Privacy Policy
Who We Are
The Site, including its Bet Hard localized content, is operated by Prozone Ltd, a company incorporated under the laws of Malta.
- Legal entity: Prozone Ltd
- Registered address: 6, Paceville Avenue, St. Julian's STJ 3109, Malta
- Company registration number: C 97664 (Malta Business Registry)
- Gaming licence: MGA/B2C/312/2015, issued by the Malta Gaming Authority ("MGA") to Prozone Ltd as a B2C Gaming Service Licence, active for non-UK markets only
Prozone Ltd is the data controller responsible for the processing of personal data described in this Privacy Policy. For the avoidance of doubt, Prozone Ltd does not hold an active licence from the UK Gambling Commission and does not legally accept players resident in the United Kingdom. Access by UK residents is restricted under our Terms and Conditions and any use of VPN or similar tools to circumvent such restrictions is prohibited.
For any questions or requests related to this Privacy Policy or your personal data, you may contact our data protection function as follows:
- Data Protection Contact / DPO function: Prozone Ltd - Data Protection Officer
- Email: support@betherds.com (please include "Data Protection / Privacy" in the subject line)
- Postal: Data Protection Officer, Prozone Ltd, 6 Paceville Avenue, St. Julian's STJ 3109, Malta
We may also cooperate, where relevant, with independent alternative dispute resolution (ADR) providers (such as eCOGRA for gaming disputes) and data protection supervisory authorities (for privacy matters) as described in the "Complaints & Contacts" section.
What Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with the Bet Hard content and the wider Site, including when you simply browse, subscribe to marketing, or (where legally allowed) create and use an account.
Identification and contact data
- Basic identity details: first name, last name, date of birth, country of residence, and proof of identity information (such as ID or passport details) where verification is required by law.
- Contact details: email address (for example, when you contact us at support@betherds.com), telephone number if provided, postal address where relevant.
- Account details (where accounts are permitted in your jurisdiction): username, encrypted password, security questions, language preferences, responsible gambling settings (limits and self-exclusion choices).
Technical and device data
- Log and usage data: IP address, access timestamps, pages visited, links clicked, referral URLs, session duration, and general interaction with the Site (including Bet Hard pages).
- Device and network data: device type, operating system, browser type and version, screen resolution, approximate location based on IP (country/city level), and internet service provider.
- Security and system logs: login attempts, authentication tokens, error logs, and information related to suspected abuse, fraud, or technical incidents.
Payment and financial data
- Transaction data: deposits, withdrawals, bonus redemptions, refunds, chargebacks, and transaction timestamps.
- Payment method details: partial card information (such as masked card number), e-wallet identifiers, bank account identifiers or other payment instrument references processed through secure payment providers.
- Verification data: proof of ownership of payment instruments where required (for example, redacted bank statements) in line with anti-money laundering (AML) and counter-terrorist financing (CTF) requirements.
Behavioural and usage data
- Gaming and betting history: games played, stakes, winnings and losses, session times, and game preferences, but only where your jurisdiction allows real-money play (not the case for UK residents).
- Interaction data: clicks, scrolls, navigation paths, and responses to promotions or banners for analytics and optimisation purposes.
- Marketing and communication preferences: opt-ins and opt-outs to email campaigns and push notifications, records of marketing consents and withdrawals.
Cookies and similar technologies
- Cookies: small text files stored on your device to remember preferences, keep you logged in, and track certain actions for analytics and advertising (see "Cookies & Tracking Technologies" section).
- Similar technologies: pixels, tags, SDKs, and local storage used to measure campaign performance, combat fraud, and improve the Site.
Some of this information is provided directly by you (for example, when you complete forms or send us emails). Other data is collected automatically through your interaction with the Site or received from trusted third parties such as payment providers, verification services, and anti-fraud tools.
Legal Basis for Processing
We process personal data in compliance with the UK General Data Protection Regulation ("UK GDPR"), the EU General Data Protection Regulation ("EU GDPR") where applicable, and the Malta Data Protection Act. For visitors from other countries, including those where we do not offer gambling services, we seek to align our practices with internationally recognised privacy principles and, where relevant, comparable national laws.
Performance of a contract
- Account and service provision: where you are legally allowed to register and use our services, your personal data is processed because it is necessary to perform our contract with you (for example, to open and manage your account, process transactions, and provide support).
- Responsible gambling tools: processing of limits, cooling-off periods, and self-exclusion settings is necessary to provide the services and comply with regulatory duties.
Compliance with legal obligations
- KYC and AML/CTF requirements: we process identity documents, transaction data, and risk indicators to comply with anti-money laundering, counter-terrorist financing, fraud prevention, sanctions, and gambling regulations applicable to Prozone Ltd in Malta and, where relevant, in the EU/EEA.
- Record-keeping and reporting: we are legally required to maintain certain records for tax, regulatory, accounting, and dispute-resolution purposes and to respond to lawful requests from competent authorities.
Legitimate interests
- Service improvement and analytics: we use technical and behavioural data to understand how users interact with the Bet Hard pages and the Site in order to improve performance, usability, and security. Where possible, we rely on aggregated or pseudonymised data.
- Fraud and abuse prevention: we process IP addresses, device identifiers, account behaviour, and transaction data to detect and prevent fraud, abuse of bonuses, use of VPNs or proxies to circumvent jurisdictional restrictions (particularly relevant for UK residents), and other violations of our Terms and Conditions.
- Network and information security: we process logs and security alerts to protect our systems and users, investigate incidents, and enforce our rights.
Consent
- Marketing communications: we send promotional emails or notifications only where you have given valid consent, unless another lawful basis (such as soft opt-in under applicable e-privacy rules) applies. You can withdraw consent at any time as described in "Your Rights".
- Non-essential cookies and tracking: we use analytics, advertising, and personalisation cookies only with your consent obtained via our cookie banner or preference centre, except for strictly necessary cookies.
Alignment with other privacy frameworks
- EU GDPR and UK GDPR alignment: our core processing principles (lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality) are designed to meet both EU and UK GDPR requirements.
- Mexican privacy framework alignment: although we do not specifically target or offer services to residents of Mexico, our general practices (such as transparency notices, rights of access and correction, and security measures) are broadly consistent with principles laid down in the Mexican Federal Law on Protection of Personal Data Held by Private Parties, where this does not conflict with our primary obligations under UK and EU data protection law.
Purpose of Processing
We process personal data for clearly defined and legitimate purposes. These purposes are closely linked to the operation of the Site, including the Bet Hard content, and to our legal and regulatory obligations.
- Providing and managing our services: to operate the Site, create and maintain user accounts where permitted, verify identity, process deposits and withdrawals, display game content, apply bonuses, and provide customer support via channels such as support@betherds.com and live chat.
- Responsible gambling and player protection: to apply self-imposed limits, self-exclusion tools, and other safer gambling features. For UK residents, this includes ensuring that you cannot lawfully register or play for real money, given that we do not hold an active UK licence and are not connected to GamStop.
- Service optimisation and analytics: to understand how visitors interact with the Site, including Bet Hard pages, identify usability issues, conduct A/B testing, and measure campaign performance, generally using aggregated or pseudonymised data.
- Marketing and promotions: to send you targeted offers, newsletters, and bonuses based on your preferences and, where required, your explicit consent; and to measure the success of such campaigns.
- Fraud detection and security: to detect suspicious behaviour, VPN usage from restricted territories (such as the United Kingdom), account takeovers, bonus abuse, chargebacks, and other security incidents, and to protect the integrity of our systems and other players.
- Legal, regulatory, and compliance purposes: to comply with KYC/AML regulations, gambling rules in applicable jurisdictions, tax and accounting laws, and to respond to lawful requests from regulators, courts, and law enforcement.
- Dispute resolution and enforcement: to investigate and resolve complaints, manage chargebacks and payment disputes, cooperate with ADR bodies such as eCOGRA, and enforce our Terms and Conditions.
Disclosure & Sharing
We will not sell your personal data. However, in order to operate the Site and comply with legal requirements, we may share your personal data with carefully selected third parties under appropriate safeguards and strict confidentiality obligations.
Service providers and business partners
- Payment and financial service providers: banks, card schemes, e-wallet providers, and payment processors that facilitate deposits, withdrawals, and refunds. These providers may act as independent controllers for certain processing based on their own legal obligations.
- Identity verification and KYC providers: third-party services that assist with identity verification, age checks, AML screening, sanctions-list screening, and risk scoring.
- Technical and hosting providers: data centres, cloud hosting, content delivery networks, IT support, and security monitoring services that ensure the Site's performance and security.
- Analytics and marketing partners: providers that deliver analytics, measurement, personalisation, and advertising services. Non-essential tools are used only subject to your cookie and marketing preferences.
Group companies, affiliates, and partners
- Corporate group and brand partners: entities involved in operating or marketing the Bet Hard brand via betherds.com, including affiliates who promote Bet Hard pages, may receive aggregated performance reports and limited tracking information to calculate commissions, in line with data minimisation.
- Professional advisers: legal counsel, auditors, and consultants who need access to relevant data in order to provide professional services to Prozone Ltd under confidentiality obligations.
Regulators and public authorities
- Gaming regulators: the Malta Gaming Authority and any other competent authorities in jurisdictions in which we lawfully operate, for regulatory reporting, inspections, or investigations.
- Data protection authorities: supervisory authorities such as the Office of the Information and Data Protection Commissioner in Malta or the UK Information Commissioner's Office (ICO) if they have jurisdiction over specific processing activities related to UK-based visitors.
- Law enforcement and courts: when required to respond to lawful requests, court orders, or to establish, exercise, or defend legal claims.
Advertising networks and social media
- Advertising networks: where you have consented to marketing cookies, we may share limited data (for example, cookie identifiers or hashed email addresses) with advertising networks to deliver and measure personalised ads.
- Social media platforms: where you interact with our content on third-party platforms, those platforms' own privacy policies will apply to their processing of your data.
Whenever we share data with third parties, we ensure that they are bound by contractual obligations consistent with this Privacy Policy and applicable data protection laws, and we only share the minimum amount of data required for the specific purpose.
International Transfers
Because Prozone Ltd is based in Malta and works with international service providers, your personal data may be transferred to and processed in countries outside of your home jurisdiction, including countries outside the United Kingdom and the European Economic Area ("EEA").
- Intra-EEA and UK transfers: data may be stored and processed in Malta and other EEA countries. The EU/EEA and the UK have broadly equivalent data protection regimes (EU GDPR and UK GDPR), and we apply consistent safeguards across both.
- Transfers to third countries: some of our service providers may be located in countries that do not provide the same level of data protection as the UK or the EEA. In such cases, we implement appropriate safeguards, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission;
- the UK International Data Transfer Addendum or other UK-approved mechanisms for transfers out of the UK;
- additional security measures such as encryption, access restrictions, and data minimisation.
- Risk assessments: before engaging providers in third countries, we assess the legal and practical risks associated with the transfer and, where necessary, adjust our controls or choose alternative providers.
You may obtain more information about the safeguards for international transfers, or request a copy of the relevant contractual protections (with commercially sensitive parts redacted), by contacting us at support@betherds.com.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to meet our legal and regulatory obligations, and to defend our legal rights. Retention periods may vary depending on the category of data and the applicable laws, but we apply the general principles below.
- Account and identification data: typically retained for the duration of your relationship with us and for a period of up to five (5) years after account closure or last transaction, in order to comply with AML/CTF and gambling regulations, subject to longer retention where legally required or where needed for ongoing disputes.
- Transaction and payment data: usually stored for at least five (5) to ten (10) years from the date of the relevant transaction to meet tax, accounting, and AML/CTF obligations, depending on local legal requirements.
- Technical logs and security data: retained for shorter periods, typically from several months up to two (2) years, unless needed for the investigation of security incidents, fraud, or system issues.
- Marketing data and preferences: retained for as long as you remain subscribed to marketing communications and for a limited period thereafter (generally up to two (2) years) to document consent and any opt-out requests.
- Customer support communications: emails, chat logs, and complaint files are generally kept for up to five (5) years after resolution to allow us to handle follow-up queries and defend our rights.
When personal data is no longer needed, we will securely delete, anonymise, or aggregate it. If deletion is not immediately possible (for example, in backup archives), we will ensure that data is securely stored and isolated from any further active processing until deletion is feasible.
Your Rights
Under UK GDPR, EU GDPR, and comparable data protection laws in other jurisdictions, you have certain rights regarding your personal data. While the specific scope of these rights may vary depending on your place of residence, we endeavour to handle requests in a manner that reflects these core principles, subject to legal and regulatory constraints applicable to Prozone Ltd.
Core data protection rights
- Right of access: you have the right to obtain confirmation as to whether we process your personal data and, if so, to receive a copy of that data along with information about how we use it.
- Right to rectification: you may request the correction of inaccurate or incomplete personal data that we hold about you.
- Right to erasure: you may request that we delete your personal data in certain circumstances (for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing). This right may be limited where we are required to retain data to comply with AML, gambling, or other statutory obligations.
- Right to restriction of processing: you may request that we restrict the processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to our legitimate interest processing.
- Right to object: you may object to processing that is based on our legitimate interests, including profiling, and we will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or where processing is necessary for legal claims.
- Right to object to direct marketing: you have an absolute right to object at any time to processing for direct marketing purposes, including profiling related to such marketing. We will honour such objections without undue delay.
- Right to data portability: where processing is based on consent or on a contract and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, and machine-readable format or (where technically feasible) transmit it to another controller.
- Right not to be subject to solely automated decisions: you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you, unless such processing is necessary for a contract with you, authorised by law, or based on your explicit consent and subject to safeguards.
Consent management and withdrawal
- Withdrawal of consent: where we process your personal data based on consent (for example, email marketing or non-essential cookies), you may withdraw that consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.
- Marketing opt-out: you can opt out of marketing emails by using the "unsubscribe" link in any email we send or by contacting support@betherds.com. You can manage cookie preferences through our cookie banner or your browser settings.
How to exercise your rights
- Submit your request: contact us at support@betherds.com with "Data subject request" in the subject line and clearly state which right you wish to exercise.
- Verification of identity: to protect your privacy, we may ask you to provide information that allows us to verify your identity (for example, by confirming account details or providing identification documents).
- Response time: we aim to respond to all valid requests within one (1) month of receipt. In complex cases or where we receive multiple requests, this period may be extended by up to an additional two (2) months, in which case we will inform you of the extension and reasons for delay.
- Fees: we handle requests free of charge. However, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, particularly because of their repetitive character.
For residents of countries whose laws provide additional or different rights (including Mexico's Federal Law on Protection of Personal Data Held by Private Parties), we will consider such rights in good faith to the extent that they do not conflict with our primary legal obligations under UK and EU data protection law.
Cookies & Tracking Technologies
The Site uses cookies and similar technologies to ensure basic functionality, remember your preferences, analyse usage, and support marketing activities. When you first visit the Site, you will be presented with a cookie banner allowing you to manage your preferences.
Types of cookies we use
- Strictly necessary (session) cookies: essential for the operation of the Site, such as maintaining your session after logging in (where accounts are permitted), enabling security features, and providing core functionalities. These cookies are typically session-based and expire when you close your browser.
- Functional (persistent) cookies: used to remember your choices and preferences over time, such as language settings, cookie preferences, and whether you have already seen certain notices or pop-ups.
- Analytics and performance cookies: third-party or first-party cookies that help us understand how visitors use the Bet Hard pages and other parts of the Site, which pages are most popular, and whether error messages occur. Data is usually aggregated and used to improve our services.
- Advertising and targeting cookies: used, where you have consented, to deliver more relevant adverts on our own and third-party websites, and to measure the effectiveness of marketing campaigns. These cookies may be set by advertising networks with our permission.
Managing cookies
- Cookie banner and preference centre: you can accept or reject non-essential cookies when you first visit the Site and adjust your preferences at any time through the cookie settings link (where available).
- Browser settings: most web browsers allow you to block or delete cookies through their settings. Please note that deleting or blocking certain cookies may affect the functionality and performance of the Site.
- Opt-outs for analytics/advertising: some third-party providers offer their own opt-out mechanisms. For more information, please consult the privacy and cookie policies of those providers.
We endeavour to honour your cookie choices and apply them consistently across Bet Hard and other sections of the Site, subject to technical limitations and applicable legal requirements.
Data Security
We implement technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or damage. While no system can guarantee absolute security, we continuously evaluate and improve our controls in line with regulatory expectations and industry best practices.
Technical security measures
- Encryption in transit and at rest: data transmitted between your browser and our servers is protected using up-to-date encryption protocols (such as TLS 1.2 or higher). Where feasible, sensitive data is encrypted at rest or tokenised to reduce exposure.
- Access controls and authentication: access to personal data is restricted to authorised personnel and service providers who need it for legitimate purposes, using strong authentication, role-based access control, and, where appropriate, multi-factor authentication.
- Network and infrastructure security: firewalls, intrusion detection and prevention systems, anti-malware solutions, and secure configuration practices are used to protect our infrastructure.
- Secure development and testing: we follow secure coding practices, perform testing, and apply patches and updates in a timely manner to address known vulnerabilities.
Organisational and procedural measures
- Policies and training: employees with access to personal data are bound by confidentiality obligations and receive regular training on data protection, information security, and responsible handling of personal data.
- Incident response: we maintain procedures to detect, investigate, and respond to security incidents. Where a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required by law, inform affected individuals without undue delay.
- Vendor due diligence: we assess the security practices of key service providers and require appropriate contractual commitments and safeguards for handling personal data.
- Standards and best practices: our security framework is informed by internationally recognised standards such as ISO/IEC 27001 and SOC 2 principles, even if we may not hold formal certification under those standards. We regularly review our controls to keep pace with evolving threats.
Complaints & Contacts
If you have any questions, concerns, or complaints about how we process your personal data, you should contact us first so that we can attempt to resolve the issue directly.
Contacting Prozone Ltd
- Email (preferred): support@betherds.com (subject: "Privacy / Data Protection")
- Postal address: Data Protection Officer, Prozone Ltd, 6 Paceville Avenue, St. Julian's STJ 3109, Malta
When contacting us, please provide sufficient information to allow us to identify you (and your account, if any) and to understand your complaint or request. We will investigate and aim to respond within one (1) month, or inform you if more time is needed for complex cases.
Escalation to supervisory authorities
If you are not satisfied with our response or believe that your data protection rights have been infringed, you have the right to lodge a complaint with a competent supervisory authority. The appropriate authority may depend on your place of residence and on where the relevant processing occurs.
- Malta (primary establishment for Prozone Ltd):
Office of the Information and Data Protection Commissioner (IDPC)
Website: https://idpc.org.mt - United Kingdom:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk - Mexico (for residents interacting with the Site):
Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI)
Website: https://www.inai.org.mx - Other EEA/EU countries: you may also lodge a complaint with your local data protection authority in the EU/EEA, which will coordinate with the IDPC in Malta where appropriate.
For gambling-related disputes (not specifically related to data protection), you may have the option to contact our designated alternative dispute resolution provider, eCOGRA, as indicated in our gaming and bonus terms, although such channels do not replace your right to complain to data protection authorities regarding privacy issues.
Updates
We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal requirements, or technical developments affecting the Bet Hard pages or the wider Site.
How we notify you about changes
- Website updates: the current version of the Privacy Policy will always be available on the Site, with the "Last updated" date clearly indicated at the end of the document.
- Email and in-account notifications: where changes are material, we will, where feasible, notify affected users by email or through in-account messages (for users with registered accounts in eligible jurisdictions).
- Banners and notices: for significant changes, we may display banners, pop-ups, or other prominent notices on the Site, including on Bet Hard pages.
Effective date, advance notice, and your options
- Advance notice: for material changes that could significantly affect your rights or the way we process your personal data, we will aim to provide at least thirty (30) days' prior notice before the updated policy takes effect, unless immediate changes are required by law or to address urgent security or compliance issues.
- Your continued use: if you continue to use the Site after the effective date of an updated Privacy Policy, your continued use will be deemed acceptance of the updated terms to the extent permitted by law.
- Right to object or close your account: if you do not agree with material changes, you may choose to stop using the Site and, where applicable, request account closure. You may also exercise your data protection rights as described in the "Your Rights" section.
Last updated: February 2026