Privacy Notice

1. Who is responsible for processing your data?

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Full registered company name: Babit Sports OÜ
Address: Harju maakond, Tallinn, Nõmme linnaosa, Pärnu mnt 388b, 11612 Estonia
Registry code: 16734804
Vat number: EE102766394

Email: info@be-a-bookie.com
Telephone: 0730866798

Represented by: William Simon Hoyle, official capacity Estonian register 100% owner

2. What data do we process and for what purposes?

2.1 Website visits and technical logs

When you visit the websites, connection and usage data that are technically necessary may be processed. To the extent recorded by hosting, server or security services, these include your IP address, the date and time of access, the address requested, the referrer address, the volume of data transferred, status messages and information about your browser, operating system and device.

We use these data to provide the websites, ensure their stability and security, investigate errors and detect attacks or misuse. The legal basis is our legitimate interest in maintaining a secure and functioning online presence (Article 6(1)(f) GDPR). The specific logging arrangements and retention period depend on the actual hosting and security configuration; see section 7.

2.2 Contact enquiries from corporate partners

If you contact us through the corporate website, we process the information you enter or provide during discussions, such as your name, business contact details, company, role, country, the content of your message and information about a potential partnership or platform solution. Please adapt this list to the form fields available.

We process this information to respond to your enquiry, prepare discussions and assess a potential business relationship. For enquiries made in a business context, the legal basis is generally our legitimate interest in handling and establishing business contacts (Article 6(1)(f) GDPR). Where an individual requests pre-contractual measures on their own behalf or is intended to become a party to a contract, Article 6(1)(b) GDPR may apply.

2.3 Enquiries about the bookmaker platform and demos

If you request information, advice or a software demo through the prospective customer website, we process the contact and business details you provide, information about your planned venture, and subsequent communications and scheduling arrangements. Please add or remove data categories to reflect the actual form fields and demo process.

The processing enables us to respond to your enquiry, prepare a demo or discussion and assess a potential business relationship. In a business context, we generally base the processing on our legitimate interest in handling the enquiry and establishing a business relationship (Article 6(1)(f) GDPR). Where you request pre-contractual measures as an individual on your own behalf, Article 6(1)(b) GDPR may apply.

Please do not submit player data, identity document details, payment data or other sensitive data through the forms unless we expressly request them through a designated, secure process.

2.4 Legal obligations and legal claims

Where necessary, we process data to comply with legal obligations (Article 6(1)(c) GDPR) and to establish, exercise or defend legal claims. The data concerned and the applicable retention periods depend on the specific circumstances and legal requirements.

3. Is providing data mandatory?

Providing data is generally voluntary. However, without the contact details marked as required, we may be unable to respond to an enquiry or arrange a demo or appointment. The websites do not make decisions based solely on automated processing that produce legal or similarly significant effects. If profiling or automated decision-making is used, this section must be amended.

4. Cookies and similar technologies

The websites may use cookies or similar technologies. Strictly necessary technologies may be used where required to provide a website function you have expressly requested. Analytics, convenience or marketing technologies may only be activated if the necessary consent has been obtained through an appropriate consent solution. Consent must be freely given and actively expressed; non-essential technologies must not be activated before a choice has been made.

The overview below must be completed before publication using an up-to-date technical scan of both websites. Please remove categories that are not used and list each technology in use, including its provider, purpose, duration and any data transfers.

  • Necessary cookies/technologies: [name, provider, purpose, duration]
  • Analytics/statistics: [only if used: name, provider, purpose, duration, legal basis]
  • Marketing/other third-party providers: [only if used: name, provider, purpose, duration, legal basis]

You may withdraw or change your consent at any time with effect for the future via [“Cookie settings” link/button]. If only strictly necessary cookies are used, this notice should be shortened accordingly, and a consent banner must not be presented as the legal basis.

5. Who may receive your data?

We disclose personal data only where necessary for the stated purposes, where required by law or where you have given your consent. Depending on the services actually used, recipients may include:

  • Hosting and infrastructure providers: [name, registered location]
  • Business email and communication providers: [name, registered location]
  • CRM or contact management system: [name, registered location, if used]
  • Providers of demo, appointment booking, security, analytics or consent services: [names and respective purposes, if used]
  • Public authorities, courts or professional advisers, where there is a legal basis and disclosure is necessary.

Service providers that process personal data on our behalf are bound by a data processing agreement where required. The list must be limited to the providers used and checked against their current privacy information.

6. Are data processed outside the European Economic Area?

Personal data are transferred to countries outside the European Economic Area only where necessary for the stated purposes and permitted under data protection law. If service providers process data in a third country or can access data from there, specify the countries and providers here, together with the basis used for the transfer, such as an adequacy decision or appropriate safeguards including standard contractual clauses. You may request information or copies of the safeguards at [contact address]. If no transfers to third countries take place, this section may be made more specific accordingly.

7. How long do we retain data?

We retain personal data only for as long as necessary for the relevant purpose or as required by statutory retention obligations. Before publication, the following periods must be defined based on the actual systems and processes:

  • Server and security logs: [specific period or clear criteria].
  • Contact and partnership enquiries: [period following completion of the enquiry or the last communication].
  • Demo requests and demo access: [period and timing of deletion or anonymisation].
  • Consent records and business documents: [period in accordance with legal requirements and evidentiary needs].

If an enquiry leads to a contract, the data required to perform the contract and comply with legal obligations may continue to be retained for the relevant contractual and statutory retention periods.

8. Your data protection rights

Subject to the conditions set out in the GDPR, you may exercise the following rights:

  • Access to your personal data and a copy of those data;
  • Rectification of inaccurate data or completion of incomplete data;
  • Erasure or restriction of processing, where the statutory conditions are met;
  • Objection to processing based on legitimate interests;
  • Data portability, where the statutory conditions are met;
  • Withdrawal of consent at any time with effect for the future, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, please contact [privacy/contact email address]. We may request additional information where necessary to verify your identity. You also have the right to lodge a complaint with a data protection supervisory authority.

9. Supervisory authority and right to complain

The competent authority for the controller established in Estonia is the Estonian data protection supervisory authority: Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate), https://www.aki.ee/en/. You may also contact the data protection supervisory authority in the place of your habitual residence, your place of work or the place of the alleged infringement.

10. Data security

We implement appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration or disclosure. These measures are reviewed in light of the risks and technological developments.

11. Changes to this privacy notice

We may update this privacy notice if the websites, data processing or legal requirements change. The current version will be published on the websites concerned. Where significant changes are made, we will supplement the information provided at the time of data collection as required.