How we handle personal data throughout your account relationship

Effective Date: 14 August 2026

Last Updated: 14 September 2026

This Privacy Policy explains how UNO Digital Media B.V. collects, uses, shares, retains and protects personal data when you visit BetOnRed, create or use an account, make a payment, complete verification, contact support, manage marketing choices or use responsible-play controls.

1. The controller and scope of this policy

UNO Digital Media B.V., company registration 157147, is the BetOnRed operator and the controller responsible for the personal data covered by this policy. Our registered office is Johan Van Walbeeckplein 24, Willemstad, Curacao. We operate under Curacao eGaming licence No. 1668 JAZ, B2C-AK2QPM3H-1668JAZ.

This policy applies to our website, account area, casino and sportsbook services, cashier interactions, verification processes, support communications, marketing preferences, cookies and similar technologies, and responsible-gambling controls. It also explains what happens when an authorised provider assists us with payments, identity checks, hosting, security, analytics, communications or fraud prevention.

2. Personal data connected to your use of BetOnRed

The data we handle depends on what you do on our site and the checks associated with your account.

3. Why we process data and the legal basis we rely on

We process personal data only for defined purposes and with an applicable basis.

Contractual necessity

We use account, transaction and gambling data to administer your account, provide casino and sportsbook functions, operate the cashier, support you and maintain account controls.

Legal obligations

We process identity, age, payment and transaction information for KYC, AML, fraud prevention, responsible gambling, recordkeeping and lawful authority requests.

Legitimate interests

Our legitimate interests include account security, misuse prevention, accurate records, complaint resolution and service performance. We apply proportionate controls when relying on this basis.

Consent

Consent may apply to selected marketing, optional cookies or another clear choice. You may withdraw it through the route connected to that choice without affecting earlier lawful processing.

4. KYC, AML and account-security checks

Only people aged 18 or older may hold an account. We use identity and account data to confirm age, connect activity to the correct person and enforce the rule that one account is permitted per person, household, IP address and computer.

Checks may compare registered information with ID, proof of address, payment evidence, a selfie or video, or a verification call. The payment method must belong to the account holder and its name must match. Transaction and play records also show whether deposited funds have met the 3x wagering rule before withdrawal.

5. Payment data and the processor relationship

UDM Processing Services Ltd, company number HE 435747, at Ymittou 4, Block C, Office 201, 2113 Nicosia, Cyprus, acts as the payment processor for our service. Payment processing requires information that connects the transaction to your account, such as the route, amount, currency, account-holder identity and transaction status.

Commonly listed payment families include Visa, Mastercard, Skrill, Neteller, MiFinity, Paysafecard and selected cryptocurrencies. The cashier displays the exact route and local values. Our internal operating currency is EUR; an issuing bank or processor can apply conversion when another currency is used.

6. Cookies, local storage and similar technologies

Cookies and comparable technologies operate sessions, remember choices, support security and measure performance. Necessary technologies support access and transactions. Analytics track errors and navigation; advertising or affiliate attribution may connect a visit with a campaign; local storage may preserve settings or session information.

Where a choice is required, use the cookie control presented on our site to manage optional categories. Browser controls can also delete or block stored information, although changing essential storage can affect login or transaction continuity.

7. When we share personal data

We share only the data needed for a provider or authority to perform its role. Recipients may include:

• UDM Processing Services Ltd and payment-route providers for deposits, withdrawals, reconciliation and transaction review;
• identity and verification providers for age, document, address, payment-ownership, selfie, video or call checks;
• hosting, infrastructure, security and fraud-prevention providers that protect our site and account systems;
• analytics and communication providers supporting performance measurement, service messages and preference management;
• professional advisers and parties involved in establishing, exercising or defending legal rights;
• licensing, regulatory, law-enforcement or other competent authorities when disclosure is lawfully required.

Providers must use data for the agreed purpose and apply confidentiality and security controls.

8. International transfers

Our operator is registered in Curacao, and our payment processor is based in Cyprus. Providers supporting an international service may process data in more than one jurisdiction. When a transfer requires additional protection, we use an appropriate contractual, organisational or legal safeguard and limit the data to the service purpose.

9. How long we retain records

Retention is based on account activity, the purpose of the record, legal and regulatory obligations, security needs, payment reconciliation, disputes and the defence of legal claims. Identity and transaction records may need a different retention period from marketing preferences or routine technical events.

Dormancy begins after 12 months, but dormant status does not itself erase data. Records may still be needed for account administration, AML, complaints or legal obligations after activity stops or the account closes.

When data is no longer required for a lawful purpose, we delete it, anonymise it or place it beyond ordinary use under an applicable retention control.

10. Security measures and your role

Our site uses SSL for data in transit. Access controls, authentication, monitoring, secure hosting, fraud prevention and administrative safeguards protect account records. Verification and payment-ownership checks protect sensitive actions.

No security control removes every risk. Protect your password and device, keep account details accurate, use only payment methods held in your own name and tell us promptly if you suspect unauthorised access. Do not send sensitive documents to an address or channel other than the one specified for the relevant verification step.

11. Your privacy rights and how to use them

Depending on the law applicable to your request, you may have the right to:

• ask for access to personal data and information about its use;
• correct incomplete or inaccurate account information;
• request deletion where continued retention has no overriding lawful basis;
• request restriction while accuracy, grounds or a dispute are examined;
• object to processing based on legitimate interests or to direct marketing;
• receive eligible data in a portable format;
• withdraw consent for processing that relies on consent;
• complain to an applicable data-protection authority.

Send a request to [email protected] and identify the account. We may verify identity first. Rights can be limited by AML, security, disputes, legal duties or others’ rights; our response will explain any applicable limit.

12. Marketing choices and responsible-play communications

We record whether you have chosen to receive eligible marketing and use that preference when sending promotional messages. You can use the opt-out route in a message or ask support to change the marketing preference associated with your account.

Service messages for security, payments, verification, policy or responsible-gambling actions are separate. Self-exclusion may require marketing suppression and a record that preserves the control.

13. Minors and shared devices

BetOnRed accounts are for people aged 18 or older. We may process identity and age evidence to enforce that requirement. Adults sharing a device should secure passwords and payment credentials and use parental or device controls to prevent minors from accessing gambling services or account information.

14. Policy changes and the date that governs

We may update this policy when our processing, services, safeguards or legal obligations change. The Last Updated date shows when the current text was issued. Material account-related information may also be communicated through an appropriate service channel. Review the current policy together with our Terms and Conditions when making decisions about your account.

15. Privacy contact

Send privacy questions, rights requests and concerns about personal-data handling to:

UNO Digital Media B.V. Johan Van Walbeeckplein 24 Willemstad, Curacao Email: [email protected] Telephone: +35880005733

State that the request concerns privacy and include the account email where appropriate. Provide only the information needed to identify the request; our team will direct any verification through the proper process.