Bancontact BE Privacy Policy: Check What We Store and Why

1. Who Processes Your Data

The operator of this platform acts as data controller for every piece of personal information described below. We process your data under the General Data Protection Regulation (EU 2016/679) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

You reach our data protection officer through the contact address published on the Bancontact site. Send questions about this policy, your rights or a suspected incident to that address, and we respond within one month of receipt.

2. What We Collect

We gather only what we need to run your account, meet legal duties and keep play fair.

• Identification data: full name, date of birth, nationality, national register number where legislation requires it.
• Contact details: email address, telephone number, residential address.
• Account data: username, password hash, loyalty tier, Coin balance, communication preferences.
• Financial data: payment method, transaction amounts, deposit and withdrawal history, crypto wallet addresses where used.
• Verification documents: identity card or passport, proof of address, proof of payment ownership, source of funds evidence.
• Behavioural data: games opened, bets placed, session duration, tournament entries, bonus activity.
• Technical data: IP address, device type, browser, operating system, language settings, cookie identifiers.

Every account on the Bancontact gaming platform generates this information as a by-product of normal use. We never request data we have no lawful reason to hold, and we do not ask for special categories such as health or political opinions.

3. Why We Process It and On What Legal Basis

Each purpose rests on a specific ground under Article 6 GDPR.

• Opening and running your account
  Legal basisContract performance

  NotesWithout this data no account exists
• Age and identity verification
  Legal basisLegal obligation

  NotesBelgian gambling and AML legislation
• Processing deposits and payouts
  Legal basisContract performance

  NotesIncludes fraud screening
• Anti-money-laundering monitoring
  Legal basisLegal obligation

  NotesReports to the competent authority where required
• Loyalty tiers, Coins and cashback
  Legal basisContract performance

  NotesBased on wagering and deposit counts
• Marketing messages
  Legal basisConsent

  NotesWithdrawable at any time
• Site security and fraud prevention
  Legal basisLegitimate interest

  NotesBalanced against your rights
• Responsible gaming interventions
  Legal basisLegal obligation and legitimate interest

  NotesIncludes EPIS checks

The Bancontact site never sells your personal data, and we do not process it for automated decisions producing legal effects without human review.

4. Who Receives Your Data

We share information only where a purpose above requires it.

• Payment providers: banks, card processors, e-wallet operators and the proprietary payment service handling your transactions.
• Game studios: suppliers such as Play'n GO, Pragmatic Play, NetEnt and live-dealer providers, limited to session and bet data.
• Verification partners: identity and document checking specialists.
• Regulators and authorities: the Belgian Gaming Commission, tax authorities, police and courts, on lawful request.
• Technical suppliers: hosting, analytics and customer support platforms bound by data processing agreements.

Our partners access the Bancontact gaming platform data strictly on instruction, never for their own marketing. Where a supplier sits outside the European Economic Area, we rely on standard contractual clauses or an adequacy decision.

5. How Long We Keep It

Retention runs from the moment the purpose ends, not from collection.

• Account and identification data
  Retention period10 years after account closure
• Verification documents
  Retention period10 years, under AML legislation
• Transaction records
  Retention period10 years
• Game and betting history
  Retention period5 years
• Marketing consent records
  Retention periodUntil withdrawal, then 3 years
• Support correspondence
  Retention period3 years
• Technical logs
  Retention period12 months

Once a period expires, we erase the data or anonymise it beyond recovery.

6. Your Rights

GDPR gives you the following rights, all exercisable free of charge.

• Access: obtain a copy of the data we hold about you.
• Rectification: correct inaccurate or incomplete details.
• Erasure: request deletion where no legal duty requires retention.
• Restriction: freeze processing while a dispute runs.
• Portability: receive your data in a structured, machine-readable format.
• Objection: oppose processing based on legitimate interest.
• Withdraw consent: stop marketing at any time without affecting past lawful processing.

Send requests through the address on the Bancontact site, together with proof of identity. If our answer fails to satisfy you, lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels.

7. Cookies and Tracking

We set cookies in four groups, and you control everything except the first through the consent banner.

• Strictly necessary: login sessions, security tokens, cashier functionality.
• Functional: language choice, layout preferences, saved filters.
• Analytical: aggregated statistics on traffic and page performance.
• Marketing: measurement of campaign effectiveness, set only with consent.

Adjust or revoke your choices at any time through the cookie settings link in the footer. Blocking strictly necessary cookies prevents the account area from working.

8. Security Measures

We apply technical and organisational safeguards appropriate to the risk: encrypted connections, hashed passwords, segregated storage for verification documents, access rights limited to staff who need them and logged access to sensitive records. The Bancontact gaming platform runs regular reviews of these controls. No system eliminates risk entirely, so protect your side too by choosing a unique password and never sharing your login.

Where a breach threatens your rights, we notify the Data Protection Authority within 72 hours and inform you directly without undue delay.

9. Minors

Nobody under 21 may open an account under Belgian gambling rules, and we do not knowingly collect data from minors. Where we discover such an account, we close it and erase the data except what legislation requires us to retain. Parents who suspect a minor has registered should contact us immediately.

10. Changes to This Policy

We update this policy when our processing changes or legislation requires it. The current version, with its effective date, stays published on the site, and we notify registered users of material changes through the notification system before they take effect.