Privacy Policy
This Privacy Policy explains how Fav Bet (operating via https://favs.bet) collects, uses, shares, and protects personal data. It is required to ensure transparency and to meet applicable data protection standards for website visitors and players who use our services. Effective date: 6 November 2025.
Who We Are
OBSERVE: The Fav Bet service on https://favs.bet is operated under the Fav Bet brand by the corporate entities identified in our records. The primary operating entity is Favorit United N.V. (Curaçao), and a related entity used for payment processing is Bintpash Ltd. (Cyprus).
EXPAND: UK users must be able to identify the data controller and reach a responsible privacy contact. Where corporate address sources conflict, we must present the known alternatives transparently and invite clarification requests, while still providing a functional contact route for data rights and complaints.
REFLECT: For privacy purposes, the data controller/contact details for Fav Bet on https://favs.bet are as follows:
- Operator / Data Controller: Favorit United N.V. (N.V.)
- Registration: Company registration number 121466, Commercial register of Curaçao
- Registered/Legal address (as provided; clarification may be required):
- Zuikertuintjeweg Z/N (Zuikertuin Tower), Willemstad, Curaçao
- and/or Abraham de Veerstraat 9, Willemstad, Curaçao
- Payment processing subsidiary (where applicable): Bintpash Ltd., Agiou Georgiou Makri, 64, Anna Maria Lena Court, Flat 201, 6037, Larnaca, Cyprus
Data Protection Contact (DPO / Privacy Team)
OBSERVE: A specific DPO email/phone is not provided in the available operational data for Fav Bet. The official website for the brand context is https://favs.bet.
EXPAND: UK GDPR requires an accessible contact channel for privacy requests. Where direct details are unavailable, the policy must direct users to an available written channel and commit to routing requests internally without undue delay.
REFLECT: To exercise data rights or raise privacy questions, contact our Data Protection Department via the support/contact functionality available on https://favs.bet. If you cannot locate a contact route on the site, you may send written correspondence to the operator address above, marked "Data Protection Department - Privacy Request (Fav Bet)". (Telephone and direct email are not specified in the available records.)
What Personal Data We Collect
OBSERVE: Fav Bet on https://favs.bet may process identification, contact, technical, transactional, behavioural, and cookie-related information to operate an online gambling account and related services.
EXPAND: For gambling services, data collection commonly includes age/identity verification (KYC), AML screening, fraud detection, and gameplay monitoring. UK expectations also include transparency about profiling, device identifiers, and marketing preferences.
REFLECT: We may collect the following categories of personal data (depending on how you use https://favs.bet):
- Identity & contact data: full name, date of birth, username, email address, phone number, residential address, and country of residence.
- Verification (KYC) data: copies or extracts of identity documents, proof of address, age verification outcomes, source-of-funds/source-of-wealth information where required, and results of AML/sanctions/PEP screening (where legally permitted and required).
- Account & service data: account identifiers, customer support communications, responsible gambling interactions, self-exclusion/limit settings, and records of consents and preferences.
- Payment & transaction data: deposit/withdrawal history, payment instrument details (e.g., masked card data), payment account identifiers, transaction references, chargeback and payout verification information. We do not intentionally store full card CVV codes.
- Technical & log data: IP address, device identifiers, browser type, operating system, app/website logs, timestamps, approximate location derived from IP, and security/audit logs.
- Behavioural & gameplay data: betting and gaming history, session duration, clicks/interactions, fraud signals, and statistical profiles used to operate, secure, and improve the service.
- Cookies and similar technologies: cookie identifiers, pixels/SDK identifiers, and related online identifiers as described in the Cookies section.
Legal Basis for Processing
OBSERVE: Under UK GDPR/UK Data Protection Act 2018, processing must have a lawful basis. Gambling operations also require processing to meet KYC/AML and fraud-prevention requirements, and to maintain audit trails.
EXPAND: We must map each common activity to lawful bases: (i) contract (account, gameplay, payouts), (ii) legal obligation (KYC/AML, recordkeeping), (iii) legitimate interests (security, analytics, service improvement), and (iv) consent (non-essential cookies and certain marketing). Where special category data is processed, additional conditions apply (generally avoided; if collected, handled with heightened safeguards).
REFLECT: Fav Bet on https://favs.bet processes personal data under these legal bases:
- Contract necessity: to create and manage your account, provide games/betting services, process deposits/withdrawals, verify eligibility, and provide customer support.
- Legal obligation: to comply with applicable anti-money laundering and counter-terrorist financing requirements, KYC obligations, fraud reporting, accounting/tax requirements where applicable, and regulator/law-enforcement requests.
- Legitimate interests: to protect the integrity and security of https://favs.bet, prevent fraud/abuse, maintain network and information security, improve products and user experience, conduct internal analytics, and defend or pursue legal claims.
- Consent: for non-essential cookies and similar technologies, and (where required) for direct marketing communications or personalised advertising.
Regional Compliance Note (UK): Where UK GDPR requires opt-in consent (e.g., certain non-essential cookies), we implement consent controls and allow you to withdraw consent at any time.
Purpose of Processing
OBSERVE: Users expect clear, purpose-limited use of data. The core purposes are service delivery, compliance, security, improvement, and communications.
EXPAND: Gambling context adds: identity verification, responsible gambling measures, fraud/bonus abuse detection, and dispute handling. Marketing must be separated and preference-driven.
REFLECT: We use personal data for the following purposes on https://favs.bet:
- Providing services: registration, account management, game access, bets, deposits, withdrawals, bonus administration, and customer support.
- Verification & compliance: age checks, KYC/AML checks, sanctions/PEP screening (where applicable), and recordkeeping.
- Security & fraud prevention: device/browser risk analysis, detection of suspicious activity, prevention of account takeover, and investigation of chargebacks.
- Analytics & service improvement: performance monitoring, troubleshooting, product improvement, and aggregated reporting.
- Marketing & communications: sending service messages (e.g., important account/security notices) and, where permitted, promotional communications based on your preferences/consents.
Disclosure & Sharing
OBSERVE: Fav Bet may need to share data with processors (vendors) and certain third parties (e.g., payment providers), and may be required to disclose data to authorities.
EXPAND: UK GDPR requires transparency about categories of recipients and safeguards (processor agreements, confidentiality, minimisation). Gambling platforms also typically share data for fraud prevention and payment processing. Advertising networks generally require consent for tracking/personalised ads.
REFLECT: We may share personal data from https://favs.bet with:
- Payment partners and financial institutions: to process deposits/withdrawals, manage chargebacks, and perform fraud checks; this may include our payment processing subsidiary Bintpash Ltd. (Cyprus) where relevant to transactions.
- Service providers (processors): hosting and cloud services, identity/KYC verification vendors, AML screening tools, customer support systems, email/SMS delivery providers, analytics providers, and security monitoring vendors (under contractual confidentiality and data protection obligations).
- Regulators and public authorities: where required by law, court order, or lawful request (including to prevent or detect crime, fraud, or money laundering).
- Affiliates and advertising networks: only to the extent required for attribution/marketing and where consent is required (e.g., for non-essential cookies and personalised advertising technologies).
- Professional advisers: lawyers, auditors, consultants where necessary for compliance, audits, or legal claims.
Important: We do not sell personal data in exchange for money. Where we use third-party advertising technologies, we aim to provide consent controls and limit sharing to what is necessary for the chosen purpose.
International Transfers
OBSERVE: The operator entity is based in Curaçao and a related payment entity is in Cyprus, and service providers may be located in multiple regions.
EXPAND: UK GDPR restricts transfers outside the UK unless adequate safeguards exist (e.g., UK International Data Transfer Agreement (IDTA), UK Addendum to EU SCCs, adequacy regulations). "Privacy Shield" is not a valid UK/EU mechanism; therefore we should not rely on it. Users must be told about destinations and protections in categorical terms when exact vendor locations vary.
REFLECT: Personal data from https://favs.bet may be transferred to and processed in jurisdictions outside the United Kingdom, including:
- Curaçao (operator registration/operations) and Cyprus (payment processing support, where applicable).
- Other countries where our hosting, analytics, security, communication, KYC/AML, or payment service providers operate.
When we transfer personal data internationally, we use appropriate safeguards, such as:
- UK IDTA or the UK Addendum to the EU Standard Contractual Clauses (as applicable);
- Vendor due diligence, confidentiality, and security obligations;
- Transfer risk assessments and supplementary measures where necessary (e.g., encryption and access controls).
Data Retention
OBSERVE: Gambling services require retention for operational continuity, fraud prevention, and compliance/audit purposes. The prompt requires clear retention periods and deletion criteria.
EXPAND: UK GDPR requires storage limitation: retain no longer than necessary, while recognising legal obligations (AML recordkeeping often requires multi-year retention). Where exact statutory periods differ by applicable regime, set a conservative, defensible schedule and note that holds may apply for disputes/investigations.
REFLECT: Fav Bet on https://favs.bet retains personal data as follows (unless a longer period is required by law or necessary to establish, exercise, or defend legal claims):
- Account profile data (identity/contact): for the life of the account and up to 5 years after account closure.
- KYC/AML verification records: typically up to 5 years after account closure or completion of the relevant checks (and longer if required by applicable AML obligations or an active investigation).
- Transaction and payment records: up to 7 years to meet accounting, audit, and dispute/chargeback handling needs.
- Customer support communications: up to 3 years after resolution, unless needed longer for dispute handling.
- Security logs and fraud-prevention data: typically 6-24 months, extended where necessary for investigations or to protect the service.
- Marketing preferences and consent records: while marketing is active and up to 5 years after you withdraw consent or opt out (to maintain a suppression record and demonstrate compliance).
- Cookie data: per cookie lifespan as described in the Cookies section, subject to consent settings.
Deletion criteria: We delete or irreversibly anonymise personal data when (i) it is no longer needed for the purposes described, (ii) retention periods expire, and (iii) no legal basis or legal hold requires continued storage. Some data may be retained in restricted-access archives for legal compliance.
Your Rights
OBSERVE: Users are entitled to rights under UK GDPR and the UK Data Protection Act 2018. The prompt also requests alignment with Mexican privacy law and references to applicable Mexican regulations.
EXPAND: We must describe: access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and marketing opt-out; procedure; 30-day timeframe; free-of-charge. For Mexico, the core framework is the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) and its Regulations, with ARCO rights (Access, Rectification, Cancellation, Opposition). Even if the service targets UK context, cross-border users may request ARCO-style handling; we can commit to comparable handling to the extent applicable.
REFLECT: Depending on your location and the nature of processing, you may have the following rights regarding your personal data processed via https://favs.bet:
- Right of access: obtain confirmation of processing and a copy of your personal data.
- Right to rectification: correct inaccurate data and complete incomplete data.
- Right to erasure ("right to be forgotten"): request deletion where processing is no longer necessary or where you withdraw consent, subject to mandatory retention (e.g., KYC/AML, accounting, fraud prevention, legal claims).
- Right to restriction: request limited processing in specific circumstances (e.g., you contest accuracy or object pending review).
- Right to object: object to processing based on legitimate interests and object at any time to direct marketing.
- Right to data portability: receive certain data in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means.
- Right to withdraw consent: where processing is based on consent (e.g., non-essential cookies, some marketing), you may withdraw at any time without affecting the lawfulness of prior processing.
How to Exercise Your Rights (Procedure, Timing, Cost)
- Submit a request: use the support/contact route on https://favs.bet and clearly state it is a "Privacy Request" for Fav Bet.
- Verification: for security and fraud prevention, we may request information to verify your identity before acting on the request.
- Response timeframe: we aim to respond within 30 days. If a request is complex or numerous, we may extend and will explain the reason and expected timing.
- Fees: requests are handled free of charge, unless they are manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse the request as permitted by law.
Mexican Privacy Law Alignment (ARCO Rights)
If you are in Mexico or Mexican privacy law applies to your request, we will aim to facilitate equivalent rights under the LFPDPPP and its Regulations, including ARCO rights (Access, Rectification, Cancellation, Opposition), using the same submission route described above and similar verification and response standards, to the extent applicable.
Cookies & Tracking Technologies
OBSERVE: https://favs.bet may use cookies and similar technologies to operate the site, remember preferences, analyse performance, and (with consent where required) support advertising/attribution.
EXPAND: UK rules require transparency and consent for non-essential cookies (ePrivacy/PECR concepts alongside UK GDPR). We should categorise cookies and provide control methods (browser settings and on-site panel).
REFLECT: We use the following types of cookies and similar technologies:
- Strictly necessary (functional) cookies: required for site operation (e.g., login session management, security, load balancing). These are generally not optional.
- Preference cookies: remember choices (e.g., language, region, basic interface settings).
- Analytics cookies: help us understand how users interact with https://favs.bet (e.g., page views, error events, performance metrics) to improve service.
- Advertising/attribution cookies (including third-party): measure campaign performance and, where enabled, support more relevant advertising. These are used only where consent is required and provided.
- Session cookies: temporary cookies that expire when you close your browser.
- Persistent cookies: remain for a defined period unless deleted earlier.
How to Manage Cookies
- Cookie consent controls: where presented on https://favs.bet, you can accept/reject categories of non-essential cookies and change your choices later.
- Browser/device settings: you can delete cookies and block future cookies via your browser settings. Note that blocking necessary cookies may prevent parts of the service from working.
Data Security
OBSERVE: A gambling service processes sensitive operational data (identity verification, payments, and gameplay histories) and must apply strong security controls.
EXPAND: Security should cover encryption in transit and at rest, access control, MFA, secure development, monitoring, audits, incident response, and staff training. References to ISO 27001/SOC 2 must be framed "where applicable" to avoid overclaiming. Include TLS 1.2+ explicitly per requirement.
REFLECT: We implement technical and organisational measures designed to protect personal data processed via https://favs.bet, including:
- Encryption in transit: use of TLS 1.2+ for data transmitted between your device and our systems.
- Encryption at rest (where appropriate): encryption of sensitive datasets and secure key management practices.
- Access controls: role-based access, least-privilege principles, and logging of administrative access to sensitive systems.
- Account protections: support for strong authentication measures (and multi-factor authentication where available/appropriate), and controls aimed at preventing account takeover.
- Monitoring & testing: security monitoring, vulnerability management, and periodic security assessments/audits.
- Staff training: privacy and security training for personnel handling personal data, with confidentiality obligations.
- Incident response: documented procedures to assess, contain, and remediate incidents; where required, we will notify relevant authorities and affected individuals in line with applicable legal thresholds and timeframes.
- Standards (where applicable): we may align internal controls with recognised security frameworks such as ISO/IEC 27001 and/or SOC 2 principles, depending on the relevant system and vendor context.
Complaints & Contacts
OBSERVE: Users need clear routes to complain to the operator and to escalate to supervisory authorities. Provided data includes a Curaçao eGaming complaints portal link.
EXPAND: For UK users, the appropriate privacy supervisory authority is the UK Information Commissioner's Office (ICO). The prompt also requires Mexican authority contact information and EU authorities "where applicable." Mexico's authority is INAI. For EU, users can contact their local supervisory authority; we can provide the EDPB directory link. We must also acknowledge that the brand is not UKGC-licensed (provided warning) without turning this into a new section-embed as a compliance note relevant to contact/complaints where gambling-regulatory complaints differ from privacy complaints.
REFLECT: If you have questions, concerns, or complaints about how Fav Bet processes personal data on https://favs.bet, you can use the channels below.
Contact Channels
- Privacy / Data Protection Department: via the support/contact route available on https://favs.bet (direct email/phone not specified in available records).
- Postal: Favorit United N.V., Zuikertuintjeweg Z/N (Zuikertuin Tower), Willemstad, Curaçao (or alternatively Abraham de Veerstraat 9, Willemstad, Curaçao), marked "Data Protection Department - Complaint (Fav Bet)".
- Regulatory gambling-licence complaints (Curaçao eGaming portal): https://curacao-egaming.com/public-and-players/complaints-landing (and complaint form at the same address, as applicable).
Complaint Procedure (Step-by-Step)
- Submit your complaint: describe the issue, identify your account (if applicable), and specify whether your complaint relates to privacy, payments, or account activity.
- Identity verification: we may request information to confirm you are the account holder or authorised representative.
- Acknowledgement: we aim to acknowledge receipt within 7 days (2025 standard) via the channel you used.
- Investigation and response: we aim to provide a substantive response within 30 days (2025 standard). If more time is required, we will explain why and provide an updated timeframe.
- Escalation: if unresolved, you may escalate to the relevant supervisory authority (privacy) or the relevant gambling licensing portal (licence-related concerns).
Escalation to Supervisory Authorities
- United Kingdom (privacy): Information Commissioner's Office (ICO) - Website: https://ico.org.uk/, Tel: 0303 123 1113, Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
- Mexico (privacy): INAI (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales) - Website: https://home.inai.org.mx/.
- European Economic Area (where applicable): you may contact your local Data Protection Authority; directory: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.
UK regulatory note (gambling): Available records indicate the Fav Bet international platform operates under Curaçao licensing references and that Fav Bet is not licensed by the UK Gambling Commission. This Privacy Policy governs personal data use on https://favs.bet and does not constitute a representation of UKGC licensing status.
Updates
OBSERVE: Policies change due to legal, technical, and business updates. The prompt requires notification methods, version control, last-updated timestamp, changelog, and at least 30 days' notice for significant changes, plus user options.
EXPAND: UK GDPR expects transparency; material changes should be clearly communicated. For gambling accounts, dashboard notices and email are standard. Users should be able to object (where legitimate interests/consent are involved) or close the account if they disagree.
REFLECT: We may update this Privacy Policy from time to time to reflect changes in law, technology, or how Fav Bet operates on https://favs.bet.
- Last updated: November 2025
- How we notify you:
- Email notice (where we have your verified email and the change is material);
- Website banner on https://favs.bet for key updates;
- Account dashboard alerts where available.
- Advance notice for significant changes: we will provide at least 30 days' notice for material changes that meaningfully affect your rights or how we use personal data (unless an earlier change is required to comply with law or to address security risks).
- Your options: you may (i) update your preferences/consents (e.g., marketing/cookies), (ii) object to certain processing where applicable, and/or (iii) close your account if you do not agree with the updated terms, subject to mandatory legal retention.
Changelog (Material Changes)
- November 2025: Initial publication for Fav Bet on https://favs.bet with expanded transparency on international transfers, retention schedules, and supervisory authority escalation routes (UK ICO, Mexico INAI, and EEA DPA directory).