Scope and controller
This Privacy Notice explains how ARBet handles personal information when you visit the website, create an account, use wallet or gaming features, contact support, or participate in chat and promotions.
The licensed ARBet operating entity will be the controller for account and gaming data unless a final jurisdiction-specific notice states otherwise. Its legal name, registered address, privacy contact, data-protection representative, and regulator must be inserted before launch.
Information we collect
We may collect account information such as email, username, profile image choice, verification status, preferences, and account timestamps; compliance information such as legal name, date of birth, address, identity evidence, location, sanctions results, and source-of-funds evidence; and activity information such as wagers, game results, seed receipts, deposits, withdrawals, wallet addresses, transaction hashes, ledger entries, chat messages, moderation actions, and support records.
Technical information may include IP address, approximate location, device and browser details, session and security events, request timing, cookie identifiers, and diagnostic logs. We do not ask for or store a wallet private key or seed phrase.
Where information comes from
Information comes from you, your use of ARBet, public blockchains, identity and age-verification providers, fraud and sanctions screening services, hosting and security providers, payment or custody partners, and competent authorities where permitted by law. Cloudflare Turnstile may process device, browser, network, and interaction signals to distinguish people from automated abuse.
Blockchain records are public and may link wallet activity to other public transactions. ARBet cannot delete or change information written to a public blockchain.
How we use information
We use personal information to create and secure accounts; verify age, identity, location, and eligibility; process and reconcile wallet activity; accept and settle wagers; provide fairness and transaction history; prevent fraud, money laundering, abuse, and self-exclusion bypass; moderate chat; handle support and complaints; maintain records; improve reliability; and meet licensing, tax, accounting, audit, and legal duties.
Where applicable, our legal bases include performing our contract with you, complying with legal obligations, protecting vital interests, pursuing legitimate interests in security and service integrity, and consent for optional communications or technologies where consent is required.
Checks and automated decisions
Security, fraud, sanctions, responsible-gaming, and transaction-monitoring systems may flag activity for review. A flag may temporarily delay a deposit, withdrawal, wager, chat privilege, or account action. Where a decision has a legal or similarly significant effect, ARBet will provide human review and an explanation or appeal right when required by law.
Cookies and local storage
ARBet uses essential session cookies for secure authentication and fraud prevention. Preference storage may remember choices such as sound, display currency, or favourites on your device. Essential technologies cannot be disabled while remaining signed in; optional analytics or advertising technologies will not be activated without the notice and consent required by applicable law.
Authentication session cookies are configured as HttpOnly, Secure in production, and SameSite=Lax. Sensitive credentials and service keys are not stored in browser storage.
International transfers
Suppliers and infrastructure may process information outside your country. Where required, ARBet will use an approved transfer mechanism, assess destination-country protections, and provide information about relevant safeguards on request. Production regions and transfer mechanisms must be confirmed in the final jurisdiction-specific notice.
How long we keep information
We retain information only as long as needed for the purposes above. Gaming, identity, wallet, anti-money-laundering, complaint, self-exclusion, and accounting records may need to be retained after account closure for the period required by the applicable licence and law. Security logs and chat moderation records are kept for shorter risk-based periods unless needed for an investigation.
When retention is no longer required, information is deleted or irreversibly anonymised, subject to backups and immutable public-blockchain records. A final retention schedule with exact periods must be approved before launch.
Security
ARBet uses access controls, encrypted transport, secure session cookies, server-side authorisation, database row-level security, rate limiting, audit records, restricted production secrets, and monitoring designed to protect information. No online service can guarantee absolute security.
Do not send ARBet a private key or seed phrase. Report suspected account compromise through the official support channel and change the password of the connected email account when appropriate.
Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information; withdraw consent; appeal certain decisions; and complain to a data-protection authority. Identity verification may be required before a request is completed.
Some deletion requests cannot be completed immediately where records must be preserved for gaming regulation, anti-money-laundering, fraud prevention, disputes, self-exclusion enforcement, or other legal obligations. We will explain any lawful restriction.
Children and excluded players
ARBet is not intended for anyone under 18 or below the applicable legal gambling age. We do not knowingly permit minors to hold accounts. If we learn that an ineligible person supplied personal information, we will restrict the account, investigate, and delete or preserve information as required by law.
Updates and contact
We may update this notice when the Services, providers, or legal requirements change. Material changes will be highlighted and, where required, notified before they take effect.
Before launch, ARBet must publish a monitored privacy email and postal address, the licensed controller’s identity, and any applicable representative or data-protection officer details here. You may also complain directly to the data-protection authority in your country.