Privacy Policy

Last updated: 10/10/2026

This Privacy Policy explains how LaFacha Bet collects, uses, shares and protects your personal data when you access our website, applications and services (the "Platform"). It has been prepared in accordance with the European Union General Data Protection Regulation (Regulation (EU) 2016/679 – "GDPR") and international best practices for data protection, without prejudice to the local privacy laws applicable in each country where we operate, which shall always prevail whenever they offer greater protection to the data subject.

1. Who controls your data

The controller of the personal data processed on the Platform is LaFacha Bet ("LaFacha", "we", "us").

Data Protection Officer (DPO): lafachabet@gmail.com

2. What data we collect

Registration and identification data: full name, date of birth, nationality, identity document number, address, e-mail, telephone, username and password (stored in encrypted form).
Verification data (KYC): copies of identity documents, proof of residence, selfie or proof of life and, when required, proof of the origin of funds.
Financial and transactional data: payment methods used, deposit, withdrawal, bônus, balance and betting history. Full card details are processed directly by our PCI-DSS certified payment providers and are not stored by us.
Gaming and behaviour data: betting and gaming history, amounts wagered, session time, configured limits and interactions with responsible gaming tools.
Technical and device data: IP address, approximate geolocation, browser and device type, operating system, device identifiers, access logs and cookies.
Communications: content of contacts with customer support (chat, e-mail, telephone) and marketing preferences.
Third-party data: information obtained from identity verification providers, fraud prevention, sanctions and politically exposed persons (PEP) lists, and self-exclusion records, where applicable.

3. How we use your data and on what legal basis

We process your data for the purposes below, each supported by a legal basis under Art. 6 of the GDPR:

Create and manage your account, process bets, deposits and withdrawals — legal basis: Contract performance.
Verify identity and age, prevent money laundering and terrorist financing, check sanctions and PEP — legal basis: Compliance with a legal or regulatory obligation.
Promote responsible gaming and identify risky behaviour — legal basis: Legal obligation / legitimate interest in player protection.
Prevent fraud, bônus abuse, multiple accounts and outcome manipulation — legal basis: Legitimate interest / legal obligation.
Customer support and complaint resolution — legal basis: Contract performance / legitimate interest.
Platform security, product improvement and statistical analysis — legal basis: Legitimate interest.
Sending marketing communications and personalised offers — legal basis: Consent (withdrawable at any time).
Non-essential cookies (analytical and marketing) — legal basis: Consent.
Responding to authority requests and exercising rights in proceedings — legal basis: Legal obligation / legitimate interest.

Whenever we rely on legitimate interest, we first assess whether it does not override your rights and freedoms. You may object to such processing under section 9.

4. Automated decisions and profiling

We use automated systems to (i) verify your age and identity, (ii) detect fraud and suspicious transactions, (iii) identify signs of problem gambling and (iv) personalise offers, where consent is given. Some of these analyses may result in account restrictions (for example, blocking registration of minors or preventive suspension on suspicion of fraud). In such cases, you have the right to request human review, express your point of view and contest the decision, in accordance with Art. 22 of the GDPR.

5. Who we share your data with

We do not sell your personal data. We share it only as necessary with:

Payment providers and financial institutions;
Identity verification (KYC) suppliers, fraud prevention and sanctions/PEP checking;
Game and platform suppliers, to enable your bets;
Technology service providers (hosting, cloud, CRM, support, data analysis), acting as processors under contract and only according to our instructions;
Regulatory, police, judicial and tax authorities, when required by law;
Sports integrity bodies, to prevent match-fixing;
Professional advisers (auditors, lawyers, accountants) and, in the event of corporate reorganisation, potential acquirers, under a duty of confidentiality.

6. International transfers

Because we operate internationally, your data may be transferred to countries outside your country of residence or the European Economic Area. In such cases, we adopt appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR) and supplementary technical measures. You may request a copy of these safeguards from our DPO.

7. How long we keep your data

We retain your data only for as long as necessary for the purposes described. Identification, verification and transaction data are generally kept for up to 5 (five) years after account closure, or for a longer period if required by anti-money laundering, tax or applicable regulatory legislation. Self-exclusion data may be retained for the period necessary to ensure the effectiveness of the exclusion. Marketing data are deleted after consent is withdrawn. Once the periods expire, the data are deleted or anonymised.

8. Security

We adopt technical and organisational measures aligned with international standards (such as ISO/IEC 27001), including encryption in transit (TLS) and at rest, need-to-know access control, strong authentication, continuous monitoring, security testing and staff training. In the event of an incident that poses a risk to your rights, we will notify the competent authority and you, when required by law.

9. Your rights

You may, at any time and free of charge:

Access your data and obtain a copy (Art. 15);
Rectify incomplete or inaccurate data (Art. 16);
Request erasure of your data, subject to legal retention obligations (Art. 17);
Restrict processing in certain situations (Art. 18);
Receive your data in a structured format and transfer it to another controller — portability (Art. 20);
Object to processing based on legitimate interest and to direct marketing (Art. 21);
Not be subject to solely automated decisions without human review (Art. 22);
Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights, write to lafachabet@gmail.com. We may request confirmation of your identity. We will respond within 30 (thirty) days, extendable in accordance with the law. You also have the right to lodge a complaint with the data protection authority of your country of residence or our jurisdiction.

10. Cookies

We use cookies and similar technologies to keep the Platform running, remember your preferences, measure audience and, with your consent, show relevant advertising. Strictly necessary cookies do not require consent; all others are only activated after you make your choice in the cookie banner, which you can change at any time in the Platform's cookie settings.

11. Minors

The Platform is prohibited for persons under 18 years of age (or the minimum legal age in your country, if higher). We do not intentionally collect data from minors. If we identify a minor's account, it will be closed and any funds will be handled in accordance with the Terms and applicable legislation.

12. Marketing

We only send promotional communications with your consent. You can unsubscribe at any time via the link in the messages, in your account settings or through customer support. Self-excluded or paused players do not receive marketing.

13. Changes to this Policy

We may update this Policy periodically. Material changes will be communicated via the Platform or by e-mail before they take effect. The date of the last update appears at the top of this document.

14. Contact

Privacy questions: lafachabet@gmail.com
General support: lafachabet@gmail.com