Privacy Policy

Version: 1.0  |  Last Updated: 3 November 2026

1. Introduction

Welcome to Alevbet, accessible at alevbet-cy.com. We are committed to protecting and respecting the privacy of every individual who visits, registers on, or interacts with our platform. This Privacy Policy explains what personal data we collect, why we collect it, how we use and safeguard it, and what rights you hold in relation to that data.

This document should be read together with our Terms and Conditions and our Responsible Gaming Policy, both of which form part of your agreement with us. By accessing or using alevbet-cy.com, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, you should discontinue use of the platform immediately.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and any applicable national data-protection legislation. Where the GDPR applies, we act as the data controller in respect of the personal data you provide to us.

2. Data We Collect

We collect personal data through a number of channels, including direct account registration, your activity on the platform, automated tracking technologies, and third-party verification providers. The categories of personal data we may process are set out below.

2.1. Identity and Contact Data

• Full legal name, date of birth, and gender
• Residential address, city, postal code, and country
• Email address and telephone number
• Copies of government-issued identity documents (e.g., passport, national identity card, driver's licence) submitted for Know Your Customer (KYC) verification
• Proof of address documents (e.g., utility bill, bank statement dated within three months)

2.2. Account and Financial Data

• Username, password (stored in hashed form), and security answers
• Deposit and withdrawal history, transaction amounts, and timestamps
• Payment method details, including partial card numbers, e-wallet identifiers, or bank account references
• Bonus usage, wagering activity, and account balance information
• Source-of-funds and source-of-wealth documentation where required for enhanced due-diligence purposes

2.3. Technical and Usage Data

• IP address, browser type and version, operating system, and device identifiers
• Pages visited, time spent on each page, clickstream data, and referral URLs
• Login timestamps, session duration, and error logs
• Geolocation data derived from your IP address or, with your explicit consent, from your device GPS

2.4. Communications and Support Data

• Records of correspondence sent to or received from our customer support team, including live-chat transcripts, email threads, and support ticket logs
• Responses to surveys or feedback forms you choose to complete
• Marketing preferences and communication opt-in or opt-out records

2.5. Responsible Gaming Data

In connection with our obligations under our Responsible Gaming Policy, we may collect information relating to self-exclusion requests, deposit limits, reality-check settings, and any concerns raised about problematic gambling behaviour. This data is processed to fulfil our duty of care and is treated with the highest level of confidentiality.

3. How We Use Your Data

We use the personal data we collect for the specific, explicit purposes listed below. We do not use your data for any purpose that is incompatible with those for which it was originally gathered, and we will inform you before doing so if that ever changes.

3.1. Account Management and Service Delivery

We process your identity, contact, and account data to create and maintain your player account, authenticate your logins, process deposits and withdrawals in EUR, manage bonuses and promotions, and provide access to our gaming catalogue. Without this data, we cannot provide the core services described in our Terms and Conditions.

3.2. Legal and Regulatory Compliance

We are required by law to verify player identity and age (minimum 18 years), conduct anti-money-laundering (AML) and counter-terrorist-financing (CTF) checks, maintain transaction records, and report suspicious activity to relevant authorities. Compliance processing is mandatory and cannot be opted out of while you hold an active account.

3.3. Fraud Prevention and Security

Technical and usage data, along with identity information, is analysed to detect and prevent fraud, unauthorised account access, collusion, and bonus abuse. Automated risk-scoring tools may be applied; however, any decision that materially affects your account will be subject to human review upon request.

3.4. Responsible Gaming Monitoring

We process gaming-activity and account data to identify indicators of problem gambling and, where appropriate, to initiate welfare checks or apply protective measures in line with our Responsible Gaming Policy. This processing is carried out in your vital interest and cannot be waived.

3.5. Marketing and Personalisation

Subject to your explicit consent or, where applicable, our legitimate interest, we may send you promotional emails, SMS messages, or in-platform notifications about offers, new games, or events. You may withdraw marketing consent at any time via your account settings or by emailing support@alevbet-cy.com. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

3.6. Platform Improvement and Analytics

Aggregated and, where feasible, anonymised usage data helps us understand how players interact with our platform, identify technical issues, and enhance the overall user experience. Where data is genuinely anonymised, it falls outside the scope of the GDPR and this policy.

4. Legal Bases for Processing

Under Article 6 of the GDPR, we rely on the following legal bases when processing your personal data. Where special-category data is involved, the additional conditions in Article 9 are also satisfied.

Where we rely on legitimate interests, we have conducted a balancing test and concluded that our interests do not override your fundamental rights and freedoms. You may request a summary of that balancing assessment by contacting us as described in Section 13.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We share it only in the circumstances described below, and only to the extent strictly necessary for the stated purpose.

5.1. Service Providers and Data Processors

We engage third-party processors to support our operations, including but not limited to: payment processors (handling transactions in EUR via methods such as Visa, Mastercard, Maestro, Skrill, Neteller, Revolut, Paysafecard, MiFinity, SEPA bank transfers, ecoPayz, MuchBetter, and Neosurf); identity-verification and KYC providers; customer-support platform vendors; email and SMS delivery services; cloud hosting and infrastructure providers; and fraud-analytics tools. All processors are bound by Data Processing Agreements that require them to process data solely on our documented instructions and to implement appropriate security measures.

5.2. Regulatory and Law Enforcement Authorities

We may disclose personal data to competent regulatory bodies, financial intelligence units, law-enforcement agencies, or courts where we are legally required or permitted to do so — for example, in response to a court order, a statutory information request, or as part of our AML reporting obligations.

5.3. Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring of our business, your personal data may be transferred to the acquiring entity. We will notify you via the email address registered to your account before such a transfer takes place and, where required by law, seek your consent.

5.4. Responsible Gaming Organisations

With your consent, or where required to protect your vital interests, we may share limited account data with responsible gaming bodies or self-exclusion scheme operators to support your welfare. We will always inform you of such sharing unless doing so would undermine the purpose of the disclosure.

6. Cookies & Tracking Technologies

6.1. What We Use

Our website uses cookies, web beacons, pixel tags, and similar tracking technologies to enable core platform functionality, measure website performance, and, with your consent, deliver personalised content and targeted advertising.

6.2. Categories of Cookies

• Strictly necessary cookies: Essential for the platform to function (e.g., session authentication, load balancing). Cannot be disabled without breaking core features.
• Performance and analytics cookies: Collect anonymised data on how pages are used so we can improve navigation and content. Require your consent.
• Functional cookies: Remember your preferences (e.g., language, currency display). Enhance usability but are not strictly necessary.
• Targeting and advertising cookies: Used to display relevant promotions and to measure the effectiveness of our marketing campaigns. Require your explicit consent.

6.3. Managing Your Preferences

When you first visit alevbet-cy.com, a consent banner allows you to accept, decline, or customise non-essential cookies. You may update your preferences at any time through the Cookie Settings link in the website footer. Most browsers also allow you to refuse or delete cookies via their settings menus; however, doing so may impair certain features of the platform.

7. Data Security

We take the security of your personal data seriously and have implemented a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, or disclosure.

7.1. Technical Safeguards

• TLS/SSL encryption for all data transmitted between your browser and our servers
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment references
• Multi-factor authentication (MFA) options for player accounts
• Regular penetration testing and vulnerability assessments conducted by independent specialists
• Intrusion-detection systems and real-time security monitoring

7.2. Organisational Safeguards

• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Mandatory data-protection training for all employees and contractors
• Incident-response procedures requiring notification to affected users and, where applicable, supervisory authorities within 72 hours of becoming aware of a personal data breach

While we employ industry-standard security practices, no system can guarantee absolute security. If you suspect that your account has been compromised, please contact us immediately at support@alevbet-cy.com.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention principles are as follows:

• Active account data: Retained for the duration of your account relationship with us.
• Closed account data (identity, KYC, and transaction records): Retained for a minimum of five (5) years after account closure, in compliance with AML and financial-record-keeping obligations.
• Customer support communications: Retained for up to three (3) years from the date of last interaction, unless a longer period is required in connection with a dispute or legal claim.
• Marketing-consent records: Retained for as long as your consent remains valid, plus three (3) years thereafter to demonstrate compliance.
• Cookie consent logs: Retained for twelve (12) months from the date of consent.

When retention periods expire, data is securely deleted or irreversibly anonymised. Where deletion is not technically possible immediately, data is restricted from further processing until deletion can be completed.

9. Your Rights

As a data subject under the GDPR, you are entitled to exercise the rights described in this section. We will respond to all valid requests within one (1) calendar month of receipt. In complex or high-volume cases, we may extend this period by a further two months, in which case we will notify you within the initial one-month period and explain the reason for the extension.

9.1. Right of Access (Article 15)

You have the right to obtain confirmation of whether we process your personal data and, if so, to receive a copy of that data together with supplementary information about the processing (purposes, categories, recipients, retention periods, and safeguards). We will provide the first copy free of charge; additional copies may attract a reasonable administrative fee.

9.2. Right to Rectification (Article 16)

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction or completion. You can update most account details directly in your profile settings. For information that cannot be amended via self-service — such as identity-document data — please contact our support team.

9.3. Right to Erasure (Article 17)

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and there is no other legal basis, or where you have successfully objected to processing. This right is not absolute: we may retain data where we are subject to a legal obligation to do so (e.g., AML record-keeping requirements as noted in Section 8).

9.4. Right to Restriction of Processing (Article 18)

You may ask us to restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and we are assessing whether our legitimate grounds override your rights. Restricted data is stored but not otherwise processed without your consent or for the establishment, exercise, or defence of legal claims.

9.5. Right to Data Portability (Article 20)

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., JSON or CSV) and to transmit it to another controller without hindrance from us.

9.6. Right to Object (Article 21)

You have the right to object at any time to processing based on our legitimate interests, including profiling for direct-marketing purposes. Upon receipt of a valid objection to marketing, we will cease such processing immediately. For other legitimate-interest processing, we will cease unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

9.7. Rights Related to Automated Decision-Making (Article 22)

Where we make decisions based solely on automated processing — including profiling — that produce legal or similarly significant effects on you, you have the right to request human review of that decision, to express your point of view, and to contest the outcome. Please contact us at privacy@alevbet-cy.com to exercise this right.

9.8. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes applicable data-protection law, you have the right to lodge a complaint with the competent supervisory authority. In Cyprus, this is the Commissioner for Personal Data Protection, reachable at www.dataprotection.gov.cy. We encourage you to contact us first so that we can address your concerns directly, but this does not affect your right to approach the supervisory authority at any time.

9.9. How to Exercise Your Rights

Submit your request to our Data Protection Officer by email at privacy@alevbet-cy.com. To allow us to process your request promptly, please include your full name, the email address associated with your account, a clear description of your request, and a copy of a valid identity document so that we can verify your identity before disclosing or amending any data.

10. International Data Transfers

In the course of providing our services, your personal data may be transferred to, and processed in, countries outside the European Economic Area (EEA). Such transfers may occur when we use cloud-hosting infrastructure, KYC providers, payment processors, or analytics vendors that operate globally.

Whenever we transfer personal data outside the EEA, we ensure that an appropriate safeguard is in place in accordance with Chapter V of the GDPR. The safeguards we rely on include:

• Adequacy decisions issued by the European Commission confirming that the destination country provides a level of data protection essentially equivalent to that within the EEA;
• Standard Contractual Clauses (SCCs) approved by the European Commission, incorporated into our contracts with third-party processors; and
• Binding Corporate Rules (BCRs) adopted by processor groups where applicable.

You may request a copy of the specific safeguards applicable to any given transfer by contacting our Data Protection Officer at privacy@alevbet-cy.com.

11. Minors

Alevbet is an age-restricted platform. Our services are intended exclusively for individuals who are at least 18 years of age. We do not knowingly collect, store, or process personal data belonging to persons under the age of 18. As part of our registration process, all applicants must confirm their date of birth and submit valid identity documentation that verifies their age.

If we discover, or are notified, that a player account belongs to a minor, we will immediately suspend and permanently close that account, reverse any deposits where technically and legally possible, and securely delete all related personal data without undue delay, except where retention is required by law. If you believe a minor has registered on our platform, please contact us at support@alevbet-cy.com as a matter of urgency.

Parents and guardians concerned about minors accessing gambling content are encouraged to use parental-control software and to review the resources listed in our Responsible Gaming Policy.

12. Changes to This Policy

We reserve the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, our data-processing activities, or the services we offer. The current version number and last-updated date are displayed at the top of this page, so you can always identify whether the policy has changed since you last reviewed it.

Where changes are material — meaning they significantly affect your rights or our obligations — we will notify you by email to the address registered on your account and by posting a prominent notice on the platform at least 14 days before the changes take effect. Your continued use of the platform after the effective date of any updated policy constitutes acceptance of the revised terms. If you do not agree to the updated policy, you must cease using the platform and may request account closure in accordance with our Terms and Conditions.

13. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or our data-processing practices, please do not hesitate to reach out to us using the contact details below.

13.1. General Support

For account-related questions, general enquiries, and customer-service assistance:
Email: support@alevbet-cy.com

13.2. Data Protection Officer (DPO)

For matters relating specifically to personal data, privacy rights, data-subject access requests, or complaints about our data-processing activities:
Email: privacy@alevbet-cy.com

We aim to acknowledge all privacy-related correspondence within 72 hours and to provide a substantive response within the statutory one-month period. For complex or multi-issue requests, we will communicate an expected timeline as soon as reasonably practicable.

Frequently Asked Questions

Does Alevbet sell my personal data to third parties?

No. We do not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share data only with service providers acting on our instructions, regulatory authorities as required by law, and in the limited circumstances described in Section 5 of this policy.

Can I request deletion of my account and all associated data?

Yes. You may submit an erasure request to privacy@alevbet-cy.com. Please note that we are legally required to retain certain records — such as KYC documents and transaction history — for a minimum of five years after account closure, as described in Section 8. Data that is subject to mandatory retention will be restricted from any use beyond compliance purposes until the retention period expires.

How does Alevbet protect my payment information?

We do not store full payment card numbers on our servers. Payment processing is handled by certified third-party processors who maintain PCI DSS compliance. All payment data transmitted to and from our platform is protected by TLS encryption. We retain only the minimum payment reference data (e.g., a masked card number or e-wallet identifier) necessary for transaction reconciliation and fraud monitoring.

What responsible gaming support is available in Cyprus?

If you or someone you know needs help with problem gambling, the following organisations offer free, confidential support in Cyprus:

• Safer Gambling Cyprus (NBA): Helplines 1454 and 1456 — safergambling.gov.cy
• PHAROS Centre: Specialised gambling-addiction support centre — Helpline 1422 — pharoscenter.org
• National Addictions Authority of Cyprus (NAAC): Helpline 1402 — naac.org.cy
• Helpline 1480: Free counselling on problematic online behaviour including gambling, available to players, parents, and carers
• GambleControl Cyprus: Counselling and self-help resources — gamblecontrol.com
• Gambling Therapy: International free online support — gamblingtherapy.org

Further tools and self-assessment resources are also available on our Responsible Gaming page.

Will I be notified if there is a data breach affecting my account?

Yes. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, providing details of the nature of the breach, the likely consequences, and the measures we have taken or propose to take to address it. We will also notify the competent supervisory authority within 72 hours of becoming aware of the breach, as required by Article 33 of the GDPR.