Privacy Policy

This Privacy Policy explains how Genzo Bet, operating the Genzo Bet service via the website genso.bet, collects, uses, shares, and protects your personal data. It applies to players, prospective players, and other visitors who access or use genso.bet from the United Kingdom or any other permitted jurisdiction. Please read it carefully together with our Terms and Conditions, Bonus Policy, Responsible Gaming Policy, and AML/KYC Policy Summary. By using genso.bet, you acknowledge that your personal data will be processed as described in this Privacy Policy. Effective date: 6 November 2025.

Who We Are

The primary data controller for the Genzo Bet service is:

Company name: GB Gaming Ventures Ltd.
Registered office / legal address: 123, Strait Street, Valletta, VLT 1111, Malta
Company registration number: C 12345 (Malta)
Website operated: genso.bet (Genzo Bet, including Genzo Bet)

For certain regulated gambling activities and specific products, associated group entities such as Nexus Gaming UK Ltd. and its parent Nexus Gaming N.V., as well as the ultimate parent Genzo Holdings PLC, may act as joint controllers or processors where they participate in providing, regulating, or supporting the service. Genzo Bet is licensed and regulated in Great Britain by the UK Gambling Commission under account number 54321 for GB Gaming Ventures Ltd., and there is a separate UKGC account number 56789 held by Nexus Gaming UK Ltd. for certain activities. These licences impose additional data protection and reporting obligations under the UKGC's Licence Conditions and Codes of Practice (LCCP).

Data protection contact: We have appointed a Data Protection Officer (DPO) / data protection function responsible for overseeing questions in relation to this Policy. You can contact us by:

Using the live chat or email support channels indicated on genso.bet and clearly marking your message "For the attention of the Data Protection Officer" or "Privacy request".
Writing to: Data Protection Officer, GB Gaming Ventures Ltd., 123, Strait Street, Valletta, VLT 1111, Malta.

We may ask you to verify your identity before responding, to protect your account and personal data.

What Personal Data We Collect

Account and Identity Data

Registration data: full name, username, date of birth, gender (if provided), residential address, country of residence, preferred language, and account settings.
Contact data: email address, communication preferences, and any contact details you provide via support (for example, additional email addresses or social media handles if you choose to use them).
Verification / KYC data: copies of identity documents (passport, ID card, driving licence), proof of address (utility bill, bank statement), proof of payment method ownership, source-of-funds and source-of-wealth information, and records of checks we perform to comply with KYC (Know Your Customer), AML (anti-money laundering), and age-verification obligations.

Technical and Usage Data

Technical identifiers: IP address, device identifiers, operating system, browser type and version, language settings, connection type, and time zone.
Log and security data: login dates and times, session duration, failed login attempts, changes to account details, geolocation estimates derived from IP or similar technologies, VPN/proxy detection signals, and security event logs.
Usage and behavioural data: pages visited, navigation paths, clicks, scrolling, time spent on pages, interaction with banners and messages, and your preferences on genso.bet.

Gaming, Betting, and Financial Data

Gaming and betting history: games played on the Quantum Gaming Platform, stakes, outcomes, win/loss records, bonus usage, tournament participation, and responsible gambling limits you set (deposit limits, loss limits, cool-off periods, self-exclusion).
Payment and transaction data: payment method type (e.g., card, e-wallet, bank transfer), partial payment card details (card type and masked number), transaction amounts, currencies, timestamps, deposit and withdrawal history, chargeback information, and payment verification records.
Risk and compliance data: internal risk scores, fraud flags, AML monitoring records, adverse media checks, sanctions and PEP (politically exposed person) screening results, and reports submitted to competent authorities as required by law.

Communications and Support Data

Support interactions: transcripts and recordings (where applicable) of live chat sessions, email messages and attachments, complaint correspondence, and follow-up notes.
Marketing and preference data: subscriptions to newsletters or promotional offers, opt-in/opt-out records, your responses to surveys, and interaction with marketing communications.

Cookies and Similar Technologies

Cookies: small files placed on your device to recognise your browser, maintain sessions, and remember preferences.
Similar technologies: pixels, tags, SDKs, and local storage used for analytics, fraud prevention, and advertising where permitted.

We do not intentionally collect data from individuals under 18. Because our services are restricted to adults, we use identity and age verification measures to reduce the risk of underage access.

Legal Basis for Processing

We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and, where applicable, the EU GDPR and relevant non-UK laws. Depending on the context, we rely on the following legal bases:

Performance of a Contract

To create and manage your Genzo Bet player account on genso.bet.
To provide you with casino, betting, and related services, including processing deposits, wagers, and withdrawals.
To verify your identity and eligibility to use the service, including age and location checks.
To provide customer support, manage complaints, and communicate with you about service-related matters.

Compliance with Legal and Regulatory Obligations

To comply with UKGC licensing conditions, including social responsibility, reporting, and anti-money laundering requirements.
To fulfil obligations under AML and counter-terrorist financing laws, including transaction monitoring and reporting suspicious activity to competent authorities.
To comply with taxation, accounting, and record-keeping obligations.
To respond to lawful requests from regulators, law enforcement, courts, and ADR bodies such as IBAS.

Legitimate Interests

To secure our systems, prevent abuse, and detect and investigate fraud, including VPN/proxy misuse contrary to our VPN policy.
To improve our products, services, and user experience through analytics and service optimisation.
To protect our business, reputation, and other players, including enforcing our Terms and Conditions and restricted country rules.
To perform internal reporting, risk management, and corporate governance within the Genzo Holdings PLC group.

Consent

For certain marketing communications (for example, email or SMS promotions, where required by PECR or comparable laws).
For the placement and use of non-essential cookies and similar tracking technologies for analytics or advertising.
For specific optional processing that we clearly explain at the point of collection.

Where we rely on consent, you may withdraw it at any time using the tools provided on genso.bet or by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal and may limit certain features or offers.

Purpose of Processing

Provision and Management of Our Services

Operating your account: creating and maintaining your Genzo Bet account, enabling access to games on the Quantum Gaming Platform, managing balances, and processing deposits and withdrawals.
Fulfilling transactions: processing payments, bonuses, promotions, and loyalty rewards, and keeping accurate financial and gaming records.
Customer support: responding to your requests via live chat and email, troubleshooting issues, and managing feedback, disputes, and responsible gambling interventions.

Regulatory Compliance and Risk Management

KYC and AML: verifying your identity, age, location, and source of funds to comply with AML/KYC laws and UKGC requirements.
Fraud and abuse prevention: detecting suspicious activity, such as bonus abuse, multi-accounting, use of prohibited VPN/proxy services, and play from restricted countries like the United States, France, Spain, the Netherlands, and Australia.
Responsible gambling: monitoring play patterns to identify potential harm, applying deposit or loss limits, time-outs, or self-exclusion, and cooperating with support organisations such as GamCare and BeGambleAware where appropriate.

Service Improvement and Analytics

Performance and usability: analysing how users interact with genso.bet to improve site design, game selection, and the reliability and speed of the Quantum Gaming Platform.
Business intelligence: aggregating and anonymising data to understand trends and improve risk management, product offerings, and customer service quality.

Marketing and Communications

Direct marketing: sending you promotional communications, offers, and bonuses where permitted by law and your preferences.
Personalisation: tailoring promotions, game recommendations, and content based on your previous use of genso.bet, within the bounds of applicable consent requirements.
Regulatory notifications: sending important updates about our policies, terms, and regulatory changes affecting your use of genso.bet.

Disclosure & Sharing

Group Companies and Corporate Structure

Within our group: we may share your data with entities within the Genzo Holdings PLC group, including GB Gaming Ventures Ltd., Nexus Gaming UK Ltd., and Nexus Gaming N.V., where necessary for operations, compliance, internal reporting, and support.

Service Providers and Business Partners

Payment partners: banks, card schemes, e-wallet providers, payment processors, and fraud-prevention services used to process deposits and withdrawals and prevent financial crime.
Technology and platform providers: the Quantum Gaming Platform provider and other IT infrastructure, hosting, security, analytics, and communication service providers who help operate genso.bet.
Game providers and testing labs: software suppliers and certification bodies such as eCOGRA, which may receive limited game and transaction data to certify RNG and RTP performance and ensure fairness.

Regulators, Authorities, and ADR Provider

Regulators and law enforcement: the UK Gambling Commission, data protection authorities, tax and financial regulators, and law enforcement agencies, when we are legally obliged or permitted to do so.
ADR bodies: the Independent Betting Adjudication Service (IBAS) or other approved Alternative Dispute Resolution providers, if you escalate a gambling dispute in line with the LCCP and our Terms and Conditions.

Affiliates, Marketing, and Advertising

Affiliate partners: selected partners that refer players to genso.bet, to attribute traffic and calculate commissions; data shared is limited to what is necessary for attribution.
Marketing and advertising networks: where permitted by law and, where required, based on your consent, we may use third-party tools to deliver and measure advertising. Data shared is typically pseudonymised and limited.

Corporate Transactions

Business transfers: in the event of a merger, acquisition, restructuring, or sale of assets involving GB Gaming Ventures Ltd. or another group entity, your data may be transferred to the acquiring or successor organisation, subject to continued protection at least equivalent to this Policy.

We require recipients to protect your data in accordance with applicable laws and, where they act as processors, to process it only on our documented instructions.

International Transfers

Because our group structure, service providers, and players are located in multiple jurisdictions, your data may be transferred to and processed in countries outside the United Kingdom, including within the European Economic Area (EEA) and other jurisdictions.

Within the group: data may be transferred between GB Gaming Ventures Ltd. in Malta, Nexus Gaming N.V. in Curaçao, and Nexus Gaming UK Ltd. in the United Kingdom for operational and compliance purposes.
Service providers: some payment processors, IT providers, or analytics services may be located or may store data outside the UK and EEA.

Where we transfer personal data outside the UK, we ensure that an adequate level of protection is in place by:

Transferring to countries recognised as providing an adequate level of data protection by the UK government; and/or
Entering into appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with technical and organisational measures to protect the data; and/or
Relying on other permitted transfer mechanisms or derogations where appropriate.

You may request more information about international transfers and copies of applicable safeguards by contacting our DPO, subject to redactions to protect security and confidentiality.

Data Retention

We keep your personal data only for as long as necessary for the purposes set out in this Policy and to comply with legal, regulatory, and reporting obligations. Retention periods may vary depending on the category of data and applicable law, including AML and gambling regulations.

Category of data	Typical retention period	Main purpose
Account and identity data	For the lifetime of your account and generally up to 5 years after account closure, with possible extension where required by AML/gambling laws.	Account management, legal and regulatory compliance, dispute handling.
KYC/AML documents and checks	At least 5 years after the end of the business relationship or the last transaction, or longer where required by law.	Compliance with AML/KYC and regulatory obligations.
Gaming and transaction history	Generally 5-7 years from the relevant transaction.	Regulatory reporting, accounting, tax, dispute resolution.
Marketing preferences	As long as you remain subscribed; records of consent/opt-out kept for up to 6 years after last use for compliance evidence.	Proof of consent and management of marketing communications.
Technical logs and security data	Typically 6 months to 5 years, depending on the log type and security necessity.	Security, fraud detection, incident investigation.
Support and complaint records	Up to 6 years after resolution of the issue.	Handling claims, regulatory inquiries, defending legal rights.

When data is no longer needed, we will securely delete, anonymise, or aggregate it. If you request deletion, we may retain certain data where we are legally obliged or have compelling legitimate grounds (for example, to comply with AML laws or resolve disputes).

Your Rights

Under the UK GDPR and other applicable data protection laws, including, where relevant, the EU GDPR and Mexican data protection legislation such as the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations, you have a number of rights in relation to your personal data. These rights may be subject to conditions, exemptions, or limitations under the law.

Core Data Protection Rights

Right of access: to obtain confirmation as to whether we process your personal data and to receive a copy, together with information about how we use it.
Right to rectification: to have inaccurate or incomplete personal data corrected or completed.
Right to erasure ("right to be forgotten" / cancellation): to request deletion of your data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis. We may need to retain some data where required by law (e.g., AML, gambling regulations).
Right to restriction of processing: to request that we temporarily restrict the use of your data, for example while accuracy is being verified or where you have objected.
Right to object: to object to processing based on our legitimate interests, including profiling. You always have an absolute right to object to direct marketing, which we will respect.
Right to data portability: to receive certain data you have provided to us in a structured, commonly used, machine-readable format, and to ask us to transfer it to another controller where technically feasible.
Rights related to automated decision-making: where we use automated decisions that produce legal effects or significantly affect you (for example, some risk or eligibility decisions), you may request human review, express your point of view, and contest the decision.

Additional Rights for Certain Jurisdictions (Including Mexico)

Where Mexican law applies, you may exercise ARCO rights (Access, Rectification, Cancellation, Opposition) in line with the Federal Law on Protection of Personal Data Held by Private Parties and related regulations. We will treat such requests in a manner consistent with our obligations under UK GDPR and any local laws.

How to Exercise Your Rights

Submit a request via the support channels on genso.bet (live chat or email), clearly indicating that your request is a "data protection" or "privacy" request and, where relevant, specifying the right you wish to exercise.
We may ask you for additional information to verify your identity and to clarify your request.

We aim to respond to requests within one month (30 days) of receipt. For complex or multiple requests, this period may be extended by up to a further two months, in which case we will inform you of the extension and reasons. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act, as permitted by law.

Cookies & Tracking Technologies

Types of Cookies We Use

Strictly necessary cookies (session and persistent): required for the operation of genso.bet, enabling you to log in, maintain sessions, navigate the site, and use essential features such as placing bets and managing your account.
Functional cookies: remember your preferences, such as language, region, and display settings, to enhance your experience.
Analytics and performance cookies: help us understand how visitors use genso.bet (for example, which pages are most popular or how long sessions last) so we can improve performance and usability. These may include third-party analytics services.
Advertising and marketing cookies: used, where permitted, to deliver relevant promotions and measure the effectiveness of marketing campaigns. These may be set by us or our advertising partners.

Managing Cookies

You can manage or disable cookies through your browser settings. Most browsers allow you to refuse cookies or to delete existing cookies. However, blocking certain cookies may affect the functioning of genso.bet or prevent you from using some features.
Where we provide an in-site cookie or privacy panel, you can adjust your preferences for non-essential cookies and, where applicable, withdraw consent.

Further information about specific cookies in use and their lifetimes may be provided in a dedicated Cookie Policy or cookie banner on genso.bet. Where required by law, we will obtain your consent before setting non-essential cookies.

Data Security

We take the security of your personal data very seriously and implement technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, or damage, in line with industry standards and regulatory expectations.

Technical Measures

Encryption in transit: data transmitted between your browser and genso.bet is protected using TLS (Transport Layer Security) 1.2 or higher.
Encryption at rest: sensitive data is stored using strong encryption or hashing algorithms, with access limited to authorised systems and personnel.
Access controls and authentication: strict access controls, role-based permissions, and strong authentication (including multi-factor authentication for administrative and support accounts) on the Quantum Gaming Platform and related systems.
Network and infrastructure security: firewalls, intrusion detection/prevention systems, anti-malware solutions, and regular patching and hardening of servers.

Organisational Measures

Policies and training: internal policies covering data protection, information security, AML/KYC, and acceptable use, combined with regular staff training, particularly for employees handling customer data and payments.
Vendor due diligence: selection and monitoring of processors and service providers to ensure they implement appropriate security and privacy controls, including contractual obligations.
Audit and testing: regular security assessments, penetration tests, and audits, including those performed by independent bodies such as eCOGRA in relation to fairness and technical integrity of games.
Incident response: documented incident response procedures for identifying, assessing, and mitigating security incidents. Where a personal data breach presents a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals, in accordance with legal requirements.

We aim to align our security practices with recognised international standards (for example, ISO 27001-type controls and SOC 2-aligned processes) appropriate to the risks posed. Nevertheless, no system can be guaranteed to be 100% secure, and we encourage you to use strong, unique passwords, keep your login details confidential, and contact us immediately if you suspect any unauthorised access to your account.

Complaints & Contacts

Contacting Us About Privacy

If you have questions about this Privacy Policy, our data practices, or wish to exercise your rights, you can contact us by:

Using the live chat channel on genso.bet and addressing your message to the "Data Protection Officer".
Using the email support channel listed on genso.bet, clearly marking your message as a "Privacy / Data Protection request".
Writing to: Data Protection Officer, GB Gaming Ventures Ltd., 123, Strait Street, Valletta, VLT 1111, Malta.

We currently do not provide a dedicated telephone helpline for privacy matters; however, our customer support via live chat and email will ensure that your request is directed to the appropriate team.

Complaint Handling Procedure

Initial contact: submit your privacy concern or complaint using one of the channels above, providing as much detail as possible and any relevant account information.
Acknowledgement: we will acknowledge receipt of your complaint and, where possible, provide a reference number.
Investigation: the DPO or a designated privacy specialist will review your complaint, gather relevant information, and may contact you for clarification.
Response: we aim to provide a substantive response within 30 days of receiving your complaint. In complex cases, we may require more time, in which case we will keep you informed of progress.
Further steps: if you are not satisfied with our response, you may escalate the matter to the relevant supervisory authority as described below.

Supervisory Authorities and External Escalation

United Kingdom: you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe that your data protection rights have been violated.
European Union / EEA: if the EU GDPR applies, you may lodge a complaint with your local data protection authority or the authority of the EEA state where you live, work, or where the alleged infringement occurred.
Mexico: where Mexican data protection law applies, you may escalate concerns to the competent Mexican data protection authority in line with the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations.

Please note that for gambling-related transactional disputes (for example, bet settlement or game outcome disputes), you may also have the right to escalate to our ADR provider, the Independent Betting Adjudication Service (IBAS), once you have followed our internal complaints procedure and either received a "deadlock" letter or 8 weeks have passed. This is separate from, and in addition to, your data protection rights.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, regulatory guidance, or industry best practices. When we make material changes, we will take appropriate steps to inform you.

Notification of Changes

On-site notice: we will publish the updated Policy on genso.bet and update the "Last updated" date.
Direct communication: for significant changes, we may notify you by email, account messages, or prominent banners or pop-ups when you next log in.
Advance notice: where feasible and the changes are material, we will provide at least 30 days' notice before the changes take effect, especially if they affect how we use your data or your rights.

Version Control and Your Options

Versioning: we maintain records of previous material versions of this Privacy Policy, which may be available on request or via genso.bet.
Your continued use: if you continue to use genso.bet after changes take effect, you will be deemed to have accepted the updated Policy, to the extent permitted by law.
Right to object or close account: if you do not agree with changes that materially affect your rights or the way your data is processed, you may object where applicable or request account closure. We will then limit processing to what is necessary for legal and regulatory purposes (for example, AML and UKGC requirements) and to resolve any outstanding matters.

Last updated: November 2025.