Last updated 21 September 2026
1. Who we are
Bet Tom Limited, 3a Kingfisher Court, Brambleside, Uckfield, TN22 1QQ, United Kingdom, is the controller of your personal data. Our Data Protection Officer can be reached at DPO@bettom.com.
2. What we collect
Registration data
Your first and last name, date of birth, email address, home address and postcode, password (stored only as a secure hash), the date you accepted our Terms and Privacy Policy, and your marketing choice.
Identification data
Copies of the documents you upload for verification: photo ID, proof of address and any further documents we ask for, such as evidence of source of funds. Results of checks we run with verification and fraud prevention services.
Payment information
Deposit and withdrawal records: amount, date, status, method and reference. Full card details are handled by our payment provider and are not stored by us.
Betting activity
Every bet you place: event, market, selection, odds, stake, potential return, result and time.
Casino activity
Each casino round: game, provider, time, stake and return, as recorded by the game server.
Device and technical information
IP address, browser and device type, login times, and the pages you visit on bettom.co. We use this for security, to spot unusual logins and to keep the site working.
Communications
Emails and contact form messages you send us, and our replies.
Safer gambling information
Limits, time-outs and self-exclusions you set, reality check settings, and notes of any conversations we have with you about your gambling.
Financial vulnerability and risk information
Where required or permitted by gambling regulation, we may obtain information relevant to financial vulnerability or financial risk. This may include information from public records (for example bankruptcy, insolvency and county court judgment records) and, where applicable, information provided through authorised third-party services or credit reference agencies. We use this information to identify indicators of financial difficulty, assess gambling-related risk and determine appropriate customer protection measures. These checks are not visible to lenders and do not affect your credit score.
3. Why we use it
- To open and run your account, take deposits, settle bets and pay withdrawals.
- To confirm your age and identity, as our licence requires.
- To prevent and detect fraud, money laundering, cheating and underage gambling.
- To identify and respond to indicators of gambling-related harm and financial vulnerability, including carrying out financial vulnerability checks and, where applicable, financial risk assessments in accordance with our regulatory obligations.
- To answer your questions and handle complaints.
- To keep the site secure and working, and to fix faults.
- To send you marketing, only if you have agreed to it.
4. Legal bases
| Basis | Used for |
|---|---|
| Contract | Running your account, bets, games, deposits and withdrawals. |
| Legal obligation | Age and identity verification, anti-money laundering checks, safer gambling duties including financial vulnerability checks and, where applicable, financial risk assessments, record keeping and reporting to the Gambling Commission and other authorities. |
| Legitimate interests | Security, fraud prevention, improving the site, and handling complaints. We balance these against your rights. |
| Consent | Marketing, and optional cookies. You can withdraw consent at any time. |
Special category data
Some information you provide, or information arising from our safer gambling interactions with you, may reveal information about your physical or mental health. Where we process special category personal data, we do so only where an applicable condition under UK data protection law permits us to do so, including where processing is necessary for reasons of substantial public interest or another applicable legal condition. We keep this information to the minimum needed, restrict who can see it, and do not use it for marketing.
5. Automated decision-making
We may use automated tools to help identify fraud, security risks, financial vulnerability and indicators of gambling-related harm, for example to flag unusual logins, screen deposits against public-record information or prompt a safer gambling contact. We do not make decisions based solely on automated processing where those decisions produce legal or similarly significant effects, unless permitted by law and appropriate safeguards are in place. Decisions that affect your account, such as a restriction, a request for documents or a closure, are reviewed by a member of our team, and you can ask us to review any decision you think is wrong by contacting DPO@bettom.com.
6. How long we keep it
We retain identification, verification and relevant supporting records for five years after the end of our business relationship with you where required by anti-money laundering law. Other account, transaction, betting, casino, safer gambling and communications data is retained for periods determined by applicable legal and regulatory requirements and our legitimate business needs. We do not keep personal data for longer than necessary unless we are required or permitted by law to retain it. Self-exclusion records are kept for as long as needed to honour the exclusion and for a reasonable time after. Contact form messages that aren't linked to an account are deleted after two years. When data is no longer needed, we delete or anonymise it.
7. Third parties
We share personal data only where needed, with:
- identity verification and fraud prevention services;
- credit reference agencies and providers of financial vulnerability or financial risk information, where required or permitted by applicable gambling regulation;
- our payment provider and your bank;
- game studios and platform providers, for the rounds you play;
- our hosting and email providers;
- GAMSTOP, to check and honour national self-exclusion;
- the Gambling Commission, IBAS, sports governing bodies and integrity services, the police and other authorities, where the law requires or allows;
- professional advisers such as auditors and lawyers.
We never sell your personal data.
8. International transfers
Some of our suppliers may process data outside the UK. Where personal data is transferred outside the UK, we use an appropriate safeguard recognised under UK data protection law, such as UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, as applicable. You can contact our DPO at DPO@bettom.com for more information about the safeguards used for international transfers.
9. Security
Connections to bettom.co are encrypted. Passwords are stored as one-way hashes. Documents are kept in restricted storage that only authorised staff can reach. We limit logins after repeated failed attempts, and one-time links for activation and password resets expire and can't be reused.
10. Your rights
Under UK data protection law you can ask us to:
- give you a copy of the data we hold about you;
- correct data that is wrong or incomplete;
- delete data we no longer have a reason to keep;
- restrict how we use it;
- stop processing based on our legitimate interests, where you object to it;
- stop sending you marketing, at any time;
- give you the data you provided in a portable format;
- review a decision made using automated tools, explain it, and have a member of our team reconsider it.
Where processing is based on your consent, you can withdraw that consent at any time. Withdrawing consent does not affect processing that took place before you withdrew it.
Some rights are limited where we have to keep data by law, for example verification records. We normally respond to data protection rights requests within one month. Where permitted by law, this period may be extended for complex or multiple requests, and we will tell you if an extension is required. Send requests to DPO@bettom.com.
11. Cookies
We use necessary cookies to run the site, and optional cookies only with your consent. See our Cookie Policy.
12. Contact and complaints
Questions about this policy or your data go to our Data Protection Officer at DPO@bettom.com. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put it right first.