Privacy Policy

This Privacy Policy explains how AG Communications Limited, as operator of the Betiton Casino offering on the website betitonscasino.com, collects, uses, discloses and protects your personal data. It applies to players, prospective players, visitors to betitonscasino.com, and any other individual whose personal data is processed in connection with access to or use of our UK-facing products and services.

We provide online gambling services in a highly regulated environment. We therefore process personal data not only to operate your account and deliver games, but also to comply with strict legal and regulatory obligations, including those imposed by the UK Gambling Commission and applicable data protection laws.

By registering an account or otherwise using betitonscasino.com in connection with Betiton Casino, you acknowledge that you have read and understood this Privacy Policy. Where required, we will ask for your explicit consent for specific processing activities (for example, for certain marketing communications or non-essential cookies).

Effective from: 1 January 2026

Who We Are

For the purposes of data protection law in the United Kingdom, the primary data controller responsible for your personal data when you use betitonscasino.com in the Betiton Casino environment is:

Legal entity: AG Communications Limited
Registered address: 135 High Street, Sliema, SLM 1548, Malta
Role: UK-licensed remote gambling operator and controller of player data for the UK-facing Betiton Casino brand on betitonscasino.com
UK licence: Licensed and regulated by the UK Gambling Commission under account number 39483

AG Communications Limited operates the Betiton Casino brand for UK customers as a white-label on the Aspire Global platform. Certain back-office, technology and support functions may be provided by group companies such as Aspire Global International and related entities under appropriate data protection arrangements (for example, as data processors or, in limited cases, joint controllers).

Data protection contact

We have appointed a data protection function to oversee questions and requests in relation to this Privacy Policy and our handling of your data.

Email: privacy@betitonscasino.com
Postal contact (privacy): Data Protection Officer, AG Communications Limited, 135 High Street, Sliema, SLM 1548, Malta
Online: via the "Contact Us" or account messaging features available after logging in to betitonscasino.com

When you contact us about privacy or data protection, please clearly state that your request concerns "Privacy / Data Protection" and, where applicable, your UK player account on betitonscasino.com. This helps us route your query efficiently to our specialist team.

What Personal Data We Collect

We collect and process different categories of personal data depending on how you interact with betitonscasino.com and whether you hold a Betiton Casino player account.

Identity and contact data

Basic identification: full name, date of birth, gender, nationality and similar identifiers.
Contact details: home address, billing address, email address, telephone number and preferred language.
Verification documents: copies or details of identity documents (passport, ID card, driving licence), proof of address (utility bills, bank statements) and similar KYC documentation.

Account and transactional data

Account details: username, internal player ID, password (stored in encrypted form), account status, self-exclusion status, limits and preferences.
Gaming activity: game sessions, bets placed, wins and losses, jackpot participation, bonuses claimed and redeemed, wagering progress and game logs.
Financial transactions: deposits, withdrawals, refunds, chargebacks, payment instruments used (e.g. partial card digits, payment wallet identifiers), currency and transaction timestamps.

Technical and device data

Connection information: IP address, approximate location derived from IP, access times, session identifiers and log files.
Device characteristics: device type, operating system, browser type and version, screen resolution, language settings and other technical attributes.
Usage logs: log-in attempts, security events, error logs, and interaction with security features such as multi-factor authentication where enabled.

Behavioural and profiling data

Site usage: pages visited, clicks, navigation paths, time spent on pages, referral URLs and links followed within betitonscasino.com.
Gaming behaviour: frequency and duration of play, stakes, patterns of wins and losses, responsible gambling indicators, and responses to affordability or risk questionnaires.
Marketing interaction: email opens, campaign engagement, opt-in and opt-out history, and preferences regarding communications and channels.

Payment and financial data

Payment details: limited payment card information (e.g. masked card number and expiry date), e-wallet or bank account identifiers, and payment provider tokens.
Anti-fraud and AML data: results of sanctions screening, politically exposed person (PEP) checks, affordability assessments, and information from credit reference or fraud prevention agencies where legally permitted.

Cookies and similar technologies

Cookies: small text files stored on your device to remember your preferences, maintain sessions and provide core functionality.
Similar technologies: web beacons, pixels, tags, SDKs and local storage used for analytics, security, advertising and personalisation.
Identifiers: cookie IDs or other unique identifiers which may be associated with your account or device.

Special categories and sensitive inferences

Responsible gambling indicators: internal risk scores or flags indicating potential harm, based on patterns such as deposit frequency, session duration or changes in behaviour.
Communications: information you voluntarily provide to us about personal circumstances (e.g. health or financial situation) when interacting with our support or responsible gambling teams.

We only collect special category data where strictly necessary, where you provide it voluntarily, and where permitted by law (for example, to protect vulnerable players). In such cases we apply enhanced safeguards.

Legal Basis for Processing

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018. Depending on the specific activity, one or more of the following legal bases will apply.

Performance of a contract

Account creation and management: to register your account, verify your age and identity, allow you to log in, and manage your relationship with us.
Provision of services: to process deposits and withdrawals, settle bets, credit winnings, apply bonuses, and provide customer support.
Service communications: to send transactional messages about changes to your account, service interruptions, security alerts, or updates to our terms which affect your contract.

Compliance with legal and regulatory obligations

Gambling regulation: to comply with requirements imposed by the UK Gambling Commission, including age and identity verification, self-exclusion, responsible gambling measures and reporting obligations.
KYC/AML and fraud prevention: to fulfil obligations under anti-money laundering, counter-terrorist financing, sanctions and crime prevention laws, including transaction monitoring and record-keeping.
Data protection and other laws: to respond to lawful requests from regulators, law enforcement and other competent authorities, and to retain records for statutory periods.

Legitimate interests

Service improvement and analytics: to analyse usage patterns, diagnose technical issues, optimise performance, develop new features and improve the user experience.
Risk management and security: to protect betitonscasino.com, our systems, our players and our business from fraud, cyber-attacks, abuse of bonuses, account takeovers and other risks.
Business operations: to manage our relationship with suppliers and affiliates, conduct internal audits, and perform reporting and management analytics.
Marketing to existing customers: to send you information about products similar to those you already use, where permitted by law and subject to your right to object.

When we rely on legitimate interests, we balance our interests against your rights and expectations and implement safeguards to minimise any impact on your privacy.

Consent

Direct marketing to non-customers: where required, we will obtain your explicit consent before sending promotional communications by email, SMS, push notification or other electronic means.
Non-essential cookies and tracking: we obtain your consent through our cookie banner and preference tools before setting analytics, personalisation or advertising cookies.
Special category data: where we process sensitive information you voluntarily provide (for example, regarding your health in a responsible gambling context), we will seek your explicit consent when appropriate.

You can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Establishment, exercise or defence of legal claims / vital interests

Legal claims: we may process your data where necessary to establish, exercise or defend legal claims, including in disputes, investigations or litigation.
Protection of vital interests: in rare situations, we may process data to protect your vital interests or those of another person, for example if we reasonably believe there is a serious and imminent risk of harm.

Purpose of Processing

We use personal data only for specific, explicit and legitimate purposes and do not further process it in a manner incompatible with those purposes.

Provision of casino and related services

Operating your account: to create and maintain your player profile, authenticate access, and ensure that the Betiton Casino experience on betitonscasino.com functions as expected.
Processing transactions: to handle deposits, withdrawals, bet placement and settlement, bonus crediting, and loyalty or VIP programmes.
Customer support: to respond to your enquiries, handle complaints, and provide assistance through chat, email or other channels.

Compliance, risk and responsible gambling

Regulatory compliance: to perform KYC and affordability checks, monitor transactions for suspicious activity, and produce reports required by the UK Gambling Commission and other competent authorities.
Responsible gambling: to identify and interact with players who may be at risk, apply limits or restrictions, support self-exclusion (including participation in GamStop) and document our interventions.
Fraud and security: to detect and prevent fraud, bonus abuse, account compromise, money laundering and other prohibited or criminal behaviour.

Service improvement and analytics

Usage analytics: to understand how betitonscasino.com is used, identify technical issues, improve navigation, and optimise game offerings.
Product development: to analyse aggregated or anonymised data to design new features, promotions and products aligned with player interests.
Business reporting: to prepare internal reports on performance, financial results and operational trends.

Marketing and personalisation

Direct marketing: to inform you, where permitted, about promotions, new games, tournaments and other offers that may be relevant to you.
Personalisation: to tailor content, bonuses and recommendations based on your preferences and behaviour, subject to your choices and applicable law.
Advertising effectiveness: to measure the effectiveness of campaigns, understand which communications are opened or acted upon, and refine our marketing strategies.

Administrative, legal and business purposes

Record keeping: to maintain accurate records of transactions, consents, communications and decisions for audit and compliance purposes.
Corporate management: to manage assets, conduct audits, fulfil tax obligations and engage with service providers and partners.
Legal and regulatory proceedings: to handle disputes, investigations, inspections and legal claims.

Disclosure & Sharing

We treat your information as confidential and only share it where necessary and lawful. When we engage third parties, we require them to protect your data and use it only in accordance with our instructions or as otherwise permitted by law.

Within our group and platform providers

Group companies and platform providers: entities within the Aspire Global / NeoGames group and related providers that support the operation of betitonscasino.com (e.g. platform hosting, game servers, back-office tools, risk and payments operations).
Function-based access: access to your data is limited to personnel who need it to perform their roles, subject to confidentiality obligations and appropriate training.

Payment and financial service providers

Payment processors and banks: to process deposits, withdrawals, refunds and chargebacks, and to comply with anti-fraud, AML and sanctions screening requirements.
Fraud prevention agencies: where legally permitted, to exchange information for the prevention of fraud and financial crime.

Technical and professional service providers

IT and cloud providers: hosting, storage, security, content delivery networks, and technical support services.
Analytics and marketing tools: providers of analytics, email distribution, customer relationship management systems and similar services (for example, to send you communications or analyse campaign performance).
Professional advisers: lawyers, auditors, consultants and other professionals, where necessary for advice, audits or the defence of legal claims.

Regulators, authorities and dispute resolution bodies

Regulators and law enforcement: the UK Gambling Commission, tax authorities, courts, police and other competent bodies, where required by law or regulation, or where we have a legitimate interest in cooperating with investigations.
Alternative dispute resolution (ADR): approved ADR providers such as IBAS (Independent Betting Adjudication Service) for gambling-related disputes, as well as relevant consumer protection bodies.

Affiliates, partners and advertising networks

Affiliates and marketing partners: where necessary to track affiliate performance, attribute traffic or validate bonus eligibility, using unique identifiers rather than directly identifiable data whenever possible.
Advertising networks and social media: with your consent and in compliance with applicable law, we may share limited information (for example, hashed identifiers) to enable targeted advertising or audience measurement.

Corporate transactions

Business transfers: in connection with any merger, acquisition, reorganisation, sale of assets or insolvency event, your data may be transferred to prospective or actual buyers, subject to confidentiality and continued protection of your rights.

We do not sell your personal data to third parties. Any sharing for marketing purposes is strictly controlled and, where required, based on your consent.

International Transfers

Because AG Communications Limited is based in Malta and we rely on global service providers, your personal data may be transferred to and processed in countries outside the United Kingdom.

Within the EEA: data may be processed in Member States of the European Economic Area (including Malta), where essentially equivalent data protection standards apply.
Other countries with adequacy decisions: where the UK government has recognised that a country provides an adequate level of protection, we may transfer data on that basis.
Other third countries: where we use providers in countries without an adequacy decision (for example, certain IT or cloud providers), we implement appropriate safeguards such as the UK-approved International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, combined with technical and organisational measures.

We assess the legal framework of destination countries and our providers' practices to ensure that your data receives a level of protection essentially equivalent to that in the UK. Where necessary, we implement additional safeguards such as encryption, pseudonymisation, access controls and strict contractual limitations on onward transfers and government access requests.

You may contact us for more information about the specific safeguards applied to international transfers relevant to your data.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting and regulatory requirements. Because we operate in a regulated sector, certain retention periods are set by law or regulatory guidance.

Category of data	Typical purpose	Typical retention period
Identity and KYC data	Account creation, age and identity verification, AML and responsible gambling	For the duration of your account and generally up to 5 years after account closure, or longer if required by law
Account and transactional data	Provision of services, financial reporting, regulatory reporting, dispute resolution	For the duration of your account and generally up to 5 years after account closure, or longer where legally necessary
Technical and device data	Security, fraud prevention, performance monitoring and analytics	For the duration of your use of betitonscasino.com and for a limited period (typically up to 2 years) thereafter in log and backup systems
Marketing and preference data	Managing marketing permissions and communications	Until you withdraw consent or object to processing, plus a short period to record and implement your request
Responsible gambling records	Documenting interactions, self-exclusions, limits and interventions	For the duration of any active restriction or exclusion and generally up to 5 years after your account is closed or the restriction ends, subject to regulatory requirements
Complaint and dispute files	Handling complaints, regulatory investigations and legal claims	For the duration of the complaint or proceedings and for a period thereafter (typically up to 6 years) to establish, exercise or defend legal claims

When data is no longer required, we will either delete it securely or irreversibly anonymise it so that it can no longer be associated with you. In some cases, we may keep limited information (for example, your email address and a record of your request) to ensure that we honour your rights, such as suppression of marketing communications.

Your Rights

Under the UK GDPR and the UK Data Protection Act 2018, and, where applicable, under other data protection laws such as the Mexican Federal Law on the Protection of Personal Data Held by Private Parties, you have a number of rights in relation to your personal data. The availability and exact scope of these rights depend on your location and the legal basis for processing.

Core data protection rights

Right of access: to obtain confirmation of whether we process your personal data and, if so, to receive a copy and information about how it is used.
Right to rectification: to have inaccurate or incomplete personal data corrected or completed without undue delay.
Right to erasure ("right to be forgotten"): to request deletion of your personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other legal basis.
Right to restriction: to request that we restrict processing of your data in specific situations, such as while we verify accuracy or consider an objection.
Right to object: to object to processing based on our legitimate interests, including profiling, and to object at any time to direct marketing (including profiling for marketing).
Right to data portability: to receive certain data you have provided to us in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller.
Right not to be subject to decisions based solely on automated processing: to request human review of decisions that produce legal effects or similarly significant impacts, such as certain risk or affordability assessments, where carried out solely by automated means.
Right to withdraw consent: where processing is based on your consent, to withdraw that consent at any time.

Alignment with Mexican ARCO rights and other jurisdictions

ARCO rights (Mexico): if you are located in Mexico and Mexican law applies, you may exercise access, rectification, cancellation and opposition (ARCO) rights. These are broadly aligned with the access, rectification, erasure and objection rights described above.
Additional protections: where other local laws apply (for example, EU GDPR if you are in the EEA), you may benefit from equivalent or additional rights. We will respect the higher standard where there is a conflict.

How to exercise your rights

Submit a request: contact us via privacy@betitonscasino.com or through the secure messaging options on betitonscasino.com, indicating which right you wish to exercise and providing sufficient details to locate your data (for example, your username and registered email address).
Verify your identity: we may ask for information or documents to confirm your identity and ensure that we do not disclose data to an unauthorised person.
Our response time: we aim to respond to all valid requests without undue delay and within one month (30 days) of receipt. This period may be extended by up to two further months where necessary due to complexity or volume, in which case we will inform you and explain the reasons.
Fees: we do not charge a fee for exercising your rights. However, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, in accordance with applicable law.
Legal limitations: certain rights may be limited, for example where fulfilling your request would adversely affect the rights of others, impede ongoing investigations, or conflict with legal or regulatory obligations (such as mandatory retention under gambling or AML laws). In such cases we will explain the basis for any refusal.

Cookies & Tracking Technologies

betitonscasino.com uses cookies and similar technologies to operate the site, enhance your experience, perform analytics and, where permitted, deliver personalised content and advertising.

Types of cookies we use

Strictly necessary (session) cookies: essential to enable basic site functions such as logging in, maintaining your session, processing transactions and ensuring the security and integrity of betitonscasino.com. These are usually session cookies that expire when you close your browser.
Functional (persistent) cookies: used to remember your preferences (such as language, region or layout) and improve usability. These cookies persist for a defined period or until you delete them.
Performance and analytics cookies: used to collect aggregated information about how visitors use the site (e.g. pages visited, error messages, response times) to help us improve performance and design.
Advertising and targeting cookies: used, with your consent where required, to deliver more relevant adverts on our site or on third-party sites, measure campaign effectiveness and limit the number of times you see a particular advert.
Third-party cookies: set by third parties such as analytics providers, advertising networks, payment providers or social media platforms in connection with our services.

Managing cookies

Cookie banner and settings: when you first visit betitonscasino.com (and periodically thereafter), you will see a cookie banner that allows you to accept or reject non-essential cookies and to access more detailed settings.
Browser controls: you can configure your browser to refuse cookies, delete existing cookies or notify you before a cookie is set. Please note that blocking strictly necessary cookies may impair the functioning of the site and prevent you from using certain features.
Opt-outs: for certain analytics or advertising providers, you may also use industry opt-out tools or settings offered by those providers. Information about specific cookies and their duration is provided in our dedicated cookie information section on betitonscasino.com.

Data Security

We take the security of your personal data very seriously and implement a combination of technical, organisational and physical measures designed to protect it against unauthorised access, loss, misuse, alteration or disclosure.

Technical safeguards

Encryption: data in transit between your browser and betitonscasino.com is protected using TLS (Transport Layer Security) version 1.2 or higher. Where appropriate, we also encrypt certain categories of data at rest.
Access controls: access to systems that store or process personal data is restricted based on role and business need, using strong authentication mechanisms and, where appropriate, multi-factor authentication.
Network and system security: firewalls, intrusion detection and prevention systems, anti-malware tools, secure configuration standards and regular patching are used to protect our infrastructure.
Logging and monitoring: system activity is logged and monitored to detect unusual patterns, potential security incidents or abusive behaviour.

Organisational and procedural measures

Policies and training: staff with access to personal data receive regular training on data protection, confidentiality and security, and are bound by contractual obligations.
Vendor due diligence: we assess the security and data protection practices of our service providers and include appropriate data protection clauses in our contracts.
Incident response: we maintain procedures for identifying, managing and responding to data security incidents, including notifying affected individuals and relevant authorities where required by law.
Funds and player protection: in line with UK Gambling Commission requirements, we maintain segregation of customer funds from business accounts at a medium protection level and implement responsible gambling controls such as self-exclusion (including participation in GamStop) and deposit limits.

We strive to align our security controls with recognised industry standards (such as ISO 27001 and SOC 2) appropriate to our risk profile, although this does not imply formal certification in every case. While we take robust steps to protect your data, no internet-based service can be completely secure; you also play an important role by keeping your login details confidential and using security features we make available.

Complaints & Contacts

If you have questions, concerns or complaints about how we handle your personal data, we encourage you to contact us first so that we can seek to resolve the issue directly.

How to contact us

General support: via the customer support channels listed on betitonscasino.com (for example, live chat or email), indicating that your query relates to privacy or data protection.
Data protection contact: by email at privacy@betitonscasino.com or by writing to the Data Protection Officer, AG Communications Limited, 135 High Street, Sliema, SLM 1548, Malta.

Complaint handling procedure

Initial review: once we receive your complaint, we will acknowledge it and conduct an internal investigation, which may include reviewing relevant systems and records.
Response timeframe: we aim to provide a substantive response within one month (30 days) of receipt. If your complaint is particularly complex or we receive a high volume of requests, we may need more time. In such cases, we will inform you of the extension and the expected timeframe.
Escalation: if you are not satisfied with our initial response, you may request that your complaint be escalated to our data protection lead or senior management for further review.

Escalation to supervisory authorities

United Kingdom (primary regulator for data protection): you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe that your data protection rights have been infringed:
Website: https://ico.org.uk
Mexico (where Mexican law applies): if you are located in Mexico and the Mexican Federal Law on the Protection of Personal Data Held by Private Parties applies to our processing of your data, you may have the right to lodge a complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI):
Website: https://home.inai.org.mx
Other EEA / EU authorities (where EU GDPR applies): if you are in the European Economic Area and EU GDPR applies, you may also complain to your local data protection authority in the Member State of your habitual residence, place of work, or where the alleged infringement took place.

For gambling-related disputes that do not concern data protection (for example, bet settlement or game fairness), you may have access to approved alternative dispute resolution services such as IBAS, as well as the UK Gambling Commission's guidance and complaint channels. Details are available on betitonscasino.com and on the websites of these bodies.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, regulatory guidance or technical developments. When we make changes, we will revise the "Last updated" date at the end of this document.

How we will inform you

On-site notice: we will post the updated Privacy Policy on betitonscasino.com, making it accessible from the relevant information or footer sections.
Email or in-account notifications: for material changes, we will take additional steps to inform you, such as sending an email to your registered address, displaying an in-account message, or presenting a notice when you next log in.
Banners or pop-ups: in some cases, we may display banners or pop-ups highlighting key changes and, where required, request your renewed consent (for example, for certain types of processing or cookies).

Advance notice and your options

Advance notice: where feasible and the changes are material (for example, involving new purposes of processing or new categories of recipients), we will provide at least 30 days' notice before the changes take effect.
Continued use: if you continue to use betitonscasino.com after the effective date of an updated Privacy Policy, your use will be subject to the new terms.
Right to object or close account: if you do not agree with a material change that affects the processing of your personal data, you may be able to object to the processing, withdraw consent where applicable, or request closure of your account, subject to our legal and regulatory obligations.

Version and change log

Last updated: January 2026
Recent material changes include:
- Clarification of our role as data controller for the Betiton Casino offering on betitonscasino.com and our relationship with platform providers.
- Expanded explanations of your data protection rights and procedures for exercising them, including references to Mexican ARCO rights where applicable.
- Updated information on security measures, international transfers and regulatory context in line with current UK data protection and gambling requirements.