Privacy Policy

This notice sets out what personal information Basswin collects when you visit our site or hold an account, why we need it, and the choices you can exercise over it. It applies to every page under our domain and to messages exchanged with our support team.

Who controls your information

The Basswin brand is operated by Cerberlot N.V., registered in Curaçao and stating licence reference OGL/2025/9088/4135. That reference has not been independently confirmed against the public register of the Curaçao Gaming Authority, and Basswin does not hold a licence from the UK Gambling Commission. Some published reviews dispute whether the brand is licensed at all. We state this plainly so that UK visitors can judge for themselves which supervisory body, if any, oversees the handling of their data.

Because the operating entity sits outside the United Kingdom and the European Economic Area, your information may be processed in a country that has not been recognised as offering equivalent protection to the UK GDPR. Where that happens we rely on contractual safeguards with our processors, but you should be aware that enforcement of your rights may be slower and more difficult than with a UK-established operator.

Questions about this notice, including requests to see or erase your record, should be sent to the privacy address published in the support area of your account. Please write from the email registered to the account so that we can identify you.

Categories of information we hold

Identity and contact details: full name, date of birth, residential address, email address, telephone number, and the username you choose. These are collected at registration and are mandatory — an account cannot be opened without them.

Verification records: copies of photographic identification, proof of address, and evidence of the source of funds where deposit levels or regulatory duties require it. Selfies or short liveness videos may be requested when a document cannot be matched automatically.

Financial records: deposits, withdrawals, the last four digits and expiry of a payment card, wallet identifiers, bank account references, currency, and the outcome of each transaction attempt. We do not store full card numbers or the security code on our own systems.

Technical and behavioural records: IP address, approximate location derived from it, device type, browser and operating system, referring page, session duration, pages viewed, games opened, stake sizes, and the timing of each login. Some of this is generated automatically the moment a page loads.

Why we process it and on what basis

To perform our contract with you: opening and maintaining the account, crediting deposits, settling bets, paying withdrawals, and answering the questions you send to support. Without this processing there is no service to provide.

To meet legal and licensing obligations: age checks, anti-money-laundering and counter-terrorist-financing screening, sanctions and politically-exposed-person checks, retention of transaction records, and responses to lawful requests from authorities.

For our legitimate interests: detecting duplicate accounts, bonus abuse, collusion, and payment fraud; securing the platform against intrusion; measuring which pages and games are used so that we can improve them; and defending legal claims. We balance these against your interests and stop where yours prevail.

With your consent: marketing emails, SMS, push messages, and non-essential cookies used for advertising measurement. Consent is optional, is requested separately, and can be withdrawn at any time through the preferences panel or the unsubscribe link without affecting your account.

Sharing, cookies, and retention

We disclose information to payment providers and acquiring banks to move funds, to identity-verification and fraud-screening vendors, to game studios whose titles run inside our lobby, to hosting and email providers, and to professional advisers. Each acts under written instructions and may use the data only for the purpose we set. We do not sell personal information.

Essential cookies keep you signed in, remember your currency, and protect the session against forgery; these cannot be switched off without breaking the site. Analytics and advertising cookies are set only after you accept them in the banner, and your choice is stored for twelve months or until you change it in the cookie settings link in the footer.

Account and transaction records are kept for the duration of the relationship and then for the period demanded by anti-money-laundering rules — commonly five years from account closure, longer if litigation or a regulatory request is live. Self-exclusion records are kept for the exclusion period and afterwards, because deleting them would let a closed account be reopened. Marketing consents are deleted once withdrawn.

Server and security logs are ordinarily purged within twelve months unless retained as evidence of an incident.

Your rights and how to use them

You may ask for a copy of the information we hold, ask us to correct anything inaccurate, ask for erasure where no legal duty compels us to keep it, ask us to restrict processing while a dispute is examined, ask for a portable copy of the data you supplied, and object to processing carried out for our legitimate interests or for direct marketing.

We answer within one month of confirming your identity, and will tell you if the request is complex enough to need a two-month extension. There is no fee unless a request is manifestly excessive or repetitive. Where we refuse, we explain which exemption applies.

Erasure requests are frequently limited in practice: financial and verification records tied to anti-money-laundering duties, and records connected to a self-exclusion, survive account closure. In those cases we restrict the record rather than delete it.

If you are dissatisfied with our answer you may complain to the data protection authority in your country of residence. In the United Kingdom that is the Information Commissioner's Office at ico.org.uk. Because Basswin is operated from Curaçao and is not UKGC-licensed, the ICO's practical ability to compel action may be limited, and we recommend you also raise the matter with us in writing so a record exists.

This notice describes our current practice and may be revised as our services, processors, or legal duties change; the date above shows the last revision. It is a plain-language summary and does not create rights beyond those granted by applicable data protection law. Statements about licensing reflect what the operator publishes and have not been verified against an official register.