Last updated: January 2025
BetOranje (the "Platform") is operated by Zephyr Holding SRL ("we", "us", "our"), a company registered in Costa Rica. We are committed to protecting your personal data and handling it in accordance with applicable data protection legislation.
This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, how long we retain it, and what rights you have in relation to your data. Please read this policy carefully before using the Platform.
1. Data Controller
The data controller responsible for your personal data is Zephyr Holding SRL. For data-related enquiries, contact us at support@betoranje.com.
2. Data We Collect
We collect personal data in the following categories:
2.1 Registration Data
When you create an account, we collect your full name, date of birth, gender, email address, phone number, and residential address (including country, city, and postal code). This data is required to create and manage your account.
2.2 Identity Verification Data (KYC)
To comply with our licence obligations and anti-money laundering (AML) regulations, we collect copies of government-issued identity documents (passport, national ID card, driver's licence) and proof of address (utility bill, bank statement). For players using payment cards, we may also request a photograph of the card used.
2.3 Financial Data
We collect payment information necessary to process deposits and withdrawals. This includes card details (stored by our payment processor, not directly by us), transaction history, deposit amounts, withdrawal requests, and bonus usage records. We do not store full card numbers.
2.4 Usage and Technical Data
We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, operating system, device identifiers, pages visited, session duration, clickstream data, and referring URLs. This data is collected via cookies and similar technologies - see Section 8 below.
2.5 Communications Data
When you contact our support team, we retain records of those communications including email correspondence, live chat transcripts, and any documents you provide. This helps us resolve disputes and improve our service.
2.6 Gambling Activity Data
We collect records of your betting and gaming activity on the Platform, including game sessions, bet amounts, winnings, losses, and self-exclusion history. This data is required for regulatory compliance, responsible gambling monitoring, and account management.
3. How We Use Your Data
We use your personal data for the following purposes:
- Account creation and management - to register your account, verify your identity, and manage your profile.
- Service delivery - to provide access to casino games, sports betting, and other Platform features.
- Payment processing - to process deposits and withdrawals and prevent fraudulent transactions.
- Regulatory compliance - to meet obligations under our Anjouan operating licence, including AML and KYC requirements.
- Responsible gambling - to monitor play patterns, enforce self-exclusion requests, and apply player-requested limits.
- Customer support - to respond to your enquiries and resolve disputes.
- Marketing - to send you promotional communications where you have opted in. You may withdraw consent at any time.
- Security and fraud prevention - to detect and prevent unauthorised access, fraud, and abuse of the Platform.
- Platform improvement - to analyse usage data and improve the functionality and user experience of the Platform.
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract performance - processing necessary to provide the services described in our Terms of Use.
- Legal obligation - processing required to comply with AML, KYC, and licensing regulations.
- Legitimate interests - processing for fraud prevention, platform security, and service improvement.
- Consent - processing for direct marketing, where you have explicitly opted in.
5. Data Sharing
We do not sell your personal data to third parties. We share data only where necessary and with the following categories of recipients:
- Payment service providers - to process deposits and withdrawals securely.
- Identity verification providers - to assist with KYC document review.
- Game providers - your session data is shared with the relevant game studio to deliver the game.
- IT and hosting providers - who host the Platform infrastructure under confidentiality agreements.
- Regulatory authorities - where required by law or our operating licence.
- Fraud prevention services - to screen for suspicious activity and protect the Platform.
6. Data Retention
We retain personal data for as long as your account is active and for a minimum of 5 years after account closure to comply with AML and anti-fraud record-keeping obligations. KYC documents are retained for the same period. Communication records are retained for 3 years. Technical and usage data is retained for up to 2 years.
7. International Transfers
Your personal data may be transferred to and processed in countries outside your country of residence. We take appropriate measures to ensure that any such transfers comply with applicable data protection law, including use of contractual safeguards with recipient organisations.
8. Cookies
We use cookies and similar tracking technologies on the Platform. For full details of the cookies we use, their purpose, and how to manage your cookie preferences, please read our Cookie Policy.
9. Your Rights
Depending on your jurisdiction, you may have the following rights in relation to your personal data:
- Right of access - to request a copy of the personal data we hold about you.
- Right to rectification - to request correction of inaccurate or incomplete data.
- Right to erasure - to request deletion of your data where there is no lawful basis for continued processing.
- Right to restriction - to request that we limit processing of your data in certain circumstances.
- Right to portability - to receive your data in a structured, machine-readable format.
- Right to object - to object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent - to withdraw marketing consent at any time without affecting prior processing.
To exercise any of these rights, contact us at support@betoranje.com. We will respond within 30 days. Note that some rights are subject to limitations under applicable law, particularly where data retention is required for regulatory compliance.
10. Data Security
We implement technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption, secure data storage, access controls, and regular security assessments. However, no internet-based system is completely secure, and we cannot guarantee absolute security.
11. Children
The Platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has registered an account, contact us immediately at support@betoranje.com.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Significant changes will be communicated via the Platform or by email. The date at the top of this page shows when the policy was last updated. Continued use of the Platform after an update constitutes acceptance of the revised policy.
13. Contact
For any questions or concerns about this Privacy Policy or how we handle your data, contact us at:
| support@betoranje.com | |
| Operator | Zephyr Holding SRL, Costa Rica |
| Licence | Anjouan |