Privacy Policy

This Privacy Policy (hereinafter — the "Policy") governs the collection, use, storage, and disclosure of personal data by the Operator of the website 1xBet.com. The Operator is Caecus N.V., a company registered under the laws of Curaçao (hereinafter — the "Operator", "we", or "us").

This Policy applies to users located in the Federal Republic of Nigeria and the Republic of South Africa. In relation to Nigerian residents, the Operator complies with the Nigeria Data Protection Act, 2023 (NDPA). In relation to South African residents, the Operator complies with the Protection of Personal Information Act 4 of 2013 (POPIA) and the Electronic Communications and Transactions Act 25 of 2002 (ECTA).

By accessing or using the Site, registering an account, or submitting personal data through any means, you acknowledge that you have read, understood, and agreed to the terms of this Policy. If you do not agree with any provision hereof, you must not use the Site.

1. Definitions

• Personal Data — any information relating to an identified or identifiable natural person (data subject).
• Processing — any operation or set of operations performed on personal data, including collection, recording, storage, use, transmission, and deletion.
• Data Subject — a natural person whose personal data is processed by the Operator.
• DPO / Information Officer — the Data Protection Officer appointed by the Operator in accordance with NDPA 2023 and POPIA Section 56.
• Third Party — any natural or legal person other than the data subject, the Operator, or persons authorised by the Operator to process data.
• Cookies — small text files stored on the user's device by a web browser at the request of the Site.

2. Data Controller and Data Protection Officer

The Operator acts as the data controller in respect of personal data collected through the Site. The Data Protection Officer (DPO) / Information Officer has been duly appointed in accordance with NDPA 2023 and POPIA Section 56. The DPO may be contacted via the form available in the Contact section of the Site or through the support channels indicated therein.

For users in Nigeria, data subject requests and complaints may also be directed to the Nigeria Data Protection Bureau (NDPB) at ndpb.gov.ng or by email at [email protected].

For users in South Africa, concerns may be escalated to the Information Regulator (South Africa) at justice.gov.za/inforeg or by email at [email protected].

3. Categories of Personal Data Collected

The Operator collects and processes the following categories of personal data:

The Operator does not collect special categories of personal data (e.g. racial origin, religious beliefs, health data) unless strictly required by applicable law and with explicit consent of the data subject.

4. Purposes and Legal Bases for Processing

Personal data is processed for the following purposes:

• Registration and maintenance of user accounts;
• Verification of age (18+) and identity in accordance with applicable KYC and AML requirements, including FICA requirements applicable to South African users;
• Processing of deposits, withdrawals, and transactions;
• Providing access to betting, gaming, and related services;
• Compliance with legal obligations, including anti-money laundering, counter-terrorism financing, and gambling regulatory requirements;
• Detection, prevention, and investigation of fraud and other unlawful activities through anti-fraud systems;
• Communication with users regarding their accounts, transactions, and service updates;
• Responsible gambling monitoring, including application of deposit, wager, and session limits, and self-exclusion procedures;
• Analytics and improvement of the Site and mobile applications;
• Compliance with orders and requests of competent regulatory authorities, including the NDPB (Nigeria), the Information Regulator (South Africa), the NLRC, and provincial gambling authorities.

5. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable statutory minimum retention periods:

• Nigeria: Financial records are retained for a minimum of six (6) years in accordance with the Nigeria Data Protection Act, 2023 and Central Bank of Nigeria guidelines. All other data is retained for no longer than is necessary for the stated purposes.
• South Africa: Financial records are retained for a minimum of five (5) years in accordance with POPIA and the Financial Intelligence Centre Act (FICA). All other data is retained in accordance with POPIA principles of purpose limitation and minimisation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised unless further retention is required by law or regulatory order.

6. Disclosure of Personal Data to Third Parties

The Operator may disclose personal data to third parties strictly in accordance with applicable law:

• Service providers and data processors: Payment processing companies (including Visa, Mastercard, Skrill, Neteller, and cryptocurrency networks), identity verification providers, IT infrastructure and cloud service providers, and anti-fraud solution providers. All processors are engaged under binding contractual arrangements ensuring equivalent data protection standards.
• Regulatory and law enforcement authorities: Disclosure is made where required by law, including to the NLRC, state gambling authorities (e.g. Lagos State Lotteries and Gaming Authority), the NDPB, the NGB, provincial licensing authorities, and the Information Regulator.
• Corporate affiliates: Where necessary for the provision of services, personal data may be shared within the group of affiliated entities subject to appropriate safeguards.

The Operator does not sell personal data to third parties.

6.1 Cross-Border Data Transfers

Where personal data is transferred outside the country of collection:

• Nigeria: Cross-border transfers are made only where an adequacy decision exists or under binding corporate rules or standard contractual clauses, in accordance with NDPA 2023, Section 42.
• South Africa: Transfers are subject to the requirements of POPIA Section 72. Data is transferred only to countries or recipients offering an adequate level of protection or under written agreements imposing equivalent obligations.

7. Data Security

The Operator implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL encryption for all data transmitted between the user and the Site;
• Two-factor authentication (2FA) for user accounts;
• Segregation of player funds;
• Anti-fraud and intrusion detection systems;
• Access controls and staff confidentiality obligations;
• Advanced encryption for data stored in mobile applications.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of data subjects, the Operator will notify the relevant supervisory authority and affected users in accordance with applicable law.

8. Rights of Data Subjects

Data subjects have the following rights in respect of their personal data, exercisable free of charge in accordance with applicable law:

To exercise any of the above rights, data subjects must submit a written request via the contact form available in the Contact section of the Site or through the support channels indicated therein. The Operator will respond to all data subject requests within thirty (30) calendar days of receipt, in accordance with NDPA 2023 and POPIA Section 18.

Where a request is refused, the data subject will be informed of the reasons and of their right to escalate the matter to the relevant supervisory authority.

9. Cookie Policy

9.1 What Are Cookies

Cookies are small text files placed on the user's device by the Site. They enable the Site to recognise the user's device and remember certain information about the user's preferences and activity.

9.2 Categories of Cookies Used

9.3 Legal Basis for Cookie Use

• Nigeria: Non-essential cookies are used only upon prior consent of the user, in accordance with the Nigeria Data Protection Act, 2023 (Sections 24–27) and the NITDA Act 2007.
• South Africa: Non-essential cookies are deployed only with prior consent, in accordance with POPIA and ECTA Section 45.

9.4 Consent Management and Withdrawal

Upon first visit to the Site, users are presented with a cookie consent mechanism that enables them to accept or reject non-essential cookie categories. Consent may be withdrawn at any time via the one-click mechanism provided in the cookie settings accessible from the Site footer. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Users may also manage cookies through their browser settings. Disabling certain cookies may affect the functionality of the Site.

10. Responsible Gambling and Data Processing

The Operator processes gameplay and account data for the purposes of responsible gambling monitoring and player protection. This includes the application of self-exclusion measures, deposit limits, wager limits, session limits, and cooling-off periods.

• Nigeria: Age verification (18+) is mandatory prior to account activation and before the first withdrawal. Mandatory responsible gambling warnings ("Gambling is addictive" and 18+ notices) are displayed on all relevant pages. Self-exclusion periods of 6 to 24 months are available. Relevant data is shared with state-level self-exclusion registers where required by applicable state authority (e.g. Lagos State Lotteries and Gaming Authority).
• South Africa: Age verification (18+) and FICA customer due diligence are mandatory before any payout. The Operator participates in the National Responsible Gambling Programme (NRGP) self-exclusion register (responsiblegambling.org.za). Self-exclusion periods of up to five (5) years are available. Mandatory warnings include "Gambling can be addictive" and "Only for persons 18 years and older".

Data processed for responsible gambling purposes is retained in accordance with the statutory periods specified in Section 5 of this Policy.

11. Marketing Communications

The Operator may send promotional communications to users who have provided explicit consent. Users may withdraw consent to marketing communications at any time by using the unsubscribe mechanism included in each communication or by contacting the Operator through the support channels available on the Site.

Withdrawal of marketing consent does not affect the processing of personal data for other lawful purposes set out in this Policy.

12. Minors

The Site is strictly prohibited for persons under the age of 18. The Operator does not knowingly collect personal data from minors. If the Operator becomes aware that personal data of a person under 18 has been collected, such data will be deleted without delay. Any person with knowledge of a minor accessing the Site should notify the Operator immediately via the contact channels available on the Site.

13. Complaints Procedure

If a user believes that the Operator has not complied with applicable data protection obligations, the following procedure applies:

1. Internal complaint: Submit a written complaint to the Operator via the contact form available in the Contact section of the Site or through the support channels indicated therein. The Operator will acknowledge receipt within five (5) business days and provide a substantive response within thirty (30) calendar days.
2. Escalation — Nigeria: If the internal response is unsatisfactory, the user may escalate the complaint to the Nigeria Data Protection Bureau (NDPB) at ndpb.gov.ng or by email at [email protected].
3. Escalation — South Africa: If the internal response is unsatisfactory, the user may escalate the complaint to the Information Regulator (South Africa) at justice.gov.za/inforeg or by email at [email protected], and/or to the relevant provincial gambling board.

14. Changes to This Policy

The Operator reserves the right to amend this Policy at any time to reflect changes in applicable law, regulatory guidance, or operational practice. Material changes will be notified to registered users via email or through a prominent notice on the Site prior to the change taking effect. Continued use of the Site following notification of amendments constitutes acceptance of the revised Policy.

Users are encouraged to review this Policy periodically.

15. Contact

For all inquiries relating to this Policy, personal data processing, or the exercise of data subject rights, users may contact the Operator through the form available in the Contact section of the Site or via the live chat and support channels indicated therein.

Дата последней редакции: July 3, 2026