Privacy Policy

This Privacy Policy explains how Betty Spin ("we", "us", "our") collects, uses, discloses, and protects your personal data when you visit and use the Betty Spin service available through bettispins.com. It applies to website visitors, registered players, and anyone who contacts us via our support channels. By creating an account or using our services, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective from 6 November 2025.

Who We Are

The Betty Spin service on bettispins.com is operated for players in the United Kingdom by:

Operator: AG Communications Limited
Legal form: Limited company
Registered and head office address: 135, High Street, Sliema SLM 1548, Malta
Jurisdiction of incorporation: Malta
UK gambling licence: United Kingdom Gambling Commission remote operating licence, account number 39483 (Great Britain).

AG Communications Limited is the data controller for personal data processed in connection with Betty Spin for UK players, in accordance with the UK General Data Protection Regulation ("UK GDPR") and the UK Data Protection Act 2018.

Data Protection contact (DPO / privacy team):

Postal: Data Protection Officer, AG Communications Limited, 135, High Street, Sliema SLM 1548, Malta
Email (privacy enquiries): privacy@bettispins.com
Customer support (for data requests or questions): via live chat and email support 7 days a week, 08:00-00:00 CET (07:00-23:00 UK time), accessible through your account on bettispins.com. No phone support is provided.

What Personal Data We Collect

Registration and identity data

Account and contact data: full name, date of birth, residential address, email address, username, password, preferred language, and (where provided) mobile or landline phone number.
Know Your Customer (KYC) and verification data: copies or data from identity documents (e.g. passport, ID card, driving licence), proof of address (e.g. utility bill, bank statement), source-of-funds/source-of-wealth documents, and outcome of verification checks performed with third-party providers.

Technical and usage data

Technical identifiers: IP address, device identifiers, browser type and version, operating system, screen resolution, language settings, and similar technical information.
Usage and log data: login/logout times, session length, pages and features accessed, links clicked, error logs, and other diagnostic information.
Geo-location and VPN detection data: approximate location inferred from IP address and other signals, plus indicators of VPN, proxy, or similar technologies used to mask location (in line with our prohibition on VPN use in the Terms & Conditions).

Gaming, behavioural and communication data

Gaming activity: game selections, bet sizes, stakes, wins and losses, bonus usage, jackpot participation, gameplay timestamps, and session history.
Responsible gambling data: self-exclusion details, time-out settings, deposit and loss limits, reality checks, interactions regarding gambling behaviour, and internal risk assessments related to responsible gambling.
Communication data: records of your communications with us via live chat and email, including complaints, KYC queries, technical questions, and feedback, together with internal notes relating to those contacts.

Financial and payment data

Payment details: information relating to deposits and withdrawals, such as masked card numbers, payment method type, e-wallet or bank account identifiers (as provided by you or our payment partners), and transaction identifiers.
Transaction history: full records of deposits, withdrawals, bonuses credited, wagering requirements, chargebacks, refunds, and AML monitoring flags associated with your account.

Marketing, preferences and profiling data

Marketing preferences: your choices regarding email, SMS, push notifications, and on-site marketing communications.
Behavioural and segmentation data: derived insight about your preferences (for example, preferred game types, typical stakes, device usage patterns) used to tailor offers, subject to applicable legal bases and your marketing choices.

Cookies and similar technologies

Cookie identifiers and tags: unique identifiers stored in cookies, local storage, pixels, or similar technologies that help us recognise your browser, remember your preferences, and understand site usage.
Analytics and advertising data: page views, referral URLs, campaign information, and interactions with our adverts or partner links, possibly collected by third-party analytics and advertising networks (where permitted by law and by your consent choices).

Legal Basis for Processing

We process personal data in accordance with the UK GDPR, the UK Data Protection Act 2018, and, where relevant, applicable European and Mexican data protection laws. Depending on the specific processing activity, we rely on one or more of the following legal bases:

Performance of a contract

Account creation and management: processing your registration data, verifying your age and identity, enabling logins, and operating your Betty Spin account at bettispins.com.
Providing gaming services: accepting bets, processing deposits and withdrawals, applying bonuses, settling wagers, and providing customer support necessary to deliver the services you have requested.

Compliance with legal obligations

Gambling and licensing obligations: meeting requirements imposed by the United Kingdom Gambling Commission, including fair and open gambling, prevention of crime, and protection of vulnerable persons.
Anti-money laundering (AML) and counter-terrorist financing (CTF): conducting KYC checks, monitoring transactions, retaining records for legally mandated periods (typically five years after the end of the relationship), and reporting suspicious activity.
Data protection and consumer laws: handling your requests related to data protection rights, responsible gambling measures, and regulatory reporting.

Legitimate interests

Service security and integrity: protecting the platform against fraud, abuse, collusion, bonus misuse, chargebacks, and breaches of our VPN and geo-location policies, while balancing your rights and freedoms.
Service improvement and analytics: analysing usage patterns (in aggregated or pseudonymised form where possible) to improve user experience, product offerings, and site performance.
Internal administration: business planning, reporting, risk management, and managing our relationship with players across the AG Communications Limited network.

Consent

Marketing communications: sending email, SMS, push, and in-account marketing messages about promotions, bonuses, and new features, where required by law and only if you have given valid consent or you have not objected when we rely on soft opt-in where available.
Non-essential cookies and similar technologies: using analytics and advertising cookies, pixels, and tracking technologies that are not strictly necessary for providing the service, based on your cookie consent choices.

You may withdraw your consent at any time through your account settings, via the unsubscribe link in emails, or by contacting us; this does not affect the lawfulness of processing before withdrawal.

Purpose of Processing

Provision and operation of the casino service

Account and gameplay management: to register you as a player, verify your eligibility (age and UK location), manage your balance, process deposits and withdrawals, and record your bets, wins, and losses.
Customer support: to respond to queries via live chat and email, handle complaints, assist with KYC procedures, and manage responsible gambling requests.

Compliance, risk and integrity

Regulatory compliance: to comply with UKGC licence conditions, AML/CTF laws, sanctions screening obligations, and responsible gambling requirements, including monitoring gameplay for potential harm.
Fraud and abuse prevention: to detect and prevent fraud, money laundering, bonus abuse, account sharing, identity theft, and prohibited use of VPNs or proxies intended to circumvent geo-restrictions.

Service improvement and analytics

Operational analytics: to understand how players use bettispins.com, identify technical issues, and optimise the user interface, game mix, and performance.
Product development: to develop new features, games, and offers based on aggregated or pseudonymised usage data.

Marketing and personalisation

Direct marketing: to send you tailored promotions, bonuses, and news, subject to your marketing preferences and applicable consent requirements.
Personalised content: to customise site content, lobby layout, and offers shown to you based on your previous activity, responsible gambling status, and stated preferences, in a manner consistent with our legal obligations and your rights.

Legal claims and business purposes

Handling disputes and claims: to establish, exercise, or defend legal claims, including disputes handled internally, via IBAS (our ADR body), or before courts and regulators.
General business operations: to maintain accounting, auditing, and corporate governance processes across AG Communications Limited.

Disclosure & Sharing

Service providers and group companies

AG Communications Limited group and partners: we may share data with group entities and white-label partners involved in providing technical infrastructure, customer support, payment processing, and risk management for Betty Spin on bettispins.com.
Technical and IT vendors: providers of hosting, data storage, security services, game software, communication tools (including live chat and email platforms), and analytics, acting as data processors under written agreements.

Payment and financial institutions

Payment processors: banks, card schemes, e-wallet providers, prepaid card operators, and other payment intermediaries used to deposit or withdraw funds, for transaction processing, fraud prevention, and AML checks.
Financial service providers: entities assisting us with chargeback handling, credit risk checks (where permitted), and prevention of financial crime.

Regulators, authorities and ADR bodies

Regulators and law enforcement: the United Kingdom Gambling Commission, HM Revenue & Customs, the UK Information Commissioner's Office, courts, police, and other competent authorities, when required by law or in connection with suspected unlawful activity.
Alternative Dispute Resolution (ADR): the Independent Betting Adjudication Service (IBAS), when a gambling-related dispute is escalated in accordance with our Terms & Conditions.

Affiliates, marketing and advertising partners

Marketing partners and affiliates: subject to your consent and/or applicable legal bases, we may share limited data (e.g. anonymised identifiers, conversion information) with marketing partners, affiliate networks, and advertising platforms that promote Betty Spin and bettispins.com.
Analytics providers: third-party analytics vendors may receive pseudonymised or aggregated data to help us understand performance of our campaigns and site usage.

Corporate transactions

Business transfers: if AG Communications Limited undergoes a reorganisation, merger, acquisition, or asset sale related to Betty Spin, your data may be transferred to the relevant third party, subject to appropriate safeguards and continuation of this Privacy Policy or an equivalent level of protection.

We do not sell your personal data in the sense of transferring it for monetary consideration for independent use by third parties.

International Transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom, including:

European Economic Area (EEA), including Malta: our headquarters and key infrastructure for AG Communications Limited are located in Malta and other EEA countries. The UK has recognised the EEA as providing an adequate level of protection, and transfers between the UK and EEA are generally permitted.
Other countries outside the UK/EEA: certain service providers (for example, cloud hosting, communications, analytics, or payment partners) may be located or process data in jurisdictions that do not have an adequacy decision from the UK government.

Where we transfer personal data outside the UK and EEA to a country that does not provide an equivalent level of data protection, we implement appropriate safeguards, which may include:

Standard Contractual Clauses approved by the UK and/or EU authorities, supplemented where necessary with additional technical and organisational measures.
Transfers to recipients that have implemented binding corporate rules or other recognised compliance mechanisms.
Careful assessment of local laws and practices, and, where required, only performing transfers with your explicit consent.

You may request further information and a copy of the applicable safeguards by contacting our Data Protection Officer at privacy@bettispins.com, subject to redactions necessary to protect confidentiality.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including satisfying legal, accounting, and reporting requirements, and then securely delete or anonymise it.

Typical retention periods

Account and identification data: normally retained for the duration of your active account and then for up to five (5) years after account closure, in line with AML and regulatory record-keeping obligations.
Transaction and gameplay records: kept for at least five (5) years after the end of the business relationship or the date of the transaction, whichever occurs later, unless longer retention is required for legal claims or regulatory investigations.
Responsible gambling and self-exclusion data: retained for the duration of any self-exclusion or other safer gambling measure and for an additional period (typically up to five (5) years) to support ongoing safer gambling compliance and prevent circumvention.
Marketing data and preferences: retained while you are subscribed to marketing communications and for a short period afterwards (usually no more than two (2) years) to demonstrate compliance with your choices and consent history.
Customer support and complaint records: usually retained for up to eight (8) years from closure of the case, where needed to manage potential legal claims or regulatory enquiries.

When personal data is no longer needed, we will either irreversibly anonymise it (so it can no longer be associated with you) or securely delete it. We may retain anonymised or aggregated data for statistical and analytical purposes without further notice to you.

Your Rights

As a player or visitor of Betty Spin on bettispins.com, you have a range of data protection rights under the UK GDPR and, where applicable, under EU and Mexican data protection laws, including the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

Rights under UK GDPR and EU data protection law

Right of access: to obtain confirmation whether we process your personal data and to receive a copy of such data together with information about the processing.
Right to rectification: to have inaccurate or incomplete personal data corrected or updated (for example, address details or contact information).
Right to erasure: to request deletion of your personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis. Legal and regulatory requirements (such as AML obligations) may mean we cannot delete some data immediately.
Right to restriction: to ask us to restrict processing of your data in specific situations, such as while we verify accuracy or assess an objection.
Right to object: to object at any time to processing based on our legitimate interests, including profiling related to those interests, and to object to direct marketing (including profiling for marketing).
Right to data portability: to receive certain personal data you have provided to us in a structured, commonly used and machine-readable format, and to have that data transmitted to another controller where technically feasible.
Right to withdraw consent: where processing is based on your consent (such as marketing or non-essential cookies), you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Rights under Mexican data protection law (LFPDPPP)

Although Betty Spin is targeted at players located in the United Kingdom, individuals whose personal data is processed in a manner subject to Mexican law may have additional rights, commonly referred to as ARCO rights:

Access: to know what personal data we hold about you, how we obtained it, how we use it, and the conditions of processing.
Rectification: to request correction of inaccurate or incomplete personal data.
Cancellation: to request that your data be deleted when you consider it is not required for the purposes set out, when it is being used for non-consensual purposes, or when the legal relationship has ended.
Opposition: to object to specific processing activities, including for marketing purposes, where permitted by law.

How to exercise your rights

Submission of request: You may exercise your rights free of charge by contacting our Data Protection Officer at privacy@bettispins.com or by using the support channels (live chat or email) available on bettispins.com. Please indicate that your request relates to data protection and specify the right you wish to exercise.
Verification: For security and confidentiality, we may ask you to provide information to verify your identity (such as certain account details or ID documentation, where appropriate) before acting on your request.
Response timeframe: We aim to respond to all valid requests within one (1) month from receipt. If your request is complex or we receive a high volume of requests, we may extend this period by a further two (2) months, in which case we will inform you of the extension and reasons.
Charges: Requests are handled free of charge. However, if a request is manifestly unfounded or excessive (for example, repeated requests), we may charge a reasonable fee or refuse to act, in line with applicable law.

If you are not satisfied with our response, you also have the right to lodge a complaint with the relevant supervisory authority, as described in the "Complaints & Contacts" section.

Cookies & Tracking Technologies

We use cookies and similar technologies on bettispins.com to ensure the site functions properly, to enhance your experience, and to provide analytics and marketing services in accordance with your preferences and applicable law.

Types of cookies we use

Strictly necessary (session) cookies: essential for the functioning of the site and to enable core features such as logging in, maintaining your session, and protecting the security of your account. These cookies are usually session-based and expire when you close your browser.
Functional (persistent) cookies: used to remember your preferences, such as language and display settings, so that your experience is more consistent and user-friendly on subsequent visits.
Analytics cookies: first- and third-party cookies that collect information about how visitors use the site, such as which pages are visited and how often, helping us to improve functionality and user experience. Data is typically aggregated and used for statistical purposes.
Advertising and marketing cookies: cookies and tracking technologies used to measure the performance of our marketing campaigns, deliver more relevant adverts, and avoid showing you the same promotions repeatedly. These may be set by us or by carefully selected partners.

Managing cookies and tracking technologies

Cookie banner and settings: on your first visit and periodically thereafter, you will be presented with a cookie banner where you can accept or reject non-essential cookies and manage your preferences.
Account settings: where available, you may adjust certain cookie and communication preferences from within your Betty Spin account on bettispins.com.
Browser settings: most browsers allow you to block or delete cookies via their settings. However, blocking strictly necessary cookies may impact site performance or prevent you from using some features.

Further details about specific cookies used by us and our partners, including their lifetimes and purposes, may be provided in a dedicated Cookie Policy or within the cookie management tool on the site.

Data Security

We take the security of your personal data and player funds seriously and implement a combination of technical and organisational measures to protect them from unauthorised access, loss, misuse, alteration, or disclosure.

Technical security measures

Encryption in transit and at rest: data transmitted between your browser and bettispins.com is protected using TLS 1.2 or higher. Sensitive data is stored using strong encryption and industry-standard hashing algorithms where appropriate.
Access controls and authentication: access to systems processing personal data is restricted to authorised personnel on a need-to-know basis, protected by strong authentication mechanisms. Where appropriate, multi-factor authentication is enforced for administrative access.
Network and application security: firewalls, intrusion detection and prevention systems, DDoS mitigation, secure development practices, and regular vulnerability scanning are used to protect our infrastructure.

Organisational and procedural measures

Policies and training: staff involved in handling personal data receive regular training on data protection, information security, AML, and responsible gambling requirements. Internal policies govern how data is accessed and used.
Security assessments and audits: we carry out regular internal reviews and work with specialist providers to assess and improve our security posture. We align our security framework with recognised standards such as ISO/IEC 27001 and SOC 2 controls, where appropriate.
Incident response: formal procedures are in place to detect, respond to, and remediate security incidents. Where a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the appropriate supervisory authority and, where required, inform you without undue delay.

Player funds protection

Segregation of player funds: player funds are held in a separate account from company operational funds, offering a medium level of protection in line with UK Gambling Commission requirements.
Insolvency risk: in the event of insolvency, there is a risk that some or all of your funds may not be repaid. This is described as a medium level of protection in the UKGC's rating system and is not the same as full trust or insurance protection.

Complaints & Contacts

Contacting us about privacy or data protection

If you have questions, concerns, or complaints about how we handle your personal data, you can contact us using the following channels:

Data Protection Officer: privacy@bettispins.com
Postal address: Data Protection Officer, AG Communications Limited, 135, High Street, Sliema SLM 1548, Malta
Customer support: via live chat and email through your account on bettispins.com, available 7 days a week, 08:00-00:00 CET (07:00-23:00 UK time). No telephone support is available.

Complaint handling procedure

Initial contact: Submit your privacy-related concern or data protection complaint via email to the DPO or through customer support. Please provide sufficient detail (e.g. account username, description of the issue, relevant dates).
Assessment and acknowledgement: We will review your complaint and acknowledge receipt, usually within a few working days.
Investigation: The relevant team will investigate the matter, which may involve contacting you for further information. We aim to provide a substantive response within one (1) month.
Escalation: If you are not satisfied with the initial response, you may request internal escalation, for example to a senior manager or directly to the DPO. For gambling-related complaints (rather than privacy-specific issues), escalation may include our internal complaints process and then, after up to eight (8) weeks or upon reaching a deadlock, referral to IBAS as ADR.

Supervisory authorities and external escalation

United Kingdom: You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK data protection authority: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom; website: www.ico.org.uk.
European Union/EEA (where applicable): If EU data protection law applies to your circumstances, you may also complain to your local data protection authority in the EU/EEA.
Mexico (where applicable): If your data is processed in a context subject to Mexican law, you may lodge a complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI), pursuant to the LFPDPPP. Further information is available at www.inai.org.mx.

We encourage you to contact us first so that we can attempt to resolve your concerns directly and efficiently.

Updates

We may update this Privacy Policy from time to time, for example to reflect changes in our services, legal requirements, or regulatory guidance affecting Betty Spin and bettispins.com.

How we will inform you of changes

Website notice: we will post the updated Privacy Policy on bettispins.com and update the "Last updated" date shown below.
Direct notifications: for material changes, we will take additional steps to notify you, such as email notifications, in-account messages, or prominent banners when you next log in.
Advance notice: where a change is significant and may materially affect your rights or the way we process your data, we will, where reasonably possible, provide at least thirty (30) days' notice before the change takes effect.

Your options in case of changes

Reviewing changes: we encourage you to review the Privacy Policy regularly so that you remain informed about how your data is used.
Continuing to use the service: if you continue to use Betty Spin on bettispins.com after the updated Privacy Policy takes effect, your continued use will constitute acceptance of the revised terms.
Account closure: if you do not agree with a material change, you may close your account and request that we stop using your personal data for the purposes set out in the updated policy, subject to our legal obligations to retain certain data.

Last updated: November 2025