Privacy Policy

Welcome to Coolbet. This Privacy Policy outlines how Coolbet, operating under the laws of Iceland, collects, uses, processes, and protects your personal information when you use our website, services, and applications (collectively, "Services"). We safeguard your privacy and the security of your personal data. By accessing or using our Services, you agree to the terms of this Privacy Policy. Read it carefully to understand our practices regarding your data and how we treat it.

Coolbet is dedicated to responsible gaming and transparent data practices. This policy also explains your rights regarding your personal data and how you can exercise them.

We collect various types of information to provide and improve our Services:

• Personal Identifiable Information (PII): This includes your name, date of birth, gender, home address, email address, telephone number, and national identification number (e.g., kennitala) or other government-issued identification details necessary for age verification and regulatory compliance.
• Financial Information: Details related to your deposits and withdrawals, such as bank account numbers, credit/debit card details (though we do not store full card numbers), and payment processor information.
• Transactional Data: Records of your betting and gaming activities, deposits, withdrawals, and other interactions with our Services.
• Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
• Usage Data: Information about how you use our website, products, and services, including navigation paths, time spent on pages, and clicks.
• Communication Data: Records of your communications with us, including emails, chat logs, and telephone calls.
• Publicly Available Information: Information gathered from public sources, such as identity verification services or anti-money laundering databases, as permitted by law.

Coolbet uses your personal information for various purposes, primarily to provide, maintain, and improve our Services, and to comply with our legal and regulatory obligations:

• Account Management: To set up and manage your account, verify your identity, and process your transactions.
• Service Delivery: To operate our games and betting services, process your bets, and facilitate withdrawals.
• Customer Support: To provide assistance, respond to your inquiries, and resolve any issues you encounter.
• Security and Fraud Prevention: To detect and prevent fraudulent activities, money laundering, and other illegal acts, ensuring the integrity of our platform.
• Regulatory Compliance: To comply with legal and regulatory requirements, including age verification, responsible gaming obligations, and reporting to relevant authorities.
• Personalisation: To tailor our services and content to your preferences, including offering personalised promotions and recommendations.
• Marketing: To send you promotional offers, newsletters, and information about our products and services, where you have consented to receive such communications.
• Analytics and Improvement: To analyse usage patterns, monitor the effectiveness of our marketing campaigns, and improve our website, services, and user experience.

Coolbet processes your personal data based on several legal grounds, in accordance with Icelandic data protection laws, which align with the principles of the General Data Protection Regulation (GDPR):

• Performance of a Contract: Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request before entering into such a contract (e.g., creating and managing your Coolbet account, processing bets).
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which Coolbet is subject (e.g., anti-money laundering regulations, responsible gaming requirements, tax laws).
• Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by Coolbet or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms (e.g., fraud prevention, network security, improving our services, marketing activities where consent is not required).
• Consent: Where you have given explicit consent for specific processing activities (e.g., for certain marketing communications). You have the right to withdraw your consent at any time.

Coolbet may share your personal information with third parties under specific circumstances and always with appropriate safeguards:

• Service Providers: We engage trusted third-party service providers to perform functions on our behalf, such as payment processing, IT services, data analysis, customer support, and marketing assistance. These providers are contractually bound to protect your data and only use it for the purposes for which it was disclosed.
• Regulatory and Law Enforcement Authorities: We may disclose your information to government bodies, regulators, or law enforcement agencies when required by law, court order, or to comply with our licensing obligations and anti-money laundering regulations.
• Fraud Prevention Agencies: To prevent fraud, money laundering, and other illicit activities, we may share information with organisations dedicated to fighting financial crime.
• Auditors and Professional Advisors: Our auditors, legal advisors, and other professional consultants may access your data as part of their professional duties.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.

We ensure that all third parties respect the security of your personal data and treat it in accordance with the law.

Coolbet takes the security of your personal data very seriously. We implement robust technical and organisational measures to protect your information from unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption: We use Secure Socket Layer (SSL) technology to encrypt data during transmission.
• Access Controls: Strict access controls limit access to your personal data to authorised personnel only, on a need-to-know basis.
• Firewalls: Our systems are protected by firewalls to prevent unauthorised external access.
• Regular Audits: We conduct regular security audits and vulnerability assessments to identify and address potential weaknesses.
• Employee Training: Our employees receive regular training on data protection and security best practices.

While we strive to protect your personal data, no method of transmission over the internet or method of electronic storage is 100% secure. We encourage you to also take steps to protect your personal data, such as using strong passwords and keeping them confidential.

Under Icelandic data protection law, you have several rights regarding your personal data. Coolbet facilitates the exercise of these rights:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data under certain circumstances (e.g., if the data is no longer necessary for the purposes for which it was collected).
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain conditions (e.g., if you contest the accuracy of the data).
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data in certain situations, particularly when processing is based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section below. We will respond to your request within the legally required timeframe.

Coolbet uses cookies and similar tracking technologies to enhance your experience, analyse website usage, and for marketing purposes. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: These are necessary for the website to function correctly, enabling core functionalities like secure login and transaction processing.
• Analytical/Performance Cookies: These allow us to recognise and count the number of visitors and see how visitors move around our website. This helps us improve how our website works.
• Functionality Cookies: These recognise you when you return to our website, allowing us to personalise our content for you, greet you by name, and remember your preferences.
• Targeting/Advertising Cookies: These cookies record your visit to our website, the pages you have visited, and the links you have followed. We use this information to make our website and the advertising displayed on it more relevant to your interests.

You have the option to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. However, this may prevent you from taking full advantage of the website. For more detailed information, please refer to our separate Cookie Policy.

Coolbet retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention periods depend on the type of data and the purpose of processing. For example:

• Account data and transactional records are typically retained for a minimum period required by anti-money laundering and tax laws, which can be up to ten years after your account closure.
• Marketing consent records are retained until you withdraw your consent or for a period indicating inactivity.
• Data collected for security and fraud prevention may be retained for longer periods if necessary to protect Coolbet's legitimate interests.

Once the retention period expires, your personal data will either be securely deleted or anonymised so that it can no longer be associated with you.

Coolbet operates globally, and some of our service providers or partners may be located outside of Iceland or the European Economic Area (EEA). When we transfer your personal data to countries outside of Iceland or the EEA, we ensure that appropriate safeguards are in place to protect your privacy rights and the security of your data. These safeguards may include:

• Transferring data to countries deemed to provide an adequate level of data protection by the European Commission.
• Using standard contractual clauses approved by the European Commission, which provide specific data protection obligations for the recipient.
• Implementing other legally approved mechanisms to ensure adequate protection.

By using Coolbet's Services, you acknowledge and agree that your personal data may be transferred to and processed in countries outside of Iceland or the EEA.

Coolbet's Services are strictly for individuals who are at least 18 years old, or the legal age of majority in their jurisdiction, whichever is higher. We do not knowingly collect personal information from children under this age. If we become aware that we have inadvertently collected personal data from a child, we will take immediate steps to delete such information from our records. If you believe that a child has provided us with personal information, please contact us immediately.

Coolbet reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological advancements. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by sending you an email notification. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes indicates your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer:

• Email: [email protected]
• Postal Address: [Our Registered Office Address, to be provided upon request or found in our Terms and Conditions]

You also have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd) if you believe your data protection rights have been violated.