Privacy Policy

This Privacy Policy explains how the National Bet version of the National Bet online casino operated at nationall.bet (the "Website") collects, uses, stores, shares and protects your personal data. It applies to all players and prospective players, as well as to any visitor who accesses or interacts with the Website, whether or not they create an account. By using the Website, you acknowledge that your personal data will be processed in accordance with this Privacy Policy. The effective date of this Privacy Policy is 6 November 2025, and it may be updated from time to time as described below.

In line with UK data protection law (including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018), and, where relevant, comparable international standards, this Policy sets out: (i) what personal data we OBSERVE and collect about you, (ii) how and why we EXPAND that data into specific processing activities, and (iii) how we REFLECT your rights and our legal obligations through technical, organisational and contractual safeguards.

Who We Are

The Website is branded as National Bet and is made available to UK-based players through the National Bet product variant at nationall.bet. The gambling services are operated by:

Operator / Data Controller: S.J. Global N.V., a corporation of the type N.V. (public limited liability company), which is responsible for determining the purposes and means of processing your personal data in connection with the Website.
Gaming Licence: S.J. Global N.V. operates under a remote gambling licence issued by Anjouan Gaming, Anjouan (Comoros Islands), licence number ALSI-132405038-FI2. According to the information available as of January 2025, this licence is active and no expiry date has been provided.
UK licensing status: National Bet is not licensed by the UK Gambling Commission. The Website targets UK players as an offshore / non-GamStop gambling service, and your data is accordingly processed by an operator established outside the United Kingdom.

Because certain corporate particulars (such as full legal address and local registration number) are not specified in the materials available to us, these details may be obtained on request via our support channels and will be published on the Website where required by applicable law.

For data protection matters, the primary contact point is:

Data protection contact / DPO contact: Data Protection Officer (DPO), S.J. Global N.V.
Email: [email protected] (please include "Data Protection" in the subject line).
Online contact: 24/7 live chat via the Website (exact URL may vary; accessible from the main lobby or help section).

Where required by UK GDPR or other applicable laws, we may appoint a representative within the United Kingdom or the European Economic Area (EEA). The identity and contact details of such representative, if appointed, will be made available on the Website and may be provided to you upon request.

What Personal Data We Collect

We collect only the personal data necessary to provide and improve our gambling services, comply with legal obligations, and protect our legitimate interests. This includes data that you provide directly, data that we OBSERVE through your use of the Website, and data received from third parties such as payment providers and verification services.

Identification and Contact Data

Account data: full name, date of birth, username, password, security questions and answers.
Contact details: email address (e.g. the address you use to contact us via [email protected]), telephone number (if you choose to provide it), country of residence and preferred language.
Verification/KYC data: copies or details of identity documents (passport, ID card, driving licence), proof of address (utility bill, bank statement), and any additional documents required to confirm your identity, age, source of funds or source of wealth.

Technical and Device Data

Technical identifiers: IP address, device identifiers, operating system, browser type and version, language settings, time zone, approximate location derived from IP address.
Usage logs: login dates and times, session duration, pages and resources visited, error logs, performance metrics and other diagnostic data collected through our servers and security systems.

Financial and Transaction Data

Payment data: information relating to deposits and withdrawals, including transaction amounts, currency, timestamps, payment method used, masked card details or wallet identifiers, and payment provider identifiers. We do not store full card numbers or security codes where this is handled directly by regulated payment processors.
Account balance and history: current account balance, bonuses, wagering progress, and historical deposit/withdrawal records.

Behavioral and Profile Data

Gaming activity: betting and gameplay history across games and products (including slots such as "Book of Dead" and other titles), bet sizes, frequency, win/loss records, session length and timing, bonus usage and completed tournaments.
Interaction data: clicks, navigation paths, communication preferences, responses to promotions, and interactions with customer support (live chat transcripts and emails).
Responsible gambling indicators: self-exclusion settings, limits (deposit, loss, wagering, session time), and behavioural indicators that may suggest problematic gambling patterns.

Cookies and Similar Technologies

Cookies: small text files stored on your device to keep you logged in, remember preferences and enable core site functionality.
Tracking technologies: web beacons, pixels, tags and similar tools used to measure usage, monitor campaign performance and detect fraud.

For further detail on cookies and online tracking, please see the Cookies & Tracking Technologies section below.

Legal Basis for Processing

We process your personal data only where we have a valid legal ground to do so under UK GDPR and, where relevant, equivalent international laws. Depending on the context, one or more of the following bases will apply:

Performance of a Contract

Account creation and management: we need your identification, contact and login data to register your account, verify your eligibility and provide continuous access to the Website.
Provision of gambling services: we process your gaming, transactional and behavioural data to place bets, settle outcomes, credit winnings, manage bonuses, and provide features such as loyalty programmes.
Customer support: we access and use your account and communication data to respond to queries via email or 24/7 live chat, resolve issues, and provide requested information.

Compliance with Legal Obligations

KYC/AML obligations: as a licensed gambling operator under Anjouan law and an offshore service provider to UK players, we must collect and retain certain identification, transactional and risk-related data to comply with anti-money laundering (AML), counter-terrorist financing (CTF), fraud prevention and responsible gambling requirements.
Regulatory and tax reporting: we may process and disclose transactional and account data to relevant authorities or auditors where required to meet regulatory, accounting or tax obligations.
Age and identity verification: we use identity documents and related checks to ensure that players are of legal age and meet eligibility requirements.

Legitimate Interests

Service improvement and analytics: we process aggregated or pseudonymised usage and behavioural data to understand how the Website is used, improve performance, enhance user experience and develop new features.
Security and fraud prevention: technical, device and behavioural data are used to monitor for suspicious activity, prevent abuse of promotions, detect multi-accounting or account takeover, and protect the integrity of our systems.
Business operations: we process limited personal data for internal reporting, risk management, corporate governance and to support potential corporate transactions (e.g. business restructuring), always subject to appropriate safeguards.

Consent

Marketing communications: we use your email address and, where applicable, other contact details to send offers, bonuses and news only where you have given us valid consent or where we are otherwise permitted to do so under applicable e-privacy rules. You can withdraw your consent at any time.
Non-essential cookies and tracking: we use analytics and advertising cookies or similar technologies only on the basis of your consent obtained through our cookie banner or settings panel, where such consent is required by law.

Where we rely on legitimate interests, we perform a balancing test to ensure that our interests are not overridden by your rights and freedoms. Where the legal basis is consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Purpose of Processing

We use your personal data for clear and specific purposes. These purposes are closely linked to the operation of nationall.bet, compliance with applicable laws, and protection of your rights and our business.

Provision and Management of Casino Services

Account operations: creating and maintaining your account, verifying your identity and eligibility, processing deposits and withdrawals, and providing access to games and related features.
Game operation: enabling gameplay, recording bets and outcomes, calculating and crediting winnings, applying bonuses and loyalty rewards, and ensuring that games function correctly.
Customer service: responding to your queries, complaints and feedback via email and live chat, troubleshooting technical issues and providing guidance on responsible gambling tools.

Compliance, Risk Management and Anti-Fraud

Regulatory compliance: meeting KYC/AML, responsible gambling, tax and other legal obligations under applicable laws in Anjouan and any other relevant jurisdictions.
Fraud detection and prevention: monitoring accounts and transactions for suspicious patterns, preventing chargebacks, bonus abuse, money laundering and other unlawful or abusive activities.
Enforcement of terms: investigating and enforcing compliance with our Terms and Conditions, house rules, and security policies.

Service Improvement, Analytics and Marketing

Usage analytics: analysing aggregated and pseudonymised data to better understand how users interact with the Website, improve navigation, performance and content, and optimise our game portfolio.
Personalisation: tailoring aspects of your experience, such as displaying relevant games or promotions, based on your past activity and stated preferences, within the limits of applicable law.
Marketing and promotions: sending email offers and updates where allowed (e.g. to the email address you provide to us), administering bonuses and tournaments, and measuring the effectiveness of our campaigns.

Legal Protection and Business Interests

Dispute handling: using relevant data to investigate and resolve disputes with you or third parties, respond to regulatory inquiries and defend against legal claims.
Business continuity: maintaining backups, logs and security records to ensure resilience, detect incidents and recover from failures.

Disclosure & Sharing

We do not sell your personal data. However, we may share your information with carefully selected third parties where necessary for the purposes set out in this Privacy Policy and where permitted by law. All such disclosures are governed by appropriate data protection agreements and safeguards.

Service Providers and Business Partners

Payment processors and banks: to process deposits, withdrawals and chargebacks, verify ownership of payment instruments, and comply with AML/CTF obligations.
Identity verification and AML providers: to conduct KYC checks, sanctions and politically exposed person (PEP) screening, affordability assessments and other risk-based checks.
IT and hosting providers: to host the Website, store data securely, provide cloud infrastructure, content delivery networks, and technical support services.
Game providers: to enable specific games or features; in some cases, game studios may receive pseudonymised data necessary to provide fair and secure gaming.

Group Companies, Affiliates and Marketing Partners

Group entities and affiliates: to the extent necessary for internal administration, consolidated reporting, risk management, or to provide shared services across National Bet products.
Affiliate partners: limited data may be shared with marketing affiliates to measure the performance of affiliate campaigns and fulfil contractual obligations, generally in aggregated or pseudonymised form.
Advertising networks (with consent): if you consent to marketing cookies or similar technologies, we may share pseudonymised identifiers with advertising and analytics partners to deliver and measure targeted advertising.

Regulators, Authorities and Other Third Parties

Regulatory and supervisory authorities: where required by law, we may disclose data to gambling regulators, financial intelligence units, tax authorities or other competent bodies in Anjouan, the UK or other relevant jurisdictions.
Law enforcement and fraud prevention agencies: where necessary to prevent or investigate crime, including fraud, money laundering, or other unlawful activities.
Professional advisers: lawyers, auditors, accountants and other advisers who need access to personal data in order to provide services to us, subject to confidentiality obligations.
Business transfers: in connection with a merger, acquisition, restructuring or sale of all or part of our business, your data may be transferred to the relevant third parties, subject to continued protection consistent with this Policy.

International Transfers

Because S.J. Global N.V. operates from outside the United Kingdom and uses global service providers, your personal data may be transferred to and processed in countries other than the one in which you are located. This includes transfers:

from the UK and EEA to Anjouan (Comoros Islands), where our gaming operations are licensed,
to countries where our secure servers, support centres, payment processors or game providers are located (which may include EEA member states and other jurisdictions such as the United States), and
between different locations used by our group entities and carefully selected partners.

Where your personal data are transferred from the UK or EEA to a country that does not provide an "adequate" level of data protection as determined by the UK Government or the European Commission, we implement appropriate safeguards, including:

Standard Contractual Clauses ("SCCs"): using the European Commission's SCCs, together with the UK Addendum where required, or the UK International Data Transfer Agreement (IDTA), to contractually protect your data.
Technical and organisational measures: encryption, access controls and minimisation of the data transferred to what is strictly necessary.
Risk assessments: assessing the legal environment in the destination country and, where necessary, implementing additional safeguards.

You can request more information about the safeguards we use for international transfers, or obtain a copy of the relevant contractual protections (with redactions where necessary), by contacting us at [email protected].

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting and regulatory requirements. Retention periods are determined by reference to applicable laws in Anjouan, the UK and other relevant jurisdictions, industry standards and our legitimate business needs.

Typical Retention Periods

Account and identification data: generally retained for the duration of your relationship with us and for a period of up to five (5) years after account closure, in order to meet AML/CTF and record-keeping obligations and to handle potential disputes.
Transaction and gaming data: retained for up to five (5) years after the relevant transaction or account closure, or longer where required by financial, tax or regulatory laws.
Customer support communications: emails and live chat transcripts are typically stored for three (3) years after the interaction, unless a longer period is needed for legal or regulatory reasons.
Marketing data: where you have consented to marketing, we retain your contact details for as long as you remain subscribed. If you withdraw consent, we will promptly stop marketing and keep a minimal record of your preference to ensure it is respected.
Technical logs and security data: retained for shorter periods (often between six (6) months and two (2) years), unless longer retention is necessary to investigate security incidents or meet legal obligations.

Deletion and Anonymisation

Once retention periods expire, personal data are securely deleted or anonymised so that you can no longer be identified.
If you request deletion of your data and we are legally able to comply, we will erase or anonymise the relevant information. Where legal or regulatory obligations require retention, we will restrict processing to those purposes only.

Your Rights

Under UK GDPR and the Data Protection Act 2018, and, where applicable, under the Mexican Federal Law on Protection of Personal Data Held by Private Parties and similar regulations, you have a range of rights in relation to your personal data. We respect these rights and provide practical procedures to exercise them free of charge.

Core Data Protection Rights

Right of access: you can request confirmation as to whether we process your personal data and receive a copy of the data we hold about you, together with information about how we process it.
Right to rectification: you can ask us to correct inaccurate or incomplete personal data. In many cases, you can update certain details directly in your account settings.
Right to erasure ("right to be forgotten"): you can request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and there is no other legal basis), or where processing is unlawful. We may need to retain some data where required by AML, financial or other laws.
Right to restriction of processing: you may ask us to restrict the processing of your data in certain circumstances, for example while we verify its accuracy or where you object to processing.
Right to object: you can object at any time to processing based on our legitimate interests, including profiling. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is required for legal claims.
Right to data portability: you can request to receive certain personal data in a structured, commonly used and machine-readable format and, where technically feasible, have it transmitted directly to another controller.
Rights in relation to marketing: you may object to or withdraw consent for direct marketing at any time, including by using the unsubscribe link in our emails or adjusting your account settings.

Additional Alignment with Mexican Privacy Law (Where Applicable)

For users located in Mexico, we also take into account rights recognised under Mexican data protection law, including:

ARCO rights (Acceso, Rectificación, Cancelación, Oposición): similar in substance to access, rectification, deletion and objection under GDPR. Requests may be submitted through the channels described below, and we will handle them in a manner consistent with applicable Mexican regulations where they apply.

How to Exercise Your Rights

Submit a request: contact us via email at [email protected] (with "Data Protection Request" in the subject line) or via 24/7 live chat on the Website. Clearly specify which right(s) you wish to exercise and provide enough information to identify your account.
Verification: to protect your privacy, we may need to verify your identity before implementing your request, for example by asking you to log in, provide certain account details, or supply supporting documentation.
Response timeframe: we aim to respond to all requests as soon as reasonably possible and in any event within one (1) month of receipt, extendable by up to two additional months where allowed by law if the request is complex or numerous. If we need an extension, we will inform you within the initial one-month period.
Cost: exercising your rights is normally free of charge. We may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, particularly if they are repetitive, in accordance with applicable law.

Certain rights may be limited by local laws (for example, retention requirements under AML/CTF and gambling regulations). Where we cannot fully comply with your request, we will explain the reasons and the legal basis for our position.

Cookies & Tracking Technologies

We use cookies and similar technologies on nationall.bet to ensure the Website functions correctly, to improve performance, to personalise content and, where you consent, to support analytics and advertising. Cookies allow us to OBSERVE how the Website is used, EXPAND that information into insights that improve your experience, and REFLECT your choices through settings and preferences.

Types of Cookies We Use

Strictly necessary cookies (session and persistent): essential to operate the Website and enable basic functions such as page navigation, secure login, bet placement and protection against fraud. These cookies are typically set in response to actions you take and cannot be disabled without affecting core functionality.
Functional cookies: remember your choices (such as language, region, display settings and remembered logins) to provide enhanced and personalised features.
Analytics and performance cookies: help us understand how visitors use the Website by collecting aggregated information about pages visited, time spent, errors encountered and similar metrics. This data is used to improve the performance and usability of the site.
Advertising and targeting cookies (third-party): may be used, with your consent, to deliver more relevant advertisements on and off the Website, limit how often you see an ad, and measure the effectiveness of marketing campaigns. These cookies are usually set by third-party partners.

Managing and Disabling Cookies

Cookie banner and settings: on your first visit (and periodically thereafter), you will be presented with a cookie banner that allows you to accept or reject non-essential cookies. You can change your preferences at any time via the Website's cookie settings or privacy panel, where available.
Browser settings: most browsers allow you to manage cookies through their settings, including blocking or deleting cookies. Please note that blocking certain cookies may impact the functionality and performance of the Website.
Do Not Track: while some browsers offer a "Do Not Track" (DNT) signal, there is no uniform industry standard for handling such signals. We will review DNT and similar mechanisms periodically and may update our practices accordingly.

Data Security

We take the security of your personal data very seriously. To protect your information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, we implement a combination of technical, organisational and procedural safeguards designed in line with internationally recognised standards.

Technical Measures

Encryption in transit and at rest: data transmitted between your device and nationall.bet is protected using industry-standard encryption protocols such as TLS 1.2+. Where appropriate, we also encrypt stored data at rest.
Access controls and authentication: access to systems containing personal data is restricted to authorised personnel and service providers on a need-to-know basis, protected by strong authentication mechanisms and role-based access control.
Network and application security: we deploy firewalls, intrusion detection and prevention systems, anti-malware tools, and secure coding practices to protect our infrastructure and applications.

Organisational and Procedural Measures

Security policies and training: we maintain internal policies covering data protection, information security and acceptable use. Staff with access to personal data receive training on privacy, confidentiality and security obligations.
Vendor due diligence: third-party service providers handling personal data are selected based on their security posture and are bound by contractual data protection and confidentiality obligations.
Regular audits and assessments: we periodically review our security controls, perform risk assessments and may conduct internal or external audits to ensure ongoing effectiveness. Where appropriate, we align our controls to international standards such as ISO 27001 and SOC 2, even if formal certification is not publicly claimed.

Incident Response

Monitoring and detection: we monitor systems for potential security incidents and anomalies.
Response procedures: in the event of a data breach or security incident affecting personal data, we will investigate promptly, take appropriate remedial action and, where required by law, notify affected individuals and relevant supervisory authorities in a timely manner.

Despite our efforts, no system can be guaranteed to be completely secure. You also play an important role in safeguarding your information. We recommend that you use strong, unique passwords, keep your login credentials confidential, and contact us immediately if you suspect any unauthorised access to your account.

Complaints & Contacts

If you have any questions, concerns or complaints about how we handle your personal data, we encourage you to contact us first so that we can attempt to resolve the issue directly and efficiently.

How to Contact Us

Email: [email protected]
Subject line for privacy matters: please include "Privacy" or "Data Protection" to help us route your query appropriately.
Live chat: 24/7 live chat is available through the Website's help or support section.

Complaint Procedure

Initial contact: submit your question or complaint through email or live chat, providing a clear description of your concern and any relevant account details.
Acknowledgement: we aim to acknowledge receipt of your complaint as soon as reasonably possible, typically within a few working days.
Investigation: we will investigate your complaint, which may involve reviewing logs, communications and relevant records. We may contact you to request additional information if needed.
Response: we aim to provide a substantive reply within one (1) month from receipt of your complaint. If the issue is complex or requires more time, we will keep you informed and provide updates on progress, subject to applicable legal time limits.
Escalation: if you are not satisfied with our response, you may request that the matter be escalated internally, for example to our Data Protection Officer or senior management.

Complaints to Supervisory Authorities

You also have the right to lodge a complaint with a data protection supervisory authority if you believe your rights have been infringed or that your personal data has been handled unlawfully.

United Kingdom - Information Commissioner's Office (ICO): UK-based users may contact the ICO, for example via its website at www.ico.org.uk. The ICO provides guidance on how to submit concerns and complaints.
Mexico - Data Protection Authority: users located in Mexico may raise concerns with the competent authority (currently the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales - INAI), including via contact details available on its official website.
Other jurisdictions: depending on your place of residence, you may also have the right to contact your local data protection authority. We can help you identify the appropriate authority upon request.

We recommend that you contact us first, as we aim to resolve most issues quickly and fairly. However, you may approach a supervisory authority at any time.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, technological developments or our internal practices. When we make material changes, we will take appropriate steps to inform you in advance and allow you to review the updated terms.

Notification of Changes

Website notice: the latest version of this Policy will always be available on nationall.bet. Significant changes may be highlighted through banners or notices on the Website.
Email notifications: where appropriate, we will notify registered players by email (using the address associated with their account) about material updates.
Account dashboard alerts: we may also present notifications or prompts within your account area when you log in after an update.

Effective Date, Versioning and User Choices

Last updated: this Privacy Policy was last updated on 6 November 2025.
Advance notice: for significant changes that materially affect your rights or how we process your personal data, we will, where reasonably practicable, provide at least 30 days' advance notice before the new terms take effect.
Changelog: for material updates, we may provide a summary of key changes or a changelog accessible from the Policy page so that you can easily see what has been modified.
Your options: if you do not agree with the updated Privacy Policy, you may choose to close your account and stop using the Website. Continued use of nationall.bet after the effective date of any update will constitute your acknowledgement of the revised Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how National Bet at nationall.bet protects your personal data and safeguards your privacy.