identification of the used device), ASP.NET session ID (session ID in order to identify the user), device protocol (required in order to solve possible device specific support cases), time zone settings, types and versions of browser plug-ins, operating system and platform. Information regarding the user’s visit, including the complete URL, to, on, and of bet-at-home, offers which the user considers, the date and time as well as the length of visit to certain pages, the pages’ interactive information (such as e.g. scrolling, clicks, and holding the mouse cursor) as well as the methods used to leave the page and all telephone numbers which were used to contact bet-at-home may also be stored. If the user uses the feedback form to contact bet-at-home, their IP address will also be transferred.

4. Transfer of personal data

We share your personal information with:

• companies within the bet-at-home corporation*
• authorities and regulators
• credit bureaus
• identity verification agencies
• companies/organisations that combat fraud, solve crimes and maintain the integrity of sports
• sports bodies and associations
• organisations that get you to know us
• third parties you allow to forward your data
• third parties that are necessary for us to offer our services
• data processors

Data processing by data processors

The protection of your data remains our responsibility when data is processed by data processors. We therefore always check whether the data processors have taken sufficient technical and organizational measures to protect your rights and to ensure an appropriate level of protection. We consult the following data processors:

• IT consultants
• payment providers
• verification service providers
• telecommunication service providers
• printing companies
• shipping providers
• companies within the bet-at-home corporation
• event organisers
• marketing providers
• service and game providers
• cloud platform provider
• customer support platform provider
• responsible gaming platform provider

4.a Identity verification and related data transmission

We are required by law to verify age and identity in order to prevent minors or excluded players from participating in gambling. In order to fulfil these obligations, bet-at-home uses Insic GmbH, Brookweg 6a, D-22941 Jersbek. Further information on the work of Insic GmbH can be found online at: https://insic.de/datenschutzbestimmungen/.

The legal bases of these transmissions are Article 6 para. 1 lit. b (contract), Article 6 para. 1 lit. c (legal obligation) and/or Article 6 para. 1 lit. f (legitimate interests) of the General Data Protection Regulation.

In order to verify your identity, the following companies may be consulted via the Insic system as well:

• SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden:
  bet-at-home may transfer personal data, collected within the scope of the instant contract related to the application for, performance or termination of this business relationship to SCHUFA Holding AG. The legal basis for such transmission comprise Art. 6 para. 1 lit. b and Art. 6 para. 1 lit. f General Data Protection Regulations. Data may only be transmitted on the basis of Art. 6 para. 1 lit. f General Data Protection Regulations to the extent necessary for the purposes safeguarding the legitimate interests pursued of bet-at-home or third parties and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
  Data transmission to SCHUFA may also occur in order to comply with legal obligations (Art. 6 para.1 lit. c General Data Protection Regulation) regarding age and identity verification (SCHUFA-IdentityCheck Premium) as well as verification of bank accounts (SCHUFA-BankaccountCheck plus IBAN).
  Additional information regarding SCHUFA’s business may be found in the SCHUFA information sheet pursuant to Art. 14 General Data Protection Regulation or online at https://www.schufa.de/datenschutz.
• yes.com AG, Hafenstrasse 2, CH-8853 Lachen:
  Users of the identity service "yes®" from yes.com AG will be forwarded directly to their participating credit institution's online banking. After successfully logging in, the user is shown the data that is to be transferred directly to the online service provider (bet-at-home). The user authorises the transfer of the data which they have reviewed. You can find further information about the identity service "yes®" at participating credit institutions.

4.b Data transmission outside of the EU

We endeavor to select our services in such a way that data processing can take place within the EU. Processors outside the EU are only used by us in exceptional cases and only if

• the European Commission states that the third country has an adequate level of protection or
• the data processing contract is based on standard protection clauses or
• the contractual partner has appropriate binding corporate rules or
• there are an appropriate code of conduct and appropriate certification mechanisms or
• an adequacy decision was made by the European Commission.

We are also examining the need to select and apply additional measures by the data processors in order to achieve a level of protection for the transmitted data that is equivalent to the standard under Union law. The data processors are responsible for ensuring that this level of protection is maintained for all data transfers.

4.c Player exclusion system OASIS

Due to the valid licensing requirements, it is necessary to perform checks with the nationwide player exclusion system OASIS of the Darmstadt regional council. The goal is to check whether a player is listed on OASIS‘ self-exclusion list. In order to perform these checks, bet-at-home has to transmit the player’s first and last name as well as their date of birth to the central exclusion database of the State of Hesse upon registration.

The legal bases of this transmission are, therefore, Article 6 para. 1 lit. c (legal obligation) of the General Data Protection Regulation and especially Section 4 para. 5 lit. 1 of the State Treaty on Gambling.

4.d Web service ARGUS

The web service (ARGUS), which bet-at-home is obligated to implement, provides the authority (Darmstadt regional council) with the requested types of data on their demand: Players, bets, logins, transactions, limit changes and exclusions with OASIS. This is essential in order to enable the regulatory body to check the compliance with the goals of the State Treaty on Gambling in accordance with paragraph 1 of the same.

The legal basis of this transmission is Article 6 para. 1 lit. c (legal obligation) of the General Data Protection Regulation.

4.e Verification of the economic capacity

Data transmission to SCHUFA

bet-at-home transmits personal data collected within the scope of this contractual relationship regarding the application for and execution of this business relationship to the SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany. The legal basis for these transfers is Article 6(1)(b) and Article 6(1)(f) of the General Data Protection Regulation (GDPR). Transfers based on Article 6(1)(f) GDPR may only be made if it is necessary to protect the legitimate interests of bet-at-home or third parties and does not override the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The exchange of data with SCHUFA serves in particular to fulfil legal obligations for player protection and to assess economic capacity for gambling, for example in the context of an intended limit increase.

SCHUFA processes data in order to provide its contractual partners in the European Economic Area and in Switzerland as well as, if applicable, other third countries (provided that a corresponding adequacy decision has been made by the European commission or standard contractual clauses have been agreed upon, which can be viewed at https://www.schufa.de/en/) with information, among other things, for assessing the creditworthiness of natural persons. Further information on SCHUFA's activities can be found in the SCHUFA information sheet or online at https://www.schufa.de/datenschutz.

4.f National gambling evaluation system (LUGAS)

The State Treaty on Gambling, specifically the regulations of §§ 6c and 6h, require all licenced gambling providers in Germany to establish a national central database (LUGAS). All deposits and playing transactions have to be transmitted to this central database. This should enable players to stick to a deposit limit across providers that the players set themselves. It should also prevent parallel play at several gambling providers.

The Landesverwaltungsamt Sachsen-Anhalt, Ernst-Kamieth-Straße 2, 06112 Halle (Saale) is responsible for the national evaluation system LUGAS. Further information regarding LUGAS can be found online under: https://mi.sachsen-anhalt.de/themen/gluecksspiel/technische-informationen.

The legal basis for this transmission is article 6 paragraph 1 lit c of the General Data Protection Regulation (legal obligation).

5. Deletion of data

Your data is only used for purposes stated by us and we ensure adequate security. We generally delete your personal data upon the termination of the contract, however, at the latest after the completion of the legal retention period of ten years. Data is stored due to legal obligation. The actual duration of data retention, however, depends on the respective individual case.

6. In the context of the GDPR you can claim the following rights regarding the processing of your data

Right of access: You can request a confirmation from us as to whether and to which extent we process your data.
Contact:
bet-at-home*
Cornerstone Business Centre, Level 2, Suite 1
Pjazza s -16 ta’ Settembru
MST 1180, Mosta
MALTA
service.en@bet-at-home.com

Right to rectification: If we process incomplete or inaccurate personal data, you can request a correction or completion of your data at any time.

Right to erasure: You can request the deletion of your personal data if we are processing them unlawfully or the processing interferes disproportionately with your rightful interest for protection. Please be aware that there are reasons which oppose immediate erasure, e.g. the legal obligation to retain data.

Right to restriction of processing:
You can request a restriction of processing your data if

• you contest the accuracy of the data for a period that enables us to verify the accuracy of the data,
• the processing of the data is unlawful, but you oppose an erasure and instead request a restriction of use,
• we no longer need the data for the purposes of processing, but you still require the data to exercise or defend legal claims, or
• you object to processing the data.

Right to data portability: We have to make your data that you entrusted us with available to you in a structured, commonly used and machine-readable format as long as we are processing these data according to your given and revocable agreement or to complete a contract and this processing is carried out by automated means.

Right to object: If your data is processed in order to take on tasks of public interest or to exercise public authority or if we refer to the necessity of processing the data to maintain our legitimate interest, you can object to the processing of your data if the protection of your data outweighs our legitimate interest. You can also revoke any agreements to bet-at-home collecting and saving your personal data at any time as long as there is no opposing contractual or legal obligation.

Right to complain: If you believe that we are violating European data protection law when processing your data, we would ask you to contact us in order to clarify any questions you may have. It is of course also within your right to complain to a regulating authority within the EU.

Verification of identity: In order to protect your rights and privacy, we can, if in doubt, request information to verify your identity.

Fee for claiming of rights: If you use one of the stated rights evidently without reason or very frequently, we can charge an adequate processing fee or refuse to process your request. This also applies to a significant or unreasonable additional effort due to the request.

Assertion of rights: If you wish to assert one of the aforementioned rights in regard to us, simply use our contact options.

In the case of frequent or repeated requests for the assertion of rights, we are not obliged to act on the request in accordance with Article 12 (5) of the GDPR, or we may charge a fee for our activities. This also applies in the event of considerable or unreasonable additional expense due to the request.

We therefore point out that the assertion of rights is possible once per half-year free of charge. If the player account is locked/closed, the rights can be exercised once per year free of charge. Before the expiry of these periods, you can assert the rights at any time with payment of an appropriate fee.

Please note that data and documents transmitted by us can always be accessed via a password-protected download link, which is valid for 14 days and then automatically expires.

7. Storage of personal data

Customer data is transmitted, stored, and processed electronically. All information you provide to us is saved on the servers of bet-at-home and only trained and authorised persons, who are bound to treat personal data confidentially and in accordance with the current date protection regulation, have access to it. The customer undertakes to keep passwords which provide him/her access to certain areas a secret.

Unfortunately, the transmission of information over the internet is not completely secure. We take all possible steps to protect the personal data of customers. However, complete security of customers’ data can never be guaranteed. Therefore, all transfer of data by the customer is at their own risk. After bet-at-home has received the data, the company takes technical and organisational measures to ensure that bet-at-home’s systems are protected against attacks and misuse, and that the user’s personal data is protected against loss, incorrect modification, and unauthorised use by third parties. In particular, we use reliable encryption for customer data during transmission and storage.

By default, bet-at-home’s apps save the customer’s username. The customer can change this at any time in the settings of the relevant app.

8. Use of your personal data

We process your personal data for the following purposes:

• Establishing and operating your player account; securing the functionality of all services so that they can be used to their full extent, e.g. deposits to your player account, placing bets and playing games. (fulfilling the contract)
• Providing services. (fulfilling the contract)
• Answering your questions via customer support. (fulfilling the contract)
• Fulfilling legal obligations connected to your registration and verification of the accuracy of the personal data you provide including forwarding this data to commercial credit agencies and financial institutions among others. (compliance with legal obligations)
• Fulfilling supervisory obligations. (compliance with legal obligations)
• Documenting your gambling behaviour in order to recognise possible problems regarding responsible gaming early. (compliance with legal obligations)
• Preparing statistics and analysis regarding the use of our services. (legitimate interest)
• Performing customer surveys in order to collect opinions and evaluations regarding our services. This is done for customer analysis purposes and the improvement of our services. It is your choice to decline future surveys. (legitimate interest)
• Monitoring your gambling activity for our risk management and to answer enquiries from authorities. (legitimate interest, compliance with legal obligations)
• Updates to keep you informed about changes of our services, software, General Terms and Conditions or our Privacy Policy. (fulfilling the contract)
• Sending campaigns and promotional material to customers via different channels for customer retention and marketing purposes. (consent, legitimate interest)
• Creating a customer profile and analysis to observe preferences regarding our services and offers with customer retention purposes. (legitimate interest)
• We are obliged to prevent fraud and money laundering and to prevent inappropriate activities while using our services including financing terrorism, or the use of funds earned from activities punishable by law. We are also obliged to conduct investigations to possible player collusion and then prevent them. Should we suspect that such activities are actually taking place, we are obliged to forward this information to the responsible authorities. We exercise these activities via manual and automated checks. (compliance with legal obligations)
• In order to fulfil our obligations in the area of responsible gaming, we observe playing and depositing patterns. That way we guarantee responsible gaming. In order to prevent fraud, money laundering, financing of terrorism or depositing funds that were earned from activities punishable by law as well as for responsible gaming purposes, we add information we receive from third parties or by accessing third party sources, including (without restrictions) information about you published on the internet to the data you provide. (legitimate interest, compliance with legal obligations)

9. Cookies

We use cookies and similar technologies so that our website design is clearer, safer, and more personal. Cookies enable bet-at-home to be able to offer services, to improve the security of the website, to collect information regarding transactions, and to prevent fraud. Furthermore, cookies simplify navigation and facilitate the management of the insertion of particularly relevant or useful information or adverts.

Cookies are small files which are stored on the device of the user to which the browser or the respective app that is used is assigned and through which the party placing the cookie receives certain information. They allow anonymous recognition of the computer, but do not allow personal identification of the visitor. Cookies cannot operate programmes or transfer viruses to the device of the user.

Visitors can prevent cookies from being set in the settings of the browser (Internet Explorer, Chrome, Firefox etc.) they use. To do this, visitors must select "Block all cookies" (or similar wording) by going to Settings > Privacy > Cookies. Depending on the browser, it is possible to set the system so that approval must be requested before cookies are set. Cookies which have been set can then be deleted at any time. Instructions on how to block or delete cookies can be found in the Privacy or Help sections for the browser, as well as online on many forums.

The user can also delete the cookies which are set once in the apps which bet-at-home offers at any time. This can be done by clicking on "Remove Cookies" in the settings of the relevant app.

If all cookies are blocked or deleted, visitors may not be able to use all functions of the website or the app. This can occur on a case-by-case basis.

In addition to the cookies which bet-at-home sets when a visitor accesses the website, third parties also set cookies. This occurs, in some cases, because bet-at-home has commissioned a third party to provide services (such as website analysis, for example). This occurs, in other cases, because bet-at-home’s website contains content (scripts, tracking pixels) from third parties. It is possible for third parties to set their own cookies and collect information about the online activities of visitors because a connection to the web servers of these third parties is established.

By visiting the bet-at-home website, the following cookies from third-party providers are set, among others:

• Strictly necessary cookies: These cookies are necessary for the website to function and cannot be deactivated. They are set in response to an action, such as setting privacy preferences, logging in or filling out forms. Cookies can be blocked or a notification about cookies can be activated in the browser settings. However, then some areas of the website will not function. These cookies do not store any personal data.
• Analytics cookies: These cookies collect information about how our website is used. They allow us to analyse which pages are most popular and how visitors move around the website. All information collected is anonymous. These cookies also help us to compile statistics and analyses for the optimisation of our website and content.
• Cookies for marketing purposes: These cookies are set by advertising partners on our website. They use them to profile interests and display relevant advertisements on other websites. The cookies do not store any personal data, but are based on the unique ID of the browser and device. If these cookies are disabled, less targeted advertising will be displayed.

If links to websites of third parties are available on bet-at-home’s website, visitors should be aware that these websites may set their own cookies and that their own Privacy Policies may apply.

Some or all of the following cookies may be set on the user’s device upon accessing the bet-at-home website:

Third parties that set cookies on the bet-at-home website