Privacy Policy
This Privacy Policy explains how bet-online-united-kingdom, operated through the website https://betonlin.casino, collects, uses, stores and shares personal data of visitors and players located in the United Kingdom and other relevant jurisdictions. It applies to all use of our website, registration and use of player accounts, participation in games, promotions and customer support interactions. By visiting our website or creating an account you acknowledge that your personal data will be processed in accordance with this Privacy Policy and applicable data protection laws.
This Privacy Policy is intended to comply in particular with the UK General Data Protection Regulation ("UK GDPR"), the UK Data Protection Act 2018, and, where relevant, with principles reflected in Mexican data protection law for cross-border users. It should be read together with our Terms & Conditions, Bonus Terms and Responsible Gaming Policy available on https://betonlin.casino.
Effective date: 6 November 2025
3. Who We Are
The bet-online-united-kingdom brand is operated via the website https://betonlin.casino by:
- Controller: Global Gaming Solutions B.V., a private limited company (B.V.) registered in the Commercial Register of Curaçao under registration number 152377.
- Registered address / legal address: Global Gaming Solutions B.V., Zuikertuintjeweg Z/N (Zuikertuin Tower), Willemstad, Curaçao.
- Licensing for gaming services: Global Gaming Solutions B.V. operates the casino under a Curaçao eGaming sub-license number GLH-OCCHKTW0701152023, issued under Master License 365/JAZ.
Some sources suggest that Digital Entertainment Holdings Ltd may hold a UK Gambling Commission ("UKGC") licence number 54321 and that services may be offered via a white-label platform provided by ProgressPlay Ltd. Other analysis explicitly states that bet-online-united-kingdom is not UKGC-licensed and operates solely under Curaçao eGaming oversight, with no participation in national UK schemes such as GAMSTOP and with alternative dispute resolution primarily handled through Curaçao eGaming. Because this information is conflicting and has not been independently verified, UK users should assume that the site is currently regulated from Curaçao only and that UKGC protections may not apply. This does not affect your rights under UK data protection law, which apply based on your location and the targeting of UK players.
For the purposes of data protection law, Global Gaming Solutions B.V. acts as the primary "data controller" for personal data collected through https://betonlin.casino. In some cases our technical partners (for example ProgressPlay Ltd, payment providers and game suppliers) act as "data processors" on our behalf; in others they may act as separate controllers for their own independent purposes (e.g. regulatory compliance or fraud monitoring in their own systems).
Data Protection Contact / DPO: We have appointed an internal function responsible for data protection compliance (the "Data Protection Officer" or "DPO"). You can contact our DPO regarding any privacy-related question or request by using the customer support channels available on https://betonlin.casino (including online forms and support centre, available from 9:00-21:00 GMT) and requesting that your message is forwarded to the DPO, or by writing to "Data Protection Officer, Global Gaming Solutions B.V." at the registered address above. Where we publish dedicated privacy contact details (such as a specific email address) on our website, those details will prevail and this Privacy Policy will be updated accordingly.
What Personal Data We Collect
Identity and contact data
- Basic identification: full name, date of birth, country of residence and nationality, as provided during registration or verification.
- Contact details: email address, postal address (where provided), phone number(s) (where provided) and preferred language of communication.
- Account identifiers: username, internal player ID, passwords or other credentials (stored securely using industry-standard hashing and security controls).
Verification, KYC and AML data
- Regulatory checks: copies and data from identity documents (e.g. passport, ID card, driving licence), proof of address (utility bill, bank statement), payment method ownership evidence, and information obtained from third-party verification or risk-screening tools (e.g. PEP and sanctions screening) as required under anti-money laundering ("AML") and know-your-customer ("KYC") laws.
- Responsible gaming information: self-exclusion status, deposit and loss limits, session time-outs, and related records where you use our responsible gaming tools or we are required to monitor for problem gambling patterns.
Technical and device data
- Technical identifiers: IP address, device identifiers, browser type and version, operating system, time zone setting, language settings and similar technical data captured when you access our site.
- Usage logs: login times, pages visited, clicks, navigation paths, session duration, error logs and crash data, collected through our servers and analytics tools.
Payment and transactional data
- Financial transactions: records of deposits, withdrawals, bonuses, chargebacks, bet stakes and results, account balances and currency.
- Payment method data: partially masked card details (where applicable), e-wallet identifiers and other payment-related information. We do not store full card numbers or CVV codes in plain form; such data is processed by secure payment providers.
Behavioural and profile data
- Game and betting history: games played, bets placed, timestamps, stakes, wins/losses, device/channel used, and bonus usage, which we use to provide services, comply with regulations and perform analytics and anti-fraud checks.
- Preferences and profile: language preferences, marketing preferences, preferred games, and inferred segments (for example, VIP status or high-risk AML profiles) generated through automated analysis of your account activity.
Communications and support data
- Customer support records: transcripts of live chats, records of calls where applicable, emails, internal notes, complaint files (including regulator escalations such as Curaçao eGaming complaints) and follow-up actions.
- Feedback and surveys: responses to surveys, reviews and feedback forms.
Cookies and similar technologies
- Cookies: small text files stored on your device to remember your preferences, maintain sessions and understand website usage. We use first-party and third-party cookies.
- Similar technologies: web beacons, pixels, tags, SDKs and device identifiers used for analytics, security, fraud prevention and marketing measurement.
For more detail on cookies, please see the section "Cookies & Tracking Technologies" below.
Legal Basis for Processing
We process your personal data only where we have a valid legal basis under UK GDPR and other applicable laws. Depending on the context, we rely on the following grounds:
Performance of a contract
- Account creation and management: we process identity, contact, account and technical data to register you as a player, authenticate your logins, provide access to games and manage your account.
- Provision of gaming services: processing of betting history, game data, bonuses, transactional data and support communications is necessary to provide the online casino services you request under the contractual relationship between you and Global Gaming Solutions B.V.
- Payments: processing of payment and financial data is required to accept deposits, process withdrawals and handle refunds or chargebacks.
Compliance with legal obligations
- KYC and AML rules: we are legally required under anti-money laundering, counter-terrorist financing and similar regulations to identify our customers, verify their identity, monitor transactions, detect suspicious activity and report certain activities to competent authorities.
- Responsible gaming: applicable laws and industry standards may require us to monitor for problematic gambling behaviour, enforce self-exclusion and other limits, and keep records of such measures.
- Tax, accounting and regulatory reporting: we keep transaction and accounting records and may share data with regulators (including Curaçao eGaming and, where applicable, other authorities) and tax authorities.
Legitimate interests
- Service improvement and analytics: we analyse usage data, betting patterns and technical logs to improve our website, games, security, user experience and business operations.
- Fraud prevention and security: we process technical data, behavioural profiles and payment data to detect and prevent fraud, abuse, bonus misuse, money laundering and other prohibited activities, and to ensure the security of our systems.
- Internal governance and risk management: processing is carried out to manage our operations, including group-level oversight across brands operated by Global Gaming Solutions B.V. (such as SpinNation and CryptoBetz), to assess regulatory risk and to address disputes and legal claims.
- Direct marketing: where allowed by law, we may rely on legitimate interests to send limited marketing communications to existing customers about similar products, always offering an easy opt-out.
Consent
- Marketing communications: where required by law (for example, for certain email, SMS or push notifications under UK PECR), we rely on your explicit consent before sending promotional communications. You may withdraw consent at any time via your account settings or by following the unsubscribe instructions in each message.
- Optional cookies / tracking: we obtain your consent where required before placing or reading non-essential cookies (such as advertising or some analytics cookies) on your device.
- Special categories of data: where we process health-related or other sensitive data in connection with responsible gaming (for example, information you provide about problem gambling or self-exclusion), we will do so with your consent or where otherwise permitted by law.
Where we rely on legitimate interests, we carry out a balancing assessment to ensure that our interests are not overridden by your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests, as described in the "Your Rights" section.
Purpose of Processing
We use personal data for the following purposes, each linked to a legal basis as described above:
- Providing and operating casino services: to register and manage your account, verify your age and identity, provide access to games, process deposits and withdrawals, credit bonuses, settle bets, pay winnings and provide customer support.
- Regulatory compliance: to meet obligations under KYC/AML laws, responsible gaming requirements, tax, accounting and licensing conditions set by Curaçao eGaming and any other competent authorities.
- Security, fraud prevention and risk management: to monitor accounts and transactions for suspicious activity, prevent account takeover or bonus abuse, detect technical threats and protect the integrity of our platform and players.
- Service improvement and analytics: to understand how our games and services are used, diagnose technical issues, analyse performance, improve user experience and develop new features, games and promotions.
- Marketing and personalisation: to send you offers, promotions and newsletters from bet-online-united-kingdom (subject to your preferences), to personalise content and banners on https://betonlin.casino, and to measure the effectiveness of marketing campaigns and affiliate programmes.
- Responsible gambling: to provide tools that help you control your gambling (such as limits, time-outs and self-exclusion), monitor behaviour to identify potential harm, and intervene or contact you where necessary in line with applicable guidelines.
- Dispute resolution and legal claims: to manage complaints and disputes (including those escalated to Curaçao eGaming or other ADR bodies), respond to regulatory inquiries, enforce our Terms & Conditions and defend our legal rights.
32. Disclosure & Sharing
We do not sell your personal data. We share it only as necessary for the purposes described above, subject to appropriate safeguards and confidentiality obligations.
Group companies and related brands
- Global Gaming Solutions B.V. group: your data may be shared internally within Global Gaming Solutions B.V. for administrative, risk management, AML, responsible gaming and accounting purposes, and, where relevant, across brands operated by the same company (such as SpinNation and CryptoBetz) to maintain consistent standards and detect cross-brand fraud or misuse.
Service providers and partners
- Platform providers: technology companies (including, where applicable, white-label platform provider ProgressPlay Ltd) that supply the underlying casino platform, game integration, payment routing, CRM and related infrastructure. These parties generally act as processors, handling data on our instructions.
- Payment providers and banks: card processors, e-wallets, payment gateways and banks that process deposits, withdrawals and chargebacks. These organisations may act as independent controllers for their own legal and regulatory obligations.
- Game providers: third-party game studios that provide casino games and may receive limited data (e.g. pseudonymous player IDs, session data) to enable gameplay, resolve technical issues and conduct security checks.
- Analytics, anti-fraud and security providers: providers of analytics, device fingerprinting, anti-money laundering tools, PEP/sanctions screening and similar services, used to enhance security, compliance and performance.
- Marketing and affiliate partners: advertising networks, affiliate partners and campaign management tools that deliver and measure marketing communications. These partners receive data only where permitted by law and in line with your marketing and cookie preferences.
- Professional advisers: lawyers, auditors, consultants and similar professionals who assist us with legal, compliance, financial and business matters.
Regulators, authorities and dispute bodies
- Regulatory bodies: Curaçao eGaming and other authorities where we are required to provide information for licensing, audits, AML/CTF reporting, responsible gaming or other regulatory purposes. In the context of UK players, note that protection may differ from UKGC standards and enforcement strength is more limited, as commonly reported for Curaçao-licensed operators.
- Dispute resolution bodies: Curaçao eGaming's complaints portal (for escalated gambling disputes). Some materials refer to IBAS (Independent Betting Adjudication Service) as a potential ADR provider for UK players; however, this information is conflicting and should be verified on our website before relying on it. Sharing of data with such bodies occurs only as necessary to handle your complaint.
- Law enforcement and other authorities: where required by law, court order or to protect our rights, players or third parties, we may disclose data to law enforcement agencies, courts or other public authorities.
Business transfers
- Corporate transactions: in the event of a merger, acquisition, reorganisation or sale of assets involving Global Gaming Solutions B.V. or the bet-online-united-kingdom brand, personal data may be transferred to the relevant third parties, subject to appropriate confidentiality and data protection safeguards.
International Transfers
bet-online-united-kingdom is operated from Curaçao for players located in the UK and other markets. This means your personal data may be transferred to and processed in countries outside the UK (and, where applicable, outside the European Economic Area), including Curaçao and other locations where our group companies, service providers, payment processors and game providers are based.
- Curaçao: your data will be processed in Curaçao by Global Gaming Solutions B.V. and, where relevant, by Curaçao-based providers and regulators, under a legal framework that may not offer the same level of protection as UK law. However, we apply internal policies and security controls designed to meet UK GDPR standards.
- Other non-adequate countries: if we transfer data to countries that are not recognised by the UK as providing an adequate level of protection, we implement appropriate safeguards, such as standard contractual clauses approved under UK GDPR, and impose contractual obligations on recipients to protect your data.
- EU / EEA transfers: where data is transferred from, or to, entities in the EU/EEA, we aim to comply with both UK GDPR and EU GDPR requirements, using equivalent safeguards where necessary.
Regardless of where your data is processed, we will protect it as described in this Privacy Policy and in accordance with applicable law. You may contact us for more information about the specific safeguards applied to international transfers relevant to your account.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes or enforce our rights. Retention periods depend on the type of data and the applicable legal requirements, particularly AML and gaming regulations.
- Account and identity data: normally kept for the duration of your account and for up to 5 years after account closure or your last transaction, to comply with KYC/AML rules and to handle potential disputes.
- Transactional and betting data: records of deposits, withdrawals, bets and game outcomes are generally retained for 5 to 7 years after the relevant transaction, in line with accounting, tax and regulatory obligations.
- Responsible gaming data: self-exclusion records, limits and related interactions are kept for the duration of the limitation and for a further period (typically up to 5 years) where required to evidence compliance and to prevent circumvention.
- Technical logs and security data: server logs, security events and technical diagnostics are typically retained for up to 12 to 24 months, unless longer retention is necessary for security investigations or legal proceedings.
- Marketing data: information about your marketing preferences and interactions is kept for as long as you remain subscribed and for a limited period (normally up to 2 years) after you last interact with us, unless you withdraw consent earlier.
- Complaints and dispute files: kept for the duration of the complaint and for an additional period (generally 5 years) to defend legal claims and demonstrate compliance, including matters escalated to Curaçao eGaming or similar bodies.
- Cookies: stored on your device for the duration indicated in our cookie banner or browser settings (for example, session cookies are deleted when you close your browser; persistent cookies may remain for several months unless you delete them).
When data is no longer required, we will securely delete or anonymise it. Where anonymisation is applied, the data will no longer be identifiable and may be used for statistical, analytical or reporting purposes without further notice to you.
Your Rights
Under UK GDPR and other applicable data protection laws, you have a number of rights in relation to your personal data. We aim to respect and facilitate these rights in a manner that is also aligned with the principles found in Mexican data protection regulations for cross-border users.
Core data subject rights (UK GDPR)
- Right of access: you can request confirmation as to whether we process your personal data and obtain a copy of the data, together with information about how we use it.
- Right to rectification: you can request that we correct or complete inaccurate or incomplete personal data. Some details (such as contact information) can be updated directly via your account.
- Right to erasure ("right to be forgotten"): you may ask us to delete your personal data where there is no longer a legal basis for processing it (for example, where data is no longer needed for the purposes described or we processed it based on consent that has been withdrawn). We may not be able to erase data that we must retain for legal obligations (e.g. AML, tax, responsible gaming).
- Right to restriction of processing: in certain circumstances (for example, where you contest the accuracy of data or object to our processing), you may request that we restrict processing of your data while we verify or assess the situation.
- Right to object: you may object to processing based on our legitimate interests (including profiling for risk and marketing purposes). We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests or the processing is necessary for legal claims. You also have an absolute right to object to direct marketing, including profiling related to such marketing.
- Right to data portability: for certain data provided by you and processed by automated means on the basis of consent or contract, you may request a copy in a structured, commonly used and machine-readable format, and ask us to transmit it to another controller where technically feasible.
- Right to withdraw consent: where we rely on your consent (for example, for certain marketing communications or non-essential cookies), you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
- Rights related to automated decision-making: if we use automated decisions that produce legal or similarly significant effects (for example, certain fraud or risk checks), you have the right to obtain human review, express your point of view and contest the decision, subject to legal and regulatory constraints.
Alignment with Mexican privacy principles
Although bet-online-united-kingdom primarily targets players in the UK, we endeavour to align our data handling practices with the main principles of Mexican data protection law, including the Federal Law on Protection of Personal Data Held by Private Parties ("LFPDPPP"), where relevant for cross-border users. In practice this means that, in addition to the rights described above:
- We recognise ARCO-style rights (Access, Rectification, Cancellation, Opposition) for individuals who interact with our services from Mexico or other jurisdictions influenced by such standards, to the extent consistent with our legal obligations under UK and Curaçao law.
- We aim to provide clear privacy notices, purpose limitation and proportional data collection, consistent with LFPDPPP principles.
How to exercise your rights
- Submission: you can exercise your rights by contacting our customer support or by sending a request addressed to the Data Protection Officer via the channels described in the "Who We Are" and "Complaints & Contacts" sections. Where online forms or dedicated privacy contact details are provided on https://betonlin.casino/privacy-policy, you should use those channels.
- Verification: to protect your account and personal data, we may need to verify your identity before actioning a request, including by requesting additional information or documentation.
- Response times: we aim to respond to all valid requests within one month (30 days) of receipt, as required by UK GDPR. This period may be extended by a further two months for complex or multiple requests, in which case we will inform you of the extension and reasons.
- Fees: we will handle your request free of charge, unless it is manifestly unfounded or excessive (for example, repeated requests). In such cases we may charge a reasonable fee or refuse to act on the request, in line with applicable law.
Cookies & Tracking Technologies
We use cookies and similar technologies on https://betonlin.casino to ensure the website functions correctly, to improve performance, to personalise content and to support analytics and marketing activities. Cookies may be set by us (first-party cookies) or by third parties (third-party cookies).
Types of cookies
- Strictly necessary (functional) cookies: required for the website to operate and for you to use core features, such as logging in, maintaining sessions, keeping your account secure and processing transactions. These cookies are generally set in response to your actions and cannot be switched off via our cookie banner.
- Performance and analytics cookies: help us understand how visitors use our site, which pages are most popular, and how campaigns perform. They collect aggregated, pseudonymous information to improve our services and user experience.
- Preference cookies: store your language selection, cookie choices and other preferences to provide a more personalised experience.
- Advertising and targeting cookies: used (where permitted) to deliver relevant adverts on our site or third-party platforms, to limit how often you see an advert and to measure campaign effectiveness. These may be set by us or by our advertising partners and affiliate networks.
Managing cookies
- Cookie banner / internal controls: when you first visit https://betonlin.casino, or after significant changes, you may be presented with a cookie banner or settings panel that allows you to accept or reject certain categories of cookies (other than strictly necessary cookies).
- Browser settings: you can configure your browser to block or alert you about cookies, or to delete existing cookies. The method varies by browser; please refer to your browser's help section. Blocking some types of cookies may impact your experience and limit access to certain features (such as staying logged in or playing games).
- Third-party opt-outs: for certain advertising or analytics cookies, you may also be able to opt out via the third party's own tools (for example, opt-out mechanisms offered by major analytics providers or advertising networks where available).
6. Data Security
We take the security of your personal data seriously and implement technical and organisational measures designed to protect it against unauthorised access, loss, misuse or alteration. Given that bet-online-united-kingdom operates under a Curaçao licence, we place particular emphasis on internal controls to mitigate the relative weakness of external regulatory enforcement compared with some other jurisdictions.
Technical measures
- Encryption in transit: data transmitted between your browser and our servers is protected using Transport Layer Security (TLS) 1.2 or higher, helping to secure sensitive information (including login and payment data) against interception.
- Encryption at rest: where appropriate, we encrypt sensitive data stored on our systems and apply secure hashing for passwords and similar credentials.
- Access controls: access to personal data is restricted to authorised personnel and service providers who need it for their job functions or contractual duties, using role-based access controls and authentication safeguards.
- Network and application security: firewalls, intrusion detection and prevention systems, vulnerability management and other controls are used to protect our infrastructure and the gaming platform operated on https://betonlin.casino.
Organisational measures
- Policies and training: staff with access to personal data are subject to confidentiality obligations and receive training on data protection, information security and responsible handling of player information.
- Vendor due diligence: we assess service providers' security and privacy practices and enter into contracts requiring them to protect personal data in line with applicable laws and our standards.
- Incident response: we maintain procedures to detect, investigate and respond to potential data breaches. Where required by law, we will notify relevant supervisory authorities and affected individuals without undue delay.
As of 2025, we do not claim formal certification to specific standards such as ISO 27001 or SOC 2, and external regulatory oversight is primarily exercised by Curaçao eGaming, which typically provides a lighter enforcement framework than regulators such as the UKGC. While we strive to implement security measures consistent with good industry practice, no system can be completely secure. You are encouraged to use strong, unique passwords, enable any available security features and promptly notify us if you suspect unauthorised access to your account.
33. Complaints & Contacts
If you have questions or concerns about how bet-online-united-kingdom handles your personal data, or if you wish to exercise your rights, you have several options.
Contacting us
- Customer support: you may contact our support team through the contact options available on https://betonlin.casino. Support is generally available between 9:00 and 21:00 GMT. A UK freephone number is described in internal materials but is not specified in the current public data; please refer to our website for any updated telephone details.
- Data Protection Officer: you can address privacy-specific questions or requests to the Data Protection Officer of Global Gaming Solutions B.V. by clearly stating that your query concerns "data protection" or "privacy" when contacting support, or by writing to the registered address stated in the "Who We Are" section.
Internal complaint procedure
- Step 1 - Submit your complaint: contact our customer support team with a clear description of your issue, including any relevant account details and supporting evidence.
- Step 2 - Initial response: we aim to acknowledge and respond to complaints within 10 business days for gambling-related disputes, and within 30 days for privacy rights requests, in line with UK GDPR timelines.
- Step 3 - Escalation to DPO: if you are not satisfied with the initial response, you may request that your complaint be escalated to our DPO or a senior manager for further review.
External dispute resolution for gambling matters
- Curaçao eGaming: if your gambling-related complaint remains unresolved, you may escalate it via the Curaçao eGaming player complaints portal at https://curacao-egaming.com/player-complaints. Industry reports suggest that enforcement powers and success rates may be more limited than in some other jurisdictions; however, this remains the principal formal escalation route currently described for Curaçao-licensed operators.
- IBAS / UK ADR: some documentation refers to IBAS (Independent Betting Adjudication Service) as an ADR provider for UK players, but this conflicts with other information indicating that the casino is not UKGC-licensed. Before relying on IBAS or similar UK ADR schemes, you should verify current details on our website or directly with the relevant ADR body.
Data protection supervisory authorities
- United Kingdom - Information Commissioner's Office (ICO): if you are located in the UK and are not satisfied with our handling of your personal data or any privacy complaint, you have the right to lodge a complaint with the ICO. Further information is available at https://www.ico.org.uk.
- Mexico - INAI: for individuals located in Mexico, you may raise concerns with the national data protection authority, the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI), via the channels published on its official website (for example, https://www.inai.org.mx), in line with LFPDPPP.
- Other jurisdictions: if you are located in the EU/EEA or another country with its own data protection authority, you may also have the right to lodge a complaint with your local supervisory authority.
While the licensing and ADR framework for bet-online-united-kingdom may differ from UKGC-regulated operators, your ability to raise data protection concerns with competent supervisory authorities (such as the ICO or INAI) remains unaffected by our gaming licence status.
34. Updates
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, regulatory guidance, technology or internal practices. Because bet-online-united-kingdom operates in a dynamic regulatory environment - including Curaçao-licensed operations serving UK players - we review our privacy documentation regularly to ensure it remains accurate and transparent as of 2025.
- Notification of changes: where we make material changes, we will take appropriate steps to inform you in advance, which may include email notifications, notices in your account area, or prominent banners on https://betonlin.casino.
- Advance notice for significant changes: for changes that significantly affect how we process your personal data or your rights (for example, changes to key purposes, legal bases, or international transfers), we will provide at least 30 days' notice where reasonably practicable.
- Your options: if you do not agree with the updated Privacy Policy, you may choose to stop using our services and request account closure. Continuing to use the website after the effective date of an update will generally be taken as acceptance of the revised terms, to the extent permitted by law.
- Version control: we maintain records of previous versions of this Privacy Policy and the dates on which they were in force. You may request a copy of earlier versions by contacting us.
Last updated: November 2025