BresBet Casino Privacy Policy

Effective date: 26 September 2026

BresBet Casino uses personal information to open and protect player accounts, process payments, record game rounds and meet legal duties in the United Kingdom. This Policy explains the exact records created when a player uses slots, table games, live casino products, bonuses and the casino cashier.

We do not collect information simply because it may become useful. Each category must connect to a casino function, a regulatory requirement, a security need or a choice made by the player.

The Company Handling Your Information

BresBet Ltd acts as the data controller for the processing described in this Policy. We decide which personal information the casino needs, why we use it and how long we keep it.

Legal entity: BresBet Ltd
Company number: 13250493
Registered office: Office 624, Block 2 Spaces, Pennine Five, 20–22 Hawley Street, Sheffield, England, S1 2EA
Data Protection Officer: [email protected]

Contact the Data Protection Officer about access requests, corrections, objections or concerns about the use of personal information. Write “Privacy” in the subject line. Players should not attach identity or payment documents to an initial email unless we have provided submission instructions.

Where This Policy Applies

This Policy applies to the BresBet Casino website, casino sections of our mobile service, official casino app functions, promotional pages and customer communications. It also applies when someone contacts us without completing registration.

External game studios, payment companies, app stores and safer-gambling organisations may process information under their own privacy policies. We explain below when information moves between BresBet Casino and another organisation.

Our Cookie Notice deals specifically with cookies, local storage and similar device technologies. Our Terms and Conditions explain the contractual rules for the casino account.

Information Used to Create a Casino Account

We need enough information to identify an adult player and protect access to the account. The registration record may contain:

• legal name, date of birth and home address;
• email address and mobile telephone number;
• account identifier and protected login credentials;
• registration date, device details and IP address;
• acceptance of the Terms and Conditions and privacy notices;
• communication and marketing choices; and
• deposit-limit or safer-gambling choices made during sign-up.

The details must belong to the person opening the account. A casino account cannot be created for a family member, friend, company or informal group. We may compare an application with existing records to identify duplicate accounts, previous restrictions or security concerns.

Players must keep their contact information current. An address, telephone number or legal name change may require evidence before we update the verified record. We keep an audit trail when an earlier value remains relevant to a payment, game dispute or regulatory check.

Age and Identity Evidence

UK online gambling rules require age and identity checks before a person can gamble. We check the name, address and date of birth supplied at registration. A verification provider may confirm the details, or we may request documents when further evidence is necessary.

Examples include a passport or driving licence for identity and age, plus a bank statement, council tax letter or household bill for address. We may also request proof that a bank account, debit card or payment wallet belongs to the registered player.

We tell the player what we need and why. A clear request should identify the document type, the details that must remain visible and the approved submission route. We do not require a complete card security code, online-banking password or casino password.

Failed verification does not always mean that information is false. It can result from an old address, shortened name, blurred image or expired document. We may restrict deposits or play while we resolve the mismatch.

Casino Game and Round Records

Each casino action creates a technical and financial record. For a slot, this may show the game title, supplier, stake, balance before and after the spin, result, bonus status and round reference. Roulette, blackjack and baccarat records may also identify the table, seat or position, bet type and completed outcome.

Live casino games generate additional session data. The live dealer supplier may record the table, entry and exit times, accepted bets, game sequence and connection events. Video of the dealer and table normally shows the studio, not the remote player. If a live product offers player chat, messages may be recorded and moderated.

We use game-round records to update balances, calculate winnings, confirm bonus contribution and investigate incomplete or disputed play. A round identifier allows BresBet and the game supplier to examine the same event without sharing the player’s complete account file.

Technical events also matter. A loss of connection, duplicate instruction or provider error can require server logs, timestamps and device information. The final result follows the certified game record and applicable rules rather than the image last displayed on a disconnected device.

Bonus and Promotion Information

Casino promotions create records beyond ordinary cash play. We may record the offer selected, opt-in time, qualifying deposit, eligible stakes, free-spin use, wagering progress, expiry and credited winnings.

These details allow us to apply the published terms and show remaining requirements. They also help us detect duplicate claims, coordinated misuse or play that does not meet the stated conditions. A bonus review can use account, device, payment and household information where the terms limit an offer to one eligible participant.

Marketing permission and bonus participation are not the same. A player can use an eligible casino promotion without agreeing to every marketing channel. Opting out of future marketing does not remove the transaction record for a bonus already accepted.

Safer-Gambling Information

We examine casino activity for indicators that may require support or intervention. Relevant information can include rapid deposits, long sessions, changes in stakes, losses, declined payments, cancelled withdrawals, repeated limit changes and comments made to our team.

We do not treat one long session or one high stake as automatic proof of harm. We consider the pattern, account history and any information provided by the player. A review may lead to a safer-gambling message, a conversation, a limit, a temporary restriction or closure.

A player may disclose addiction, health problems, financial pressure or another vulnerability. This information may receive special protection under UK data law. Only staff and providers with a genuine need can use it, and we identify an appropriate legal condition before processing it.

Self-exclusion information remains available for matching and blocking purposes. We also keep enough data to stop marketing and reduce the risk of a replacement account. Closing the visible casino profile does not remove those protections.

Information from the Website, App and Device

Our systems may receive the IP address, approximate location, device type, operating system, browser or app version, screen settings, language, login time and security events. We also record page requests, loading errors and interactions needed to operate the casino.

This information helps us maintain sessions, protect login, find software faults and identify automated attacks. Device and network signals may also support location, fraud and duplicate-account checks.

A player should install the BresBet app only from an official link or recognised store. We do not control an unofficial APK, copied website or third-party application that uses the BresBet name. Information entered into such a service does not reach us through an approved channel.

Cookies and Storage on a Player’s Device

BresBet Casino uses cookies and similar technologies for several distinct purposes. Necessary technology can keep the player signed in, remember a bet or game session, store a consent choice and protect forms from misuse. Optional technology can measure page use or support permitted advertising.

The cookie panel shows the active categories and available choices. The Cookie Notice identifies current providers and durations. We request consent for non-essential technologies where the law requires it.

Players can change an available consent choice later. Removing browser data may also remove the saved preference. Blocking necessary cookies can prevent registration, login, casino launch or payment functions from working correctly.

Messages Sent to BresBet Casino

We retain emails, contact-form submissions and live-chat messages where chat is available. A support record can include the message, attachment, account reference, time, staff member and resolution.

Casino enquiries often require specific evidence. An interrupted slot round may need a game reference and time. A missing withdrawal may need a cashier reference. A login concern may require device and security information. We use only the account data needed to investigate the reported issue.

Do not send identity documents through social-media comments or direct messages. We may use social channels for public information, but we move private account matters to an approved support route.

Sources Other Than the Player

Personal information can reach BresBet Casino from organisations involved in providing or protecting the service. These may include:

• identity, age and address-verification services;
• banks, card processors and payment wallets;
• casino platform and game suppliers;
• fraud-prevention and cybersecurity providers;
• GAMSTOP and other applicable exclusion systems;
• affiliates that introduced a player to the casino;
• public registers and lawful public sources; and
• regulators, courts, police or other authorities.

We may also create information by combining account events. For example, several failed logins from a new device can create a security flag. A flag does not replace the underlying facts, and players can ask us to correct inaccurate identity or contact information.

Purposes and Legal Grounds

The table connects the main casino activities with their reasons and legal grounds.

Casino activity	Purpose	Main legal ground
Registration and account access	Create the profile and provide requested account functions	Performance of a contract
Age and identity checks	Confirm eligibility and comply with gambling rules	Legal obligation
Game launch and round settlement	Record stakes, results, winnings and balances	Contract and legal obligation
Deposits and withdrawals	Move funds and maintain an accurate cashier record	Contract and legal obligation
Fraud and account-security checks	Protect players, payments and casino systems	Legitimate interests and legal obligation
Anti-money-laundering review	Examine relevant funds and keep required records	Legal obligation
Bonus administration	Apply promotion terms and credit eligible rewards	Contract and legitimate interests
Safer-gambling review	Identify risk and apply protective action	Legal obligation, legitimate interests and an additional condition for sensitive data where required
Support and complaints	Resolve enquiries and document decisions	Contract, legal obligation and legitimate interests
Necessary technical monitoring	Maintain performance, sessions and security	Legitimate interests
Optional analytics or advertising	Measure use and permitted campaigns	Consent where required
Direct marketing	Send selected casino news and offers	Consent or legitimate interests where electronic-marketing law permits

Legitimate interests do not give us unlimited permission. We consider the purpose, necessity and effect on the player. A strong privacy impact can outweigh our business interest.

Consent remains voluntary. A player can withdraw it without cancelling processing supported by a contract or legal duty. Withdrawal applies to future activity and does not make earlier lawful processing invalid.

Automated Checks and Player Profiles

Automated rules help us identify unusual account access, payment risk, linked registrations, bonus misuse and possible gambling harm. They can also arrange casino content or measure whether a promotion reached its intended audience.

A system flag does not always decide the outcome. Staff may examine registration details, game events, payments and communication before applying a material restriction. We record the reason for a decision when accountability requires it.

If BresBet Casino makes a decision with a legal or similarly significant effect solely through automated processing, the safeguards in UK data-protection law apply. Where relevant, a player may request human involvement, explain the circumstances and challenge the decision.

Organisations That May Receive Casino Data

Operating an online casino requires several specialist services. We may disclose relevant information to:

• hosting, account-platform and cybersecurity providers;
• slot, table-game and live casino suppliers;
• banks, payment gateways and payment wallets;
• identity, fraud and anti-money-laundering services;
• customer-support and communication systems;
• analytics or advertising providers enabled under the applicable choice;
• auditors, insurers, lawyers and other professional advisers;
• the UK Gambling Commission, HM Revenue & Customs and the Information Commissioner’s Office; and
• police, courts or another body with lawful authority.

We do not sell a player database. A processor must follow our documented instructions and contractual security requirements. An independent controller, such as a bank or regulator, determines how it meets its own legal duties.

Game suppliers receive only the information required to provide and examine their games. A supplier investigating a roulette round does not need the player’s complete identity file or unrelated withdrawal history.

During a merger, restructuring or sale, advisers and a prospective owner may examine necessary data under confidentiality controls. A completed transfer must identify the new controller and continue to protect applicable rights.

Transfers and Access Outside the UK

A casino supplier or technology provider may operate from another country. When an arrangement creates a restricted transfer of personal information, we use a mechanism recognised under UK law.

This may involve UK adequacy regulations, the International Data Transfer Agreement, the UK Addendum to approved contractual clauses or another lawful safeguard. We also consider the destination, type of information, access controls and security risk.

Players may ask the Data Protection Officer for information about the safeguard relevant to their data. We do not disclose confidential details that could weaken account or platform security.

Security Inside BresBet Casino

We apply controls based on the sensitivity of the information and the harm that unauthorised access could cause. Measures include controlled staff access, authentication, activity records, confidentiality duties, supplier review, backup management and incident procedures.

Different roles require different access. A game-support specialist may need a round reference, while a compliance specialist may need identity or financial evidence. Marketing staff do not need routine access to verification documents.

We do not publish technical details that could help an attacker bypass protection. If a personal-data breach creates a legal notification duty, we contact the relevant regulator and affected players as required.

Players should use a unique password, secure the connected email account and sign out on shared devices. BresBet Casino will not request a full password, one-time security code or card security code through an unexpected email or social-media message.

Retention After the Final Casino Session

Closing the casino account stops normal play but does not erase the history of completed transactions. We keep basic identity, contact, financial and transaction data for six years after the person stops being a customer. This period supports legal, tax, regulatory and dispute-handling duties.

We may keep a relevant record longer while a complaint, chargeback, investigation, debt or legal claim remains open. We do not extend every category merely because one record needs preservation.

Self-exclusion data remains for the time needed to enforce the restriction and prevent marketing. Security logs, cookie records, incomplete registrations and support messages follow schedules linked to their purpose and risk. The current Cookie Notice states the duration of device technologies.

At the end of a retention period, we delete the information, irreversibly anonymise it or remove it from normal use while protected backups complete their replacement cycle. Anonymous game statistics can remain because they no longer identify a player.

Privacy Rights of UK Players

Depending on the legal ground and circumstances, a player can ask us to:

• confirm whether we hold personal information and provide a copy;
• correct inaccurate or incomplete information;
• delete information when no lawful reason for retention remains;
• restrict use while a dispute about accuracy or lawfulness is examined;
• provide eligible information in a portable machine-readable format;
• consider an objection to legitimate-interest processing;
• stop direct marketing;
• record withdrawal of consent; or
• apply safeguards relating to a qualifying automated decision.

Send a request to [email protected]. Explain which casino account or information the request concerns. We may ask for evidence of identity before releasing data. This prevents another person from using a privacy request to obtain account records.

We normally respond within one month. UK law allows an extension for a complex request or several connected requests. If an extension applies, we explain it within the initial period.

There is usually no fee. We may charge a reasonable fee or refuse a request that the law regards as manifestly unfounded or excessive. A representative must show authority to act for the player.

Access rights do not provide unrestricted access to casino systems, another player’s information, confidential security methods or legally privileged material. We may redact protected information while still supplying the player’s own data.

Players Under the Age of 18

BresBet Casino is not available to anyone under 18. We use registration and verification information to enforce this rule.

If we discover an underage registration, we take the action required by gambling rules. We may retain limited information to record the event, prevent another attempt and meet legal duties. A parent or guardian can contact the Data Protection Officer without attaching the child’s identity document to the first message.

Updating Account Information

Players should correct a changed email address, telephone number or home address promptly. We may ask for evidence when a change affects verified identity or payment security.

Correcting current details does not rewrite historical casino events. A new address can replace the contact address while the earlier address remains connected to a transaction completed at that time. We restrict or mark disputed information while examining evidence where appropriate.

Policy Updates and Privacy Complaints

We change this Policy when casino functions, suppliers, legal requirements or processing activities change. The effective date at the top identifies the current version. We provide an appropriate website or account notice for a material update.

A new policy version cannot create consent for an unrelated purpose. Where a new activity needs consent, we ask before starting it.

Send privacy concerns to [email protected]. Include the registered contact details, relevant date, affected information and the outcome requested. Do not include a password or complete payment-card information.

Players may also complain to the Information Commissioner’s Office, the UK authority responsible for data protection. Current complaint and contact routes appear at ico.org.uk. Contacting BresBet Casino first does not remove the right to approach the ICO.