Privacy Policy | Betathlon

At Betathlon Ltd, as the data controllers of your personal data, we care about the protection of your privacy and the security of your personal data and we take measures to ensure that your personal data is processed appropriately when in our possession, as well as in the possession of other parties to whom we may disclose it.

This Policy explains when and why we collect personal data from individuals who visit our website, as well as from individuals in general, how we use it, the conditions under which we may disclose it to third parties, and how we keep it secure.

We may change this Policy from time to time. When we do so, we will post a notice on our homepage regarding the change and ask you to visit the website to ensure you are satisfied with any changes. If you are not satisfied with any changes to our Privacy Policy, you can contact our Data Protection Officer (DPO) (see below) regarding the information we collect in the course of our business, whether or not you have used our website.

In compliance with the Law on the Protection of Natural Persons with regard to the Processing of Personal Data and the Free Movement of Such Data of 2018 (Law 125(I)/2018), effective from 31/7/2018, and EU Regulation 679/2016 on the Protection of Personal Data, our company has appointed a Data Protection Officer (DPO). If you have any questions about this Privacy Policy or any concerns or complaints about how we handle your personal data, you can contact our DPO as follows:

Dr. Christiana Markou, Markou & Co LLC
Address: Amphipoleos 2, Office 201, 2025 Strovolos, Nicosia, Cyprus
Tel: 22377863,
Fax: 22377860,
Email: dpo@betathlon.com.cy

Who are we?
Betathlon Ltd (HE 310010) is a Cypriot company established in 2012 and holds a Class A License from the Cyprus National Betting Authority. The company offers betting odds on various sports, both online and in retail shops across the Republic of Cyprus. Betathlon Ltd provides a wide range of pre-game and live betting options on popular sports such as football, basketball, tennis, cricket, rugby, Formula 1, as well as special bets on events like the World Cup, the European Football Championship, and the Eurovision Song Contest.

Betathlon Ltd
Block B, Offices 101 - 103, 28th October 1, Engomi 2414, Nicosia, Cyprus
Tel: 22508888
Fax: 22508816
Email: info@betathlon.com.cy
Website: https://betathlon.com.cy/

How do we collect personal data from you?
We collect personal data about you when you use our website, for example, when you contact us with a request, inquiry, or complaint, or if you register to receive information from us.

We may also record personal data about you while you use our website, even if you do not perform any of the above actions and simply browse our website by clicking on the links displayed on our site. This information is automatically recorded in the website's server logs and/or through cookies, as explained below in this Privacy Policy. Your activity on our Instagram, Twitter, LinkedIn, and Facebook profiles is also recorded in a similar manner. We also collect information you make available to us through settings on Facebook, Instagram, Twitter, and LinkedIn when you follow, react, like, share, or comment on our page or any of our profiles on these social media platforms, or when you send us a message on Facebook, Instagram, Twitter, LinkedIn, or any other remote communication channel.

We also collect personal data about you when you participate in competitions, lose your betting slip, or when you place or win a bet exceeding €2,000, as well as when you communicate with us in person or through any remote communication channel, submitting requests, inquiries, or complaints.

What kind of personal data do we collect from you?
The personal data we collect may include your name, date of birth, passport or ID number, phone number, address, email address, IP address, utility account, copies of your ID or passport, and your betting slip winnings, in case you lose it.

We also collect any other information you provide by completing and submitting forms on our website or our Facebook Page, such as a question, rating, comment, request, or complaint. If you have liked our Facebook Page, we collect your Facebook name as well as any likes, views, or comments you make on posts on our Facebook Page, along with anonymous statistics on how users engage with it, as provided by Facebook. Similarly, we collect your name on your Instagram, Twitter, or LinkedIn profile, as well as likes, retweets, views, or comments you make on our company’s posts on these profiles.

We also collect any other information you provide by completing and submitting forms to us, for example, when you lose your betting slip, win a competition, or place or win a bet exceeding €2,000, and generally when you communicate with us as described in the previous section of this Privacy Policy.

We have reviewed all our forms to ensure that we only collect and process information that is absolutely necessary for the intended purpose, which is either specified or obvious to you, or required by law, thereby avoiding excessive or unnecessary processing.

Finally, we collect visual material through cameras operating at the entrance and exit of our company’s offices, as well as above the cash registers of our proprietary agencies. For more information on when and why we collect this information, how we use it, the conditions under which we may disclose it to third parties, and how we keep it secure, please click here.

How is your personal data used?
We use your information in accordance with Article 6(1)(a), i.e., for the purposes you have consented to, Article 6(1)(b), i.e., processing is necessary for the performance of a contract with you, Article 6(1)(c), i.e., for compliance with our legal obligations (such as tax legislation, payment of tax and contributions to the National Betting Authority, as provided for in the Betting Law of 2019 (Law 37(I)/2019) and the Law on the Prevention and Suppression of Money Laundering from Illegal Activities of 2007 (188(I)/2007)), and Article 6(1)(f), i.e., for the purposes of the legitimate interests pursued by us as a business.

We provide more details below to help you understand exactly how we use your information.

We use your information for the following purposes:

Article 6(1)(a)

To receive and process your entries into our competitions.
To provide you with information about promotional offers and our products and services, where you have given your consent to such communications.

Article 6(1)(b)

To respond to bet placements, offers, requests, or inquiries you submit or when we communicate with you, as explained in more detail below.
To process or review bet submissions or bets placed and submitted by you.
To pay any winning bets when you place or win a bet exceeding €2,000, regardless of whether the transaction is conducted in a single act or multiple acts that appear to be related.
To fulfill our obligations arising from any contracts concluded between you and us or to take steps to enter such a contract.

Article 6(1)(c)

To verify your identity, age, and address.
To monitor transactions for the prevention or suppression of money laundering from illegal activities.
To comply with or respond to the requirements of the National Betting Authority or generally with our obligations arising from legislation related to betting services, money laundering, and taxation.

Article 6(1)(f)

To inform you of changes to our services or privacy policy, if necessary.
To send you communications you have requested, such as a response to an inquiry.
To make our content available to you on social media for users who have chosen to follow us or participate in our competitions on social media.
To monitor transactions for the prevention or detection of fraud or to identify illegal, irregular, or suspicious betting behavior.
To conduct member surveys, research, and statistics after anonymizing the relevant data.

We will not contact you for promotional purposes by mail, email, or text message unless you have given your prior consent. You can change your preferences regarding promotional communications and withdraw your consent at any time by contacting the DPO, whose details are provided at the beginning of this Privacy Policy. If you withdraw your consent, there will be no consequences for the legality of processing that occurred before the withdrawal or any other consequences.

You are welcome to contact the DPO, whose details are provided at the beginning of this Privacy Policy, if you need further clarification on how your information is used.

Where and for how long do we keep your information?
Your personal data is primarily stored electronically on servers located in Cyprus. In specific cases, such as when there is an issue that needs to be resolved, the relevant information about you may be stored in physical files kept at our premises in Nicosia, Cyprus. If you contact us via email, the personal information contained in the corporate email is stored on Microsoft’s servers.

We retain your personal data only for as long as necessary to process any payments and as required to comply with our legal or regulatory obligations, specifically those arising from betting legislation, tax legislation, and anti-money laundering legislation, so that we can defend or exercise any legal actions on behalf of or against our company. Personal data will initially be retained for a period of at least five (5) years from the date of the last transaction and cannot be destroyed unless the five (5) year period has passed and prior approval from the National Betting Authority has been obtained (in accordance with Article 53 of the Betting Law). Additionally, your data will be retained for a period of at least five (5) years from the date of the last transaction in the event of either the collection of winnings or the placement of a bet exceeding two thousand euros (€2,000), or both, in accordance with Article 60(e) of the Law on the Prevention and Suppression of Money Laundering from Illegal Activities of 2007 (188(I)/2007)). Generally, for the above purposes, we retain your information for as long as we maintain a contractual relationship with you and up to eight (8) years after the termination or expiration of that relationship.

If we have obtained your consent to collect or use your personal data for a specific purpose, such as promotional communications, we will retain this personal data unless you decide to withdraw your consent or object to its processing.

We retain the information we collect about you as a mere visitor to our website for one year. A retention period of six months applies to information we have collected as a result of you sending us an inquiry or comment via email or otherwise, where we have never entered into a contract with you.

Data relating to likes, shares, comments, and messages from those who follow us on social media or participate exclusively in like and share competitions on social media (such as Facebook, Instagram, Twitter, and LinkedIn) is retained until the post is deleted or until you withdraw your reaction to our posts (like, share, etc.) or until the competition is completed.

Information on the competition prize receipt/redemption form is retained for up to 6 years from the draw or as long as necessary to complete/resolve a legal dispute.

Data on the lost betting slip declaration is retained for a period of 6 years from the submission of the declaration and/or for as long as necessary for the handling of potential legal disputes between the member and the company and compliance of the company with tax legislation.

Regarding the visual material recorded by cameras as explained above, this is retained for a period depending on the storage space of the hard drive and the activity observed in the area, which may range from 2 weeks to 4 weeks after the recording is made.

In the event of a maximum retention period specified by the Commissioner for Personal Data Protection that applies to our services sector, we will immediately comply with such a specified maximum retention period.

After the expiration of the aforementioned retention periods, we will remove the information from our systems, either by deleting it or by fully anonymizing it so that you can no longer be identified through this information. In this case, we will not delete all the information but only the information such as your name, address, and email address that reveals that the information belongs to you.

Who has access to your information?
We will never sell or transfer your information to third parties and will not disclose it to third parties for promotional purposes.

We may disclose your information to third-party service providers. These third parties may be technical service providers who provide us with the software systems (or their maintenance) necessary to fulfill the administrative tasks inherent in providing our services to you or conducting our business, or they may be messengers and/or mail delivery companies we use to send mail. We will only disclose to these parties the personal data that is absolutely necessary for the provision of the service or the completion of the relevant task, and where required by the Regulation, we maintain a contract requiring them to keep your information secure and in accordance with the principles and rules of the General Data Protection Regulation and not to use this information for direct promotional purposes or for any other purposes other than the provision of the service or the completion of the task as explained above.

We also transfer the information contained in your emails to Microsoft, which provides us with the relevant technical data processing service for the aforementioned purposes. We maintain a contract requiring the provider, currently Microsoft, to keep your information secure and in accordance with the principles and rules of the General Data Protection Regulation. You can view this contract here: https://www.microsoft.com/en-us/trust-center/privacy.

The information you submit or is recorded through our Facebook Page is also transferred to Facebook, which provides us with the service that allows us to have and manage a Facebook Page. This provider is itself a data controller and is bound by all the obligations of the General Data Protection Regulation. You can view their privacy policy here: https://www.facebook.com/privacy/explanation.

All of the above also applies to the profiles we maintain on Twitter, Instagram, and LinkedIn. You can view their privacy policies here: https://twitter.com/en/privacy, https://help.instagram.com/402411646841720, https://www.linkedin.com/legal/privacy-policy.

We may also transfer your information to our lawyers and accountants/auditors to the extent necessary to defend or pursue legal claims and to comply with our legal obligations regarding financial accounts and for tax purposes, respectively.

We may transfer your personal data to third parties as part of a sale of part or all of our business activities and assets to any third party or as part of any restructuring or reorganization of our business. In this case, we will take steps to ensure that all principles and related rights regarding the protection of personal data, as set out in the General Data Protection Regulation, are fully respected before, during, and after the relevant transfer.

Finally, we may disclose your information to public and/or regulatory authorities (M.O.K.A.S, FIFA, National Betting Authority, Police), if such disclosure is required by law or a court order or as part of our compliance with the terms of our license imposed by the betting law and/or the National Betting Authority.

Apart from the above, the recipients of your personal data will be authorized members of our staff who are bound by confidentiality and security agreements and have been informed and trained to handle your personal data in accordance with the rules and principles of the General Data Protection Regulation.

What are your rights?
You can send us any of the following requests at any time, and we will comply with them as soon as possible and in any case within one month of receiving your request. We will inform you of the action we have taken. If your request is complex to examine or fulfill for any reason, we will ask for an extension before the aforementioned one-month period expires.

If we have valid reasons to refuse to fulfill your request, we will inform you accordingly, and in this case, you have the right to submit a related complaint to the Office of the Commissioner for Personal Data Protection, http://www.dataprotection.gov.cy/, if you believe our decision is unjustified.

The following are the requests you can submit to us:

Request to permanently delete all or some of your data from our records (right to erasure or right to be forgotten), for example, when we no longer have reasons to retain it.
Request to access the personal data we hold in our records (right of access).
Request to provide you with a copy of the information in our records, in printed or electronic form. If you need more than one copy, we may charge you a maximum administrative fee of €10.00 (right to receive a copy).
Request to update or correct the personal data we hold in our records (right to rectification), for example, if it is not up to date or contains errors or inaccuracies.
Request to provide you with information about you that we hold in our records in a structured, commonly used, and machine-readable format or to transfer it in such a way to another provider of your choice, if such transfer is technically feasible (right to data portability). Please note that this right applies only to data you have provided to us and which we process electronically.
Request to stop doing anything with your information without deleting it from our records (right to restriction of processing).
Request to stop processing your information for direct promotional purposes or based on legitimate interests pursued by our company as explained in the fourth question of this Privacy Policy or for reasons of public interest (right to object). In the case of direct promotional purposes, we will stop processing your information. In other cases, we will do the same, unless we have compelling reasons to refuse, in which case we will inform you accordingly.

If you wish to exercise any of the above rights, you can do so by contacting the DPO at any of the contact details provided above in this Privacy Policy, preferably via email, specifying the type of right you wish to exercise.

Please note that before we take any action in accordance with any of the above requests, we may ask you to prove your identity if we have doubts about your true or correct identity. If we cannot identify you, i.e., because we do not hold personal data belonging to the person you claim to be, we will inform you accordingly and will not act on your request.

Data relating to the handling of the above requests is retained for a period of nine (9) months from the notification of the result or the final conclusion of any process related to the request, if such a process exists.

What security measures do we apply to protect your data?
When you provide us with personal data, we take organizational and technical measures to ensure that it is secure and protected from unauthorized disclosure, modification, accidental loss, or other breach or unlawful processing in accordance with the company’s security policy. These measures include, among others, restricting access to personal data, ensuring secure storage, limiting the risk of viruses and other harmful incidents, maintaining secure backup copies, and effectively destroying redundant or outdated data.

Data concerning the handling of any personal data breach incident are retained for a period of twelve (12) months from the notification to the competent authority or the final resolution of any process related to the breach, if such a process exists.

Use of Cookies

Click here to read our Policy regarding the use of Cookies.

Transfer of Your Information Outside the European Union

We do not transfer your information outside the European Union.

Except in cases where technical service providers we collaborate with, as explained above, use servers located in third countries such as the United States for data storage, we do not transfer your information outside the European Union. If it ever becomes necessary to transfer your personal data to a country that is not a Member State of the EU, we will ensure that your personal data receives equivalent and/or appropriate respect and protection. Specifically, we will sign data transfer agreements or "data processing agreements" with parties outside the EU, using standardized contractual clauses approved by the European Commission under Article 46 of the Regulation, if the country is one for which there is no EU Commission Adequacy Decision under Article 45 of the Regulation. You have the right to receive details about these agreements, so if you request it and your data is indeed transferred, we will provide you with the relevant details.

Last updated on September 4, 2024.