How We Protect and Use Your Personal Data at Betsio

Effective Date: 21 July 2026 Last Updated: 21 July 2026
This Privacy Policy explains how we collect, use, disclose, protect and retain personal data when you visit Betsio, create an account, play casino games, place sports bets, make a payment, contact support or use a safer gambling tool. Techno Wave Systems S.R.L. acts as the data controller for Betsio and decides why and how personal data is processed. We need certain information to operate your account, settle bets, review transactions, verify identity and meet fraud-prevention, anti-money-laundering and player-protection duties. Other processing, including some marketing and optional cookies, depends on your choice. We do not sell or rent your personal data. Read this Policy before opening an account, and contact our Data Protection Officer if you want to exercise a privacy right or ask how a particular record is handled.

1. Company and Scope

1.1 Data Controller

Betsio is owned and operated by Techno Wave Systems S.R.L., a company registered under the laws of Costa Rica with registration number 3-102-961721. Our registered office is at 106, Lagunilla, Ulloa, Heredia, Costa Rica.
For the purpose of this Policy, “Betsio”, “we”, “us” and “our” refer to Techno Wave Systems S.R.L. “You” means a visitor, registered player, account holder or other person who communicates with us.

1.2 Services Covered by This Policy

This Policy applies to personal data processed through:

• betsio.com and its language or market pages;
• registration, sign-in and account-management functions;
• casino, live casino and sportsbook activity;
• deposits, withdrawals and transaction reviews;
• bonus, loyalty and promotion participation;
• live chat, email, complaint and document-upload channels;
• safer gambling tools, self-exclusion and marketing controls;
• cookies, analytics, advertising measurements and similar technologies.

Third-party websites, payment services, game studios, blockchain networks and external applications can apply their own privacy terms. Read those terms before sending information or completing a transaction outside our systems.

2. Personal Data We Collect

2.1 Registration and Profile Data

When you register or update your account, we can collect your first and last name, date of birth, residential address, country, email address, telephone number, username, password record, preferred language and account currency. We also record whether your email or telephone number has been confirmed and when material profile changes occur.
You must provide accurate information. If your name, address, telephone number or other account detail changes, update the profile or contact support. Incorrect details can delay verification, payment review or account recovery.

2.2 Identity and Verification Data

We can request documents and evidence needed to confirm identity, age, address, payment ownership and source of funds. These records can include:

• passport, national identity card or driving licence images;
• a selfie, liveness check or facial comparison result;
• utility bill, bank statement or government correspondence;
• card or e-wallet ownership evidence;
• deposit and withdrawal receipts;
• bank statements, payslips, tax records or other source-of-funds material;
• screening results connected with sanctions, politically exposed persons, fraud or anti-money-laundering controls.

We can collect these records directly from you or receive verification results from an identity, fraud-prevention or payment service provider. We restrict access to staff and processors whose work requires the information.

2.3 Account, Game and Sportsbook Records

We record account activity needed to operate the service and resolve disputes. This includes login history, deposits, withdrawals, bonus activation, wagering progress, balance changes, casino rounds, sports bets, odds, settlement records, loyalty points, responsible gambling settings, account restrictions and closure history.
Game round IDs, sportsbook ticket numbers, server records and payment references help us investigate interrupted sessions, settlement questions and complaints. They also support fraud monitoring and regulatory recordkeeping.

2.4 Payment and Digital-Asset Data

Payment information can include the selected method, amount, currency, date, transaction reference, masked card or account identifiers, issuer or provider response, payment status and ownership evidence. Independent payment providers process card, bank and e-wallet transactions. We do not need your complete card security code and will never ask you to send one by email or live chat.
For digital-asset transactions, we can process wallet addresses, asset type, selected network, transaction hash, confirmation status, amount and related account records. Public blockchain data remains visible on the relevant network and cannot normally be deleted or altered by us. We do not control a public blockchain and do not hold your private keys or recovery phrase.

2.5 Technical and Usage Data

When you visit or sign in, our systems can collect IP address, GeoIP location, browser type, operating system, device model, device identifiers, screen settings, language, time zone, referring page, pages viewed, session duration, clicks, error logs and account activity timestamps.
We use this information to maintain sessions, apply language and regional settings, detect unauthorised access, diagnose errors, measure site performance and identify traffic associated with fraud, multi-accounting or prohibited location masking.

2.6 Communications and Preference Data

We retain messages sent through live chat, email, complaint forms and other support routes. A support record can include attachments, call notes, case references, the account action requested and our response. We also record your marketing choices, preferred contact channel, consent history and unsubscribe requests.

2.7 Safer Gambling and Account-Safety Data

If you use a limit, cooling-off period, self-exclusion request or account closure, we record the instruction, its start and end dates, the affected products and related support communication. We can also process behavioural indicators, payment patterns and interaction records to identify signs that an account may need a safer gambling review.
This information can reveal sensitive details about behaviour or personal circumstances. We limit its use to player protection, account management, legal duties and the handling of your request.

3. Where Personal Data Comes From

Most data comes directly from you when you register, upload a document, make a transaction, place a bet or contact us. We also collect information automatically through account systems, server logs, cookies and security tools.
We can receive information from payment processors, identity-check services, fraud databases, game and sportsbook suppliers, advertising partners, analytics providers, public registers, sanctions or politically exposed person screening services, and authorities acting within their legal powers. We compare third-party information with account records when identity, payment ownership, fraud risk or legal compliance needs to be checked.

4. Why We Process Personal Data

4.1 Contract and Account Operation

We process the information needed to register the account, accept eligible play, calculate balances, apply promotion rules, settle transactions and answer account questions. Without the required registration and transaction data, we cannot provide real-money casino or sportsbook services.

4.2 Legal Duties and Legitimate Interests

Identity checks, transaction monitoring, fraud prevention, responsible gambling reviews and record retention support legal duties and our legitimate interest in protecting players, payments and the service. We assess the need for this processing against your rights and limit access to the people and systems that need the information.

4.3 Consent

We ask for consent where law requires it, including certain marketing messages and optional cookies. You can withdraw consent through account settings, the unsubscribe control in a message, cookie settings or a request to support. Withdrawal does not make earlier processing unlawful, and it does not affect data that we must retain or use under another legal basis.

5. Automated Checks and Account Decisions

We use automated rules and risk signals to detect duplicate accounts, unusual login activity, payment abuse, bonus abuse, sanctions concerns, location conflicts and other behaviour that can threaten account or transaction security. These tools can flag a payment, request more evidence or send a case for manual review.
Where a decision produces a significant effect, you can contact support and ask for human review. We may need further documents before changing an automated restriction. We do not use automated risk tools to provide financial or investment advice.

6. Cookies and Similar Technologies

6.1 Types of Cookies We Use

Cookies are small files stored on your browser or device. Local storage, pixels, software development kits and comparable technologies can serve related functions.

Necessary cookies operate because the site cannot provide essential account functions without them. Optional analytics or advertising cookies depend on the choices available in the cookie banner and local law.

6.2 Managing Cookies

You can change optional cookie choices through the site control where available and can remove or block cookies in your browser. Blocking necessary cookies can stop sign-in, cashier access, language settings or other account functions from working correctly.
Advertising partners may connect visit or referral data with information collected through their own services. Their processing follows their privacy notices. We do not give an affiliate partner your name or email merely because you used a referral link.

7. Who Receives Personal Data

We share only the information needed for a defined service, legal request or security purpose. Recipients can include:

• companies within our corporate group;
• payment processors, banks, card schemes, e-wallet providers and digital-asset service providers;
• identity, age, address, sanctions and source-of-funds verification services;
• fraud prevention, AML/CFT and cybersecurity providers;
• casino studios, live-casino systems and sportsbook suppliers where transaction or dispute data is required;
• hosting, cloud, analytics, customer-support, email and communications providers;
• professional advisers, auditors and insurers;
• regulators, law enforcement, courts, tax authorities and other public bodies acting under lawful authority;
• a buyer, investor or successor if our company structure or business ownership changes.

Staff access follows job duties. Customer support agents, payment and anti-fraud analysts, compliance staff, safer gambling personnel, VIP managers and the Data Protection Officer can access relevant records where their role requires it. We use confidentiality, access-control and processor-contract requirements to limit that access.
We do not sell or rent personal data. We can disclose it when law requires disclosure, when a competent authority makes a valid request, or when disclosure protects the rights, safety and security of Betsio, a player or another person.

8. International Data Transfers

Our company, processors and suppliers can operate in countries outside your place of residence and outside the European Economic Area. A transfer may be necessary to process a payment, host account data, deliver a game, verify identity, provide support or investigate fraud.
Where applicable law requires safeguards, we use measures such as European Commission standard contractual clauses, contractual processor duties, access restrictions, security reviews and transfer assessments. You can ask the Data Protection Officer for more information about safeguards relevant to your data, subject to legal and security limits.

9. How Long We Keep Data

We retain personal data only for as long as the account, legal duty, security need, dispute or stated processing purpose requires it. Gambling and anti-money-laundering rules can require us to retain registration data, verification records, transactions and account correspondence for at least five years after the last transaction or account closure.
Some records can remain longer when a complaint, chargeback, fraud review, legal claim, self-exclusion duty or authority request remains open. We delete, anonymise or restrict data when the relevant purpose and mandatory retention period end. Anonymised statistics that can no longer identify you may remain in use.
Public blockchain transaction records are not controlled by us and can remain permanently visible on the relevant network. Closing your Betsio account does not remove a blockchain entry.

10. How We Protect Personal Data

We use layered technical and organisational controls, including encrypted connections, restricted staff permissions, secure hosting, monitoring, logging, fraud controls, document-access rules and account authentication. Player accounts use unique login credentials, and two-factor authentication can add another barrier against unauthorised access.
No internet service can promise zero risk. Protect your password, use 2FA, keep your email account secure and contact support immediately if you notice an unfamiliar login or transaction. We will never ask for your password, complete card security code, private key or wallet recovery phrase.
If a personal-data incident creates a legal notification duty, we will notify the relevant authority and affected people in the manner and time required by applicable law.

11. Your Privacy Rights

Depending on the law that applies to you, you may have the right to:

• request access to personal data we hold about you;
• correct inaccurate or incomplete information;
• ask for deletion where no legal reason requires continued retention;
• restrict processing in defined circumstances;
• object to processing based on legitimate interests;
• receive eligible data in a portable format;
• withdraw consent for future processing;
• opt out of direct marketing;
• ask for information about an automated decision and request human review;
• lodge a complaint with a competent data-protection authority.

These rights are not absolute. We can retain data needed for AML/CFT, fraud prevention, responsible gambling, tax, dispute or legal recordkeeping even after an erasure request. We will explain the reason if a legal restriction prevents us from completing a request in full.

11.1 Submitting a Request

Email the Data Protection Officer from the address linked to your account. State the right you want to exercise and provide enough information to locate the relevant records. We can request identity evidence before disclosing or changing personal data; this prevents another person from using a privacy request to access your account information.
We respond within the period required by applicable law. A complex request or a large set of records can require additional time, in which case we will explain the extension where the law requires notice.

12. Marketing Choices

We send promotional email, SMS, push or telephone communications only where the applicable basis permits it. You can change marketing preferences in your account, use an unsubscribe link or ask support to stop promotional messages.
An opt-out affects future marketing; it does not stop security notices, payment messages, account updates, safer gambling communication or other service messages needed to administer the account. We retain an opt-out record so that your choice remains active.

13. Age and Children’s Privacy

Betsio is intended only for people who have reached the legal gambling age in their location. We do not knowingly permit minors to open or use a real-money account. Age verification can form part of registration, KYC or payment review.
If you believe a minor has provided personal data or used an account, contact support immediately. We can restrict the account, investigate the report and delete information where no legal retention duty applies. Parents and guardians should use device controls, account passwords and filtering tools to prevent unauthorised access.

14. External Links, Games and Social Features

Our site can link to payment services, game suppliers, support organisations, social networks and other external websites. Their privacy notices control the data they collect directly. A social sharing or login feature can send information to the relevant network when you use it.
Some game suppliers can apply an additional privacy notice inside their game interface. Read that notice when it appears. We are not responsible for an external site’s content, security or privacy practices.

15. Account Closure and Privacy

Closing an account stops future play but does not erase all account data immediately. We retain records needed for legal, financial, fraud, complaint and self-exclusion duties. A closed or self-excluded account can remain on a suppression list so that we do not reopen it contrary to the active restriction.
You can still submit a privacy request after closure. Use the email address previously linked to the account and provide the information needed to confirm your identity.

16. Changes to This Policy

We can update this Policy when our services, suppliers, legal duties or data practices change. The Last Updated date at the top shows when the current text took effect. For a material change, we can provide notice through the website, account area or registered email address where appropriate.
Review this page periodically. Continued use after an update means the new Policy applies to later processing, but we will request consent again where the law requires a fresh choice.

17. Contact Our Data Protection Officer

Send privacy questions and rights requests to the Data Protection Officer. For faster handling, write Privacy Request in the subject line and use the email address registered to your account.

You also have the right to complain to the data-protection authority responsible for your habitual residence, workplace or the place where you believe an infringement occurred. Contacting us first gives our Data Protection Officer an opportunity to review the issue and provide the records or correction you need.