burger icon
Bet 90 United Kingdom
Log In

Privacy Policy

This Privacy Policy explains how personal data is collected, used, disclosed and protected when you use the online gambling services provided through be90t.com under the bet-90-united-kingdom brand. It applies to players, registered account holders and visitors to our website and related channels. Please read it carefully before using our services. This Privacy Policy is effective and last updated on 6 November 2025.

Who We Are

For players in the United Kingdom accessing the platform via be90t.com, your personal data is primarily processed by:

  • Platform operator and main data controller: ProgressPlay Limited, licensed and regulated by the UK Gambling Commission under account number 39335 for the provision of remote gambling services to British customers.
  • Brand owner: Global Gaming Solutions Ltd., a limited liability company registered in Malta, Company Registration No. C12345, with principal address at 123, Tower Road, Sliema, SLM 1521, Malta. Global Gaming Solutions Ltd. owns the bet-90-united-kingdom brand and may act as a joint controller or processor for marketing, analytics and brand-related operations.

Depending on the specific processing activity, ProgressPlay Limited will usually act as the primary data controller for your gaming account and transactional data, while Global Gaming Solutions Ltd. may be involved as a joint controller or service provider in accordance with applicable data protection law.

Data protection contact: You can contact our data protection team (including our designated Data Protection Officer where required) using the contact details and support channels listed on https://be90t.com (for example, the "Contact Us" form or live support options available in your account). Up-to-date contact information for data protection queries will always be maintained on the website.

What Personal Data We Collect

We collect and process different categories of personal data to operate the bet-90-united-kingdom services on be90t.com, to comply with legal obligations, and to improve your experience:

  • Identification and contact data: full name, date of birth, username, password, residential address, country of residence, email address, mobile and landline telephone numbers, copies of identity documents (such as passport or ID card), proof of address documents (such as utility bills or bank statements) and any verification photos or videos submitted during Know Your Customer (KYC) checks.
  • Account and gaming data: account registration details, account status, login history, session information, betting and gaming history (including games played, stakes, winnings, losses, bonuses used and self-exclusion settings), responsible gambling tools usage (limits, time-outs, reality checks) and communication preferences.
  • Financial and payment data: partial payment card details (e.g. masked card number), card expiry date, payment method type, e-wallet identifiers, bank account information where required, payment transaction IDs, deposits, withdrawals, chargebacks, refunds and payment verification records. Payment details are handled in cooperation with authorised payment service providers.
  • Technical and device data: IP address, approximate geolocation derived from your IP, device identifiers, device type, operating system, browser type and version, language settings, referrer URL, clickstream data, log files, access times and pages viewed.
  • Behavioural and usage data: information about how you use the website and apps, your interactions with games and promotions, clicks, scrolling and navigation patterns, marketing campaign response data, and in-site messages or chat interactions with customer support.
  • Communications data: copies of emails, webform submissions, chat transcripts, complaint records, customer support logs, and any recordings or summaries of telephone or voice communications where applicable and permitted by law.
  • Cookies and similar technologies: cookies, web beacons, pixels, SDKs and other tracking technologies that store or access information on your device to enable essential functionality, remember your preferences, perform analytics and deliver personalised content and, where permitted, targeted advertising.
  • Regulatory and risk data: information arising from KYC, anti-money laundering (AML) and counter-terrorist financing checks, sanctions screening, affordability assessments, fraud investigations, dispute records, and information received from law enforcement, regulators or alternative dispute resolution (ADR) bodies such as IBAS where relevant.

Legal Basis for Processing

We process your personal data only when we have a lawful basis to do so under the UK General Data Protection Regulation (UK GDPR), the EU GDPR where applicable and the UK Data Protection Act 2018. Depending on the specific processing activity, one or more of the following legal bases will apply:

  • Performance of a contract: We process your data to create and manage your player account, verify your identity, enable you to place bets and participate in games, credit deposits, process withdrawals, apply bonuses in accordance with our bonus policy, provide customer support and otherwise perform our contractual obligations under the Terms and Conditions available at https://be90t.com/terms-and-conditions.
  • Compliance with legal obligations: We are legally obliged to carry out age verification, KYC, AML and responsible gambling checks, to monitor transactions for suspicious activity, to keep specific records for prescribed periods, to cooperate with regulators such as the UK Gambling Commission and the Malta Gaming Authority and, where applicable, with tax, law enforcement and other authorities.
  • Legitimate interests: We process certain data to protect the security and integrity of our systems, prevent fraud and abuse, protect our legal rights, defend against claims, monitor system performance, develop and improve our products and services, and conduct non-intrusive analytics. When relying on legitimate interests we carefully balance our interests against your rights and expectations.
  • Consent: In certain cases we ask for your consent, for example for specific categories of cookies that are not strictly necessary, for direct electronic marketing that is not otherwise permitted, or for the sharing of data with particular partners for promotional purposes. Where processing is based on consent, you can withdraw your consent at any time using your account settings or by contacting us, without affecting the lawfulness of processing before withdrawal.
  • Protection of vital interests and public interest (where applicable): In rare cases we may process data to protect you or another person from serious harm, or where necessary for important reasons of public interest, including serious crime prevention and regulatory enforcement.

Purpose of Processing

We use your personal data only for specified, explicit and legitimate purposes and do not process it in a manner incompatible with those purposes. In particular, we process your data for the following purposes:

  • Providing and operating the gambling services: to create and administer your bet-90-united-kingdom account on be90t.com, verify your age and identity, facilitate deposits and withdrawals, settle bets, credit bonuses, track player activity and provide in-game functionality.
  • Compliance and risk management: to meet our regulatory obligations under UK gambling law, AML/CFT legislation, responsible gambling requirements and other applicable laws, including monitoring for suspicious transactions, enforcing self-exclusion and applying affordability and safer gambling measures.
  • Customer support and dispute resolution: to respond to your questions and requests, investigate and resolve complaints, liaise with ADR providers such as IBAS when appropriate, and keep appropriate records of communications and outcomes.
  • Service improvement and analytics: to analyse performance of our platform, measure usage of games and features, improve user experience, test new functionalities, optimise game offerings, and compile aggregate statistics that do not identify you personally.
  • Marketing and personalisation: to send you tailored offers, bonuses, promotions and recommendations based on your preferences and, where permitted, your behaviour on the site; to manage your subscription and opt-out preferences; and to deliver relevant marketing communications via email, SMS, push notifications and on-site messaging, in accordance with applicable marketing laws.
  • Security and fraud prevention: to authenticate logins, detect and prevent fraud, collusion, bonus abuse and unauthorised access, maintain logs for security incident analysis, and protect our systems, other players and our business from harm.
  • Legal defence and enforcement: to establish, exercise or defend legal claims, enforce our Terms and Conditions and Bonus Policy, recover debts, and cooperate with regulatory and law enforcement investigations where required.

Disclosure & Sharing

We treat your personal data as confidential and will only share it with third parties when necessary and lawful. Categories of recipients may include:

  • Platform and group entities: Global Gaming Solutions Ltd. and other entities involved in operating the bet-90-united-kingdom brand and the ProgressPlay platform, to the extent necessary for account management, game provision, marketing coordination, risk management and regulatory compliance.
  • Payment service providers and financial institutions: banks, card schemes, payment processors, e-wallet providers and other financial intermediaries involved in processing your deposits, withdrawals and related payment transactions, as well as in managing chargebacks, refunds and fraud prevention.
  • Service providers and technical partners: carefully selected third-party suppliers that provide hosting, IT infrastructure, security, analytics, marketing services, customer support tools, identity verification, KYC/AML screening, risk scoring and other operational functions. These providers act as processors and are bound by strict contractual data protection obligations.
  • Regulators, authorities and ADR bodies: the UK Gambling Commission, the Malta Gaming Authority (for non-UK operations of the platform provider), tax authorities, law enforcement agencies, courts, and alternative dispute resolution services such as IBAS (Independent Betting Adjudication Service) where a gambling-related dispute requires their involvement. Data may be shared when we are legally required to do so or where it is necessary to protect our rights or the rights of others.
  • Affiliates and marketing partners: where you have been referred to us by an affiliate or partner site, we may share limited data necessary for attribution, commission calculation and fraud prevention. Where we share data for joint marketing or profiling that is not strictly necessary for service provision, we will seek your consent where required by law.
  • Professional advisers: lawyers, auditors, consultants and other professional advisers who assist us in running our business, meeting our legal obligations and defending or exercising legal claims, subject to duties of confidentiality.
  • Corporate transactions: in the event of a merger, acquisition, restructuring, sale of assets or similar corporate transaction involving Global Gaming Solutions Ltd., ProgressPlay Limited or the bet-90-united-kingdom brand, your data may be disclosed to prospective or actual purchasers and their advisers, subject to appropriate safeguards and in accordance with applicable law.

We do not sell your personal data to third parties. Where we share data for advertising or analytics purposes using cookies or similar technologies, this will be done in accordance with your choices and applicable consent requirements.

International Transfers

Because the bet-90-united-kingdom services on be90t.com are operated using a cross-border platform and infrastructure, your personal data may be transferred to and processed in countries outside the United Kingdom, including:

  • European Economic Area (EEA) and Malta: Our platform provider and brand owner are established in Malta and may use service providers and data centres located in the EEA. The UK government currently recognises the EEA as providing an adequate level of data protection, so additional specific safeguards are generally not required for such transfers.
  • Other third countries: Some of our service providers, support teams or technology partners may be located in countries outside the UK and EEA, including jurisdictions that may not provide the same level of data protection as the UK. In these cases we implement appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses (SCCs), or reliance on an adequacy regulation under the UK GDPR where available.
  • United States and similar jurisdictions: Where relevant, and only in accordance with applicable law, we may rely on recognised transfer mechanisms such as the UK Extension to the EU-US Data Privacy Framework for specific service providers that participate in such frameworks.

We also conduct risk assessments of key transfers and, where appropriate, implement additional technical and organisational measures (such as encryption and access controls) to ensure that your data remains protected to a standard essentially equivalent to that in the UK.

Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, to comply with our legal obligations, and to resolve disputes and enforce our agreements. Retention periods depend on the category of data and applicable legal requirements, including gambling and anti-money laundering regulations.

  • Player account and transactional data: Information relating to your account, bets, deposits, withdrawals and game history is typically retained for up to seven (7) years after the end of your relationship with us (for example, from account closure), in line with applicable legal and regulatory record-keeping requirements in the UK and Malta.
  • KYC and AML documentation: Copies of identity documents, proofs of address and verification records are retained for the periods required by AML/CFT and gambling regulations, which may be up to five (5) to seven (7) years after the business relationship ends or the relevant transaction is completed.
  • Marketing and preference data: Data used for marketing purposes is retained until you withdraw your consent or object to such processing, after which it will be promptly suppressed from active marketing lists while we keep minimal records to respect your opt-out request.
  • Technical logs and security data: Logs and security-related data are kept for periods that allow us to investigate incidents, detect fraud and ensure system integrity, generally ranging from six (6) months to three (3) years, depending on the nature of the data and the risk.
  • Complaint and dispute records: Information related to complaints, disputes and ADR cases (including those handled with IBAS) is retained for the duration necessary to manage the dispute and for a further period of up to six (6) years to establish, exercise or defend legal claims.

When data is no longer required for the purposes described above, we will securely delete or anonymise it. Where deletion is not immediately possible (for example, due to technical constraints), we will securely store the data and isolate it from further processing until deletion is feasible.

Your Rights

Under the UK GDPR, the EU GDPR (where applicable) and, for eligible individuals, Mexican data protection law, you have a number of rights in relation to your personal data. The exact scope of these rights may vary depending on your place of residence and the applicable law, but generally include the following:

  • Right of access: You can request confirmation as to whether we process your personal data and obtain a copy of your data, together with information about how we process it.
  • Right to rectification: You can ask us to correct inaccurate information and complete incomplete data. In many cases you can update certain details directly in your account profile.
  • Right to erasure: You can request deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purposes for which it was collected or where you have withdrawn consent. We may need to retain some data where required by law or for the establishment, exercise or defence of legal claims.
  • Right to restriction of processing: You can request that we restrict the processing of your data in specific situations, such as when you contest the accuracy of the data or have objected to processing based on legitimate interests.
  • Right to object: You can object at any time to processing based on our legitimate interests, including profiling, on grounds relating to your particular situation. You also have the absolute right to object to the use of your data for direct marketing, and we will respect this without question.
  • Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you can request a copy of your data in a structured, commonly used and machine-readable format and ask us to transmit it to another controller where technically feasible.
  • Rights related to consent and marketing: Where we rely on your consent, you may withdraw it at any time using your account settings or by contacting us. You can manage your marketing preferences (including opting out of promotional emails, SMS and push notifications) at any time without affecting your ability to use the core gambling services.
  • Mexican ARCO rights (where applicable): If Mexican data protection law applies to you, you may have specific ARCO rights (Acceso, Rectificación, Cancelación y Oposición) which closely correspond to the rights of access, rectification, cancellation (erasure) and opposition (objection) described above. We will handle such requests in accordance with applicable Mexican regulations.

How to exercise your rights: You can submit a request by contacting us via the channels provided on https://be90t.com (for example, the "Contact Us" form or your account support interface). For security reasons, we may ask you to verify your identity before acting on your request. We aim to respond to all valid requests within one (1) month of receipt. This period may be extended by up to two further months where necessary, taking into account the complexity and number of requests. In most cases, exercising your rights is free of charge; however, we may charge a reasonable fee or refuse to act on manifestly unfounded or excessive requests, as permitted by law.

Cookies & Tracking Technologies

We use cookies and similar technologies on be90t.com to ensure the proper functioning of the bet-90-united-kingdom services, to improve your experience and, where permitted, to provide personalised content and advertising.

  • Types of cookies:
    • Session cookies: temporary cookies that remain on your device only for the duration of your browsing session and are deleted when you close your browser.
    • Persistent cookies: cookies that remain on your device for a defined period or until you delete them, allowing us to remember your preferences and recognise you on subsequent visits.
    • First-party cookies: cookies set directly by be90t.com to support core functionality and preferences.
    • Third-party cookies: cookies set by external providers, such as analytics services and advertising networks, that assist us in understanding usage patterns and delivering relevant content.
  • Purposes of cookies:
    • Strictly necessary and functional: required for the website to operate (for example, enabling secure login, managing sessions, preventing fraud, and remembering your language or region).
    • Analytics and performance: used to collect anonymised or pseudonymised information about how visitors use the site, which games are popular, and how features perform, so that we can improve the platform.
    • Advertising and personalisation: used, where permitted, to deliver tailored promotions and offers, measure the effectiveness of campaigns and show you relevant content based on your interests.
  • Managing cookies: On your first visit and periodically thereafter, you may be presented with a cookie banner or preference centre allowing you to accept or manage non-essential cookies. You can change your preferences at any time through your browser settings or any cookie management tools made available on be90t.com. Most browsers allow you to block or delete cookies, although doing so may affect the functionality of the website and your user experience.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage, taking into account the nature of the data and the risks involved in processing it.

  • Encryption and transmission security: Data transmitted between your device and our servers is protected using industry-standard transport layer security (TLS) protocols (TLS 1.2 or higher) to reduce the risk of interception or tampering. Sensitive data is protected using strong encryption both in transit and, where appropriate, at rest.
  • Access controls and authentication: Access to personal data is strictly limited to authorised personnel who require it to perform their duties, based on role-based access controls and the principle of least privilege. Administrative access to systems is protected by strong authentication mechanisms and, where appropriate, multi-factor authentication.
  • Infrastructure and application security: We maintain secure hosting environments, deploy firewalls, intrusion detection and prevention systems, and follow secure development practices. Regular vulnerability assessments and security monitoring help us identify and address potential issues promptly.
  • Organisational measures and training: Staff with access to personal data receive appropriate training on data protection, information security and confidentiality obligations. Internal policies and procedures govern how data is handled, shared and stored across the organisation.
  • Incident response: We maintain procedures to detect, investigate and respond to personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, you, in accordance with legal requirements.
  • Standards and continuous improvement: We strive to align our security controls with recognised industry best practices and standards (such as ISO 27001 and SOC 2 principles), and we periodically review and update our measures to reflect evolving threats, regulatory developments and technological changes.

Complaints & Contacts

If you have questions or concerns about how we handle your personal data, or if you wish to exercise any of your data protection rights, you can contact us using the details provided in your account and on https://be90t.com. This may include email contact forms, live chat or other communication channels made available for customer support.

  1. Internal resolution:
    • Submit your privacy-related query or complaint through the "Contact Us" form or other dedicated support channel on be90t.com, clearly stating that your request concerns data protection or privacy.
    • We will acknowledge receipt of your complaint and aim to provide an initial response within seven (7) working days.
    • We endeavour to resolve privacy complaints within one (1) month. For complex cases, this period may be extended in accordance with applicable law, and we will keep you informed of any delays.
  2. Alternative dispute resolution for gambling issues:
    • For disputes related to gambling outcomes, bet settlements or similar matters (rather than data protection), you may be able to escalate your complaint to our appointed Alternative Dispute Resolution (ADR) provider, IBAS (Independent Betting Adjudication Service), using the online claim form at https://ibas-uk.com/consumers/claim-wizard/, once you have completed our internal complaints process.
  3. Supervisory authorities:
    • United Kingdom: If you are not satisfied with our response, you have the right to lodge a complaint with the UK data protection supervisory authority, the Information Commissioner's Office (ICO). Information on how to complain is available at https://ico.org.uk.
    • European Union/EEA: If EU data protection law applies to you, you may also complain to the supervisory authority in the Member State of your habitual residence, place of work or alleged infringement.
    • Mexico: Where Mexican data protection law is applicable, you may lodge a complaint with the competent Mexican data protection authority regarding the handling of your personal data, in accordance with local procedures.
    • Gambling-related complaints: Guidance on how to complain about gambling operators in the UK, including ProgressPlay-operated brands, is available from the UK Gambling Commission at https://gamblingcommission.gov.uk/public-and-players/guide/how-to-complain.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, regulatory guidance or technical developments. The version posted on be90t.com will always indicate the date it was last updated.

  • Notification of changes: For minor or clarifying changes, we may update the policy by posting the revised version on the website and changing the "Last updated" date. For material changes that significantly affect how we process your personal data or your rights, we will take additional steps to inform you, such as sending an email notification, displaying prominent notices or banners on the website, or issuing alerts in your account dashboard.
  • Advance notice: Where feasible and required by law, we will provide you with at least 30 days' advance notice of significant changes before they take effect, particularly where the changes involve new purposes of processing, new categories of data or new categories of recipients.
  • Your options: If you do not agree with the updated Privacy Policy, you may choose to close your account and stop using the bet-90-united-kingdom services on be90t.com. Continued use of the services after the effective date of the updated policy will generally be taken as your acknowledgement of the changes, to the extent permitted by law.
  • Version control: This Privacy Policy was last updated on 6 November 2025. Where appropriate, we may maintain a record of previous material versions and make them available upon request or through the website.