Skip to main content

Privacy Policy

Updated over 3 weeks ago

Last updated on 23rd April 2025

Introduction

This Privacy Policy ("Policy") (together with our Terms and Conditions and any other documents referred to on it) sets out the basis on which any information we collect from you, or that you provide to us, will be processed by us when you use and access BetWright or related services.

This purpose of this privacy policy is to give you a broader understanding of:

  • what information we collect

  • how we use that information

  • how this information is shared

  • your rights

  • other useful privacy and security related matters

This website is not intended for children and we do not knowingly collect data relating to children.

Controller

Onyx Gaming Limited t/a BetWright is the controller and responsible for your personal data (collectively referred to as BetWright, we, us, or our in this Policy).

If you have any questions about this Policy, including any rights to exercise your legal rights (section 6), please contact us using the information set out in the contact details section 7.

Information Collection

Personal data means any information about an individual from which that person can be identified.

BetWright may collect and process the following information about you:

  • Identity Data, including your full name, social media handles or usernames, chat room aliases, marital status, title, date of birth, proof of address, passport or driving licence.

  • Contact Data, including your billing address, email address, telephone number.

  • Financial Data, including your bank account and payment card details.

  • Transaction Data, including details of deposits, withdrawals, bets and wager, or other transactions you carry out in respect of our services.

  • Technical Data, including details of your visits to our website (including, but not limited to, traffic data, location data, cookies, weblogs, IP addresses and other communication data) and any other resources that you access.

  • Profile Data, including your username, password, bets or wagers placed by you, your preferences, feedback and survey responses.

  • Marketing and Communications Data, including your preferences in receiving marketing from us and third parties, and your communication preferences.

We also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals' Technical Data to calculate the percentage of users accessing a specific website feature in order to analyse general trends in how users are interacting with our website to help improve the website and our service offering.

How Information is Collected

We use different methods to collect data from and about you, including:

  • Information you give us:

    • personal data that you provide us when registering for a BetWright account, posting material or requesting further services, enter a competition or promotion, or if you report a problem with our services.

    • If you contact us, we may keep a record of that correspondence. Telephone calls to and from our Call Centre are recorded for training and security purposes along with the resolution of any queries arising from the service you receive.

    • If you engage with our social media channels, any personal data you provide us through social media, including your social media username and profile information.

  • When you interact with our website, we will automatically collect Technical Data about your use of our website.

  • We will receive personal data about you from various third parties and public sources, as set out below:

    • Technical Data is collected from analytical providers such as Google

    • Contact, Financial and Transaction Data is collected from providers of technical and payment services.

    • Identity and Contact Data is collected from publicly available sources, such as social media.

    • Identity Data is collected from third party credit reference agencies, fraud prevention agencies, or other third parties we use for identification and credit checks.

How Information is Used

Legal Basis

By law, we are required to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:

  • Performance of a contract with you: Where we need to perform the contract we are about to enter into or have entered into with you.

  • Legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and enable us to give you the best and most secure customer experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

  • Legal obligation: We may use your personal data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis.

  • Consent: We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter.

We may use your Information together with other information for the purposes of:

  1. Creating and managing your account.

    1. Legal Basis: Performance of a contract with you.

    2. Data we use: Identity Data, Contact Data, Identity Data, Marketing and Communications Data, Profile Data, Financial Data

  2. Improving and personalising the services that we offer you.

    1. Legal Basis: Legitimate interests – our legitimate interest is to use this data to study how customers use our services, to develop them, to grow our business and to inform our marketing strategy.

    2. Data we use: Technical Data, Profile Data, Marketing and Communications Data

  3. Processing your transactions, wagers and winnings.

    1. Legal Basis: Performance of a contract with you.

    2. Data we use: Profile Data, Contact Data, Financial Data, Identity Data, Transaction Data.

  4. Complying with our duties under applicable law and regulations. This could include processing such as confirming your identity, or reporting any crimes such as money laundering or fraud.

    1. Legal Basis: Legal Obligation

    2. Data we use: Identity Data, Financial Data, Profile Data, Contact Data

  5. Providing you with marketing information and information concerning promotional offers by post, email, telephone and other means. Please adjust your account settings if you do not wish to receive any or all of these services.

    1. Legal Basis:

    2. Where you are an existing client we rely on legitimate interests – we have a legitimate interest to carry out direct marketing, to develop and grow our business.

    3. Where you have signed up to our newsletter we rely on consent, having obtained your prior consent to receive direct marketing communications.

    4. Data we use: Contact Data, Identity Data, Marketing and Communications Data.

  6. To help us make credit decisions about you, to prevent fraud, to check your age and identity and to prevent money laundering.  Please note we may use third parties for these purposes and these third parties may keep a record of the information.

    1. Legal Basis: Legal Obligation and Performance of a contract with you.

    2. Data we use: Identity Data, Financial Data, Contact Data.

  7. To notify you about changes to our services.

    1. Legal Basis: Performance of a contract with you.

    2. Data we use: Marketing and Communications Data, Identity Data, Contact Data.

  8. To monitor and ensure compliance with our terms and conditions.

    1. Legal basis: performance of a contract with you.

    2. Data we use: Identity Data, Transaction Data, Profile Data, Technical Data.

Your Rights

Under data protection legislation, you, as a data subject have a number of rights which are detailed below. Some of these only apply in specific circumstances and are qualified in several respects by exemptions which are provided in data protection legislation. We will advise you in our response to your request if we are relying on any such exemptions.

  • Access to personal data (also know as a “subject access request”): You have a right to request a copy of the personal information that we hold about you.

  • Correction of personal data: You can request us to correct any personal data that we are processing about you which is incorrect. We provide you with online account settings and tools to access and amend the information we hold on your account, or you can email [email protected]. We may need to verify the accuracy of any new data you provide to us. Please remember to always ensure your data is current and updated.

  • Right to withdraw consent: Where we have relied upon your consent to process your personal data, you have the right to withdraw that consent. 

  • To change your marketing preferences, you can visit the Account tab when you log into your account or the email us [email protected].

  • Right of erasure: You can request us to erase your personal data where there is no compelling or regulatory reason for us to continue processing it.

You may also have the right to ask us to delete personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your personal data unlawfully, or where we are required to erase your personal data to comply with local law.

This right is not a guaranteed or absolute right as we may not always be able to comply with your request for specific legal reasons which will be notified to you, if applicable or appropriate, at the time of your request.

  • Right to transfer your personal data: You can request the transfer of your personal data to you or to a third party. This information will be provided in a machine-readable format such as .csv (readable on Microsoft Excel or equivalent) or .pdf (readable on Adobe Acrobat or equivalent). Note this right only applies to information we are processing through automated means, which you initially provided consent for us to use or where we used the information to perform a contract with you;

  • Right to restrict processing of personal data: You have the right, in certain circumstances, to request that we suspend our processing of your personal data in one of the following scenarios:

    • If you want us to establish the data’s accuracy

    • Where our use of the data is unlawful but you don’t want us to erase it;

    • Where you need us to hold the data even if we no longer require it, as you need it to establish, exercise or defend legal claims; or

    • You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
      ​
      Where we suspend our processing of your personal data we will still be permitted to store your personal data, but any other processing of this information will require your consent, subject to certain exemptions.

  • Right to object to processing of personal data: You have the right to object to our use of your personal data which is processed on the basis of our legitimate interests. However, we may continue to process your personal data, despite your objection, where there are compelling legitimate grounds to do so which override your right to object, or we need to process your personal data in connection with any legal claims.

  • Right to object to direct marketing, which can be done by opting-out of direct marketing.

  • Right to request an explanation of the logic involved where we make decisions about you solely through automated means.

How to exercise your rights

Should you wish to exercise any of the above rights, please email [email protected].

You will not usually have to pay a fee to access your personal data or exercise any other rights, but if your request is clearly unfounded, repetitive or excessive, we may charge a reasonable fee (or alternatively we could refuse to process your request in those circumstances).

With any request to exercise your rights, you should include adequate information to identify yourself and relevant contact information that will reasonably assist us in fulfilling your request. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. If your request is particularly complex, or you have made a number of requests, we may need longer to respond – in this situation we would notify you and keep you updated.

Complaints

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Security

We do everything in our power to protect user-information you provide on account registration. All of our users’ information, not just sensitive information, is stored on servers in secure operating environments.

We take all reasonable steps to ensure that your information is kept secure and protected, including putting in place appropriate security measures to prevent your personal data being accidentally lost, used or accessed in an unauthorised way.

Data Disclosure

Your information will not be provided or sold to any third parties. BetWright will only disclose your personal information to other companies within the BetWright group, carefully selected suppliers that are engaged by BetWright to process the information on our behalf or otherwise as required by law or the requirements of any applicable regulatory authority.

Examples of external third parties we may need to disclose your data to include:

  • Our gaming platform and website supplier (Playbook Gaming Limited);

  • Credit reference agencies – to note, credit reference agencies, in conjunction with the relevant privacy regulator(s) and the financial services industry, have developed a common form of notice, called the TransUnion Bureau Privacy Notice. Please refer to https://www.transunion.co.uk/legal-information/bureau-privacy-notice to find out more information about how TransUnion collects and uses credit data in its capacity as a credit reference agency.

  • Payment service providers (Paysafe, Yaspa)

  • Workplace communications tools (Microsoft Outlook, Slack).

  • External communication tools (Intercom R&D Unlimited Company, Sendgrid).

  • Third party mediation provider (IBAS)

  • External ID Verification platforms (SumSub (Sum and Substance Ltd), and GamStop).
    ​
    We are entitled to share the information we hold on you which includes Information and betting history with the regulator and licensing authority sporting bodies and other bodies, including the police, in order to investigate fraud, money laundering or sports integrity issues and to comply with our regulatory duties under applicable law. In such an event, BetWright will only disclose personal information which it deems to be necessary and proportionate to any such investigation and where it has been assured by such third party that it will be used in compliance with data protection legislation.

  • Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Retention of your Personal Data

We will only retain your personal data for the period necessary to provide you with our services.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

We may be subject to legal and regulatory requirements to keep personal data for a longer period, in particular pursuant to any applicable statutory limitation period. We may retain personal data for a longer period in the event of a complaint or if we feel there is a prospect of litigation in respect of our relationship with you.

All data on Slack is deleted after 14 days. All other personal data shall be maintained for up to 7 years following the closure of Your Account (if applicable) or the last contact with us emanating from you. Where it is no longer necessary to process your personal data we will delete it securely. 

Internet-based transfers

Given the Internet is a global environment, using the Internet to collect and process Information necessarily involves the transmission of Information on an international basis. Some of the data processors engaged to process Information may be based outside of the UK.

Where we transfer your personal data outside of the UK to service providers, we will ensure a similar degree of protection is afforded to it by ensuring that one of the following safeguards are in place:

  • We will only transfer your personal data to countries that have been deemed by the UK to provide an adequate level of protection for personal data.

  • We may use specific contractual terms approved for use in the UK or the EEA which give the transferred personal data the same protection as it has in the UK or the EEA.

IP Address

Your browser generates information, including which language the website is displayed in, and your Internet Protocol address ("IP address").  An IP address is a set of numbers which is assigned to your computer during a browsing session. The IP address is generated whenever you log on to the internet via your internet service provider or your network. Your IP address is automatically logged by our servers and used to collect traffic data about visitors to our website. We also use your IP address to help diagnose problems with our server, and to administer our website.

Account Security

When opening a telephone account, customers will be asked if they would like a password for account security purposes. If the customer declines to activate a password on the account, BetWright cannot be held responsible for any bets placed on the account that the customer later queries as not being placed by them. These bets will remain the responsibility of the customer. For account security purposes customers are advised to activate a password.

If a password is activated, and used subsequently by a third party, the responsibility remains with the customer for all bets on the account. It is the customer responsibility to ensure password details are kept private. If you lose, forget, or are concerned a third party has your password, you should call us to change your password immediately. Any bets placed on your account using your password will be your responsibility.

Cookies

Cookies are small text files that record your preferences when you visit certain online pages, and are stored on your computer or other connected device. We use a variety of first party and third party cookies, as well as both persistent and session cookies.  We and (where relevant) and our affiliates and third party service providers use cookies to:

  1. track the use of the Service;

  2. monitor traffic to the Service;

  3. improve the Service by making it easier and more relevant for you;

  4. obtain and pass on analytics regarding your use of the Website and the Service

  5. to understand your preferences for advertising purposes; and

  6. to provide you with relevant advertising when visiting our Website.

Online browsers can usually be set to either accept or decline cookies. However, if cookies are declined you may not be able to fully experience the interactive features of the Service.

You can learn more about cookies by clicking here (and there are additional links on the Information Commissioner's Office site which provide more information about cookies).

Social Media

We want social media to be a friendly and relaxed environment for all to enjoy. We use social media to talk to you, answer your questions, supply you with news and let you know about things you might be interested in, including market movers. Views and news published by BetWright does not constitute betting advice and should not be treated as such.

For more information on our social media terms and conditions, please see our Terms & Conditions at https://support.betwright.com/en/articles/9639829-terms-and-conditions

Did this answer your question?