How TweedBet Handles Personal Data

A UK GDPR privacy notice covering collection, cookies, sharing, retention and your rights, revised on 19 September 2026.

TweedBet Privacy Notice for UK Players

Data Controller

The controller of your personal data is the operator of TweedBet, which runs tweedbet.app under an online gaming licence from the Anjouan Offshore Finance Authority (Union of Comoros). The operator is based in Anjouan, Union of the Comoros. This notice follows the principles of the UK GDPR and the Data Protection Act 2018 for players who access the site from the United Kingdom.

International Transfers and Safeguards

Our servers and the operator sit outside the United Kingdom, so data you submit is transferred abroad. Connections to tweedbet.app are protected by SSL encryption in transit, and access to account records is restricted to staff who need it for support, payments or compliance. Where a provider processes data on our behalf, we bind it to confidentiality and to using the data only for the service we requested. Payment data for Visa and Mastercard is entered in the card processors’ own secure environments, which means full card numbers are not stored in your TweedBet profile. Because the operator is based in the Union of Comoros, which has no UK adequacy decision, we rely on contractual confidentiality terms with each recipient as the safeguard for these transfers.

Cookies and Complaints to the ICO

We use essential cookies to keep you signed in and to remember your cookie choice, plus analytics cookies that show how pages are used. Under the Privacy and Electronic Communications Regulations (PECR), non-essential cookies are set only after you accept them in the cookie notice, and you can withdraw consent by clearing cookies in your browser.

If you believe we have handled your data unlawfully, you may lodge a complaint with the Information Commissioner’s Office (ICO), the UK data protection regulator. We would welcome the chance to resolve the matter first, so write to [email protected].

Data We Collect

At registration we collect your email address, password (stored in hashed form), name, date of birth and address. For payments we record the method used, such as Visa, Mastercard, Skrill, Neteller, Bitcoin, Ethereum, Litecoin or bank transfer, along with transaction amounts and dates. For identity checks we hold copies of your passport or UK photocard driving licence and proof of address. Technical data includes IP address, device type, browser, session logs and gameplay history. Cookies and similar identifiers add a browser identifier and the pages you open, and support conversations in live chat are stored so an agent can see earlier messages if you return.

Purposes and Lawful Basis

We process data on four lawful bases under the UK GDPR. Contract covers running your account, paying withdrawals and delivering bonuses. Legal obligation covers anti-money laundering and know-your-customer checks required by our licence. Legitimate interests cover fraud prevention, security monitoring and improving the site. Consent covers analytics cookies and marketing emails, which you can refuse or withdraw at any time without affecting your ability to play.

Your Rights as a Data Subject

You have the right to access the personal data we hold about you, to have inaccurate data corrected, to request erasure, to restrict or object to processing, and to receive your data in a portable format. To use any of these rights, email [email protected] from the address registered on your account. We may ask you to confirm your identity first, and erasure requests can be refused for records we must keep by law.

Retention After Account Closure

Account and transaction records are kept for as long as the account is active. After closure, we retain identity documents, payment records and gameplay logs for the period required by anti-money laundering rules and the Anjouan licence, and delete or anonymise them once that period ends. Marketing preferences are removed straight away when you unsubscribe or close the account.

Third-Party Recipients and Personal Data Requests

We share only what is necessary. Card processors for Visa and Mastercard, the Skrill and Neteller e-wallets and the blockchain networks used for Bitcoin, Ethereum and Litecoin receive payment details. Game providers including Pragmatic Play, Evolution Gaming, NetEnt, Nolimit City, Play’n GO, Hacksaw Gaming, Push Gaming, Thunderkick, BGaming, Microgaming and Spribe receive the technical data needed to launch a game session. Verification services receive the documents you upload, and we never sell personal data.

Requests about personal data go to [email protected], which is the only address we use for data protection matters.