1. Who we are and what this covers
This policy explains what personal data AuraBet collects when you use aurabet.co and our partner panel, why, who we share it with and your rights. It applies to players, partners and visitors.
2. What we collect
Account data: username, e-mail address, country, password (stored only as a salted argon2id hash) and your marketing preference.
Verification data: the identity document, selfie and address you upload when verification is required, and the result of the review.
Payment data: the payout accounts you save (bank details or crypto address and holder name), deposit and withdrawal history and the references payment partners return. We never see card numbers or bank passwords.
Activity data: bets, wins, bonuses, balances, game sessions and messages to support.
Technical data: IP address, approximate location, device and browser type, a device identifier cookie and sign-in history — used to keep your account safe and to detect fraud.
3. How we use it
To run your account and pay you: registration, sign-in, deposits, withdrawals, bonuses and support.
To keep the Platform safe and fair: automated checks compare device, network and payout details across accounts and may look up whether an IP address belongs to a VPN or data centre. Anything a check flags is reviewed by a person before a lasting decision.
Fraud prevention and device information: when you register, sign in, deposit, request a withdrawal or claim a bonus, our own first-party script (no third-party fingerprinting service) records technical facts about the browser and device — a random device identifier kept in a cookie and in your browser storage, time zone and clock offset, language settings, platform, screen size, processor and memory class, touch support, short one-way hashes of how the browser draws graphics and processes audio, and whether the browser is automated. It contains no name, e-mail, contacts, files or browsing history. We compare it with the network your connection comes from (for example a public Tor or data-centre range) to spot duplicate accounts, account takeover and bonus or payment abuse. We rely on our legitimate interest in protecting players and the Platform, and on our legal duties to prevent fraud and money laundering. Using a VPN is not by itself treated as fraud. These records are kept with the fraud-prevention records in section 6.
To send service messages (security codes, payment updates, account notices) and, only if you opted in, offers. You can stop offers at any time from Account or the unsubscribe link in any offer e-mail; service messages continue while you have an account.
To comply with the law and enforce our Terms, and to improve the Platform using aggregated statistics.
4. Who we share it with
Payment providers, to process deposits and withdrawals. Game studios and our sports data provider receive a session identifier and your bets — not your name, e-mail or payment details. Our e-mail provider, to deliver e-mail. At sign-up an e-mail and IP check service may tell us whether an address is a throwaway mailbox or the connection comes from a data centre or VPN. Hosting providers that run our servers and store verification documents privately. Support and service messages may be processed by an AI service provider to help our staff understand and answer them; only the details needed are shared (contact details, payment addresses and identity documents are left out or masked), staff review every reply before it is sent, and the provider may not use the data to train its models. If you use the support assistant chat on the site, your messages — and, when you are signed in, the account details needed to answer (such as your balance, recent payment statuses, verification status, bonus progress and limits) — are processed by the same AI provider to write the answers automatically. The assistant cannot change your account, and you can ask for a person at any time. Chats are kept only briefly to continue the conversation and are not stored, unless you send one to our support team as a request.
Partners whose link you joined through see only anonymous totals — never your name, e-mail, payment details or IP address. Authorities where we are legally required. We do not sell personal data.
5. Security
Passwords are hashed with argon2id; sessions use random tokens of which only a hash is stored; all traffic is encrypted. Verification documents are stored privately and only staff who review them can open them, and every access is logged. Staff accounts require two-factor authentication.
6. How long we keep it
Account and activity data are kept while your account is open. After closure, transaction, verification and fraud-prevention records are kept as long as the law and our payment partners require (generally up to 5 years), then deleted or anonymised. Technical logs are kept for a shorter time.
7. Cookies
Necessary cookies (always on): they keep you signed in, remember a partner link you arrived through and your cookie choice, and hold a device identifier that protects against fraud. At sign-up, Cloudflare Turnstile may check that you are a real browser.
Analytics cookies (only with your consent): Google Analytics 4, to count visits and see which pages work, with IP anonymisation.
Marketing cookies (only with your consent): the Meta pixel, to measure our adverts — when you create an account with marketing cookies allowed, a hashed (unreadable) form of your e-mail is sent to Meta to match the sign-up — and Trustpilot, to invite you to review us.
Nothing beyond necessary cookies is set until you choose. You can change your choice any time with “Cookie settings” at the bottom of every page.
8. Your rights
You can see and update most details in your account. You can ask for a copy of your data, a correction, an end to marketing, or deletion (subject to the retention in section 6). E-mail privacy@aurabet.co from your registered address; we answer within 30 days.
9. Children
The Platform is for adults only. If we learn an account belongs to someone under 18 we close it and delete the data, keeping only what the law requires.
10. International transfers and changes
Our servers and providers may be in different countries; we rely on providers' contractual safeguards. We may update this policy; the date at the top shows the current version.
11. Contact
privacy@aurabet.co · security@aurabet.co · support@aurabet.co