BillyBets Privacy Policy
Effective date: 6 May 2026
This Privacy Policy describes how BillyBets (operated by NovaForge Ltd., formerly Rabidi) collects, uses, discloses, protects and retains personal data from users of billybets.com (the “Site”), our progressive web application accessible via /app/, and related services including our Casino (including Live Casino at /live-casino/ and Crypto Casino features at /crypto-casino/) and Sportsbook (/sportsbook/). By accessing or using our services you consent to the practices described in this Policy. If you do not agree, do not access or use our services.
For privacy questions, to exercise your data subject rights, or to make a complaint, contact our Support Team at [email protected].
- Controller and Scope
- Controller: NovaForge Ltd. (trading as BillyBets). Where we refer to “we,” “us,” or “BillyBets” we mean NovaForge Ltd. operating the Site and services.
- Scope: This Policy applies to all personal data processed in connection with registration, account management (including /login/), deposits and withdrawals (see /payment-methods/), gameplay, participation in promotions (/bonuses/), customer support, marketing and related activities across our Casino, Live Casino, Crypto Casino and Sportsbook products.
- Legal Bases for Processing We process personal data on one or more of the following legal bases, depending on the processing activity:
- Performance of a contract: to provide gambling services, manage accounts, and process deposits/withdrawals.
- Legal obligation: to comply with anti-money laundering (AML), counter-terrorist financing (CTF), tax, and record-keeping obligations; to verify identity and prevent fraud.
- Legitimate interests: to operate and secure our platform, prevent abuse/fraud, analyse and improve services, and send certain non‑promotional communications. We balance these interests against your privacy rights.
- Consent: for marketing communications, cookies and similar tracking where required by applicable law. You may withdraw consent at any time.
- Categories of Personal Data Collected We collect the following categories of personal data as necessary for the purposes described below:
a. Identity and contact data
- Name, date of birth, nationality, residential address, email address, telephone number, username.
b. Account and authentication data
- Account username, password, two-factor authentication (2FA) data, security questions, login history and IP addresses.
c. Financial and transactional data
- Payment card details (when used), bank account details, e‑wallet identifiers, cryptocurrency wallet addresses, deposit and withdrawal history, transaction amounts, currency, transaction dates and related verification information.
d. Verification and KYC data
- Government-issued ID, passport or driving licence scans/photos, proof of address (utility bill, bank statement), source of funds documentation and other documents required to comply with AML and KYC obligations.
e. Gameplay and betting data
- Game and bet history, stakes, wins/losses, game settings, session length, bonuses used, tournament participation, “pumpkins” / loyalty point activity, VIP tier status and related activity.
f. Device and technical data
- Device identifiers, browser type/version, operating system, device language, screen resolution, time zone, IP address, log files, cookie identifiers and other technical data.
g. Communications and support data
- Correspondence and chat transcripts with support, complaints, dispute resolution records.
h. Marketing and profiling data
- Preferences, marketing opt‑ins/opt‑outs, behavioural data used to personalise offers and promotions, and aggregated profiling information.
i. Publicly available data
- When you use social login or publicly post content, we may process publicly available information about you.
- Purposes of Processing We use personal data to:
- Create and manage your account and provide the services you request.
- Process deposits and withdrawals and otherwise operate payments (/payment-methods/).
- Verify your identity and eligibility to gamble (including enforcing age limits and geographic restrictions).
- Comply with AML, tax and regulatory obligations and cooperate with law enforcement and regulators, including licensing authorities (e.g., Anjouan Gaming Authority, PAGCOR where applicable).
- Provide customer support and respond to enquiries.
- Operate and improve the Site and services, including analytics, product testing, detection and prevention of fraud and abuse.
- Communicate about changes to our services, updates, and transactional messages.
- Provide personalised offers, bonuses and VIP services (see /bonuses/ and VIP program details).
- Send marketing communications where you have consented or where otherwise permitted by law. You can manage marketing preferences in your account settings (/login/) or via [email protected].
- Perform automated decision-making and profiling to the limited extent necessary for personalising offers, risk assessments and responsible gambling interventions. You have the right to object — see Section 9.
- Cookies and Tracking Technologies We use cookies, web beacons and similar technologies to operate the Site and enhance user experience. Types of cookies:
- Essential cookies: required to enable core functionality (account login, security, navigation).
- Performance/analytics cookies: to understand site usage and performance.
- Functional cookies: to remember preferences and settings.
- Marketing/advertising cookies: to personalise promotional content and deliver targeted advertising.
Cookie control:
- You may control cookie settings through your browser or device at any time. Disabling cookies may limit certain functionality.
- For account-level cookie and tracking preferences, sign in via /login/ or contact [email protected].
- Sharing and Disclosures We may share personal data with:
- Service providers and subprocessors: payment processors, KYC/identity verification vendors, fraud prevention providers, hosting and cloud providers, analytics providers, email/SMS providers, and customer support platforms.
- Game and live dealer providers: to enable gameplay, progress tracking and bonus application (see /live-casino/ and /crypto-casino/).
- Regulators, law enforcement bodies and courts when required by law or to protect our legal rights.
- Third‑party advertisers and marketing partners where you have consented.
- Affiliated companies within the NovaForge group for operational purposes and marketing.
- Third parties in the event of corporate transfer: in the event of a merger, acquisition, reorganisation, sale or insolvency, user information may be transferred as part of the transaction.
We require all third parties to implement appropriate technical and organisational safeguards and to process data only as permitted.
Cross‑Border Transfers Personal data may be processed and stored in jurisdictions outside your country of residence. When transfers occur, we ensure an adequate level of protection (e.g., standard contractual clauses, binding corporate rules or transfers to jurisdictions with adequate protections) in accordance with applicable law.
Data Retention We retain personal data as long as necessary to provide services and meet legal obligations, including:
- Active accounts: data retained for the duration of account activity.
- Closed accounts: we retain necessary records for fraud prevention, AML and tax compliance for a period consistent with legal obligations — typically up to five (5) years following account closure or as otherwise required by law.
- Transactional records: retained to satisfy financial and regulatory recordkeeping obligations.
- Where you exercise deletion rights, we will remove or anonymise data unless retention is necessary for legal, security, fraud prevention or legitimate interest reasons.
- Your Rights Subject to applicable law, you have rights concerning your personal data:
- Access: request a copy of personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion of personal data where legal grounds permit.
- Restriction: request restricted processing in certain circumstances.
- Portability: obtain a machine-readable copy of data you provided to us.
- Object: object to processing based on legitimate interests or profiling for direct marketing.
- Withdraw consent: where processing is based on consent you may withdraw consent at any time.
- Lodge a complaint: if you are in the EU/EEA you may complain to your local supervisory authority. We encourage you to contact us at [email protected] first so we can attempt to resolve your concern.
To exercise your rights, contact [email protected]. We will verify your identity before fulfilling requests to protect your and others’ privacy.
- Account Verification, KYC and AML To open an account and to process withdrawals, we conduct KYC and AML checks which require identity and financial documentation. This is a legal obligation in many jurisdictions and may include:
- Identity verification (ID, passport, driving licence).
- Proof of address.
- Source of funds / wealth documentation where required. Failure to provide requested documentation may result in account suspension, withholding of funds, or account closure. Verification reviews typically take up to 3 business days, but may take longer in complex cases.
- Security Measures We apply appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration and destruction. Measures include:
- SSL/TLS encryption for data in transit (industry-standard 128-bit or higher).
- PGP encryption for certain sensitive communications and files.
- Two-factor authentication (2FA) options for account security.
- Access controls, auditing and logging.
- Secure data storage and industry-standard procedures for backups and incident response.
While we strive to protect your data, no security system is impenetrable. If we experience a personal data breach that creates a risk to your rights and freedoms, we will notify affected individuals and relevant supervisory authorities in accordance with applicable law (for GDPR jurisdictions, within 72 hours where feasible).
- Automated Decision‑Making and Profiling We may perform limited automated decision-making and profiling to:
- Detect and prevent fraud, money‑laundering and abusive behaviours.
- Personalise offers, promotions and responsible gambling interventions. Where decisions are based solely on automated processing that produce legal or similarly significant effects on you, you may request human review, express your point of view and contest the decision where applicable.
- Marketing Communications We may send marketing communications about promotions and offers (including /bonuses/ and VIP rewards). We rely on consent where required. You may opt out of marketing at any time via:
- The unsubscribe link in marketing emails.
- Your account settings (/login/).
- Contacting [email protected].
Children and Minors You must be of legal gambling age in your jurisdiction (minimum 18 years in most jurisdictions) to register and use our services. We do not knowingly collect personal data from minors. If you suspect a minor has provided us personal data, contact [email protected] and we will take steps to delete the information and close the account.
Third‑Party Websites and Links Our Site may contain links to third‑party websites and services. This Policy does not apply to those sites; we are not responsible for their privacy practices. Please review third‑party privacy policies before submitting personal data.
Payments and Cryptocurrency We process payment and financial data to accept deposits, pay winnings and comply with legal obligations. Accepted payment methods include Visa, MasterCard, e-wallets (e.g., Skrill, Neteller), local payment providers, bank transfers and cryptocurrencies (e.g., Bitcoin, Tether, Litecoin, Ethereum, Dogecoin and others). Transactions and related personal data are shared with payment processors and custodians for the performance of the contract and AML checks. Note that deposits via certain payment methods (e.g., Skrill, Neteller) may be excluded from specific promotional offers — consult the terms on /payment-methods/ and /bonuses/ for details.
Responsible Gambling and Interventions We process gameplay and behavioural data to identify risks, provide responsible gambling tools (self-assessment, deposit/time limits, self‑exclusion), and to take interventions where necessary. If you request self-exclusion, we process the associated data to enforce exclusions. For support, contact [email protected].
Data Transfers to Regulators and Law Enforcement We will disclose personal data to law enforcement agencies, regulators, or courts where required by law or to protect our legitimate interests, including responding to subpoenas, court orders or other legal processes and cooperating with licensing authorities such as the Anjouan Gaming Authority or PAGCOR when required.
Changes to this Policy We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the Site after changes will constitute acceptance of the revised Policy.
Contact and Complaints For privacy inquiries, data subject requests, or complaints:
- Email: [email protected] If you remain unsatisfied after contacting us, you may lodge a complaint with your local data protection supervisory authority (for EU/EEA residents).
- Miscellaneous
- Account controls: You may review and update certain personal data in your account dashboard (/login/). For changes requiring documentation, contact [email protected].
- Data accuracy: Please keep your information accurate and up to date to ensure compliance with age, identity and payment requirements.
- Language: This Policy is provided in English. In the event of any inconsistency between translated versions, the English text will prevail.
By using BillyBets services you acknowledge that you have read this Privacy Policy and agree to its terms. If you have questions about any aspect of this Policy, please contact [email protected].