Privacy Policy

OBSERVE: This Privacy Policy explains how personal data is collected and used when you visit or use the Rex Bet experience on the reks.bet website, including when you register, place bets, make payments or interact with our support team.

EXPAND: The notice is designed in line with the UK General Data Protection Regulation ("UK GDPR"), the UK Data Protection Act 2018, and relevant industry standards for online gambling and remote betting. It applies to all website visitors, registered players, and any person who communicates with us via reks.bet, whether accessing from the United Kingdom or other supported countries.

REFLECT: By using Rex Bet on reks.bet you acknowledge that you have read this Privacy Policy and understand how your data may be processed. This version of the Privacy Policy is effective from 6 November 2025.

Who We Are

OBSERVE: The Rex Bet product on reks.bet is operated for players by the Rex Bet brand, which is part of the Throne group of companies. For data protection purposes, the main data controller for gaming operations is Throne Entertainment B.V.

EXPAND:

Controller: Throne Entertainment B.V., a private limited liability company (B.V.) operating the Rex Bet sportsbook and casino brand.
Registered/operational address: Emancipatie Boulevard Dominico F. "Don" Martina 29, Curaçao.
License information: Online gaming activities are conducted under Master License 5536/JAZ issued by C.I.L. Curaçao Interactive Licensing N.V.
Payment services partner: TPSolution Limited, Cyprus, which acts as a payment processing provider for certain deposit and withdrawal methods used on reks.bet.
Data protection contact (DPO/privacy team): You can contact our privacy team at [email protected] or by writing to "Privacy - Throne Entertainment B.V." at the Curaçao address above.

REFLECT: For most uses of your personal data on Rex Bet, Throne Entertainment B.V. is responsible for deciding why and how your data is processed. Certain partners (such as banks, card schemes and independent payment processors) will act as separate controllers for parts of the payment processing cycle and will provide their own privacy notices in addition to this one.

What Personal Data We Collect

OBSERVE: When you access or use Rex Bet on reks.bet we collect a combination of information that you provide directly, data generated through your use of our services, and technical data collected automatically from your devices.

Account, Identity and Contact Data

EXPAND: We collect information needed to create and manage your player account and comply with KYC/AML requirements:

Identification data: full name, date of birth, country of residence, nationality, gender (if provided), and proof-of-identity details from documents such as passport, national ID card, or driving licence.
Contact data: email address, residential address, billing address, and any telephone numbers you choose to provide.
Verification data: copies or images of ID documents, proof of address, payment ownership evidence, and any information you submit when we conduct enhanced checks (for example, when cumulative withdrawals exceed €2,000 or in cases of suspicious activity, in line with our AML/KYC policy).

Technical and Device Data

EXPAND: When you access reks.bet, our systems automatically collect technical information to keep the service secure and functional:

Device data: device type, operating system, browser type and version, language settings, approximate location inferred from IP address, timezone.
Usage logs: login timestamps, successful and failed login attempts, session duration, pages visited, clicks, navigation paths and error logs.
Network data: IP address, internet service provider and related connection metadata required for fraud prevention and security.

Payment and Financial Data

EXPAND: To process deposits and withdrawals, we collect:

Card and payment details: masked card numbers, expiry dates, cardholder name, issuing bank identifiers, and transaction identifiers (processing is often performed via TPSolution Limited and other payment partners).
Wallet and crypto details: cryptocurrency wallet addresses, transaction hashes and related blockchain data when you use digital assets such as Bitcoin, USDT, Ethereum or Litecoin.
Transaction records: deposits, withdrawals, bonuses, chargebacks, refunds, and accounting information, including currency and FX-related information when applicable.

Behavioral, Gaming and Profile Data

EXPAND: We collect data on how you use Rex Bet to operate the platform responsibly and meet regulatory obligations:

Gaming activity: bet history, stakes, odds, wins and losses, game selections, time spent on games and sports categories, bonus usage, and risk or exposure levels.
Responsible gambling data: self-exclusion status, deposit or loss limits, time-out records and any information you provide about gambling-related concerns.
Communication data: records of emails, secure messages, and chat logs with customer support or the complaints team.

Cookies and Similar Technologies

EXPAND: We use cookies, pixels, tags and similar technologies on reks.bet to recognise your browser or device and to improve your experience. These technologies collect identifiers such as cookie IDs, advertising IDs, and associated browsing behaviour.

REFLECT: Together, these categories of data allow us to provide the gaming services, protect your account, carry out necessary payments and verification checks, and comply with legal and regulatory duties in Curaçao, the UK and other relevant jurisdictions. Where certain data is optional, we will indicate this clearly at the point of collection.

Legal Basis for Processing

OBSERVE: Under UK GDPR we must identify specific legal grounds (legal bases) for processing your personal data. Our main legal bases are consent, performance of a contract, compliance with legal obligations and legitimate interests.

Contractual Necessity

EXPAND: We process your data where it is necessary to enter into or perform our agreement with you, including to:

create and maintain your Rex Bet account on reks.bet;
process deposits, withdrawals and bets, including settlement of winnings and losses;
provide customer support and resolve operational issues;
manage bonuses, promotions, and loyalty or VIP programmes that form part of your gaming experience.

Legal Obligations

EXPAND: We process certain data because we are legally required to do so under anti-money laundering, counter-terrorist financing, fraud prevention, sanctions and accounting laws, particularly in Curaçao and, where applicable, other regulatory jurisdictions. This includes:

identity verification (KYC) and source-of-funds/source-of-wealth checks;
monitoring and reporting of suspicious transactions;
maintaining transaction records for statutory retention periods;
responding to lawful requests from regulators, tax authorities or law enforcement.

Legitimate Interests

EXPAND: We rely on our legitimate interests, balanced against your rights, to:

secure our systems and prevent fraud, abuse and cheating, including cross-brand risk management across sister sites in the Throne network;
perform analytics to understand service performance and improve user experience;
enforce our General Terms and Conditions and protect our legal rights;
personalise content and non-intrusive recommendations within the platform.

Consent

EXPAND: We rely on your consent where required by law, including for:

sending electronic marketing communications (email, push notifications or SMS) that are not strictly necessary to provide the service;
using non-essential cookies or similar tracking technologies for advertising or cross-site profiling; and
processing certain sensitive responsible gambling information where this goes beyond what is strictly necessary for legal obligations.

REFLECT: Where we rely on consent, you may withdraw it at any time (for example, by changing your marketing preferences or cookie settings). Where we rely on legitimate interests, you have the right to object, as explained in the "Your Rights" section below.

Purpose of Processing

OBSERVE: We process personal data for clearly defined purposes linked to providing and improving Rex Bet on reks.bet, meeting legal obligations, and ensuring a safe and fair gaming environment.

EXPAND:

Service provision: to register accounts, authenticate logins, place and settle bets, manage balances, and provide access to sportsbook and casino content.
Account administration: to manage account settings, verify identity and age, process withdrawals, apply bonuses and loyalty rewards, and communicate essential information about your account.
Legal and regulatory compliance: to meet AML/KYC requirements, monitor for suspicious activity (including thresholds such as cumulative withdrawals above €2,000), comply with sanctions and financial reporting duties, and cooperate with competent authorities.
Risk management and fraud prevention: to detect and prevent fraud, chargebacks, abuse of bonuses, multi-accounting, money laundering, and other prohibited conduct, including across sister brands within the Throne network.
Service improvement and analytics: to monitor performance, diagnose technical issues, analyse trends and usage patterns, and develop new features or betting products.
Marketing and personalisation: to provide tailored offers, promotions, and content, subject to your marketing and cookie preferences, and to measure the effectiveness of campaigns.
Responsible gambling: to administer self-exclusion, limits and time-outs, and to analyse behaviour that may indicate problematic gambling so that we can intervene appropriately.

REFLECT: Each processing purpose is mapped to a corresponding legal basis, and we do not use your data in ways that are incompatible with these stated purposes. Where we wish to use your data for a new purpose, we will inform you and, where required, seek your consent in advance.

Disclosure & Sharing

OBSERVE: We share personal data only with third parties who need it to fulfil specific functions or legal obligations and who are bound by appropriate confidentiality and data protection obligations.

EXPAND:

Payment partners and financial institutions: banks, card schemes (e.g. Visa, Mastercard), TPSolution Limited (Cyprus) and other PSPs, e-wallet and cryptocurrency processors who handle payments, FX conversions and related financial services.
Technical and operational service providers: hosting providers, data centres, content delivery networks, customer support platforms, email and SMS gateways, analytics and business intelligence providers, and IT security vendors.
Group and affiliated entities: other companies within the Throne Entertainment B.V. network (including brands serving Turkish and LATAM markets) for risk management, fraud prevention, cross-brand self-exclusion where necessary, and internal reporting.
Regulators and authorities: gaming regulators (such as C.I.L. in Curaçao), financial intelligence units, tax authorities, courts and law enforcement agencies where we are required or permitted by law to share information.
Marketing and advertising partners: subject to your consent, we may work with affiliates, advertising networks and campaign measurement providers to deliver or measure marketing communications relating to reks.bet.
Professional advisers: lawyers, auditors, and consultants who assist us with compliance, dispute resolution and corporate governance.
Corporate transactions: in the context of a merger, acquisition, restructuring or similar corporate transaction involving Throne Entertainment B.V. or the Rex Bet brand, where permitted by law.

REFLECT: We do not sell your personal data in the sense of transferring it for monetary consideration as a standalone asset. Whenever we share data, we do so under contracts requiring appropriate security, confidentiality and data protection standards. Where third parties act as processors on our behalf, they may only use the data in accordance with our documented instructions.

International Transfers

OBSERVE: Because Throne Entertainment B.V. operates from Curaçao and uses partners in Cyprus and other countries, your personal data may be transferred outside the United Kingdom.

EXPAND:

Primary processing locations: Personal data is stored and processed in Curaçao (our main operational base) and Cyprus (for payment processing via TPSolution Limited), and may also be processed in other EEA and non-EEA countries where our service providers are located.
Safeguards for non-UK/EEA transfers: When transferring data from the UK to countries that do not have an "adequacy decision" from the UK government, we implement appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) and/or the UK Addendum to the EU Standard Contractual Clauses.
Transfers to the United States and other jurisdictions: Where we use service providers established in the US or similar jurisdictions, we rely on the UK extension to the EU-US Data Privacy Framework where applicable, or, where that is not available, on standard contractual clauses and additional security measures.
Blockchain transparency: Cryptocurrency transactions are recorded on public blockchains that are not controlled by Throne Entertainment B.V.; such ledgers may be accessible worldwide and, by design, cannot be altered or erased.

REFLECT: Regardless of where your data is processed, we require that it is handled in accordance with this Privacy Policy and with protections equivalent to those required by UK data protection law. You can contact us for further details of the safeguards applied to specific transfers.

Data Retention

OBSERVE: We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including satisfying legal, accounting or reporting requirements.

EXPAND:

Player account data: Core account information (identity, contact details, account history) is typically retained for the lifetime of your account and for up to five (5) years after closure, unless a longer period is required by law or necessary for the establishment, exercise or defence of legal claims.
Transaction and AML/KYC records: Payment records, verification documents and AML-related files are generally retained for five (5) to seven (7) years from the relevant transaction or from the end of the business relationship, in line with applicable financial and anti-money laundering regulations.
Responsible gambling data: Self-exclusion and limit information is kept for the duration of the exclusion/limit and for a reasonable period thereafter to ensure that restrictions are respected and to comply with regulatory expectations.
Marketing data: We retain marketing preference data until you withdraw consent or object, after which we will suppress your details from marketing lists while retaining limited records to respect your choice.
Technical logs and security data: Security, audit and system logs are retained for periods typically ranging from a few months up to five (5) years, depending on their relevance for security, fraud investigation and compliance.

REFLECT: When data is no longer required, we will securely delete, anonymise or aggregate it. If you request deletion, we will also consider our legal obligations and legitimate interests, which may require us to retain certain information despite your request, for example to comply with AML regulations or to resolve disputes.

Your Rights

OBSERVE: As a data subject, you have a range of rights over your personal data under UK GDPR and comparable regimes. For players from LATAM markets, we also align our practices with key principles of Mexican data protection law (notably the Federal Law on the Protection of Personal Data Held by Private Parties), including ARCO rights (Access, Rectification, Cancellation and Opposition).

EXPAND: Subject to certain conditions and exemptions, you have the right to:

Access: obtain confirmation as to whether we process your data and receive a copy of the personal data we hold about you.
Rectification: request correction of inaccurate or incomplete personal data.
Erasure ("right to be forgotten" / Cancellation): request deletion of your data where it is no longer needed, where you withdraw consent and there is no other legal ground, or where processing is unlawful (subject to AML and regulatory retention requirements).
Restriction: request that we limit processing of your data in specific circumstances (for example, while a dispute about accuracy is investigated).
Objection: object to processing based on legitimate interests and to direct marketing at any time, including profiling related to such marketing or opposition under ARCO principles.
Data portability: receive personal data that you provided to us in a structured, commonly used and machine-readable format, and request that we transmit it to another controller where technically feasible.
Withdraw consent: withdraw any consent you have given (for example for marketing or non-essential cookies) without affecting the lawfulness of processing before withdrawal.
Human intervention in automated decisions: request human review of any solely automated decision that produces legal or similarly significant effects concerning you, where such tools are used.

Procedures and timeframes: To exercise your rights, contact us at [email protected] with the subject line "Privacy Request". We may ask for additional information to verify your identity. We aim to respond within 30 days of receiving a complete request, with the possibility of extending this by a further two months where requests are complex or numerous. Exercising your rights is generally free of charge, although we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive.

REFLECT: These rights are not absolute and may be limited by legal obligations, particularly those related to anti-money laundering, gaming regulation and financial record-keeping. Where we cannot fully comply with your request, we will explain the reasons and inform you of your options to escalate the matter to a supervisory authority.

Cookies & Tracking Technologies

OBSERVE: Cookies and similar technologies help us operate Rex Bet efficiently, remember your preferences and provide a secure, personalised experience. Some cookies are essential, while others are used for analytics or advertising subject to your consent.

EXPAND:

Session cookies: temporary cookies that exist only while your browser is open and are deleted when you close it; used for functions such as maintaining your login session and keeping bet slips active.
Persistent cookies: remain on your device for a defined period to remember choices (such as language, odds format or interface preferences) and to help us recognise returning users.
First-party cookies: set directly by reks.bet to operate the site and gather usage statistics.
Third-party cookies and trackers: placed by analytics providers, affiliate networks, advertising partners or social media services to measure traffic sources, campaign performance and, where permitted, to deliver targeted advertising about reks.bet.

Purposes: Cookies are used for (i) strictly necessary functions (security, load balancing, account login), (ii) performance and analytics, (iii) functionality and personalisation, and (iv) advertising, retargeting and affiliate attribution, which are only activated with your consent where required by UK privacy and electronic communications rules.

Management: You can manage your cookie preferences via the cookie banner or settings tool displayed when you first visit reks.bet and in your account area where available. You can also adjust your browser settings to block or delete cookies; however, some features of Rex Bet may not function properly without essential cookies.

REFLECT: By controlling your cookie settings you can influence the extent to which your browsing behaviour is used for analytics or marketing, without affecting essential cookies needed for core functionality and security.

Data Security

OBSERVE: We take the security of your personal data seriously and implement technical and organisational measures designed to protect it against unauthorised access, loss, misuse, alteration or destruction.

EXPAND:

Encryption: Data transmitted between your device and reks.bet is protected using TLS (Transport Layer Security) 1.2 or higher. Where feasible, sensitive data is encrypted at rest in our databases and storage systems.
Access controls and authentication: Access to production systems is restricted on a "need-to-know" basis and protected with strong authentication mechanisms, including multi-factor authentication for administrative accounts.
Network and application security: We employ firewalls, intrusion detection/prevention systems, DDoS mitigation and secure development practices to reduce vulnerabilities and monitor for suspicious activity.
Monitoring, audits and testing: Systems are monitored, logged and periodically tested. We conduct security reviews and may engage independent experts to perform audits or penetration tests of our infrastructure.
Staff awareness and policies: Personnel with access to personal data receive appropriate training and are bound by confidentiality obligations. Internal policies and procedures govern data handling, classification and incident response.
Incident response: In the event of a data breach, we will investigate promptly, mitigate harm, and notify affected users and relevant authorities where required by law.

REFLECT: Our controls are designed to align with recognised information security good practices and frameworks such as ISO 27001 and SOC 2, although Rex Bet is not formally certified under these standards as of 2025. No system is completely secure, but we endeavour to maintain a level of protection appropriate to the nature of the data and the risks associated with online gambling services.

Complaints & Contacts

OBSERVE: We aim to resolve all privacy-related concerns directly, but you also have the right to complain to supervisory authorities if you are unhappy with our handling of your personal data.

EXPAND:

First-level complaints (to us): If you believe your data has been used improperly or your rights have not been respected, please contact our privacy team at [email protected], or via secure messaging in your reks.bet account where available. You may also write to "Privacy - Throne Entertainment B.V." at Emancipatie Boulevard Dominico F. "Don" Martina 29, Curaçao.
Procedure: Provide your account identifier, a clear description of your concern and any supporting evidence. We will acknowledge receipt of your complaint and aim to provide a substantive response within 30 days. For complex matters, we may extend this period and will inform you of the reasons and expected timeframe.
Escalation within the company: If you are dissatisfied with the initial response, you may request that the matter be escalated to our Data Protection Officer or a senior compliance manager for further review.
Supervisory authorities (UK/EU): UK users have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk. Players in the EU/EEA may contact their local data protection authority.
Mexican data protection authority: For users in Mexico or LATAM markets seeking alignment with Mexican privacy principles, complaints may be addressed to the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) via www.inai.org.mx, in addition to contacting us.
Gaming dispute mechanisms: For gambling-related disputes (e.g. bet settlement, account closure), escalation may also involve Curaçao-based mediation or regulatory channels, in line with our General Terms and Conditions. These mechanisms are separate from, and in addition to, your data protection rights.

REFLECT: Using our internal complaints procedure helps us address your concerns as quickly and effectively as possible. However, you may contact a supervisory authority at any time, particularly if you believe your rights under data protection law have been infringed or if we have not responded within the applicable timeframe.

Updates

OBSERVE: We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or best practices.

EXPAND:

Notification methods: When we make material changes, we will take appropriate steps to inform you, which may include email notifications, in-account messages, prominent banners on reks.bet or prompts at your next login.
Advance notice: Where a change significantly affects how or why we process your data, we will, where practicable, provide at least 30 days' notice before the change takes effect, especially where the change relies on your consent or alters your existing choices.
Version control: Each version of the Privacy Policy will be labelled with an effective date and, where relevant, a brief indication of material changes. This version is marked as Last updated: 6 November 2025.
Your options: If you do not agree with the updated terms, you may choose to stop using Rex Bet and request account closure. Where changes are based on consent (for example, new marketing uses), you can decline or withdraw consent without closing your account.

REFLECT: We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data on reks.bet. Continued use of Rex Bet after updates take effect will normally indicate your understanding of the revised notice, without affecting your underlying rights under UK or other applicable data protection laws.