Privacy Policy for Donbet

Scope and Controller Identity

This policy governs the processing of personal data for all services operated by Donbet. We act as the data controller in all instances where we collect or process information directly from our users. This document applies to data gathered through our website, mobile applications, and customer support channels. Users must review this text alongside our Terms of Service and Cookies Policy to understand the full scope of our data practices.

We may update this policy from time to time to reflect changes in our operations or legal requirements. Any modification will be posted on this page with a revised date at the top of the document. The version active at the time of your use of our services is the one that governs our relationship. We encourage periodic checks to ensure you are informed of current data handling procedures.

Our obligations are derived from applicable laws in the jurisdictions where we operate. We maintain a register of processing activities that details every category of data we hold and its specific purpose. This register is available for review upon request by competent supervisory authorities. We do not delegate our controller status to third parties even when they assist in processing operations.

You retain the right to know exactly what data we hold about you and why we process it. This policy serves as the primary reference for your legal rights regarding your personal information. It clarifies the boundaries between our operational needs and your privacy expectations. Any deviation from this policy will be communicated directly to you before implementation.

Categories of Personal Data Collected

We collect specific categories of data necessary to operate our platform and comply with regulatory duties. This includes identity and contact details provided during registration, financial data required for deposits and withdrawals, and technical data generated by your device and connection. Verification documents are held strictly for identity confirmation and fraud prevention purposes. We distinguish between information you actively provide and data automatically generated by your use of the service.

Information Sources and Collection Methods

Identity data comes directly from the documents you submit, such as a passport or utility bill. We do not infer identity from external sources without your explicit consent. Financial data includes transaction history and payment method details needed for processing bets. Gameplay records track your activity to ensure game fairness and prevent bonus abuse. Device data captures IP addresses and browser details to secure your account against unauthorized access.

We ensure that only the minimum necessary data is collected for each specific purpose. Data generated by your interaction with the platform is stored separately from your direct contact information. This segregation enhances security and simplifies your right to rectification. You may request deletion of gameplay records after the statutory retention period expires. Verification documents are retained only as long as required by law for anti-money laundering audits.

Sensitive Data Handling

We do not collect special categories of personal data such as health records or political opinions. This restriction applies unless you voluntarily submit such information to customer support for a specific dispute. In such rare cases, we apply stricter security measures and limit access to senior compliance staff. Sensitive data is never used for marketing or profiling purposes. Any such data is deleted immediately once the specific purpose is resolved.

Lawful Basis for Processing

We process your personal data based on four distinct lawful grounds defined by applicable regulations. Each category of data falls under one or more of these bases depending on its purpose. Performance of contract covers the account services you request. Compliance with legal obligations handles anti-money laundering and tax reporting duties. Legitimate interests justify fraud prevention and network security measures. Consent is required for marketing communications and optional tracking features.

Mapping Purpose to Legal Grounds

We maintain a clear record of the basis used for each processing activity. This record is updated whenever the purpose of processing changes. You may withdraw consent for marketing at any time without affecting your account services. Withdrawal is processed immediately upon receipt of your request. We do not condition contract performance on consent to non-essential processing activities. Legitimate interests are balanced against your rights to ensure fair processing.

Consent and Withdrawal

Consent is distinct from contractual necessity and legal compliance obligations. It must be freely given, specific, and informed to be valid. We provide clear opt-in mechanisms that do not use pre-ticked boxes. You can manage your consent preferences within your account settings at any time. We retain a log of your consent decisions for audit purposes. Withdrawal does not affect the lawfulness of processing before the withdrawal occurred.

Data Sharing and Recipients

We do not sell your personal data to third parties under any circumstances. Sharing occurs only when necessary for service delivery or legal compliance. Payment providers receive transaction data to process deposits and withdrawals. Identity verification services access your documents to confirm your age and location. Game suppliers receive gameplay data to ensure software integrity and payout accuracy.

Regulatory bodies and law enforcement receive data when required by court order or statutory mandate. We disclose information only to the extent required by the specific legal request. Processors act on our instructions and are bound by strict confidentiality obligations. We conduct due diligence on all third parties before sharing any data. This ensures that our partners maintain security standards equivalent to our own.

International transfers are subject to adequate safeguards to protect your data. We use standard contractual clauses for transfers to jurisdictions without adequacy decisions. Your data remains subject to the protections outlined in this policy regardless of location. We monitor the effectiveness of these safeguards and update them as needed. You may request details of specific transfers upon written request to our data protection officer.

We maintain a record of all data sharing agreements and their specific purposes. This record is available for inspection by supervisory authorities upon request. You have the right to know exactly who has access to your information. We notify you of any significant changes to our sharing practices in advance. This transparency allows you to make informed decisions about your continued use of the platform.

Data Retention and Deletion

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy. Retention periods are tied to statutory obligations rather than operational preference. Account data is kept while the account remains active plus a short period for administration. Transaction records are held for the duration required by tax and anti-money laundering laws. Verification documents are deleted once their statutory retention period expires.

Marketing data is retained only for as long as consent remains valid or until it is withdrawn. We review all retention schedules on a quarterly basis to ensure compliance. Data that is no longer needed is securely erased or anonymized. We do not keep data indefinitely for future marketing purposes without fresh consent. This practice minimizes the risk of unauthorized access to outdated information.

Specific retention periods vary by data category and applicable jurisdiction. Account data is typically retained for ten years after closure for legal liability. Transaction records are kept for seven years to satisfy tax audit requirements. Gameplay history is archived for three years to resolve potential disputes. These periods are minimums and may be extended if litigation is pending.

Upon account closure, we initiate a deletion process for non-essential data immediately. Essential records are anonymized where possible to prevent identification of the user. We notify you of the specific retention period applicable to your data category. You may request early deletion if no legal obligation requires retention. We balance your right to erasure against our duty to retain records for legal defense.

Your Data Protection Rights

You possess specific rights regarding your personal data under applicable data protection laws. These rights include access, rectification, erasure, restriction, portability, and objection to processing. We provide a straightforward mechanism to exercise these rights through our online portal or written request. Identity verification is required before we act on any such request to prevent unauthorized access. We respond to all requests within the statutory timeframe unless a complex issue requires extension.

Exercise of Rights and Procedures

Some rights are limited by legal obligations or the needs of ongoing legal proceedings. We cannot delete data that is required for anti-money laundering compliance. Your right to erasure does not override statutory retention periods for transaction records. We explain the specific limitations applicable to each request before processing it. This ensures you understand the scope of the action we can take.

Response Timeframes and Verification

We aim to respond to all requests within thirty days of receipt. Complex requests may require an extension of up to two additional months. We notify you of any delay and provide a reason for the extension. Verification is a critical step to ensure the safety of your account. We may request additional information if your identity cannot be confirmed with certainty.

Security Measures and Complaints

We implement technical and organizational measures to protect your personal data against unauthorized access. Encryption is used for data in transit and at rest across our infrastructure. Access to sensitive data is restricted to personnel with a specific business need. Regular security audits and penetration tests verify the effectiveness of these controls. We maintain incident response protocols to handle any potential data breach promptly.

In the event of a data breach, we assess the risk to your rights and freedoms. You will be notified of breaches that pose a high risk within seventy-two hours. We cooperate fully with supervisory authorities during any investigation of a security incident. Our security measures are reviewed annually to incorporate new industry standards. We invest in ongoing training to ensure staff maintain awareness of security threats.

You may lodge a complaint with Donbet if you believe your data rights have been violated. Contact us through our contacts page to initiate a formal investigation. We aim to resolve complaints internally before you seek external intervention. Our data protection officer handles all inquiries regarding compliance and breaches. We provide a timeline for resolution and keep you updated on progress.

If your complaint remains unresolved, you have the right to contact the relevant supervisory authority. We provide full details of the authority responsible for your jurisdiction on request. This ensures you can seek independent oversight of our processing activities. We encourage direct contact first to allow us to address your concerns promptly. Our goal is to resolve issues fairly and transparently without regulatory escalation.