Privacy Policy

This Privacy Policy explains in clear layers how Doxx Bet, provided via the website doxxx.bet (the "Website"), collects, uses, shares and protects your personal data. It applies to players, registered account holders, and visitors who access or use the Website or related online services. By "personal data" we mean any information that identifies you or can reasonably be used to identify you.

We aim to describe what information we observe about you, how we expand its use for clearly defined and lawful purposes, and how we reflect your rights and choices under applicable data protection laws.

This Privacy Policy is designed in particular for users in the United Kingdom and takes into account the UK General Data Protection Regulation ("UK GDPR") and the UK Data Protection Act 2018, as well as aligned standards under the EU GDPR and core principles of Mexican data protection law where relevant.

Effective date: 6 November 2025.

Who We Are

References in this Privacy Policy to "Doxx Bet", "we", "us" or "our" relate to the group of companies operating the Doxx Bet brand and providing the Doxx Bet offering on doxxx.bet. These include, in particular:

DOXXbet s.r.o., a private limited company incorporated under the laws of Slovakia, with its registered office at ul. K-L'-mentisa 10, 010 01 Žilina, Slovakia.
DOXXbet Ltd., a company incorporated under the laws of Malta, with its registered office at 64/1, Agiton Building, St. Anthony Street, San Gwann, SGN1437, Malta.

For the purposes of data protection law, one or more of these entities will act as your "data controller", meaning they decide why and how your personal data is processed in connection with Doxx Bet on doxxx.bet. Which entity is your controller may depend on your location, the product you use and the applicable gaming licence. Details are further described in our Terms & Conditions on the Website and in your account area.

Our gaming services for international players are operated under licences from the Malta Gaming Authority, including (as at the last update of this Privacy Policy) licence numbers MGA/B2C/217/2012 and MGA/B2C/232/2012. You can verify these licences on the MGA public register at https://mga.org.mt/licences/ by searching for "DOXXbet". For the United Kingdom, you should check the UK Gambling Commission public register at https://gamblingcommission.gov.uk/public-register/ to confirm the current licensing status of any operator using the Doxx Bet name.

Data protection contact: If you have any questions about this Privacy Policy, our data protection practices or your data protection rights, you can contact our data protection team by using the contact methods provided on https://doxxx.bet (for example, the support channels in your account area) and indicating that your query is for "Data Protection". Where we designate a Data Protection Officer (DPO) or equivalent data protection contact point, we will provide the relevant details on the Website and may update this Privacy Policy to reflect them.

What Personal Data We Collect

We only collect personal data that we need for clearly defined purposes related to operating and improving Doxx Bet on doxxx.bet, meeting our legal obligations and protecting you and us from risks. Depending on how you use our services, we may collect the following categories of data:

Identity and contact data: such as your full name, username, date of birth, country of residence, home address, email address, telephone number and identification numbers you provide (for example, from identity documents used for KYC checks).
Account and verification data: information you provide when creating and managing your account (e.g. security questions, account settings, communication preferences), copies of identification documents, proof of address, source-of-funds/source-of-wealth information, and any documentation you submit for responsible gambling measures.
Payment and financial data: details necessary to process deposits and withdrawals, including limited payment card information (card type, masked card number, expiry date), bank account details, payment provider identifiers, successful or failed transaction records, and related anti-fraud checks. We do not store your full card details where this is handled securely by our payment processors.
Gameplay and behavioural data: information about how you use our services, including betting and gaming history, stakes, winnings and losses, game preferences, session times, login history, self-exclusion and limits, responsible gambling indicators, clickstream data, in-game actions and interactions with promotions.
Technical and device data: IP address, device identifiers, operating system, browser type and version, screen resolution, language settings, approximate location derived from your IP, device event information, log files, and similar technical data generated when you access the Website or mobile interfaces.
Communication data: records of your contacts with us, including emails, chat logs, support tickets, call recordings where permitted by law, feedback and complaints, and information you provide in surveys.
Marketing and preference data: your choices about receiving marketing communications, records of consents and opt-outs, and information about how you interact with our messages (for example, email open and click rates where permitted).
Cookies and similar technologies: small text files and similar technologies (such as pixels, tags, device identifiers and local storage) placed on your device to support the functioning, security, performance and personalisation of the Website. For more detail, see the "Cookies & Tracking Technologies" section below.

Where we need to collect personal data under a legal requirement or to enter into or perform a contract with you, and you choose not to provide that data, we may not be able to open or maintain your account, process transactions or provide some services.

Legal Basis for Processing

We process your personal data only where we have a valid legal basis under applicable law. Depending on the context, we may rely on one or more of the following:

Performance of a contract: We process data that is necessary to create, administer and operate your account and to provide you with betting and gaming services on Doxx Bet via doxxx.bet. This includes processing deposits, bets, payouts, bonuses, account verification, support and other services you request under our Terms & Conditions.
Compliance with legal obligations: We process data where required by laws and regulations to which we are subject, including gambling, anti-money laundering (AML), counter-terrorist financing, fraud prevention, sanctions, tax reporting and responsible gambling laws. This includes verifying your identity, age and residence, monitoring transactions, retaining records and reporting suspicious activities to relevant authorities.
Legitimate interests: We process certain data where this is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests. These legitimate interests include maintaining the security and integrity of our systems, preventing and detecting fraud and abuse, protecting our players and business, performing analytics to improve our services, managing business operations, and defending or exercising legal claims.
Consent: In some cases, we rely on your consent, for example for certain types of marketing communications, for the use of non-essential cookies and similar technologies, or for specific optional features. Where we rely on consent, you may withdraw it at any time as described in this Privacy Policy, without affecting the lawfulness of processing based on consent before its withdrawal.
Protection of vital interests and legal claims: In rare situations, we may process personal data to protect your vital interests or those of another person (for example, assisting emergency services), or where necessary to establish, exercise or defend legal claims.

Our processing framework is designed to align with the principles of the UK GDPR and EU GDPR, as well as comparable principles under Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP). Where laws differ, the processing of your data as a UK user will be governed primarily by UK law.

Purpose of Processing

We use your personal data for clearly defined purposes that are transparent and proportionate. The main purposes are:

Providing and Managing Our Services

Account creation and administration: to register you as a player on Doxx Bet, verify your identity and age, maintain your account, process changes to your details and manage your account preferences.
Gaming and betting operations: to accept and settle bets, operate casino games, manage tournaments and promotions, credit bonuses and loyalty rewards, process deposits and withdrawals, and provide customer support.

Legal, Regulatory and Responsible Gambling Obligations

KYC/AML compliance: to perform know-your-customer checks, monitor transactions for suspicious activity, conduct risk assessments, keep statutory records and meet reporting obligations to regulators and law enforcement.
Responsible gambling: to monitor your gameplay patterns, apply self-exclusion, cooling-off periods, deposit and loss limits, affordability assessments and other measures designed to reduce the risk of gambling-related harm.

Security, Fraud Prevention and Integrity

Fraud and abuse prevention: to detect and prevent fraud, money laundering, bonus abuse, account takeover, collusion and other illegal or improper activities, using both manual checks and automated tools.
IT and platform security: to secure our systems and infrastructure, manage access controls, perform security logging and incident response, and protect the integrity and continuity of our services.

Analytics, Personalisation and Marketing

Service improvement and analytics: to analyse how our Website and services are used, improve performance and usability, develop new features and games, and perform statistical reporting (using aggregated or anonymised data where possible).
Personalised content and offers: to tailor game recommendations, bonuses and offers to your profile and preferences, subject to your legal rights to object or opt out and to any consent requirements.
Marketing communications: to send you information about our products, promotions and news by email, SMS, push notification or other channels where permitted by law and your preferences, and to measure the effectiveness of these campaigns.

Business Operations and Legal Affairs

Business management: to manage our relationship with you, maintain internal records, conduct audits and internal controls and manage corporate transactions or restructurings.
Legal compliance and disputes: to comply with legal processes, respond to lawful requests from authorities, and establish, exercise or defend legal claims.

Disclosure & Sharing

We treat your personal data confidentially and only share it with third parties where necessary for the purposes described in this Privacy Policy, where required by law, or where you have given your consent. Categories of recipients may include:

Group companies: other entities within the Doxx Bet group (including DOXXbet Ltd. in Malta and DOXXbet s.r.o. in Slovakia) that support the operation of Doxx Bet on doxxx.bet, for example by providing IT, risk management, compliance, customer service or financial services.
Payment service providers and banks: providers who process deposits and withdrawals, conduct fraud and AML checks, and verify card or bank details in order to complete your transactions securely.
KYC/verification and fraud-prevention partners: identity verification providers, credit reference agencies and fraud-prevention agencies that help us verify your identity, age and residence, assess risk and protect against fraud and abuse.
Technical and operational service providers: IT hosting providers, cloud services, platform and software vendors, security and monitoring providers, communication tools, data analytics services and other vendors who process data on our behalf under strict contractual obligations.
Marketing and advertising partners: subject to your consent where required, we may share limited data with marketing platforms, affiliate networks and advertising partners to manage campaigns, measure performance and prevent marketing abuse. We do not sell your personal data.
Regulators and public authorities: gambling regulators (such as the Malta Gaming Authority), financial regulators, law enforcement agencies, tax authorities and other public authorities where we are legally required to provide information, for example in connection with AML or gambling regulations, or to protect our rights or those of others. For UK matters, this may also include the UK Gambling Commission where applicable.
Professional advisers: lawyers, auditors, accountants, consultants and other professional service providers who require access to data to provide their services and who are bound by confidentiality obligations.
Corporate transactions: potential buyers, investors, or other counterparties (and their advisers) in the context of a merger, sale of assets, restructuring or similar transaction involving Doxx Bet, subject to appropriate confidentiality safeguards.
Others with your consent or at your direction: where you explicitly request or consent to disclosure to a third party, we will share data as instructed.

Whenever we share personal data, we ensure that the recipient is subject to appropriate confidentiality and security obligations. Where a third party acts as our processor, it may only process your data in accordance with our instructions and for the agreed purposes.

International Transfers

Because Doxx Bet operates internationally, your personal data may be transferred to and processed in countries outside the United Kingdom, including within the European Economic Area (EEA) and, where necessary, in other jurisdictions.

EEA and associated countries: Many of our core operations for Doxx Bet are supported by entities located in Malta and Slovakia. The UK government currently recognises the EEA (including Malta and Slovakia) as providing an adequate level of data protection. Transfers between the UK and these countries can therefore take place without additional transfer safeguards.
Other non-UK/non-EEA countries: Where we use service providers or group companies outside the UK and EEA, we implement appropriate safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses (SCCs), or other mechanisms approved under UK data protection law.
Additional protections: We also assess the legal environment of recipient countries, implement technical and organisational security measures, and restrict access to data on a need-to-know basis to reduce transfer risks.

You can obtain more information about our international transfer mechanisms, including copies of relevant safeguards (subject to redactions for commercial confidentiality), by contacting us through the data protection contact channels described in this Privacy Policy.

Data Retention

We keep your personal data only for as long as it is reasonably necessary for the purposes set out in this Privacy Policy, including to meet legal, regulatory, tax, accounting, reporting or dispute resolution requirements. Retention periods may vary depending on the category of data and the relevant legal framework, particularly in the gambling and AML context.

Account and identification data: Generally retained for the duration of your account and, after account closure, for a period typically not exceeding five (5) years, unless a longer period is required by law or needed in connection with legal claims or regulatory investigations.
Transaction and financial data: Records of deposits, withdrawals, bets, payouts and related financial information are generally retained for at least five (5) years after the underlying transaction or after account closure, to comply with legal and auditing requirements, and may be retained longer where necessary for AML or tax purposes.
Gameplay and behavioural data: Kept for as long as necessary to provide you with services, comply with responsible gambling obligations and support security and fraud-prevention measures. This period may extend beyond account closure where required by law or legitimate interests.
Customer support and complaint records: Retained for the time needed to manage and resolve your request or complaint and for an additional period (typically up to five (5) years) to evidence our interactions and to handle potential disputes.
Marketing and preference data: Retained while you maintain an active account and have not withdrawn your consent or objected to marketing, and for a limited period thereafter to record your opt-out status.
Technical logs and security data: Stored for shorter periods where possible (often between several months and two (2) years), unless required for investigations, security monitoring or legal proceedings.

When data is no longer needed, we will securely delete or anonymise it so that it can no longer be used to identify you. If anonymisation is used, we may continue to use such data for legitimate business purposes (such as aggregated statistics or analytics) without further notice to you.

Your Rights

Under the UK GDPR and the UK Data Protection Act 2018, and, where applicable, under EU GDPR and comparable Mexican data protection principles, you have a number of rights in relation to your personal data. These rights are subject to conditions and exceptions under applicable law, but we aim to make them practically accessible and free of charge.

Right of access: You can request confirmation of whether we process personal data about you and obtain a copy of that data, together with information about how we use it.
Right to rectification: You can request that inaccurate or incomplete personal data be corrected or completed. In many cases you can update your account details directly within your profile on doxxx.bet.
Right to erasure: You can request that we delete your personal data where, for example, it is no longer needed for the purposes for which it was collected, you have withdrawn consent (where consent was the only legal basis) or you have successfully objected to processing. This right may be limited where we must retain data to comply with legal obligations, including AML and gambling regulations.
Right to restriction of processing: You can request that we restrict the processing of your data in certain situations, such as while we verify its accuracy or assess an objection you have raised.
Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you can request a copy of your data in a structured, commonly used and machine-readable format and ask us to transmit it to another controller where technically feasible.
Right to object: You can object at any time to processing based on our legitimate interests (including profiling for such purposes), on grounds relating to your particular situation. We will stop processing unless we demonstrate compelling legitimate grounds that override your interests, or the processing is needed for legal claims. You also have the absolute right to object at any time to processing of your data for direct marketing, including profiling relevant to such marketing.
Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time using the tools in your account, the unsubscribe links in our messages or by contacting us. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.
Rights related to automated decision-making: Where we use automated decisions that produce legal effects concerning you or similarly significantly affect you (for example, certain risk assessments), you may have the right to obtain human intervention, express your point of view and contest the decision.

These rights broadly correspond to the "ARCO" rights (access, rectification, cancellation and opposition) and related protections recognised under Mexican data protection legislation, although the precise scope and mechanisms differ between jurisdictions. For users of Doxx Bet on doxxx.bet, the primary legal framework is the UK GDPR and UK law; where Mexican law applies to you in another capacity, your ARCO rights will be interpreted in line with that law.

How to exercise your rights: You can exercise your rights by contacting us through the data protection channels indicated in this Privacy Policy and on the Website. To protect your data, we may need to confirm your identity before acting on your request. We aim to respond without undue delay and in any event within one (1) month of receiving a valid request. This period may be extended by up to two (2) further months where necessary due to complexity or number of requests; if so, we will inform you of the extension and the reasons for it. We generally handle requests free of charge, but we may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive.

Cookies & Tracking Technologies

We use cookies and similar technologies to operate and improve Doxx Bet on doxxx.bet, to enhance security, and to provide a more personalised experience. Cookies are small text files that are stored on your device when you visit the Website.

Types of Cookies We Use

Strictly necessary cookies: These cookies are essential for the operation of the Website and for enabling core functions such as page navigation, secure login, session management, bet placement and operation of payment forms. The Website cannot function properly without these cookies.
Functional cookies: These help us remember your preferences, such as language, region, layout and other settings, so that your experience is more convenient and consistent across visits.
Analytics and performance cookies: These collect aggregated information about how visitors use the Website, such as which pages are visited most often and error messages encountered. We use this information to improve the performance, usability and content of our services.
Advertising and targeting cookies: These may be used, with your consent where required, to deliver relevant advertisements and promotions, to limit how often you see a particular advertisement and to measure the effectiveness of our marketing campaigns. They may be set by us or by carefully selected third-party partners.
Similar technologies: We may also use technologies such as pixels, tags, SDKs and device identifiers that operate in a similar way to cookies, for purposes such as measuring email performance, preventing fraud and integrating third-party services.

Managing Cookies

Cookie settings on the Website: Where required by law, we provide a cookie banner and/or preference centre that allows you to accept or reject non-essential cookies. You can adjust your preferences at any time through the tools provided on the Website.
Browser settings: Most web browsers allow you to manage cookies, including blocking or deleting them. For more information, consult the "help" section of your browser. If you block or delete cookies, some features of the Website may not function correctly.
Do Not Track and similar signals: Our systems may not respond to all browser-based "Do Not Track" signals, but you can use the tools described above to control tracking.

Further details about our use of cookies may be provided in a separate Cookie Policy available on https://doxxx.bet. In case of any inconsistency between that document and this Privacy Policy regarding cookies, the more specific cookie-related information will generally prevail.

Data Security

We take the security of your personal data seriously and implement technical and organisational measures designed to protect it against unauthorised access, loss, misuse, alteration or disclosure. While no system can be guaranteed to be 100% secure, we continuously assess and enhance our controls to reduce risks to an appropriate level.

Encryption in transit and at rest: We use up-to-date transport layer security (TLS 1.2 or higher) to encrypt data transmitted between your device and our systems. Where appropriate, we also encrypt data at rest and use strong key management practices.
Access controls and authentication: Access to personal data is restricted to authorised personnel who require it for their role, using role-based access controls, strong authentication mechanisms and, where appropriate, multi-factor authentication.
Network and application security: We use firewalls, intrusion detection and prevention systems, secure development practices, vulnerability management and other controls to protect our infrastructure and applications supporting Doxx Bet on doxxx.bet.
Monitoring, logging and testing: We maintain security logging and monitoring processes to detect unusual activities, conduct regular security reviews and may engage independent specialists to perform security assessments or penetration tests.
Vendor and transfer safeguards: We select service providers that implement appropriate security measures and include data protection and security obligations in our contracts with them, particularly for international transfers.
Staff training and awareness: Our employees and contractors who handle personal data are subject to confidentiality obligations and receive training on data protection, information security and responsible handling of customer information.
Incident response: We maintain incident response procedures to address potential personal data breaches. Where required by law, we will notify the relevant supervisory authority (such as the UK Information Commissioner's Office) and affected individuals without undue delay.

Our security framework is informed by recognised international standards, such as ISO/IEC 27001 and SOC 2 principles, and we aim to align our practices with these standards where appropriate. Where we hold any formal certifications, we may publish relevant details on https://doxxx.bet.

Complaints & Contacts

We want to address your concerns directly and transparently. If you have questions, concerns or complaints about how we handle your personal data, or if you wish to exercise your rights, please contact us first so that we can seek to resolve the issue.

Contacting Doxx Bet About Privacy

Primary contact method: Use the customer support or contact options available on https://doxxx.bet (for example, live chat or secure messaging in your account) and clearly state that your request relates to "Privacy" or "Data Protection".
Postal correspondence: You can also write to us at: Data Protection Team, DOXXbet Ltd., 64/1, Agiton Building, St. Anthony Street, San Gwann, SGN1437, Malta, or to DOXXbet s.r.o., ul. K-L'-mentisa 10, 010 01 Žilina, Slovakia, indicating that your letter concerns Doxx Bet and your use of doxxx.bet.

Internal Complaint Process

Step 1 - Submission: Submit your complaint or enquiry using one of the channels above, providing as much detail as possible, including your account identifier and a clear description of your concern.
Step 2 - Acknowledgement: We will acknowledge receipt of your complaint without undue delay and will assign it to staff with appropriate expertise, which may include our data protection contact or DPO (where appointed).
Step 3 - Investigation and response: We will investigate your complaint and aim to provide a substantive response within one (1) month. For complex matters, we may need more time; in that case we will keep you informed and may extend the response period by up to two (2) additional months, as permitted by law.
Step 4 - Escalation: If you are not satisfied with our response, you can request that your complaint be escalated for further review within Doxx Bet.

Right to Complain to a Supervisory Authority

United Kingdom: If you are in the UK and believe that we have not handled your personal data in a lawful manner, or that we have not adequately addressed your concerns, you have the right to file a complaint with the Information Commissioner's Office (ICO): Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom; see https://ico.org.uk for further contact details and online complaint forms.
European Union / EEA: If EU GDPR applies to you, you may have the right to lodge a complaint with your local data protection authority in the EU/EEA, in particular in the country of your habitual residence, place of work or place of alleged infringement.
Mexico: If Mexican data protection law applies to you in another capacity, you may lodge a complaint with the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). Further information is available at https://www.inai.org.mx. Please note that for users of Doxx Bet on doxxx.bet, UK law is generally the primary legal framework.

We encourage you to contact us first so that we can seek to resolve your issue, but you may contact a supervisory authority at any time.

Updates

We may update this Privacy Policy from time to time, for example to reflect changes in our services, legal requirements, regulatory guidance or technical developments. When we make changes, we will revise the "Last updated" date and, where appropriate, take additional steps to inform you.

Notification methods: We may notify you of material changes through prominent notices on https://doxxx.bet (such as banners or pop-ups), messages in your account dashboard, emails, or other appropriate channels.
Advance notice: Where changes are significant and could materially affect your rights or how we process your data, we will, where reasonably practicable, provide you with at least thirty (30) days' advance notice before the changes take effect.
Your review and options: We encourage you to review this Privacy Policy regularly. If you do not agree with the updated policy, you should stop using Doxx Bet on doxxx.bet and may request account closure in accordance with our Terms & Conditions. Continued use of the services after the effective date of the updated Privacy Policy will generally constitute your acknowledgment of the changes.
Version control: For transparency, we may keep an internal record of previous versions of this Privacy Policy and the dates on which they were in effect. Where appropriate, we may also summarise key material changes in a change log or comparison table.

Last updated: November 2025.