Privacy Policy

Version: 1.0  |  Last Updated: 3 July 2025  |  Applies to: buffalo-bet.com

This Privacy Policy describes how BuffaloBet ("we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals who access or use the buffalo-bet.com website and its associated services (collectively, the "Platform"). It also explains your rights in relation to your personal data and how to contact us regarding privacy matters.

This Privacy Policy should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy. By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

1. Introduction

1.1 Our Commitment to Privacy

BuffaloBet is committed to protecting the privacy and security of your personal information. We handle all personal data with care, transparency, and in accordance with applicable data protection laws and best practice standards in the jurisdictions in which we operate.

1.2 Scope

This Privacy Policy applies to all personal information collected by BuffaloBet through the Platform, including information collected through our website, mobile interfaces, customer support channels, and marketing communications. It applies to registered Players, prospective users, and visitors to the Platform.

1.3 Data Controller

For the purposes of this Privacy Policy, BuffaloBet acts as the data controller in respect of personal information processed through the Platform. For privacy-related enquiries, including data subject rights requests, please contact our Data Protection Officer at [email protected].

2. Data We Collect

2.1 Information You Provide Directly

We collect personal information that you provide to us voluntarily, including when you:

• Register an Account (e.g., full name, date of birth, email address, mobile phone number, residential address, username, password);
• Complete identity verification (e.g., copies of passport, driver's licence, utility bills);
• Make deposits or withdrawals (e.g., payment card details, bank account information, e-wallet identifiers);
• Contact customer support (e.g., support tickets, live chat logs, emails);
• Participate in surveys, promotions, or competitions (e.g., preferences, feedback).

2.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical and behavioural data, including:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution;
• Usage Data: Pages visited, time spent on pages, links clicked, game sessions played, wagering history;
• Location Data: Approximate geolocation derived from IP address (used for compliance and fraud prevention);
• Cookie and Tracking Data: Information collected through cookies and similar tracking technologies (see Section 6).

2.3 Information from Third Parties

We may receive personal information about you from third parties, including:

• Identity Verification Providers: Third-party KYC/AML verification services that confirm your identity and age;
• Payment Processors: Information about transaction status and fraud alerts;
• Fraud Prevention Agencies: Data shared by fraud detection and prevention organisations;
• Marketing Partners: Where you have consented to data sharing by such partners;
• Publicly Available Sources: Including electoral registers, sanctions lists, and public databases used for compliance screening.

2.4 Special Categories of Data

We do not intentionally collect special categories of sensitive personal data (such as health data, racial or ethnic origin, or political opinions) except where strictly necessary for our Responsible Gaming obligations, and only with your explicit consent or where required by law (e.g., self-exclusion processing).

3. How We Use Your Data

3.1 Primary Purposes

We use your personal information for the following primary purposes:

• Account Creation and Management: To register and maintain your Account, verify your identity and age, and manage your Player profile;
• Service Delivery: To provide access to Games, process deposits and withdrawals, and administer Promotions;
• Compliance and Legal Obligations: To fulfil AML, KYC, and other regulatory requirements; to detect, investigate, and prevent fraud, money laundering, and other illegal activities;
• Customer Support: To respond to your enquiries, complaints, and requests;
• Responsible Gaming: To monitor gambling behaviour, enforce self-exclusion agreements, and provide player protection tools in accordance with our Responsible Gaming Policy;
• Security: To protect the integrity of the Platform and prevent unauthorised access or abuse.

3.2 Secondary Purposes

• Marketing Communications: To send you personalised promotional offers, news, and updates about the Platform (subject to your consent and applicable marketing laws);
• Analytics and Platform Improvement: To analyse how the Platform is used and to improve features, performance, and user experience;
• Personalisation: To tailor content, promotions, and game recommendations to your preferences and usage patterns.

3.3 Marketing Opt-Out

You may opt out of receiving marketing communications at any time by:

• Using the unsubscribe link included in any marketing email;
• Updating your communication preferences in your Account settings;
• Contacting us at [email protected].

4. Legal Bases for Processing

We process your personal data on the basis of one or more of the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and BuffaloBet (e.g., operating your Account, processing transactions);
• Legal Obligation: Processing is required to comply with applicable legal or regulatory obligations (e.g., AML/KYC verification, responsible gambling requirements);
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, Platform security, and service improvement, where these interests are not overridden by your fundamental rights;
• Consent: Where we rely on your consent for specific processing activities (e.g., marketing communications, placement of non-essential cookies). You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing & Third Parties

5.1 Categories of Recipients

We may share your personal data with the following categories of third parties:

• Identity and Age Verification Providers: To fulfil KYC obligations;
• Payment Service Providers: To process deposits and withdrawals;
• Game Content Providers: Third-party game suppliers who may receive limited gameplay data to power their games;
• Analytics Providers: To analyse Platform usage and performance;
• Marketing and Advertising Partners: Only where you have provided consent and subject to contractual data protection obligations;
• Fraud Prevention and Security Services: To detect and prevent fraudulent activity;
• Customer Support Platforms: Third-party helpdesk or CRM tools used to manage support communications;
• Legal and Regulatory Authorities: Courts, regulators, law enforcement agencies, and government bodies where required by law or legal process.

5.2 Data Processing Agreements

All third-party service providers who process personal data on our behalf are required to enter into appropriate data processing agreements that impose equivalent data protection standards and restrict their use of your data to the specified purposes.

5.3 No Sale of Personal Data

BuffaloBet does not sell, rent, or lease your personal information to unaffiliated third parties for their own marketing purposes.

6. Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They enable the website to remember your preferences and actions over a period of time, and to provide a personalised and functional experience.

6.2 Types of Cookies We Use

6.3 Managing Cookies

You may control and manage cookies through your browser settings. Please note that disabling essential cookies may impair the functionality of the Platform. You may also manage cookie preferences through our Cookie Consent Manager, accessible via the cookie banner displayed on your first visit to the Platform.

6.4 Third-Party Tracking

The Platform may include third-party analytics and advertising scripts (e.g., Google Analytics) that place their own cookies on your device. The use of such cookies is governed by the privacy policies of the respective third parties.

7. Data Security

7.1 Security Measures

BuffaloBet implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols;
• Data Encryption at Rest: Sensitive personal data is stored in encrypted formats;
• Access Controls: Strict role-based access controls limit internal access to personal data to authorised personnel only;
• Firewalls and Intrusion Detection: Network-level security tools to detect and prevent unauthorised access;
• Regular Security Audits: Periodic testing and audit of our information security practices.

7.2 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities in accordance with applicable legal requirements and without undue delay.

8. Data Retention

8.1 Retention Periods

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting obligations. Typical retention periods include:

• Account and Transaction Records: Retained for a minimum of seven (7) years following Account closure, to comply with AML record-keeping obligations;
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later;
• Customer Support Records: Retained for three (3) years from the date of interaction;
• Marketing Data: Retained until you withdraw consent or for a maximum of three (3) years from the last interaction, whichever is earlier;
• Cookie and Analytics Data: Retained in accordance with the periods set out in Section 6.

8.2 Deletion and Anonymisation

At the expiry of the applicable retention period, personal data will be securely deleted or anonymised in such a manner that it can no longer be attributed to an identifiable individual.

9. Your Rights

9.1 Rights Available to You

Subject to applicable law, you may have the following rights in respect of your personal data:

• Right of Access: The right to request a copy of the personal data we hold about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data, subject to our legal obligations to retain certain data;
• Right to Restriction of Processing: The right to request that we restrict the processing of your personal data in certain circumstances;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller;
• Right to Object: The right to object to the processing of your personal data on grounds of legitimate interests or for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2 Exercising Your Rights

To exercise any of the above rights, please submit a written request to:

• Email: [email protected]

We will respond to your request within 30 calendar days of receipt. In complex cases, or where multiple requests are received simultaneously, this period may be extended by a further 60 days, of which we will notify you. We may require you to verify your identity before processing any request.

9.3 Complaints

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

10. International Data Transfers

10.1 Cross-Border Transfers

As a global platform, your personal data may be transferred to, stored in, or processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction. When we transfer personal data internationally, we take appropriate safeguards to ensure that your data is protected in accordance with applicable data protection standards, including:

• Standard contractual clauses approved by relevant data protection authorities;
• Adequacy decisions where applicable;
• Other legally recognised transfer mechanisms.

10.2 Your Acknowledgement

By using the Platform, you acknowledge and consent to the transfer of your personal data as described in this Section.

11. Minors

11.1 No Services to Persons Under 18

The Platform is strictly intended for use by persons who are at least 18 years of age. We do not knowingly collect or process personal data from persons under 18. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete such data and close the associated Account.

11.2 Parental Controls

If you are a parent or guardian and believe your child has accessed or registered on the Platform, please contact us immediately at [email protected] so that we may take appropriate action.

12. Changes to This Policy

12.1 Updates

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, technology, legal requirements, or other factors. Material changes will be communicated to you via email or a notice on the Platform prior to the changes taking effect.

12.2 Effective Date

The revised Privacy Policy will be effective as of the "Last Updated" date indicated at the top of this document. Your continued use of the Platform following such notification constitutes your acceptance of the updated Privacy Policy.

13. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

• Data Protection Officer (DPO) / Privacy Enquiries: [email protected]
• General Support: [email protected]
• Website: buffalo-bet.com

We are committed to resolving any privacy concerns you may have in a timely and transparent manner.