What data we collect
When you open an account and play at BetMica, you entrust us with your personal and financial details. This document outlines our data handling framework, setting out how Win Top Ltd collects, stores, processes, and protects your information across all our desktop and mobile services. We believe that complete clarity regarding personal data is essential for a safe, transparent gaming environment, ensuring you remain in total control of your digital footprint from the moment you complete your initial registration on our platform.
To provide a fully functional online casino and sportsbook experience, we collect several categories of information directly from you, through automated device interactions, and via verified verification partners. Every piece of data we gather serves an operational, security, or regulatory purpose. We do not gather extraneous information that does not directly support the running of your account or our regulatory duties under our Anjouan gaming licence.
Categories of personal data gathered
- Identity and contact details: Your full legal name, date of birth, residential address, personal email address, and mobile phone number. Because we maintain an absolute 18+ policy to uphold responsible gambling and prevent underage access, verifying your date of birth is mandatory prior to real-money wagering or withdrawal approval.
- Financial and transaction data: Records of all deposits, payout requests, failed payments, and payment methods utilised. Depending on whether you fund your balance via Visa, Mastercard, Revolut, Skrill, Apple Pay, Google Pay, bank wire, or cryptocurrencies such as Bitcoin, Ethereum, and Tether (USDT), we retain transaction identifiers, partial card details (first six and last four digits only), and relevant blockchain transaction hashes.
- Technical and device information: Your internet protocol (IP) address, operating system, browser configuration, screen resolution, connection timestamps, hardware identifiers, and approximate location derived from network traffic. We also capture behavioural site interactions to detect duplicate accounts and prevent malicious automated scripts.
- Verification and compliance documentation: Photographic copies of government-issued identity cards, passports, driving licences, recent utility invoices, bank statements, or proof of payment method ownership submitted during our account verification procedures.
- Gaming and betting records: Complete histories of your wagers across slots, RNG table titles, live casino streams, and sports fixtures, including stake amounts, win outcomes, session durations, and communication logs with our customer support team.
Why we process it
Operating a real-money betting service requires a robust lawful foundation for every single processing activity. In aligning our platform protocols with international benchmarks and modern gdpr casino standards, we ensure that every single interaction with your data rests upon clear legal grounds: contractual obligation, statutory compliance, our legitimate operational interests, or your explicit consent. The BetMica privacy policy is designed to keep these processing channels transparent and proportional to the services you choose to use.
Our primary justification for handling your personal data is the execution of our customer contract. We require your information to authenticate your login sessions, credit deposits to your cashier balance, calculate and award bonuses, settle sports wagers, execute cashouts, and calculate progressive jackpots accurately. Without this basic operational processing, maintaining an active player account would be technically and practically impossible.
Beyond basic gameplay delivery, we process records to honour our licensing and anti-money-laundering (AML) obligations governed by the Anjouan Offshore Finance Authority. We cross-reference identity documents, examine unusual transaction frequencies, and verify the origin of deposited capital to protect our player base from fraud, identity theft, and financial crime. Furthermore, we process session lengths and spending figures to support proactive player protection tools, giving our team the capacity to flag indicators of potential gambling harm and enforce customer-requested deposit or session limits.
Where we rely on legitimate commercial interests, we balance our business needs against your fundamental privacy rights. This includes monitoring server stability, optimising software load times, running diagnostics on our mobile web application, and protecting our infrastructure against distributed denial-of-service (DDoS) attacks. Where we send promotional newsletters or promotional notifications, we do so strictly on the basis of opt-in marketing consent, which you can withdraw at any time directly through your player profile settings.
Who we share it with
At BetMica we never sell, rent, or lease your personal information to marketing brokers, affiliate networks, or unvetted commercial enterprises. Your records are only shared with strictly defined third-party service providers who operate under formal data processing agreements, ensuring they maintain technical security measures equivalent to our own internal standards. You can read more about how our governance operates on our dedicated licence and safety page.
Authorised external recipients
- Payment gateways and acquiring banks: When processing transactions via credit cards, bank wire, or digital wallets, necessary payment data passes directly to merchant processors to confirm settlement and prevent unauthorised chargebacks.
- Identity verification and fraud prevention agencies: Specialised screening services review submitted identity documentation against international databases to verify authenticity, screen against politically exposed persons (PEP) registers, and enforce international sanctions lists.
- Game software developers: Independent gaming studios like 3 Oaks Gaming and Booongo receive encrypted player session tokens to deliver slot reels and live dealer feeds, ensuring wagers resolve accurately without exposing your raw personal identity to the studio.
- IT infrastructure and communications hosts: Secure cloud providers hosting our encrypted databases, as well as customer service ticketing platforms that manage our 24/7 live chat and email interactions.
- Regulatory and legal authorities: If presented with a lawful disclosure request from competent law enforcement agencies or our licensing board, we are legally required to disclose relevant account files to aid official criminal or financial investigations.
How long we keep it
Our commitment to betmica data protection dictates that we retain records only for as long as necessary to fulfil the operational purposes for which they were gathered, or to comply with statutory retention mandates. Once your account is permanently closed, we do not wipe your file immediately; instead, specific categories of data enter a restricted-access retention archive. This extended preservation period is mandatory under international anti-money laundering legislation, which requires gaming operators to maintain transactional and identity audit trails for several years following the termination of a customer relationship.
| Data Category | Primary Purpose | Retention Period | Lawful Basis |
|---|---|---|---|
| Profile & Identity Data | Account management, age verification | Active account lifetime + 5 years post-closure | Legal obligation & contract |
| Verification Documents (KYC) | AML screening, fraud prevention | 5 years from account closure date | Legal obligation |
| Financial & Transaction Records | Payment accounting, audit trails | 7 years from transaction date | Statutory financial duty |
| Game & Bet History | Bet settlement, dispute resolution | 5 years from bet date | Contract & legitimate interest |
| Technical & Device Logs | System security, fraud mitigation | 12 to 24 months from collection | Legitimate interest |
| Marketing Preferences | Communications management | Until consent is withdrawn | Explicit consent |
When standard statutory timeframes expire, archived data is systematically removed from our live servers and permanently deleted through automated electronic disposal schedules. In cases where transaction histories must be retained indefinitely for broad statistical or platform performance analytics, we strip away all personal identifiers, rendering the surviving analytical records irreversibly anonymous. This BetMica privacy policy guarantees that obsolete personal information is never stored indefinitely without a direct legal justification, safeguarding your privacy throughout your entire journey with us.
