Privacy Policy

This notice describes the personal information Basswin gathers when you visit or hold an account with us, the purposes it serves, and the choices you can exercise over it. It applies to our website, our mobile web experience and any email or SMS we send you.

Information we gather

At registration we ask for your full name, date of birth, residential address, email address, mobile number and chosen currency. Date of birth and address are not optional extras — they are the basis on which we confirm you are of legal age and located in a territory where we can lawfully accept your custom.

During verification we may request a government-issued photo identity document, a recent utility bill or bank statement, and evidence relating to the payment instrument you intend to use. Where a deposit pattern triggers our source-of-funds thresholds, we may additionally ask for payslips, tax documents or a letter confirming the origin of a specific sum.

Operationally we log every deposit, withdrawal, wager, bonus grant and balance adjustment, together with the timestamp and the IP address from which it originated. We also capture device type, browser signature, operating system, screen dimensions and approximate location derived from IP, plus recordings of chat conversations and copies of email correspondence with our support desk.

Why we hold it and on what basis

The largest part of what we hold exists because we have to hold it. Anti-money-laundering rules, the conditions attached to our Curaçao licence and our obligations to payment providers all require identity records, transaction histories and audit trails to be maintained and produced on request.

A second body of data supports the contract between us: crediting deposits, settling bets, processing withdrawals, applying bonus terms and answering your questions. Without it we could not run your account at all.

We rely on legitimate interests for fraud prevention, bonus-abuse detection, multi-accounting checks and platform security, and for measuring which parts of the site are used and which are not. Marketing by email or SMS rests on your consent, which you gave at sign-up or later and can withdraw at any time through the unsubscribe link or your communication preferences.

We do not sell personal data, we do not trade it with data brokers, and we do not use automated profiling to make decisions that produce legal effects for you without a human being able to review the outcome.

Who receives your data

Game content is supplied by third-party studios and aggregators whose systems receive a pseudonymous player identifier, stake and outcome data — enough to render and settle a round, but not your name or contact details.

Payment institutions, card acquirers and cryptocurrency processors receive the information necessary to move funds and to run their own anti-fraud checks. Identity verification providers and sanctions or politically-exposed-person screening services receive your document images and identifying particulars for the duration of the check.

Cloud hosting, email delivery, customer-messaging and analytics vendors process data on our instructions under written contracts that forbid independent use. Regulators, auditors, law enforcement and courts receive data where a valid legal demand is made or where disclosure is required to comply with licence conditions.

Storage periods and security

Verification documents and transaction records are kept for a minimum of five years after your relationship with Basswin ends, in line with anti-money-laundering retention requirements. Support correspondence is normally kept for two years. Marketing consent records outlive the consent itself, since we need to evidence when and how permission was given or withdrawn.

Where you self-exclude, we retain the minimum identifiers needed to enforce the exclusion for its full duration and to prevent a replacement account being opened. This retention continues even if you ask for erasure, because the alternative would defeat the protection you asked for.

Traffic between your device and our servers is encrypted in transit. Access to identity documents is limited to verification and compliance staff and is logged. We test our infrastructure periodically, but no internet service can promise absolute security, and you should protect your own account with a unique password you do not reuse elsewhere.

Your rights, cookies and international transfers

You may ask us for a copy of the personal data we hold about you, request correction of anything inaccurate, object to processing based on legitimate interests, ask for restriction while a dispute is resolved, or request a portable export of the data you supplied to us. Requests are answered within one month and we will verify your identity before releasing anything.

Erasure is available where no overriding obligation applies. In practice this means marketing profiles and non-essential analytics records can usually be deleted, while regulatory and financial records cannot be until their retention period expires.

Strictly necessary cookies keep you signed in, hold your session and protect against cross-site request forgery; these cannot be switched off. Analytics and advertising cookies run only where you have accepted them in the consent banner, and your choice can be revisited at any time from the cookie settings link in the footer.

Our infrastructure and some of our suppliers are located outside the United Kingdom and the European Economic Area, including in Curaçao and Cyprus. Where data leaves those areas we use standard contractual clauses or an equivalent safeguard. Basswin is not licensed by the UK Gambling Commission, so the statutory complaints route available to GB-licensed operators does not apply; privacy complaints should first come to us, after which you may approach the supervisory authority in your country of residence.

Getting Help

• Data Protection contact — reachable through the Privacy request form in the Support area of your Basswin account
• Basswin customer support live chat, available from any page once you are signed in
• Cerberlot N.V., Curaçao — licence OGL/2025/9088/4135, for correspondence concerning the licensed operator

This notice is written to be read and understood rather than to be exhaustive. Where it conflicts with a mandatory provision of the data protection law applying to you, that law prevails. Basswin may revise this notice as our processing changes; material revisions are notified by email or by an on-site notice before they take effect, and the revision date above always reflects the current version.