Privacy Policy
This Privacy Policy explains how your personal data is collected, used, stored, and shared when you use the online gambling services offered for the Bet Target project through the website targat.bet. It applies to players, registered account holders, and all visitors who access targat.bet from Great Britain, as well as to individuals who contact us or interact with our services in any other way.
We process personal data in accordance with applicable UK data protection law, including the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, and sector-specific rules that apply to licensed gambling operators. Where relevant, equivalent protections are applied for data subjects in other jurisdictions. Effective date: 6 November 2025.
Who We Are
The services available for the Bet Target project via targat.bet for players in Great Britain are operated by AG Communications Limited, a company incorporated in Malta.
- Legal entity: AG Communications Limited
- Registered office / legal address: 135, High Street, Sliema SLM 1548, Malta
- Company registration number: C48328 (Malta)
- UK gambling licence: UK Gambling Commission account number 39483 (remote gambling services for customers in Great Britain). Public register: UKGC licence 39483
AG Communications Limited is a subsidiary of Aspire Global International LTD, which in turn forms part of the NeoGames S.A. group. For certain international operations (for players outside Great Britain), services may be provided under Maltese licence MGA/CRP/148/2007 held by Aspire Global International LTD. In all cases, the entity responsible for your personal data (the "controller") will be clearly indicated in your account or in the relevant terms on targat.bet.
Data protection contact: We have appointed a data protection function responsible for overseeing questions in relation to this Privacy Policy. You may contact our data protection team by using the "Contact Us" or equivalent form on targat.bet or by writing to "Data Protection Officer, AG Communications Limited, 135, High Street, Sliema SLM 1548, Malta". Please mark your communication "Data Protection / Privacy".
What Personal Data We Collect
We collect and process different categories of personal data depending on how you use targat.bet and the Bet Target services. This includes:
- Identification and contact data: full name, date of birth, place of residence, nationality, username, password, security questions, email address, telephone number, language preferences, and copies or details of identity documents (e.g. passport, ID card, driving licence), proof of address and other "Know Your Customer" (KYC) materials.
- Regulatory and risk data: information collected for anti-money laundering (AML) and counter-terrorist financing checks, sanctions screening, affordability and source-of-funds assessments, self-exclusion status (including data received from GAMSTOP or similar schemes), safer gambling flags, and records of interactions related to responsible gambling.
- Account and transactional data: account registration details, login history, account balances, deposits, withdrawals, payment methods used (e.g. card type, masked card number, e-wallet provider), successful and failed transactions, chargebacks, bonuses claimed, and wagering requirements.
- Gaming and behavioural data: betting and gaming history (games played, stakes, wins/losses, session duration), bonus usage, device and channel used, click-paths, in-game events, interactions with promotions, and responses to safer gambling tools (such as deposit limits, time-outs, or self-exclusions).
- Technical and device data: IP address, approximate location derived from IP, device identifiers, browser type and version, operating system, screen resolution, language settings, referrer URL, and log files generated by our web servers and security systems.
- Payment and financial data: limited payment card details (in tokenised or truncated form, as processed via our payment providers), bank account identifiers where applicable, details required to process withdrawals, and information received from payment service providers in relation to fraud checks or regulatory obligations.
- Communications data: copies of your correspondence with us (e.g. via email, live chat, web forms, letters), call recordings where permitted, complaint records, and notes taken by our customer support, anti-fraud, and responsible gambling teams.
- Marketing and preference data: your marketing preferences (email, SMS, push notifications, phone, or post), records of marketing communications sent and how you interact with them (opens, clicks, unsubscribes), and information you provide in surveys or feedback forms.
- Cookies and similar technologies: identifiers stored in cookies, pixels, tags, SDKs or other tracking technologies that help us recognise your device, remember your preferences, provide core website functionality, analyse performance, and deliver personalised content or advertising as described in the Cookies & Tracking Technologies section.
Legal Basis for Processing
We process your personal data only where we have a valid legal basis under UK GDPR and, where applicable, other relevant laws. Depending on the specific activity, one or more of the following grounds will apply:
- Performance of a contract: We process data that is necessary to enter into and perform our contract with you, including:
- creating and managing your targat.bet account for Bet Target services;
- verifying your identity and eligibility to use our services;
- processing deposits, wagers, bonuses, and withdrawals;
- providing customer support and resolving technical issues;
- notifying you of changes to our services that materially affect your use.
- Compliance with legal obligations: As a licensed operator (including under UKGC licence 39483) we are legally required to:
- conduct KYC, AML, and affordability checks, and monitor transactions for suspicious activity;
- maintain accounting and transaction records for specific retention periods (often at least five years after the end of the relationship or last transaction);
- report certain activities to regulators, law enforcement, tax or other competent authorities;
- respect self-exclusion schemes (such as GAMSTOP) and responsible gambling obligations.
- Legitimate interests: Where necessary, we process data to pursue our legitimate interests, while balancing these against your rights and freedoms. These interests include:
- protecting our business and players against fraud, abuse, chargebacks, and security threats;
- ensuring the integrity and fairness of games and promotions;
- improving and developing our products, services, and user experience;
- conducting analytics, statistics, and reporting to manage and optimise our operations;
- establishing, exercising, or defending legal claims and handling disputes (including with ADR services such as IBAS).
- Consent: We rely on your consent where required by law, for example:
- sending direct electronic marketing (email, SMS, push notifications) when not otherwise permitted by soft opt-in rules;
- placing or reading non-essential cookies or similar tracking technologies for advertising or advanced analytics purposes;
- sharing certain data with advertising partners for targeted or personalised marketing.
You may withdraw your consent at any time using the tools provided (for example in your account settings, the unsubscribe link in communications, or cookie preference panels), without affecting the lawfulness of processing based on consent before withdrawal.
- Protection of vital interests and public interest: In rare cases, we may process data to protect your vital interests or those of others, or where processing is necessary for reasons of substantial public interest recognised in applicable law (for example in connection with serious crime, fraud prevention, or safeguarding vulnerable persons).
Purpose of Processing
We use the personal data described above for specific, explicit, and legitimate purposes linked to operating Bet Target via targat.bet and complying with our legal and regulatory obligations. These purposes include:
- Provision of services: creating and managing your account, enabling you to access our games and betting products, processing your transactions, managing bonuses and loyalty schemes, providing customer support, and maintaining the technical operation and availability of targat.bet.
- Regulatory compliance and risk management: fulfilling our duties under gambling, AML, counter-terrorist financing, and responsible gambling regulations, including identity verification, transaction monitoring, affordability assessments, sanctions screening, reporting to competent authorities, and cooperating with regulators and ADR providers.
- Fraud prevention and security: detecting and preventing fraud, money laundering, collusion, abuse of bonuses, account takeover, multi-accounting, and other unlawful or irregular activities, as well as maintaining technical and organisational security measures to protect our systems and your data.
- Service improvement and analytics: analysing how players use targat.bet, measuring performance of games and features, troubleshooting issues, running A/B tests and similar experiments, and using aggregated or pseudonymised data to improve our products, user experience, and business decisions.
- Marketing and personalisation: sending service-related and, where permitted, marketing communications; managing your marketing preferences; providing tailored offers, bonuses and recommendations; measuring campaign performance; and using cookies or similar technologies for advertising in accordance with your choices and applicable law.
- Dispute resolution and legal claims: handling complaints, chargebacks, and disputes; enforcing our terms and policies; collecting debts; and establishing, exercising, or defending legal claims, including in cooperation with IBAS or other ADR entities where applicable.
- Corporate governance: managing our business (including internal audits, compliance reviews, and reporting within the Aspire Global and NeoGames group), responding to due diligence requests, and supporting potential corporate transactions in a manner consistent with data protection rules.
Disclosure & Sharing
We do not sell your personal data. However, in order to operate targat.bet, provide Bet Target services, and comply with legal and contractual obligations, we may share your personal data with carefully selected third parties under appropriate safeguards:
- Group companies: other entities within the Aspire Global and NeoGames group that support technology, operations, risk management, compliance, or customer services. Access is restricted to what is necessary for the relevant function and governed by intra-group data protection agreements.
- Payment and financial service providers: banks, card schemes, payment processors, e-wallets, and other financial institutions that process deposits, withdrawals, and refunds, perform fraud checks, and comply with AML and sanctions obligations.
- Verification, KYC, and AML partners: identity verification providers, credit reference agencies (where lawful), age verification services, sanctions and PEP screening tools, affordability and source-of-funds assessment services, and other due diligence partners.
- Technology and infrastructure providers: hosting and cloud service providers, content delivery networks, security and DDoS protection services, IT support and maintenance partners, game providers, platform providers, and other vendors that process data on our behalf.
- Analytics and cookie partners: providers of analytics, audience measurement, and performance tools that help us understand and improve the use of targat.bet. These partners typically receive pseudonymised or aggregated data, and where cookies or similar technologies are involved, they operate in accordance with your preferences and applicable law.
- Marketing and advertising partners (with consent where required): agencies, networks, affiliation partners, and customer engagement platforms that assist with delivering marketing communications, personalised offers, or advertising. Data sharing for these purposes is subject to your marketing and cookie preferences.
- Regulators, authorities, and ADR providers: the UK Gambling Commission, the Information Commissioner's Office (ICO), the Malta Gaming Authority, tax authorities, law enforcement, courts, and other public bodies when required by law or regulation. For dispute resolution related to gambling transactions, relevant information may be shared with ADR bodies such as IBAS (Independent Betting Adjudication Service).
- Self-exclusion and safer gambling schemes: data may be shared with national self-exclusion schemes such as GAMSTOP and similar initiatives, as well as with organisations that support safer gambling and harm minimisation, in order to comply with regulatory obligations and protect vulnerable players.
- Professional advisers and acquirers: lawyers, auditors, consultants, and potential buyers or investors, where necessary for advice, audits, or corporate transactions (such as mergers or acquisitions). In such cases, data is shared under confidentiality and data protection safeguards, and only to the extent necessary.
Whenever we use service providers that process personal data on our behalf, we enter into written agreements requiring them to act only on our instructions, keep data secure, and comply with applicable data protection laws.
International Transfers
Because AG Communications Limited is established in Malta and forms part of an international group, your personal data may be transferred to, and processed in, countries outside the United Kingdom, including within the European Economic Area (EEA) and in other jurisdictions where our group entities, service providers, or partners are located.
- EEA and Malta: Personal data is routinely processed in Malta and may be processed in other EEA countries where group entities or key service providers are based. The UK has recognised the EEA (and certain other jurisdictions) as providing an adequate level of data protection, so transfers to those countries may occur on this basis.
- Other countries: Some of our technology, analytics, or support providers may be located outside the UK and EEA, in countries that do not benefit from a UK adequacy regulation. In such cases, we implement appropriate safeguards, such as:
- standard contractual clauses or international data transfer agreements approved under UK data protection law, often with additional security and compliance measures; and/or
- robust technical and organisational measures, including encryption, access controls, and data minimisation, to reduce risks to your privacy.
- Access on a need-to-know basis: Regardless of location, access to your data is restricted to personnel and providers who need it to perform their duties and is governed by contractual obligations to protect confidentiality and security.
You may request further information about the safeguards we use, or a copy of the relevant contractual protections, by contacting our data protection team (subject to appropriate redactions to protect commercial or security-sensitive information).
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, regulatory, accounting, or reporting requirements, and to resolve disputes. Retention periods are determined by reference to criteria such as the type of data, the nature of our relationship with you, applicable regulatory rules (including AML and gambling regulations), and limitation periods for legal claims.
- Account and identification data: Typically retained for the duration of your relationship with us and for at least five (5) years after your account is closed or after your last transaction, whichever is later, to comply with AML, gambling, and financial regulations.
- Transactional and gaming data: Records of deposits, withdrawals, bets, wins/losses, bonus usage, and related logs are generally kept for a minimum of five (5) years from the relevant transaction or from account closure, and may be retained longer where necessary for regulatory reporting, investigations, or legal claims.
- AML, KYC, and risk assessment data: Documentation and checks required by AML and similar regulations are retained for the periods prescribed by law (often at least five (5) to seven (7) years after the end of the relationship or the date of the relevant transaction) and may be extended where investigations or proceedings are ongoing.
- Communications and complaint records: Customer service interactions, complaint files, and call recordings (where used) are usually kept for up to seven (7) years after resolution, depending on regulatory requirements and the potential need to establish, exercise, or defend legal claims.
- Marketing and preference data: Retained for as long as you remain subscribed to marketing communications and for a limited period afterwards to evidence your choices. If you withdraw consent or object to marketing, we may keep a record of your preference to ensure that it is respected.
- Technical logs and security data: Retained for shorter periods where possible (for example months rather than years), unless longer retention is necessary for security investigations, fraud prevention, or regulatory compliance.
When personal data is no longer required, we will either securely delete it or irreversibly anonymise it so that it can no longer be associated with you. In certain cases, it may not be technically or legally possible to remove specific copies immediately (for example in backup archives), but such data will be isolated and protected until deletion is feasible.
Your Rights
Under UK GDPR and other applicable data protection laws, including where relevant the Mexican Federal Law on Protection of Personal Data Held by Private Parties, you have a number of rights in relation to your personal data. These rights may vary depending on your place of residence and the specific circumstances, but generally include:
- Right of access: to obtain confirmation of whether we process your personal data and, if so, to receive a copy of your data and certain information about how we process it.
- Right to rectification: to have inaccurate or incomplete personal data corrected or updated. You can usually update many details directly in your targat.bet account.
- Right to erasure ("right to be forgotten" / cancellation): to request deletion of your personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis. This right is subject to important exceptions, particularly where we must retain data to comply with legal or regulatory obligations (such as AML and gambling laws) or to establish, exercise, or defend legal claims.
- Right to restriction of processing: to request that we temporarily restrict processing of your data in specific situations, for example while we verify its accuracy or assess an objection.
- Right to object: to object at any time to processing based on legitimate interests, on grounds relating to your particular situation, and to object to the use of your data for direct marketing (including profiling for such purposes). We will stop direct marketing if you object.
- Right to data portability: to receive certain personal data you have provided to us in a structured, commonly used, machine-readable format and to request that we transmit it to another controller where technically feasible and legally required.
- Rights related to consent: where processing is based on your consent, you can withdraw that consent at any time using the tools provided (for example, marketing preference settings, cookie controls, or unsubscribe links). Withdrawal will not affect the lawfulness of prior processing.
For individuals protected by Mexican data protection law, equivalent rights are often referred to as "ARCO" rights (Acceso, Rectificación, Cancelación y Oposición). Requests can be made through our standard data protection contact channels and will be handled in line with applicable legal requirements.
How to exercise your rights: You can submit a request by contacting our data protection team via the "Contact Us" form on targat.bet or by writing to the postal address indicated in the "Who We Are" section, clearly describing the right you wish to exercise and providing sufficient information to verify your identity. We may ask for additional information to confirm your identity where necessary to protect your data.
Response times and fees: We aim to respond to all valid requests within 30 days from receipt, and we may extend this period by up to a further two months for complex or numerous requests (in which case we will inform you of the extension and reasons). We do not charge a fee for handling your request, unless it is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act as permitted by law.
Cookies & Tracking Technologies
targat.bet uses cookies and similar tracking technologies to ensure the proper functioning of the site, enhance your experience, perform analytics, and, where permitted, provide personalised content and advertising in connection with Bet Target services.
- Types of cookies we use:
- Session cookies: temporary cookies that are stored on your device only while your browser session is active and are deleted when you close your browser. They support functions such as secure login and placing bets.
- Persistent cookies: cookies that remain on your device for a defined period (for example days or months) to remember your preferences (such as language or login status) and to help us understand how you use the site over time.
- First-party cookies: cookies set directly by targat.bet to support core functionality, security, and basic analytics.
- Third-party cookies: cookies set by external providers (for example analytics or advertising partners) to deliver services on our behalf, such as usage statistics, fraud detection, and, where allowed, personalised marketing.
- Purposes of cookies:
- Strictly necessary / functional: required for the operation of the website and to provide the services you request, such as navigating between pages, logging into secure areas, processing payments, and maintaining session security.
- Performance and analytics: used to collect aggregated information about how visitors use targat.bet (for example which pages are visited most often, error messages received, and response times) so that we can improve functionality and user experience.
- Advertising and personalisation: used to deliver, measure, and improve marketing campaigns, to show more relevant content or offers, and to limit the number of times you see a particular advertisement, in accordance with your preferences and applicable law.
- Managing cookies: When you first visit targat.bet, and periodically thereafter, you may be presented with a cookie banner or preference centre that allows you to accept or reject different categories of non-essential cookies. You can change your choices at any time via the cookie settings accessible on the site (where available).
You can also manage cookies through your browser settings by blocking or deleting them or by configuring your browser to notify you before they are placed. Please note that disabling certain cookies may affect the functionality of the site and your ability to use some features (for example remaining logged in or placing bets).
Data Security
We take the security of your personal data and your funds seriously and implement appropriate technical and organisational measures designed to protect them against unauthorised access, accidental loss, destruction, or damage.
- Technical safeguards: All communication between your browser and our servers is protected using Transport Layer Security (TLS 1.2 or higher) with strong encryption. Data is protected in transit and, where appropriate, encrypted or pseudonymised at rest. We employ firewalls, intrusion detection/prevention systems, and anti-malware tools to protect our infrastructure.
- Access controls: Personal data is accessible only to authorised personnel who need it for their job functions. Access rights are granted on a "need-to-know" and "least privilege" basis, are regularly reviewed, and are logged and monitored. Logical segregation is used to separate systems and data sets.
- Authentication and account security: We support strong authentication mechanisms, including optional two-factor authentication (2FA) for player accounts. You are responsible for keeping your login credentials confidential and choosing a strong password. Our systems include automated monitoring to detect suspicious login activity or potential account takeover.
- Operational and organisational measures: Staff receive training on data protection, information security, and responsible gambling. Our anti-fraud and compliance teams monitor for suspicious activity, including multi-accounting, unusual betting patterns, and potential money laundering, and conduct additional KYC checks where required.
- Financial safeguards: In line with UK Gambling Commission requirements, player funds are held in segregated accounts separate from company operational funds, providing a "medium" level of protection in the event of insolvency. Additional arrangements are in place to help ensure that player balances can be distributed if the operator becomes insolvent.
- Vendor and systems management: We assess key third-party providers for their security practices and include data protection obligations in our contracts. Security testing, vulnerability management, and periodic reviews of systems and controls are carried out as part of our risk management framework.
- Incident response: We maintain procedures for identifying, assessing, and responding to potential data breaches or security incidents. Where required by law, we will notify the relevant supervisory authority (such as the ICO) without undue delay and, where appropriate, inform affected individuals.
Our security programme is designed to align with recognised industry standards and good practice (for example, principles found in ISO 27001 and SOC 2) even where formal certification may not apply to all systems or entities. No system can be guaranteed 100% secure, but we continually review and enhance our controls to address evolving threats.
Complaints & Contacts
If you have questions, concerns, or complaints about how we handle your personal data in connection with Bet Target services on targat.bet, you should contact us first so that we can attempt to resolve the issue.
- Contacting us: You can reach our data protection team by:
- using the "Contact Us" or similar form available on targat.bet, selecting the privacy or data protection option where available; or
- writing to: Data Protection Officer, AG Communications Limited, 135, High Street, Sliema SLM 1548, Malta.
- Internal handling of complaints: We aim to acknowledge receipt of privacy-related complaints promptly and to provide a substantive response within 30 days. Complex cases may require more time; if so, we will inform you of any extension and the expected timeframe.
- Right to lodge a complaint with a supervisory authority (UK and EU): If you are not satisfied with our response, or if you prefer not to contact us first, you have the right to lodge a complaint with your data protection authority. For UK residents, this is the Information Commissioner's Office (ICO):
- Website: www.ico.org.uk
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom
- Telephone: +44 (0)303 123 1113
- Mexican data protection authority: For individuals whose data is protected under Mexican law, you may have the right to lodge a complaint with the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) if you believe your rights under the Federal Law on Protection of Personal Data Held by Private Parties have been infringed. Further information is available via the official INAI channels.
- Gambling-related disputes: If your concern relates to a gambling transaction or gaming outcome rather than data protection (for example, bet settlement or game fairness) and you cannot resolve it through our internal complaints procedure within the applicable timeframe, you may be able to escalate the matter to our designated Alternative Dispute Resolution (ADR) provider, IBAS (Independent Betting Adjudication Service), as described in the terms and conditions applicable to targat.bet. This process is free of charge to you.
Updates
We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal or regulatory developments, or improvements to our services. When we make changes, we will revise the "Last updated" date and, where the changes are material, we will take appropriate steps to inform you.
- Notification methods: Material changes may be communicated through notices on targat.bet (for example banners or pop-up messages), messages to your account inbox, and/or email notifications where appropriate. Non-material updates may be indicated by updating the text available on the website.
- Advance notice: Where a change would significantly affect your rights or how we use your data, we will, where reasonably practicable, provide at least 30 days' prior notice before the updated policy takes effect, so that you have an opportunity to review it.
- Your choices: If you do not agree with the updated policy, you may choose to close your account and stop using targat.bet. Continued use of the services after the effective date of a revised Privacy Policy will constitute your acknowledgment of the changes, to the extent permitted by law.
Last updated: November 2025.