Privacy Policy

1. Introduction

This Privacy Policy describes the principles and procedures governing the collection, use, storage, transfer, and protection of personal data by Caecus N.V. (the "Operator"), in connection with the services provided through the 1xBet platform. The Operator is committed to safeguarding personal data as required by Vietnamese legislation, including the Personal Data Protection Decree (Decree No. 13/2023/ND-CP), and applicable cybersecurity and gambling regulations.

2. Legal Basis and Regulatory Compliance

The Operator collects and processes personal data strictly in accordance with the following legal instruments:

Personal Data Protection Decree (Decree No. 13/2023/ND-CP)
Law on Cyberinformation Security (No. 86/2015/QH13)
Law on Cybersecurity (No. 24/2018/QH14)
Decree No. 03/2017/ND-CP and No. 06/2017/ND-CP (Casino and Betting Regulations)

3. Categories of Personal Data Processed

The Operator may process the following categories of personal data:

Identifiable data: full name, date of birth, nationality, identification or passport number, physical address, phone number, email address;
Financial data: payment card and banking details, transaction information;
Account and activity data: username, betting and gaming history, account preferences;
Technical and device data: IP address, browser, device identifiers, geolocation, cookies and similar technologies;
Sensitive data: where lawfully processed and with explicit consent, such as biometric data or information regarding prohibited player status.

4. Purposes of Data Processing

Personal data is collected and processed for the following purposes:

Account registration, identity and age verification, and due diligence checks;
Provision and management of betting and gaming services;
Processing of payments, withdrawals, and customer transactions;
Compliance with anti-money laundering, fraud prevention, and responsible gambling requirements;
Direct communications related to account activity, security, service updates, and advertising (with consent);
Statistical and analytical purposes to improve services, subject to data minimization and anonymization where possible.

5. Legal Grounds for Processing

The Operator processes personal data on the basis of one or more of the following legal grounds, in accordance with the Decree No. 13/2023/ND-CP:

The data subject's consent (Art. 16);
Execution of a contract to which the data subject is party;
Compliance with legal obligations (including anti-money laundering and gambling laws);
Legitimate interests of the Operator, subject to fundamental rights and freedoms of data subjects.

6. Data Subject Rights

In accordance with Art. 11–13 of Decree No. 13/2023/ND-CP, data subjects are entitled to the following rights:

Right to be informed about the processing of their personal data, including processing purposes and categories collected;
Right of access and to request correction or updating of their personal data;
Right to withdraw consent at any time, subject to legal and contractual limitations;
Right to erasure of personal data, where permitted by law;
Right to restriction or objection to specific processing activities;
Right to request explanation regarding the processing of their personal data;
Right to file a complaint with the Department of Cybersecurity and High-Tech Crime Prevention (A05), Ministry of Public Security.

To exercise these rights, users may contact the Operator using the contact information provided in Section 13.

7. Consent Management

Consent is required for collection, processing, and transfer of personal data in most situations, in line with Art. 16, Decree No. 13/2023/ND-CP. Users may withdraw consent at any time by contacting the Operator, except where processing remains necessary for legal compliance or statutory exceptions apply.

8. Data Retention and Storage

Personal data shall only be retained for as long as is necessary to fulfil the purposes of processing or as required by applicable law. Pursuant to Art. 26 of Decree No. 13/2023/ND-CP, personal data of users in Vietnam shall be stored on servers located in the territory of Vietnam. Data may be deleted or anonymised once retention is no longer necessary, unless legal obligations require further retention.

9. Data Protection Officer (DPO)

The Operator has appointed a Data Protection Officer to supervise compliance with applicable data protection laws. The DPO can be contacted via email at [email protected]. Data subjects may address all inquiries relating to personal data, privacy rights, or concerns directly to the DPO.

10. Data Transfers and Sharing

Personal data may be disclosed or transferred to the following categories of recipients, subject to user consent and strict security safeguards:

Third-party service providers involved in service delivery and payment processing, who are contractually obligated to observe equal levels of data protection;
Regulatory or law enforcement authorities, when required by law;
Affiliates or professional advisers, to the extent necessary for legitimate purposes;
Cross-border transfers are permitted only with explicit user consent; the Ministry of Public Security shall be notified prior to any cross-border transfer as per Art. 25, Decree 13/2023/ND-CP.

11. Security of Personal Data

The Operator implements reasonable and appropriate technical and organisational measures to safeguard personal data against unauthorised access, loss, destruction, alteration, or disclosure. Measures include encryption, access control, regular security reviews, and employee confidentiality obligations. In case of a data incident or breach, the Operator will notify affected users and relevant authorities in accordance with legal requirements.

12. Cookie Policy

This website utilises cookies and similar technologies to improve user experience, analyze traffic, and deliver targeted content. The following categories of cookies may be used:

Essential cookies: required for core functions such as authentication and security;
Analytical/performance cookies: for statistical analysis and service improvement;
Targeting/advertising cookies: to display relevant offers;
Third-party cookies: placed by service providers or partners, in compliance with applicable law.

Pursuant to Decree No. 13/2023/ND-CP and Law on Cyberinformation Security, user consent is required before storing or accessing non-essential cookies. Users have the right to refuse or withdraw consent at any time using cookie preference tools or browser settings. Withdrawal of consent does not affect the legality of prior processing.

13. Contact Details

For questions, requests or complaints regarding this Privacy Policy or the processing of personal data, users may contact the Operator as follows:

Email: [email protected]
Phone: +441273256987
Postal Address: Chuchubiweg 17, Willemstad, Curaçao
Live Chat: available 24/7 through the website interface
Data Protection Officer (DPO): [email protected]

Complaints concerning data protection matters can also be addressed to the Department of Cybersecurity and High-Tech Crime Prevention (A05), Ministry of Public Security: 44 Yet Kieu, Hoan Kiem, Hanoi, Vietnam.

14. Amendments

This Privacy Policy may be amended from time to time in accordance with changes to applicable law or operational requirements. Any material changes will be published on the website, and users are advised to review this policy periodically for updates.

Date of last revision: July 14, 2026