PitBet Casino
Sign up100%

PitBet Privacy Policy

This privacy policy explains what personal information PitBet collects, why we collect it, how we use and protect it, and what rights you have over your data under UK GDPR and equivalent international rules.

What information does PitBet collect about you?

When you register an account, PitBet collects your name, date of birth, email address, phone number, country of residence and the username and password you choose. We also collect the payment details you use for deposits and withdrawals, although card numbers are tokenised by our payment processor and never stored on PitBet servers in plain text.

During verification we collect a copy of a government issued ID, a proof of address document and where required by the regulator a proof of source of funds. These documents are encrypted at rest and accessible only to the verification team. They are deleted once the regulator's retention requirement expires.

When you use the site, we also collect technical data such as your IP address, browser type, device type, the pages you visit and the time you spend on each. The cookie based portion of this collection is described in full on the PitBet Cookie Policy.

Why does PitBet use my data?

We use your data to operate the account, verify your identity, process deposits and withdrawals, calculate bonuses and cashback, run the loyalty programme and keep the platform secure. Anti money laundering, anti fraud and responsible gambling monitoring all rely on a basic baseline of personal data.

Marketing data is used only where you have opted in. That includes email, SMS, push and on site notifications about new games, tournaments and promotional offers. You can opt out of any marketing channel at any time from the account settings, and the opt out applies immediately across our systems.

Analytics data is used in aggregated form to improve the product. We track which slots load fastest, which payment methods drop off most often at checkout and which pages perform best on mobile. Aggregated analytics is not tied to individual identifiable players.

Who does PitBet share my data with?

We share your data with vetted third parties only where it is necessary to operate the platform. Payment processors handle your deposits and withdrawals, identity verification providers process your KYC documents, game studios receive a hashed player identifier so they can settle your bets, and cloud infrastructure providers host the platform itself.

We share data with regulators where the regulator requires it. That includes the offshore licensing authority and, where legally required, anti money laundering authorities in the jurisdictions we operate in. The contractual basis for these arrangements sits within the broader PitBet Terms and Conditions.

If you opt in to marketing, the marketing service providers we work with receive only the email address and the marketing preferences they need to send the relevant campaigns. They are bound by data processing agreements that align with UK GDPR.

What are your rights over your data?

Under UK GDPR and equivalent rules you have the right to access the data we hold on you, the right to correct inaccurate data, the right to erasure where there is no overriding legal requirement to keep it, the right to restrict processing, the right to data portability and the right to object to processing.

To exercise any of these rights, contact privacy@pitbet.live and we will respond within 30 days. If you need help framing the request, the team at PitBet Get Help can talk you through it.

If you are unhappy with how we have handled your data, you have the right to complain to the regulator in your jurisdiction. UK residents can contact the Information Commissioner's Office at ico.org.uk.

How long does PitBet keep my data?

Account and transaction data is retained for the period required by the offshore regulator and by anti money laundering rules, which is typically five years from the closure of the account. Verification documents are kept for the same period and then securely deleted on a scheduled job that runs monthly.

Marketing data is retained only as long as you have an active opt in. If you opt out, the marketing record is suppressed within twenty four hours and deleted within thirty days unless we are required to retain a suppression record for compliance purposes.

Technical logs such as server access logs and security event logs are kept for ninety days for operational purposes, with a subset retained longer where they are needed for an open security investigation. Aggregated analytics is retained indefinitely because it is no longer tied to individual players.

How does PitBet keep my data secure?

All connections to PitBet use TLS encryption with modern cipher suites and HSTS enforced. Personal data is encrypted at rest in the production database using industry standard AES encryption, and verification documents sit in a separate encrypted store with its own access controls.

Access to personal data inside PitBet is restricted by role. Verification, support, payments and engineering each have the access they need to do their job and no more. Every access event is logged and the logs are reviewed on a rolling schedule by the security team.

Penetration testing is carried out by an independent firm at least annually and after any significant infrastructure change. Findings are tracked to remediation and reported to the regulator in the licence renewal cycle. Bug bounty submissions are welcomed at security@pitbet.live.