Privacy Policy

This Privacy Policy describes how BS-GAMING ("we", "us", or "our") collects, uses, discloses, and protects your personal information when you visit our website or use our gaming services.

We respect your privacy and are committed to protecting your personal data in compliance with applicable data protection laws, including the GDPR (EU 2016/679), the Personal Data Protection Act (Thailand), and equivalent regulations in other jurisdictions.

We collect the following categories of personal information:

Account Information

• Username, email address, phone number
• Date of birth (to verify age)
• Residential address and country
• Identity documents (passport, ID card, driver's license) for KYC verification

Transaction Information

• Deposit and withdrawal history
• Payment method details (processed via PCI-DSS compliant providers)
• Betting and game activity logs

Technical & Device Information

• IP address, browser type, device identifiers
• Operating system and version
• Approximate geolocation derived from IP
• Log data, cookies, and session timestamps

Voluntary Information

• Communications with customer support (chat, email)
• Survey responses and feedback
• Marketing preferences

We use your personal data for the following purposes:

• Service Provision: Operating your account, processing bets, and managing payments.
• Identity Verification: Complying with KYC and AML obligations.
• Security: Detecting fraud, unauthorized access, and ensuring fair play.
• Communication: Sending transactional notifications, service updates, and (with consent) promotional offers.
• Analytics: Improving our services through aggregated usage analysis.
• Legal Compliance: Meeting regulatory and tax reporting obligations.

Under GDPR, we process your personal data on the following legal bases:

• Contract: Processing necessary to provide our services to you.
• Legal Obligation: Compliance with KYC, AML, and tax laws.
• Legitimate Interests: Fraud prevention, security, and service improvement (where your rights do not override).
• Consent: Marketing communications and non-essential cookies (withdrawable at any time).

We do not sell your personal data. We share information only as necessary with:

• Payment processors to handle deposits and withdrawals.
• Identity verification providers for KYC checks.
• Game providers and software vendors for service operation.
• Regulators and law enforcement when legally required.
• Auditors and legal advisors under confidentiality agreements.
• Marketing service providers only with your explicit consent.

All third parties are bound by data protection obligations equivalent to ours.

Your data may be transferred to and processed in countries outside your country of residence, including jurisdictions that may have different data protection standards. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or transfers only to countries with adequate data protection decisions.

We retain your personal data only for as long as necessary to:

• Provide our services and maintain your account.
• Comply with legal, regulatory, and tax obligations (typically 5–7 years after account closure for gambling operators).
• Resolve disputes and enforce our agreements.

After the retention period, data is securely deleted or anonymized.

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data (subject to legal retention obligations).
• Restriction: Limit how we process your data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Withdraw Consent: Where processing is based on consent, withdraw it at any time.
• Lodge a Complaint: File a complaint with your local data protection authority.

To exercise any of these rights, contact our Data Protection Officer using the details at the bottom of this page. We will respond within 30 days.

We implement industry-standard technical and organizational measures to protect your data, including:

• TLS/SSL encryption for all data in transit.
• AES-256 encryption for sensitive data at rest.
• Two-factor authentication for account access.
• Regular security audits and penetration testing.
• Strict access controls and employee training.
• PCI-DSS compliance for all payment processing.

No system is 100% secure. If we become aware of a breach affecting your data, we will notify you and the relevant authorities in accordance with applicable law.

Our Services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will delete it immediately.

If you believe a minor has registered, please contact our DPO so we can take action.

Our Services may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policies of every site that collects your personal data.

We may update this Privacy Policy from time to time. Material changes will be notified via email or on-site notice at least 14 days before they take effect. The "Last updated" date at the top of this page indicates when the latest revision came into effect.

For any questions, complaints, or to exercise your rights under this policy, please contact our Data Protection Officer using the details below.