burger icon
Xpari Bet United Kingdom
Log In

Privacy Policy

This Privacy Policy explains how the online betting and casino services operated under the Xpari Bet brand through the website xperibet.com (the "Website") and specifically the configuration referred to as Xpari Bet ("we", "us", "our") collect, use, store and protect your personal data. It applies to players, registered account holders, affiliates, and all Website visitors who access or use our services from the United Kingdom and other locations.

This Privacy Policy forms part of the terms and conditions that govern your use of xperibet.com. Please read it carefully before registering an account, placing bets, or otherwise using the Website. By using the Website, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy is effective from 6 November 2025 and reflects our data protection practices as they apply through 2026 unless and until updated or replaced as described in the "Updates" section below.

Who We Are

Data controller. For most processing of personal data in connection with the Website, the primary data controller is the corporate entity that operates the Xpari Bet brand on xperibet.com. Based on our current licensing structure, this is Vdsoft & Script Development N.V., a limited liability company (Naamloze Vennootschap, N.V.) established under the laws of Curaçao and operating within the BetB2B network under master licence 365/JAZ, sub-licence GLH-OCCHKTW0707032021, issued under the authority of the Government of Curaçao / Gaming Curaçao.

Registered and mailing address. Vdsoft & Script Development N.V. is registered in Curaçao. The precise registered office and mailing address, together with any additional operating or payment-agent entities (including a likely payment agent established in Cyprus), are stated in the footer or "Contact" sections of xperibet.com and in your account documentation. Where a different legal entity is expressly identified there as the operator or data controller for your jurisdiction, that entity will be your data controller, and its details will prevail over this general description.

Group and network entities. We may rely on associated entities within the BetB2B network and certain payment or processing agents established in Curaçao, Cyprus, or other jurisdictions to provide parts of the service. These entities act as data processors or, in limited cases, as joint controllers. Related brands within this network include, for example, 1xBet, 22Bet, and Melbet; however, your personal data will not be used for cross-brand marketing without your explicit consent.

Data Protection Officer / data protection contact. We maintain a dedicated data protection function (Data Protection Officer or equivalent) responsible for supervising our compliance with UK data protection law and other applicable regulations. You can contact our data protection team by using the contact details and customer support channels published on xperibet.com (for example, the "Contact Us" or "Support" section) and indicating that your request concerns "privacy" or "data protection". These channels are the primary means for exercising your data protection rights described in this Privacy Policy.

What Personal Data We Collect

We collect and process different categories of personal data depending on how you interact with xperibet.com, whether you register an account, and which services you use. The main categories are:

  • Identification and contact data: full name, username, date of birth, country of residence, address, e-mail address, phone number and other contact details you provide when registering or updating your account.
  • Verification (KYC/AML) data: information and documents used to verify your identity and eligibility to use our services, such as copies of your passport or ID card, proof of address, payment ownership documents, selfies or live verification images, information about source of funds or source of wealth, and any information we are legally required to collect for anti-money laundering (AML), counter-terrorist financing (CTF), and responsible gambling checks.
  • Account and behavioral data: account credentials (encrypted), language and interface settings, login history, betting and gaming history, transaction logs, deposit and withdrawal patterns, session duration, bonuses used, self-exclusion or limit-setting information, communication preferences, and your interactions with our customer support.
  • Technical and device data: IP address, approximate location derived from your IP, device identifiers, browser type and version, operating system, time zone setting, device settings, log files, pages visited, referring/exit pages, clickstream data, and other technical information collected when you access or use the Website.
  • Payment and financial data: payment method details (such as masked card details, e-wallet identifiers, bank account references), transaction identifiers, deposit and withdrawal amounts, payment status, results of payment risk checks and chargeback history. We do not store full payment card numbers, CVV codes or other highly sensitive payment data where your payment provider processes these directly.
  • Marketing and communication data: your choices regarding promotional communications, records of e-mails, messages or calls with us, responses to surveys, participation in loyalty or VIP programmes and marketing campaign performance data.
  • Cookies and similar technologies data: data collected via cookies, pixels, web beacons, SDKs and similar technologies, including unique identifiers, advertising IDs, and analytics metrics. This may be linked with your account where you are logged in.
  • Sensitive and risk-related data (limited and regulated): in narrowly defined circumstances, we may process information relating to problem-gambling indicators, suspected fraud or criminal activity, sanctions and politically exposed persons (PEP) checks, and other risk-relevant data as required by law or necessary to protect our legitimate interests and those of our players.

Legal Basis for Processing

We process personal data only where we have a lawful basis under applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018. Depending on the specific processing activity, we rely on the following legal grounds:

  • Performance of a contract: We process your personal data when it is necessary to enter into and perform the contract for the provision of betting and gaming services on xperibet.com. This includes setting up and administering your account, accepting and settling bets, processing deposits and withdrawals, providing customer support, applying bonuses, and enforcing our general terms and conditions (including house rules and betting limits).
  • Compliance with legal obligations: We are required by laws and regulatory guidance, particularly in relation to gambling, anti-money laundering, counter-terrorist financing, sanctions, taxation and responsible gambling, to collect and retain certain personal data. This includes identity verification (KYC), transaction monitoring, reporting of suspicious activity to competent authorities, age verification, self-exclusion records and compliance with any court orders or regulatory requirements in Curaçao, the UK and other relevant jurisdictions.
  • Legitimate interests: We process certain personal data to pursue our legitimate interests, provided that these are not overridden by your interests or fundamental rights and freedoms. These interests include fraud prevention; network and information security; prevention of abuse and bonus misuse; enforcing house rules; defending legal claims; improving our products and services; internal analytics and statistics; and ensuring the overall integrity and stability of the BetB2B-powered platform and related brands (such as 1xBet, 22Bet, and Melbet) without conducting cross-brand marketing to you without your consent.
  • Consent: In specific cases we rely on your consent, which you can withdraw at any time. This includes, for example, sending you direct marketing communications by e-mail, phone or push notification (where not based on legitimate interests), using certain non-essential cookies and similar technologies on your device, and processing optional data you choose to provide to personalise your experience.
  • Protection of vital interests and legal claims: In rare situations we may process data where necessary to protect your or another person's vital interests (for example, in an emergency involving risk to life) or to establish, exercise, or defend legal claims in connection with our business, licensing, or disputes.

Purpose of Processing

We use your personal data for clearly defined purposes aligned with our obligations as an online gambling operator and with your expectations as a customer. The main purposes include:

  • Providing and operating the Website and services: to register and manage your account; verify your identity and age; allow you to deposit funds, place bets, play games and withdraw winnings; provide gaming content and live odds via our platform and third-party providers; and ensure that the Website functions correctly on your devices.
  • Compliance, risk management and responsible gambling: to conduct KYC and AML checks; monitor transactions and betting patterns; identify and prevent fraud, bonus abuse, money laundering and other illegal or improper activities; apply and manage self-exclusion, limits and other safer-gambling tools; and comply with regulatory requests or audits emanating from Curaçao and other competent authorities.
  • Customer service and dispute resolution: to respond to your questions, complaints and requests; investigate and resolve disputes about bets or transactions; record interactions for training and quality assurance; and keep evidence for legal and regulatory purposes.
  • Improvement and personalisation of services: to analyse how our Website is used; test and develop new features; optimise performance and usability; personalise content, odds display, and promotional offers; and perform statistical and aggregated reporting to better understand and serve our player base.
  • Marketing and promotions: to send you news, promotions and bonuses relating to Xpari Bet and xperibet.com in accordance with your marketing preferences and applicable rules (including PECR for UK users); to manage loyalty and VIP programmes; and to measure the effectiveness of our marketing campaigns and affiliate relationships, including those within the wider BetB2B network.
  • Security and integrity of the platform: to safeguard our systems and data; prevent unauthorised access; detect and mitigate technical issues; enforce our terms and conditions and internal rules; and protect the rights, property and safety of our customers, staff, service providers and the integrity of regulated gambling systems.
  • Legal, regulatory and corporate purposes: to comply with record-keeping duties, licensing conditions and reporting obligations; manage corporate governance; support audits and inspections; manage potential business restructuring or transfer of assets; and defend against regulatory investigations or legal proceedings, taking into account the offshore and multi-entity corporate structure (including entities in Curaçao and Cyprus).

Disclosure & Sharing

We treat your personal data as confidential and only share it with third parties to the extent necessary for the purposes described in this Privacy Policy, where required by law, or where you have provided your consent. The main categories of recipients are:

  • Group and network entities: corporate entities involved in operating or supporting the Xpari Bet brand on xperibet.com and related BetB2B network companies (such as entities linked to 1xBet, 22Bet, and Melbet) that provide shared technology, odds feeds, risk management or back-office services. These entities operate under contractual confidentiality and data protection obligations, and your data will not be used for cross-brand marketing without your consent.
  • Payment service providers and financial institutions: banks, card schemes, e-wallet providers, payment processors and any appointed payment agents (including those likely established in Cyprus) that facilitate deposits, withdrawals and refunds, perform fraud and risk checks, and fulfil their own regulatory duties.
  • Game, platform and technical providers: third-party software suppliers, game studios, odds providers, hosting and cloud service providers, content delivery networks, IT support, analytics vendors, anti-fraud and risk-scoring tools, identity verification partners and security service providers who help us operate, maintain and secure the Website.
  • Marketing, affiliate and advertising partners: where permitted by law and in line with your preferences, we may share limited data (such as identifiers, aggregated performance metrics or marketing segment information) with affiliates, marketing agencies and advertising networks that help us promote xperibet.com, provided that appropriate contractual safeguards and, where required, your consent are in place.
  • Professional advisers: lawyers, auditors, consultants, accountants and other professional advisers who provide services to us and who are bound by professional duties of confidentiality and data protection obligations.
  • Regulators, authorities and dispute-resolution bodies: licensing and supervisory authorities (including Gaming Curaçao and, where relevant, UK and EU data protection authorities), financial intelligence units, law enforcement agencies, courts, and alternative dispute-resolution bodies, to the extent necessary to comply with legal or regulatory obligations or to protect our rights or those of others.
  • Corporate transactions: in connection with any actual or contemplated merger, sale of assets, restructuring, acquisition, financing, or transfer of all or part of our business or operations, where your data may be shared with potential or actual counterparties and their advisers subject to appropriate confidentiality protections.
  • With your consent: where you have expressly agreed to a disclosure (for example, participation in public promotions, testimonials, or cross-brand offers), we may share limited information in accordance with that consent, which you may withdraw at any time.

International Transfers

Because our operations, licensing, and technical infrastructure are international in nature, your personal data may be transferred to and processed in countries outside the United Kingdom, including jurisdictions that may not provide the same level of data protection as the UK.

  • Key locations: Your data may be processed in Curaçao (where the licence-holding and operating entity Vdsoft & Script Development N.V. is established), in Cyprus (where a payment-agent or related corporate entity may be registered), within the European Economic Area (EEA) and in other countries where our service providers, platform operators, and technical support teams are located.
  • Adequacy and safeguards: Where personal data is transferred from the UK to countries that have not been recognised by the UK government as providing an adequate level of protection, we implement appropriate safeguards, such as the International Data Transfer Addendum to the European Commission's standard contractual clauses (SCCs), data processing agreements with robust security commitments, and technical and organisational measures (including pseudonymisation and encryption) to protect your data.
  • Service providers and network entities: Third-party service providers within the BetB2B network and external vendors are required to process data only on our documented instructions and in compliance with contractual obligations that reflect applicable data protection law, regardless of where they are located.
  • Your rights and information: You may request further information about the safeguards we apply to international data transfers, and obtain copies of relevant contractual protections (with commercially sensitive details redacted), by contacting our data protection team via the channels indicated on xperibet.com.

While the corporate structure includes offshore entities and may make some legal procedures more complex, this does not limit your fundamental data protection rights described in this Privacy Policy, which we apply consistently to all qualifying users, including those in the UK and, where applicable, the EEA and Mexico.

Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements. Retention periods may differ depending on the category of data and the applicable laws (including AML/CTF and licensing rules in Curaçao and other jurisdictions). We apply the following general principles:

  • Player account data: Core account information (such as identification and contact details, account history and key account settings) is typically retained for the lifetime of your account and then normally for up to five (5) years after closure, unless a longer period is required for legal, regulatory, or dispute-related reasons.
  • KYC/AML and verification documents: Copies of identity documents, proof of address, source-of-funds information and related verification records are retained for the period required under applicable AML and gambling regulations, which is generally at least five (5) years after the end of the business relationship or the date of the last transaction, and may be longer where required by law or necessary for ongoing investigations.
  • Transaction and betting data: Records of deposits, withdrawals, bets, game outcomes, bonuses and related logs are retained for accounting, tax, regulatory, and anti-fraud purposes for a period generally aligned with the above AML and licensing requirements (normally five (5) years after your last activity or longer where justified).
  • Technical logs and security data: Server logs, security events and technical diagnostics are retained for shorter periods, typically from six (6) months to two (2) years, unless needed longer for security investigations, legal proceedings or regulatory inquiries.
  • Marketing data: Information about your marketing preferences and related contact history is kept for as long as you maintain an account and for a short period thereafter (normally up to two (2) years) to evidence compliance with consent and opt-out obligations, except where longer retention is required by law.
  • Cookies and analytics data: Data tied to cookies and similar technologies is retained in accordance with the lifetimes described in our cookie management tools and, where applicable, in a separate Cookie Policy. Retention periods for analytics identifiers are typically between six (6) months and twenty-four (24) months, depending on the tool and your settings.

When data is no longer required for the purposes for which it was collected and no longer needed to comply with legal or regulatory obligations, we will delete it or anonymise it so that it can no longer be associated with you. Where deletion is not immediately possible (for example, due to backup or archival constraints), we will securely store the data and isolate it from further processing until deletion becomes feasible.

Your Rights

Depending on your location and subject to certain conditions and exemptions, you have a number of rights in relation to your personal data. For users in the United Kingdom and, where applicable, the EEA, these rights arise primarily under the UK GDPR and related legislation. For users located in Mexico, similar rights arise under the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations. We aim to align our practices with these frameworks.

  • Right of access: You can request confirmation of whether we process your personal data and obtain a copy of the data we hold about you, together with information about how we use it.
  • Right to rectification (correction): You may request that we correct or complete inaccurate or incomplete personal data, for example, if your contact details change.
  • Right to erasure ("right to be forgotten" / cancellation): You may request deletion of your personal data in certain circumstances, such as where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you successfully object to processing. However, we may need to retain certain data where required by law (for example, for AML or licensing purposes).
  • Right to restriction of processing: In specific situations, you may ask us to restrict the processing of your data (for example, while we verify the accuracy of data or handling an objection), in which case we will store the data but not use it for most other purposes.
  • Right to object: You can object at any time to processing of your personal data based on our legitimate interests, including profiling related to such interests. We will stop such processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or where processing is needed to establish, exercise or defend legal claims. You also have an unconditional right to object to direct marketing and related profiling; if you do so, we will stop using your data for those purposes.
  • Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you may request to receive the personal data you provided to us in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where technically feasible.
  • Right to withdraw consent: Where we rely on your consent (for example, for certain marketing communications or cookies), you may withdraw that consent at any time using the tools provided (such as account settings, unsubscribe links or cookie preference panels). Withdrawal of consent will not affect the lawfulness of processing prior to withdrawal.
  • Mexican ARCO rights: If you are located in Mexico, you have specific rights of Access, Rectification, Cancellation and Opposition (ARCO rights) under the LFPDPPP. These largely correspond to the rights described above. We will handle ARCO requests in a manner consistent with Mexican law, including applicable timeframes and procedural rules.

Procedures, timeframes and cost. To exercise any of these rights, please contact us via the data protection channels indicated on xperibet.com and clearly state your request, the right you wish to exercise, and sufficient information for us to verify your identity (we may request additional information or documentation to prevent unauthorised access to your data). We aim to respond to all valid requests within one (1) month (30 days) of receipt. In complex cases or where we receive multiple requests, this period may be extended by up to an additional two (2) months, in which case we will inform you of the extension and the reasons for it. Requests are generally handled free of charge; however, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, especially where they are repetitive.

In addition to the rights described above, you have the right to lodge a complaint with a competent data protection authority as explained in the "Complaints & Contacts" section.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to provide, secure and improve the Website, to understand how it is used, and to personalise your experience and marketing communications, in accordance with applicable law (including the UK Privacy and Electronic Communications Regulations, where relevant).

  • Types of cookies: We use several types of cookies:
    • Strictly necessary (session) cookies that are essential for you to browse the Website and use core features (such as logging in, maintaining your session, placing bets and ensuring security). These cookies are usually session-based and expire when you close your browser.
    • Functional (persistent) cookies that remember your preferences and choices (such as language, odds format and interface settings) to enhance your experience on subsequent visits.
    • Analytics and performance cookies that help us understand how visitors use the Website, which pages are popular, and how campaigns perform. These may be set by us or by third-party analytics providers and may persist for a limited period.
    • Advertising and affiliate cookies that support our marketing efforts, measure the effectiveness of advertising and affiliate campaigns, and, where permitted, deliver more relevant promotions. These may involve third-party advertising networks or affiliates.
  • Purposes: We use these technologies to enable secure login and account functionality; prevent fraud and abuse; remember your settings; compile aggregated statistics about Website usage; improve performance and design; and, where permitted, tailor marketing and promotional content related to xperibet.com.
  • Consent and control: Where required by law, non-essential cookies (such as certain analytics and advertising cookies) will only be placed on your device after you have provided your consent via our cookie banner or preference centre. You can manage your cookie preferences at any time using the tools available on the Website or by adjusting your browser settings to block or delete cookies. Please be aware that disabling certain cookies may impair some features of the Website.
  • Further information: Additional details about specific cookies used on xperibet.com, their lifetimes and providers may be presented in a dedicated Cookie Policy or within our cookie management interface. We review our use of cookies and similar technologies regularly to ensure continued compliance with applicable requirements.

Data Security

We take the security of your personal data very seriously and implement a combination of technical, organisational and physical measures designed to protect it against unauthorised access, loss, misuse, alteration or destruction. While no system can be guaranteed to be completely secure, we aim to align our practices with recognised security standards and industry best practices for online gambling platforms.

  • Encryption and secure transmission: Data transmitted between your device and our systems is protected using modern transport-layer encryption (such as TLS 1.2 or higher), helping to prevent interception and tampering. Where feasible, we also apply encryption or pseudonymisation to personal data at rest and in backups.
  • Access controls and authentication: Access to personal data is strictly limited to authorised personnel and service providers who need it to perform their duties and are bound by confidentiality obligations. We apply role-based access controls, strong authentication mechanisms and, where appropriate, multi-factor authentication for administration and other sensitive functions.
  • Infrastructure and application security: Our systems are hosted on secure infrastructure with firewalls, intrusion detection and prevention systems, and continuous monitoring for suspicious activity. We implement secure development and deployment practices within the BetB2B framework, including code review, vulnerability management and regular patching of critical components.
  • Risk management and audits: We conduct regular internal reviews of our security controls and may engage independent specialists to perform security assessments, penetration tests or audits of critical systems. We endeavour to align with recognised information security standards such as ISO/IEC 27001 or SOC 2-type controls, although this does not necessarily mean that every entity involved is formally certified.
  • Staff training and confidentiality: Employees and contractors with access to personal data receive appropriate training on data protection, confidentiality and security obligations. They are subject to contractual duties to protect your data and may face disciplinary or legal consequences if they fail to comply.
  • Incident response: We maintain procedures for identifying, assessing and responding to personal data breaches and other security incidents. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority (such as the UK Information Commissioner's Office or other competent authority) in accordance with legal requirements, and we will take reasonable steps to mitigate any adverse effects.

Because our corporate structure involves entities in Curaçao, Cyprus and other jurisdictions, we pay particular attention to contractually ensuring that all processors and partners implement appropriate security measures and comply with applicable data protection and security standards when handling your personal data.

Complaints & Contacts

We are committed to dealing with privacy-related concerns fairly and promptly. If you have questions about this Privacy Policy, our data protection practices, or wish to make a complaint, you can use the following channels:

  • Step 1 - Contact customer support: If you have a general query or concern about your personal data, please first contact our customer support team via the communication tools provided on xperibet.com (for example, live chat, contact forms or helpdesk e-mail, where available). Many issues can be resolved quickly at this stage.
  • Step 2 - Escalate to the data protection function (DPO or equivalent): If your issue remains unresolved or specifically concerns your data protection rights, please indicate that your message is a "privacy" or "data protection" request so it can be forwarded to our Data Protection Officer or dedicated data protection team. Provide as much detail as possible, including your account identifier, relevant dates and any supporting documents.
  • Response timeframe: We aim to acknowledge your complaint or request within a reasonable period and to provide a substantive response within one (1) month (30 days). In complex cases or where we receive multiple requests, we may need additional time, in which case we will inform you of the delay and the reasons for it. We will make reasonable efforts to resolve your complaint amicably.

Supervisory authorities - United Kingdom and Mexico. You also have the right to lodge a complaint with a data protection supervisory authority if you believe that your personal data has been processed in a way that infringes applicable law or that we have not adequately addressed your concerns.

  • United Kingdom: For users in the UK, the competent authority is the Information Commissioner's Office (ICO). You can find information on how to raise a concern on the ICO website at www.ico.org.uk or by contacting the ICO through the channels listed there.
  • Mexico: For users located in Mexico, the supervisory authority is the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). Information on how to exercise your rights and lodge a complaint is available on the INAI website at www.inai.org.mx, in accordance with the LFPDPPP and its regulations.
  • Other jurisdictions: If you are located in another country within the EEA or elsewhere, you may have the right to lodge a complaint with your local data protection authority. We will cooperate with competent authorities as required by law.

Using the internal complaint mechanisms we provide does not affect your right to approach a supervisory authority directly. However, we encourage you to contact us first so that we can try to resolve the matter with you efficiently.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, corporate structure, licensing arrangements, technologies, or applicable laws and regulatory guidance (including developments in UK data protection law, Curaçao licensing rules, and, where relevant, Mexican or EU data protection frameworks). When we make changes, we will take reasonable steps to inform you.

  • Notification methods: Material changes to this Privacy Policy will normally be communicated by one or more of the following methods: notices on the Website (for example, a banner or pop-up), updates within your account dashboard, and e-mail or in-account messages (where we have your contact details and are permitted to contact you).
  • Advance notice for significant changes: Where changes significantly affect how we process your personal data or your rights (for example, introduction of new processing purposes, new categories of recipients, or changes in international transfer practices), we will, where reasonably practicable, provide you with at least thirty (30) days advance notice before the new terms take effect. During this period, you may choose to review the changes and, if you do not agree with them, you may close your account and stop using the Website.
  • Your continued use: If you continue to use xperibet.com after the effective date of an updated Privacy Policy, this will constitute your acknowledgment of the updated terms, to the extent permitted by law.
  • Version control and changelog: We maintain records of previous versions of this Privacy Policy and may provide a summary of material changes (for example, additions relating to new jurisdictions, updated retention periods or changes in our corporate or licensing structure) either within the policy itself or in a separate changelog. You may request access to prior versions where relevant to your situation.

Last updated: 6 November 2025.