Privacy Policy

Version: 1.0  |  Last Updated: 31 July 2026

This Privacy Policy describes how Supabet (“we,” “us,” “our”), operating through the Website at supabet-bonus.com, collects, uses, stores, shares, and protects your personal data when you access or use our Platform. It also explains the rights you have in relation to your personal data and how to exercise them.

By registering an Account or using our Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of our overall legal framework alongside our Terms and Conditions and Responsible Gaming Policy.

1. Introduction

1.1. Scope

This Privacy Policy applies to all personal data processed in connection with your use of the Supabet Platform, including but not limited to account registration, deposits and withdrawals, customer support interactions, marketing communications, and participation in games and promotions.

1.2. Our Approach to Privacy

We are committed to processing your personal data in a lawful, fair, and transparent manner. We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. We process only the personal data that is necessary for the specified, explicit, and legitimate purposes outlined in this Policy.

1.3. Data Controller

Supabet, operating through supabet-bonus.com, is the data controller responsible for your personal data collected through this Platform. For any data protection inquiries, please contact our Data Protection Officer (DPO) at [email protected].

2. Data We Collect

2.1. Information You Provide Directly

We collect the following categories of personal data that you provide to us directly:

• Identity Data: Full legal name, date of birth, gender, nationality, copy of government-issued identity document (passport, national ID card, or driver’s licence);
• Contact Data: Email address, telephone number, residential address, postal code;
• Account Data: Username, password (stored in hashed form), account preferences and settings, communication preferences;
• Financial Data: Payment method details (card type, last four digits, expiry date), transaction history, deposit and withdrawal records, source-of-funds documentation;
• Verification Data: KYC documentation including proof of identity, proof of address, and payment method verification;
• Communications Data: Records of your interactions with our Customer Support team, including emails, live chat transcripts, and telephone call recordings (where applicable).

2.2. Information We Collect Automatically

When you access or use our Platform, we automatically collect certain technical and usage data:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, device identifiers;
• Usage Data: Pages visited, features used, games played, session duration, click-through patterns, search terms used within the Platform;
• Transaction Data: Betting history, game session data, wager amounts, game outcomes, bonus utilisation;
• Location Data: Approximate geographical location derived from IP address (country and region level), used for geolocation compliance checks.

2.3. Information from Third Parties

We may receive personal data about you from third-party sources, including:

• Identity verification and KYC service providers;
• Payment processors and financial institutions;
• Fraud prevention and AML screening databases;
• Marketing partners and affiliate networks (where you have accessed our Platform via an affiliate link);
• Publicly available sources, such as corporate registers or media, where relevant for due diligence purposes.

2.4. Special Categories of Data

We do not intentionally collect special categories of sensitive personal data (such as health data, racial or ethnic origin, or political opinions) unless required by law or voluntarily provided by you (e.g., disclosure of a gambling-related condition in connection with a responsible gaming request). Such data is handled with additional safeguards.

3. How We Use Your Data

3.1. Purposes of Processing

We use your personal data for the following purposes:

• Account Registration & Management: Creating and managing your Account, verifying your identity and eligibility, and administering your use of the Platform;
• Service Delivery: Processing deposits and withdrawals, providing access to games and features, crediting bonuses and promotions;
• KYC & AML Compliance: Verifying your identity, age, and address; conducting anti-money laundering and fraud prevention checks;
• Customer Support: Responding to your inquiries, resolving disputes, and providing technical assistance;
• Legal & Regulatory Compliance: Fulfilling obligations imposed by applicable law, regulations, and regulators, including data retention requirements;
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent or illegal activities on the Platform;
• Marketing & Communications: Sending you promotional offers, newsletters, and updates, where you have provided your consent or where permitted by applicable law;
• Analytics & Platform Improvement: Analysing usage patterns to improve our Platform, products, and services;
• Responsible Gaming: Identifying and assisting Players who may be at risk of problem gambling, in accordance with our Responsible Gaming Policy.

4. Legal Bases for Processing

4.1. Applicable Legal Bases

We process your personal data on one or more of the following legal bases under the General Data Protection Regulation (GDPR) and applicable national data protection legislation:

4.2. Consent Withdrawal

Where processing is based on your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal. You may withdraw marketing consent by clicking the “unsubscribe” link in any marketing email, or by contacting us at [email protected].

5. Data Sharing & Third Parties

5.1. Categories of Recipients

We may share your personal data with the following categories of third parties, strictly as necessary and subject to appropriate safeguards:

• Payment Processors: To facilitate deposits, withdrawals, and fraud prevention (e.g., Visa, Mastercard, Skrill, Neteller, PayPal, Revolut, Viva Wallet);
• KYC & Verification Providers: Third-party identity and age verification service providers;
• Game Software Providers: Third-party game developers and studios that supply the games available on the Platform;
• AML & Fraud Prevention Services: Agencies that assist in screening for financial crime and fraudulent behaviour;
• Cloud & Hosting Providers: Infrastructure providers who host our Platform and data systems;
• Analytics Providers: Tools used for analysing Platform usage and performance;
• Marketing & CRM Partners: Where you have consented to marketing, providers who assist with campaign management and delivery;
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or regulatory obligation;
• Professional Advisors: Legal advisors, auditors, and accountants, bound by confidentiality obligations.

5.2. No Sale of Data

We do not sell, rent, or trade your personal data to any third party for their own marketing purposes without your explicit prior consent.

5.3. Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

6. Cookies & Tracking Technologies

6.1. What Are Cookies

Cookies are small text files placed on your device when you visit our Website. We also use similar tracking technologies such as web beacons, pixels, and local storage objects. These technologies help us operate the Platform effectively, remember your preferences, and improve your experience.

6.2. Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Website to function. These include session management, security tokens, and login state. They cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: Collect anonymised information about how visitors use the Website, allowing us to improve features and content. Examples include page load times and error reports.
• Functional Cookies: Remember your preferences such as language selection, game display settings, and account settings.
• Marketing & Targeting Cookies: Used to deliver relevant promotional content and track the effectiveness of our marketing campaigns. Activated only with your consent.

6.3. Cookie Consent & Management

Upon your first visit to the Platform, you will be presented with a cookie consent banner. You may accept all cookies, reject non-essential cookies, or manage your preferences via the cookie settings panel. You may also manage cookies through your browser settings, though disabling certain cookies may affect Platform functionality.

7. Data Security

7.1. Security Measures

We implement robust technical and organisational measures to protect your personal data, including:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security) technology. Sensitive data at rest is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data receive regular data protection training.
• Firewall & Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems.
• Regular Security Audits: We conduct periodic internal and external security assessments and penetration tests to identify and remediate vulnerabilities.
• Incident Response: We maintain a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and applicable supervisory authorities within the timeframes required by law.

7.2. Your Responsibility

While we take all reasonable steps to protect your data, no transmission over the internet is completely secure. You are responsible for maintaining the confidentiality of your Account credentials and for ensuring that your device is adequately protected with up-to-date security software.

8. Data Retention

8.1. Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Typical retention periods include:

8.2. Deletion & Anonymisation

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified or identifiable individual. Anonymised data may be retained for statistical or analytical purposes indefinitely.

9. Your Rights

9.1. Rights Under GDPR

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data:

• Right of Access (Art. 15 GDPR): You may request a copy of the personal data we hold about you;
• Right to Rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete personal data;
• Right to Erasure (Art. 17 GDPR): You may request deletion of your personal data where it is no longer necessary for the purpose collected or where you withdraw consent, subject to legal retention obligations;
• Right to Restriction (Art. 18 GDPR): You may request that we restrict the processing of your personal data in certain circumstances;
• Right to Data Portability (Art. 20 GDPR): You may request that we provide your personal data in a structured, commonly used, machine-readable format;
• Right to Object (Art. 21 GDPR): You may object to processing based on legitimate interests or for direct marketing purposes;
• Rights Related to Automated Decision-Making (Art. 22 GDPR): You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects, unless certain exceptions apply.

9.2. Exercising Your Rights

To exercise any of your rights, please submit a written request to our DPO at [email protected]. We will respond to your request within one (1) month of receipt. This period may be extended by a further two months for complex or numerous requests, in which case we will notify you within the initial month.

9.3. Right to Lodge a Complaint

If you believe that we have not handled your personal data in accordance with applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority. In Greece, this is the Hellenic Data Protection Authority (HDPA) (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα – ΑΠΔΠΧ), reachable at www.dpa.gr.

10. International Data Transfers

10.1. Transfers Outside the EEA

Some of our third-party service providers and technology partners are located outside the European Economic Area (EEA). Where personal data is transferred to countries that do not provide an equivalent level of data protection, we ensure that appropriate safeguards are in place, which may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Binding Corporate Rules (BCRs) adopted by the recipient group;
• Adequacy decisions issued by the European Commission in respect of the destination country.

10.2. Safeguards

We conduct due diligence on all international transfer mechanisms and require all recipients of transferred data to provide equivalent levels of data protection. You may request information about the specific safeguards applicable to any international transfer by contacting [email protected].

11. Minors

11.1. Age Restriction

The Platform is strictly prohibited from use by any person under the age of 21 years. We do not knowingly collect, process, or retain personal data of individuals under 21. If we discover that we have inadvertently collected personal data from an individual under the age of 21, we will promptly delete such data and close the associated Account.

11.2. Parental Controls

We strongly encourage parents and guardians to use available parental control software to prevent minors from accessing gambling platforms. If you believe a minor has registered on our Platform or has been exposed to gambling-related content through our Website, please contact us immediately at [email protected].

12. Changes to This Policy

12.1. Updates

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or business operations. Material changes will be communicated to you via email or a prominent notice on the Website prior to taking effect. The “Last Updated” date at the top of this Policy will always reflect the date of the most recent revision.

12.2. Continued Use

Your continued use of the Platform after any changes to this Privacy Policy become effective constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you must cease using the Platform and may request Account closure in accordance with our Terms and Conditions.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

• Data Protection Officer (DPO) / Privacy Email: [email protected]
• General Customer Support: [email protected]
• Website: supabet-bonus.com

This Privacy Policy was last updated on 31 July 2026.