Your Privacy at BassBet

This policy explains what personal data we collect when you play at BassBet Casino, why we collect it, how long we keep it, and the controls you have over it. It applies to every visitor, registered player and account holder on bassbet-pokies.com. Last updated 2026.

What Data We Collect

Categories of personal data

We collect only the data we need to run a licensed gaming operation. That spans six categories, each tied to a specific purpose described in the next section.

• Identity data: full name, date of birth, residential address, email address and phone number.
• Verification documents: copies of your passport or ID, proof of address (utility bill or bank statement) and payment method verification.
• Transaction data: deposits, withdrawals, bonuses claimed, wagering history and payment instrument details.
• Technical data: IP address, device type, operating system, browser version, approximate location derived from IP, and session timestamps.
• Gameplay behaviour: games played, bet sizes, win and loss records, session duration and responsible gambling indicators.
• Marketing preferences: which channels you opted into, communication history and your responses to offers.

How We Use Your Information

We use your data to create and manage your account, verify your identity under our Know Your Customer obligations, and process every deposit and withdrawal you make through PayID, cards, e-wallets or crypto. Without this processing we cannot lawfully offer you real money play.

We also analyse gameplay behaviour to detect fraud and money laundering, and to monitor for signs of problematic gambling so our responsible gambling tools (deposit limits, loss limits, session reminders and self exclusion) can be triggered when needed. Where you have given consent, we use your email and phone number to send promotions such as weekly cashback up to 15%, reload bonuses and Drops & Wins tournaments, and you can withdraw that consent at any time.

Finally, we process data to meet legal obligations owed to the Malta Gaming Authority and to financial institutions involved in your transactions.

Our Legal Bases for Processing

Contract. Creating your player account, running your wagers and paying out your winnings are all steps in our service agreement with you. The identity, transaction and gameplay data listed above are processed on this basis, because neither party can perform the contract without it.

Legal obligation. Our licence from the Malta Gaming Authority (MGA/B2C/394/2017) obliges us to verify your identity, monitor transactions against money laundering and keep auditable records. We cannot shorten or skip this processing even at your request, though you can ask us to explain exactly which regulation drives it.

Legitimate interest. Detecting bonus abuse, payment fraud and multi accounting protects you and every other player on our platform. We also rely on legitimate interest for security logging and aggregate analytics that keep the site functioning, always weighed against your privacy expectations.

Consent. Marketing communications, optional cookies that personalise your experience, and any data use beyond the three bases above run only on your consent. Consent is opt in, specific, and revocable at any time through your account settings or the unsubscribe link in every email.

How Long We Keep Your Data

Retention schedule

We hold each category of data only as long as its purpose requires. Gaming regulation is the strictest driver: transaction and wagering records must be retained for at least 5 years after account closure, and we apply that same floor to KYC documentation.

When a retention period ends, we delete or irreversibly anonymise the data. If a regulator or a court has placed a legal hold on your records, deletion waits until that hold lifts.

Who We Share Data With

Categories of recipients

We never sell your personal data. We share it only with processors and authorities who need it to deliver a specific function, and every processor is bound by a written data processing agreement.

• Payment processors handling PayID, Visa, Mastercard, MiFinity, Jeton, Skrill and crypto transactions.
• KYC and AML verification providers that check your documents against sanctioned and PEP lists.
• Game providers whose titles you play, receiving only the minimum data needed to run the session.
• The Malta Gaming Authority and other regulators entitled to request records under law.
• Analytics and site performance providers, working on anonymised or pseudonymised data.
• Professional advisers such as auditors and lawyers, under confidentiality duties.

Your Rights Over Your Data

You can exercise every right below by emailing our data protection officer at [email protected] or through 24/7 live chat. We respond within 30 days and never charge a fee unless a request is manifestly excessive.

• Access: get a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete records.
• Erasure: request deletion where no legal retention duty applies.
• Portability: receive your data in a structured, machine readable format.
• Objection: object to processing based on legitimate interest.
• Withdrawal of consent: stop marketing and optional cookies at any time.
• Complaint: raise concerns with the Office of the Australian Information Commissioner (OAIC) or the Malta Data Protection Commissioner.

Verification of requests

Before actioning a rights request we verify you are the account holder, normally through your registered email plus one security question or an ID re check. This stops attackers using erasure requests to hijack accounts. If gambling related harm is your concern, Gambling Help Online (1800 858 858) offers free, confidential support independent of us.

Cookies and Tracking at BassBet

We use strictly necessary cookies for login sessions, security and load balancing, which need no consent. Analytics and personalisation cookies are optional and set only after you accept them in the cookie banner, and you can change that choice any time. Full details of every cookie, its purpose and its lifespan sit in our dedicated Cookies Policy, which supersedes this summary for all cookie matters.

How BassBet Protects Your Data

All traffic between your device and our servers runs over TLS encryption, and stored payment and identity data is encrypted at rest. Access to personal data follows least privilege: staff see only the slice their role requires, access is logged, and KYC document handling is restricted to trained compliance personnel.

We test our controls through regular security reviews and keep an incident response plan on standby. If a breach affects your personal data and creates a risk to you, we will notify the relevant supervisory authority within 72 hours and tell affected players directly, without undue delay, what happened and what we are doing about it.

Frequently Asked Questions

Can I play at BassBet without giving you my ID documents?

You can register and deposit with basic details, but our Malta Gaming Authority licence requires full KYC verification before your first withdrawal, so ID, proof of address and payment verification will be requested at that point.

How do I stop marketing emails and SMS?

Use the unsubscribe link in any email, change your preferences in your account settings, or contact support. Marketing stops immediately once consent is withdrawn; we keep a suppression record for up to 90 days so we do not contact you again by mistake.

Does BassBet keep my data forever?

No. Marketing data goes when you withdraw consent, technical logs are deleted within 12 months, and transaction records are kept for a 5 year regulatory minimum after account closure, then deleted or anonymised.

Who can I complain to about my privacy?

Contact our DPO at [email protected] first. If you are unsatisfied, you can complain to the Office of the Australian Information Commissioner or, because we are MGA licensed, the Malta Data Protection Commissioner.