Privacy Policy

This Privacy Policy explains how the Mobile Bet online gambling service available via mobibeti.com ("we", "us", "our") collects, uses, discloses and protects your personal data. It applies to players, registered account holders, website and mobile visitors, and any person who interacts with mobibeti.com in connection with Mobile Bet from the United Kingdom or other permitted jurisdictions. This Privacy Policy is prepared in accordance with the UK General Data Protection Regulation ("UK GDPR") and the UK Data Protection Act 2018, and takes into account applicable Mexican data protection rules for users located in Mexico. This policy is effective from 1 January 2026 and supersedes earlier versions published for mobibeti.com.

Who We Are

Data controller. For the purposes of UK data protection law, the data controller responsible for the processing of personal data in connection with the Mobile Bet service on mobibeti.com is:

LeoVegas Gaming PLC
Level 7, The Plaza Business Centre, Bisazza Street, Sliema, SLM 1640, Malta

LeoVegas Gaming PLC is the licensed operator of Mobile Bet for the UK market. The brand is operated in the United Kingdom under UK Gambling Commission Licence Number 39198. The registered office of the owning group is located at the same Maltese address. LeoVegas Gaming PLC forms part of the LeoVegas Group, which is ultimately owned by MGM Resorts International.

How to contact us about privacy. If you have questions about this Privacy Policy or our handling of your personal data, you may contact us by:

Online: using the Help, Live Chat or other contact channels available in your mobibeti.com account area, clearly marking your message as "Data Protection" or "Privacy".
Post: writing to "Data Protection Officer" at LeoVegas Gaming PLC, Level 7, The Plaza Business Centre, Bisazza Street, Sliema, SLM 1640, Malta.

Data Protection Officer (DPO). We have designated a Data Protection Officer who oversees compliance with data protection laws for mobibeti.com and the Mobile Bet brand. You can reach the DPO through the channels above. Where a dedicated privacy email address is provided in the Help / Contact section of mobibeti.com, you may also use that address to contact the DPO directly.

What Personal Data We Collect

We collect only the personal data that is necessary to operate Mobile Bet on mobibeti.com, comply with legal obligations (including UKGC, KYC and AML rules) and provide a secure, responsible gambling environment.

Identity and contact data

Identification details: full name, date of birth, gender, nationality, residential address, proof of address, and copies or details of identity documents (such as passport, ID card, driving licence) required for age and identity verification.
Contact information: email address, mobile and landline phone numbers you provide, preferred language, and any communication preferences (for example, whether you wish to receive marketing emails).
Account details: username, password (stored in encrypted form), security questions and answers, and other credentials used to access your mobibeti.com account.

Regulatory, financial and transactional data

Payment data: details about deposits and withdrawals such as partial payment card details (e.g. last four digits of your Visa/Mastercard debit card), card issuer, e-wallet details (for example, PayPal), bank account or instant banking details (for example, via TrueLayer), transaction identifiers, amounts, currencies, timestamps and payment method metadata. We do not store your full card number in plain text.
Verification and AML/KYC data: information collected to comply with UK anti-money laundering, counter-terrorist financing, affordability and source-of-funds checks, including copies of financial documents (such as payslips, bank statements), occupation information and relevant risk assessment notes.
Gambling transaction data: bet slips, stakes, winnings and losses, game rounds, game provider, payment method used, bonuses accepted, bonus wagering status, use of features such as "cash out", and withdrawal requests. This includes data related to our withdrawal policies and any applicable fees.

Behavioural and usage data

Gameplay and behavioural data: games played (including slots such as Book of Dead and others), time spent, session duration, frequency of logins, device usage, betting patterns, responsible gambling tools used (deposit limits, reality checks, time-outs, self-exclusion, GamStop participation), and response to responsible gambling interventions.
Website and app usage data: pages visited, clicks, scrolling and navigation behaviour, interaction with banners, marketing messages and promotions, and responses to A/B tests or personalised content.

Technical data and logs

Device and connection information: IP address, approximate geographic location derived from IP, device identifiers, operating system, browser type and version, screen resolution, language settings and similar technical parameters.
Log data: login timestamps, logout times, failed login attempts, device changes, important account actions (such as password changes, self-exclusion activations, deposit limit modifications), and error logs. These logs help us to secure your account and comply with regulatory audit requirements.

Communications and support data

Customer support communications: transcripts of Live Chat sessions (including those initiated via our chatbot), emails and any other communications between you and our customer support team, including complaints and their outcomes.
Marketing communications: your responses to marketing messages (for example, whether you open, click or unsubscribe from emails), participation in surveys, feedback forms or promotions.

Cookies and similar technologies

Cookies: small text files stored on your device that enable core site functionality, remember your preferences and help us understand how mobibeti.com is used. We use session cookies (which expire when you close your browser) and persistent cookies (which remain for a defined period).
Similar technologies: web beacons, pixels, tags, SDKs and local storage used to improve performance, prevent fraud, measure marketing effectiveness and provide relevant content.
Third-party cookies and tracking: cookies set by analytics providers, advertising networks or social media platforms that integrate with mobibeti.com, where permitted by law and your consent preferences.

Legal Basis for Processing

We process your personal data in accordance with the UK GDPR, the UK Data Protection Act 2018 and, where applicable, relevant Mexican data protection laws. Our main legal bases are:

Performance of a contract

Account creation and management: we need to process your identity, contact, technical and account data to register you as a player on Mobile Bet at mobibeti.com, verify your age and allow you to log in securely.
Provision of gambling services: we use your transactional and gameplay data to accept bets, settle wagers, credit winnings, apply bonuses, enforce wagering requirements, and manage deposits and withdrawals using methods such as Visa/Mastercard debit, PayPal or instant banking via TrueLayer.
Customer support: we process your communications and support data to respond to enquiries, investigate issues and handle complaints related to your contract with us.

Compliance with legal obligations

Gambling regulation: we are required by the UK Gambling Commission (UKGC) under licence number 39198 to verify your identity, ensure you are over 18, monitor for problem gambling, participate in schemes such as GamStop and report certain events to the UKGC.
KYC and AML/CFT rules: we must process identity, financial and behavioural data to comply with anti-money laundering and counter-terrorist financing obligations, including affordability and source-of-funds checks, and to maintain records for specified minimum periods.
Tax, accounting and record-keeping: transactional and account data may be processed to comply with statutory retention and reporting obligations imposed by law.

Legitimate interests

Security and fraud prevention: we process technical data, logs and behavioural information to detect and prevent fraud, unauthorised access, bonus abuse and other violations of our Terms & Conditions, and to protect the integrity of Mobile Bet on mobibeti.com.
Service improvement and analytics: we use aggregated and pseudonymised usage data to analyse performance, troubleshoot issues, develop new features and enhance user experience, provided these interests are not overridden by your rights and freedoms.
Business and group management: we may share information within the LeoVegas Group for internal administration, risk management and reporting, respecting appropriate safeguards.

Consent

Marketing communications: we rely on your consent to send electronic marketing communications (such as emails or SMS) where required by law. You may withdraw your consent at any time via your account settings or by using the unsubscribe option in our messages.
Optional cookies and tracking: we use non-essential cookies (for analytics, personalisation and advertising) only if you consent via our cookie banner or preferences centre, as required by the UK Privacy and Electronic Communications Regulations (PECR) and analogous rules elsewhere.
Specific additional uses: where we ask for your explicit consent for particular processing activities (for example, certain types of profiling or surveys), the processing will be based on that consent, which you may withdraw at any time.

Where Mexican privacy law applies (for example, if you are located in Mexico when using mobibeti.com), we rely on equivalent legal bases under the Federal Law on the Protection of Personal Data Held by Private Parties and related regulations, including your consent and the necessity of processing to provide requested services.

Purpose of Processing

We use your personal data for clearly defined purposes, and we do not process it in ways incompatible with these purposes unless required or permitted by law.

Provision and management of our services

Operating your account: to register you as a player, maintain your account, authenticate logins, manage session security, and provide personalised account features, including responsible gambling tools such as deposit limits, reality checks, time-outs and self-exclusion.
Running games and processing transactions: to enable you to place bets, participate in games and promotions, manage bonuses, process deposits and withdrawals (including applying any lawful withdrawal fees where funds are not wagered), and credit winnings to your chosen payment method.
Customer service: to provide 24/7 support via Live Chat and email-based channels, handle technical issues and respond to your questions and feedback.

Legal and regulatory compliance

Age and identity verification: to confirm that you are legally permitted to gamble and that your identity details are accurate, using third-party verification providers where necessary.
AML/CTF and responsible gambling: to meet our obligations under UK law to monitor transactions and behaviour for signs of money laundering, terrorist financing and problem gambling, and to take appropriate actions such as requesting additional documentation, imposing limits or restricting accounts.
Regulatory reporting and audits: to provide required reports to the UKGC and other competent authorities, to cooperate with audits and inspections, and to maintain evidence of compliance.

Improvement, personalisation and marketing

Service improvement and analytics: to understand how mobibeti.com is used, improve site performance and design, test new features and conduct internal analysis based on aggregated or pseudonymised data.
Personalised content: to present relevant games, offers and content based on your account settings, play history and preferences, where permitted by law and your consent choices.
Marketing communications: to send you promotions, newsletters and offers related to Mobile Bet via mobibeti.com (and, where appropriate, other LeoVegas Group brands), subject to your marketing preferences and opt-outs.

Security, fraud prevention and dispute resolution

Security monitoring: to detect and respond to suspicious logins, bots, DDoS attacks and other security risks, and to protect your account credentials and funds.
Fraud and risk management: to identify and prevent fraud, bonus abuse, match fixing, collusion and other prohibited conduct, using technical and behavioural indicators.
Dispute handling: to investigate and resolve complaints and disputes, including those referred to our ADR provider eCOGRA, and to enforce or defend legal claims.

Disclosure & Sharing

We treat your personal data as confidential and only share it where necessary, lawful and subject to appropriate safeguards.

Within our group and with service providers

LeoVegas Group companies: we may share data with other entities in the LeoVegas Group and, where relevant, with our ultimate parent company, MGM Resorts International, for group-level risk management, regulatory compliance, internal reporting and support functions.
Payment and banking partners: we share relevant payment data with payment processors and financial institutions (for example, debit card schemes, banks, PayPal and instant banking providers such as TrueLayer) to process deposits, withdrawals and chargebacks, and to comply with anti-fraud obligations.
Technical and operational providers: we use third-party providers for hosting, IT infrastructure, game platforms, security services, customer support tools (including Live Chat and chatbot services), email delivery, analytics and anti-fraud systems. These providers process data only on our instructions and under data protection agreements.

Regulators, schemes and dispute resolution bodies

Regulatory authorities: we may share data with the UK Gambling Commission and other competent authorities where required by law, licence conditions or regulatory guidance, including reporting of suspicious activity and other notifiable events.
Self-exclusion schemes: we participate in the UK-wide self-exclusion scheme GamStop. This may require us to share certain personal identifiers (such as name, date of birth and contact details) with GamStop and to receive information from GamStop in order to prevent self-excluded persons from using mobibeti.com.
Alternative Dispute Resolution (ADR): where a dispute is referred to our ADR provider eCOGRA, we may share relevant account, transactional and correspondence data with eCOGRA in order to handle and resolve the dispute.

Advertising, analytics and affiliates

Analytics providers: we may share pseudonymised data with analytics providers to measure site performance, understand usage patterns and improve our services, in line with your cookie preferences.
Marketing and advertising partners: with your consent where required, we may work with advertising networks, affiliate partners and social media platforms to show you relevant offers related to Mobile Bet at mobibeti.com and to measure marketing effectiveness. Data shared with such partners is limited to what is necessary and may be pseudonymised or aggregated where possible.

Other disclosures

Legal and enforcement purposes: we may disclose your information to law enforcement agencies, courts, legal advisers or other third parties when necessary to comply with a legal obligation, court order or to protect our rights or the rights of third parties.
Corporate transactions: in the event of a reorganisation, merger, acquisition or other corporate transaction involving the LeoVegas Group or the Mobile Bet brand, your data may be shared with prospective or actual purchasers or partners, subject to appropriate safeguards.

We do not sell your personal data. Any sharing with third parties is limited to lawful purposes, subject to data protection obligations and, where relevant, your consent.

International Transfers

Because LeoVegas Gaming PLC and many of our providers are based outside the United Kingdom, your personal data may be transferred to and processed in countries outside the UK and, in some cases, outside the European Economic Area (EEA). This includes transfers to Malta (where our registered office is located) and to other jurisdictions where our group companies or service providers operate.

EEA and adequate countries: where data is transferred to countries that benefit from an adequacy decision by the UK government (or, where relevant, the European Commission), your data is protected by that adequacy status.
Other countries: where we transfer data to countries that do not provide the same level of data protection as the UK, we implement appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or the EU Standard Contractual Clauses themselves, together with additional technical and organisational measures as needed.
Access on a need-to-know basis: within our group and among our service providers, access to your data is limited to individuals and entities who need it to perform their functions in relation to Mobile Bet on mobibeti.com.

We do not rely on the former EU - US Privacy Shield framework as a legal basis for data transfers. If you are located in Mexico, we also comply with any applicable restrictions on international transfers under Mexican data protection law, securing your data through contractual and technical safeguards aligned with those laws.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, to comply with our legal and regulatory obligations, and to resolve disputes. Retention periods may vary depending on the category of data and the applicable legal framework.

General principles

Account data: we generally retain your core account information (identity, contact details and key account records) for the duration of your relationship with us and for a period of up to five (5) years after account closure, unless a longer period is required by law or needed for legal claims.
Gambling and transactional data: betting histories, payment records and related logs are typically retained for the period required by gambling, AML and accounting regulations, which is usually at least five years after the end of the business relationship or the date of the last transaction.
AML/KYC documents: documents obtained for identity verification and AML purposes are retained for the minimum period required by law (ordinarily five years from the termination of the business relationship or from the date of a one-off transaction), and may be kept longer if needed for ongoing investigations or legal proceedings.

Other retention periods

Marketing data: data used for marketing is kept for as long as you remain subscribed to marketing communications and for a short period afterward to document your opt-out, after which it is either anonymised or deleted.
Customer support and complaints: chat transcripts, complaint files and related correspondence are retained for at least the period required by regulatory rules and for the duration of applicable limitation periods for legal claims.
Technical logs: security and system logs are kept for varying periods depending on their purpose, typically from several months to a few years, to monitor security, investigate incidents and demonstrate regulatory compliance.

When the applicable retention period expires, we will either securely delete or irreversibly anonymise your data, unless we are required or permitted by law to retain it longer (for example, in connection with investigations, litigation or regulatory inquiries). Where you exercise your right to erasure, we will also consider our legal obligations and legitimate interests before deleting specific data.

Your Rights

You have important rights in relation to your personal data. These rights arise under the UK GDPR and related UK legislation, and, where applicable, under Mexican data protection law. We honour these rights and will respond to your requests within the required timeframes.

Rights under UK and EU-style data protection law

Right of access: you can request confirmation of whether we process your personal data and obtain a copy of the data, together with information about how we use it.
Right to rectification: you can ask us to correct inaccurate or incomplete personal data. In many cases, you can update your own details directly in your mobibeti.com account.
Right to erasure: you can request deletion of your personal data where, for example, it is no longer necessary for the purposes for which it was collected, you withdraw consent (where consent is the legal basis), or you successfully object to our processing. This right is subject to our need to retain certain data to comply with legal and regulatory obligations, especially in the gambling and AML context.
Right to restriction of processing: you can request that we restrict processing of your data in certain circumstances, for example while we verify accuracy, assess an objection or handle a dispute.
Right to object: you can object at any time to processing based on our legitimate interests, including profiling for those purposes. You also have an absolute right to object to direct marketing and related profiling, which we will always respect.
Right to data portability: you can request a copy of certain data in a structured, commonly used, machine-readable format, and ask us to transmit that data to another controller where technically feasible.
Rights relating to automated decision-making: if we make decisions about you based solely on automated processing that significantly affects you (for example, certain risk or affordability assessments), you may request human review and contest the decision.

Rights under Mexican data protection law

ARCO rights: if Mexican privacy law applies to you, you benefit from rights of Access, Rectification, Cancellation and Opposition (ARCO). These rights largely correspond to the rights described above and we will handle ARCO requests in line with the applicable Mexican regulations.
Consent and transfers: you may have additional rights in relation to revoking consent and limiting the transfer of your data, which we will respect when Mexican law applies.

How to exercise your rights

Submitting a request: you can exercise your rights by contacting our Data Protection Officer or privacy contact as described in the "Who We Are" section, preferably from the email address registered to your mobibeti.com account or via your logged-in account. Please clearly state the right you wish to exercise and provide sufficient information to identify your account.
Verification: to protect your data, we may need to verify your identity before acting on your request, which may involve asking for additional information or documentation.
Response timeframe: we will respond to your request within one (1) month (approximately 30 days) of receipt. In complex or multiple-request situations, this period may be extended by up to two additional months, in which case we will inform you of the extension and reasons.
Cost: we handle rights requests free of charge. However, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, particularly if they are repetitive, as permitted under data protection law.

Exercising your rights does not affect your right to lodge a complaint with a supervisory authority, as explained in the "Complaints & Contacts" section.

Cookies & Tracking Technologies

We use cookies and similar technologies on mobibeti.com to operate Mobile Bet, improve the user experience and support marketing and analytics. You can control certain aspects of this processing through your browser settings and our cookie management tools.

Types of cookies we use

Strictly necessary cookies: required for the operation of the site and to provide core functions such as logging in, maintaining sessions, processing bets, ensuring security and remembering consent settings. These cookies cannot be switched off through our cookie tools.
Functional cookies: used to remember your preferences (such as language, region and display settings) and to provide enhanced functionality and personalisation.
Analytics and performance cookies: help us understand how visitors use mobibeti.com, which pages are popular and how different features perform, enabling us to improve site performance and user experience. Data is often aggregated or pseudonymised.
Advertising and targeting cookies: used, with your consent where required, to deliver relevant advertisements and promotions related to Mobile Bet on mobibeti.com and to measure their effectiveness, including via affiliate partners and advertising networks.

Session, persistent and third-party cookies

Session cookies: temporary cookies that expire when you close your browser, used for essential functions like maintaining your logged-in session.
Persistent cookies: remain on your device for a defined period or until you delete them, helping us recognise you when you return and remember your preferences.
Third-party cookies: placed by third parties such as analytics providers or advertising networks that provide services to us. These third parties may use the information collected in accordance with their own privacy policies.

Managing cookies

Browser settings: you can configure your browser to refuse cookies or to alert you when cookies are being sent. The "help" function of most browsers explains how to manage cookie settings. Blocking certain cookies may affect the functionality of mobibeti.com.
On-site controls: where available, you can manage your cookie preferences through our cookie banner or cookie settings panel on mobibeti.com, enabling or disabling different categories of cookies (except strictly necessary ones).
Third-party tools: you may also be able to opt out of certain third-party cookies via the third party's own tools or industry schemes, where available.

Data Security

We take robust technical and organisational measures to protect your personal data and your funds when you use Mobile Bet on mobibeti.com. While no system can guarantee absolute security, we aim to maintain a level of protection consistent with industry best practice and applicable regulatory requirements.

Technical security measures

Encryption in transit: data transmitted between your device and our servers is protected using modern encryption protocols such as TLS 1.2 or higher, helping prevent interception and tampering.
Encryption at rest: sensitive data, including passwords and certain financial information, is stored using strong encryption or hashing techniques, with strict controls on who can access it.
Access controls and authentication: access to production systems is restricted to authorised personnel, protected by multi-factor authentication, unique user accounts and role-based permissions.
Network and infrastructure security: we use firewalls, intrusion detection and prevention systems, anti-malware solutions and secure configuration practices to protect our systems from external and internal threats.

Organisational measures and governance

Security policies and training: we maintain documented security and data protection policies and provide regular training to staff on information security, privacy requirements and responsible data handling.
Vendor and third-party management: we conduct appropriate due diligence on key service providers and require them to implement suitable security measures. Where possible, we work with providers whose controls align with recognised standards such as ISO 27001 or SOC 2.
Data minimisation and pseudonymisation: we limit access to personal data to those who need it for legitimate purposes and apply pseudonymisation or aggregation where possible to reduce privacy risks.

Monitoring and incident response

Monitoring and testing: we monitor our systems for suspicious activity and regularly review our security posture, including through logging, vulnerability assessments and other security testing.
Incident response: we maintain procedures for responding to security incidents and data breaches. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and affected individuals in accordance with legal requirements.

Complaints & Contacts

If you have concerns about how we handle your personal data in connection with Mobile Bet on mobibeti.com, we encourage you to contact us so that we can seek to resolve the issue. You also have the right to escalate your complaint to the relevant supervisory authority.

Internal complaint process

Step 1 - Contact customer support: first raise your concern with our customer support team via Live Chat or other contact channels available on mobibeti.com. Many issues can be resolved quickly at this stage.
Step 2 - Escalation to the DPO or privacy team: if your concern is specifically about privacy or remains unresolved, request that it be escalated to our Data Protection Officer or privacy team. You may do this via the Help / Contact section or by writing to the postal address provided in the "Who We Are" section.
Step 3 - Response timeframe: we aim to acknowledge privacy-related complaints promptly and to provide a substantive response within one (1) month of receiving your complaint. In complex cases, we may need additional time, but we will keep you informed.

Supervisory authorities and external escalation

United Kingdom - Information Commissioner's Office (ICO): if you are in the UK or your complaint relates to our UK-facing services, you have the right to lodge a complaint with the ICO. Further information is available at www.ico.org.uk.
Mexico - National Institute for Transparency, Access to Information and Personal Data Protection (INAI): if Mexican privacy law applies to you, you may have the right to file a complaint with the INAI. More information is available at www.inai.org.mx.
Other EU/EEA supervisory authorities: if you are located in the EEA and our processing falls within the scope of EU data protection law, you may also have the right to complain to your local data protection authority.

Please note that for disputes primarily related to gambling transactions (rather than privacy), you may also have access to our Alternative Dispute Resolution provider eCOGRA, as indicated in our Terms & Conditions. However, eCOGRA is not a data protection authority and cannot replace your right to approach the ICO, INAI or another competent authority about privacy matters.

Updates

We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal requirements or regulatory guidance affecting Mobile Bet on mobibeti.com.

How we notify you of changes

In-product notifications: we may notify you of material changes via messages in your mobibeti.com account dashboard, website banners or pop-up notices.
Email notifications: where appropriate and feasible, we may also notify you by email using the address associated with your account.
Effective date and versioning: each version of this Privacy Policy will include a "Last updated" date so that you can see when it was most recently revised.

Advance notice and your options

Advance notice for significant changes: for material changes that significantly affect how we process your personal data, we will normally provide at least 30 days' advance notice, unless immediate changes are required by law or to address urgent security or regulatory issues.
Your continued use: if you continue to use Mobile Bet via mobibeti.com after the effective date of an updated Privacy Policy, we will treat this as your acknowledgement of the updated terms, to the extent permitted by law.
Closing your account or objecting: if you do not agree with a material change, you may close your account and/or exercise your data protection rights as described in the "Your Rights" section.

Last updated: January 2026 (previous major revision in November 2025). Historical versions of this Privacy Policy may be available on request or via mobibeti.com, where provided.