Every registered player, bettor, and site visitor falls under the privacy framework of Cybet Online Casino. This document explains how the platform collects, stores, and protects personal information across all services. Licensed under the Anjouan Offshore Finance Authority (license ALSI-202409034-FI2), the operator runs a crypto-friendly gambling service where data processing follows both industry-specific and general privacy standards. The sections below cover each aspect of these data practices — from the types of information gathered to the rights held by each user.
Personal Data Collected by Cybet
Two distinct categories of information are gathered when users interact with the platform: data provided directly during registration and technical data collected automatically throughout site activity. Account creation requires only an email address, as the operator follows a No-KYC-friendly model. Most players access games, place bets, and process withdrawals without submitting identity documents. Verification may be requested in cases of suspected fraud, abnormal login behavior, or compliance with anti-money-laundering (AML) regulations.
The table below outlines what falls into each category:
| Category | Examples |
| Personal Information | Full name, email address, crypto wallet address, date of birth, contact details |
| Non-Personal Information | IP address, browser type and version, device and OS data, pages visited, session duration, referral sources |
Wallet addresses linked to supported crypto assets function as primary identifiers for all deposit and withdrawal operations. Unlike traditional gambling platforms that rely on bank accounts, all transactions are processed on-chain through 12 supported cryptocurrencies — including BTC, ETH, USDT, USDC, LTC, DOGE, and SOL. Date of birth is collected specifically for age verification, as underage participation is strictly prohibited across all jurisdictions where the platform operates.
Legal Grounds for Data Processing
Specific legal bases determine how and why the platform processes user information under its privacy framework. Each piece of collected data serves at least one operational, security, or regulatory purpose tied to running a licensed crypto gambling service.
The operator processes personal data under the following grounds:
- Contractual obligation — account registration, transaction processing, and service delivery require specific user data to function. Accepting the Terms of Service during signup forms the contractual basis for this processing.
- Legitimate interest — fraud detection, abuse prevention, and platform security operate under this basis. Unusual activity such as IP address changes, unfamiliar devices, or repeated failed login attempts is monitored to protect accounts and system integrity.
- Legal compliance — applicable gambling regulations and AML laws may require identity verification, suspicious transaction reporting, or record retention for set periods.
- User consent — service-related notifications and promotional communications are sent on an opt-in basis. Consent can be withdrawn at any time through account settings or by contacting support.
Each processing activity uses only the minimum data needed for its stated purpose. No information is collected or retained beyond what these legal bases justify.
Cookies and Tracking Tools
Several types of tracking technologies are deployed on the site to support functionality and analyze visitor behavior within the privacy framework. These small data files are stored on a user’s device during each visit, helping the system recognize returning players, maintain active sessions, and record usage patterns.
The following categories are currently in use:
- Strictly necessary cookies — required for core functions such as login sessions, page navigation, and access to secure account areas. Disabling these prevents the site from operating correctly.
- Analytical cookies — track visitor interactions including pages viewed, time spent per section, and traffic sources. Collected data is aggregated to identify performance issues and inform interface updates.
- Functional cookies — store individual preferences like language selection (13 languages are currently supported) and display settings. These allow the system to retain configurations between visits.
Browser settings allow blocking or deleting cookies at any time. Removing analytical and functional cookies does not prevent access to the platform, but may limit personalization features. Third-party analytics tools may place their own cookies — usage of those falls under each provider’s separate data policy. Each browser’s cookie management section provides step-by-step control over these settings.
Data Sharing with Third Parties
No personal information is sold to external parties under any circumstances. The platform shares user data only under specific, defined conditions tied to operational, legal, or structural needs.
| Third-Party Category | Purpose | Types of Data Involved |
| Service providers | Hosting, analytics, customer support | Technical data, usage statistics, support interactions |
| Legal authorities | Regulatory compliance, law enforcement requests | Account details, transaction records as lawfully required |
| Business successors | Mergers, acquisitions, asset transfers | User data as part of the business entity being transferred |
Hosting and analytics providers operate under contractual terms that restrict how they handle received information. The 24/7 live chat and email support channel ([email protected]) may route interactions through third-party platforms, meaning limited conversation data passes through external systems.
Legal disclosure occurs only in response to valid requests from competent authorities. The platform’s review of industry practices indicates that such disclosures typically involve targeted account inquiries rather than bulk data transfers.
If a business restructuring event takes place, affected users receive notification about the planned transfer and retain the right to exercise their privacy options before the transition is completed.
User Rights and Data Control
Players maintain direct control over their personal information through a set of defined rights within the platform’s privacy framework. These rights apply to all registered accounts and can be exercised at any time by reaching out to the support team.
The following rights are granted to each account holder:
- Right to access — request a full copy of personal data held in the account, covering registration details, transaction history, and any submitted verification documents.
- Right to correction — update inaccurate or outdated information. Changes to email addresses or wallet details can be requested through support.
- Right to deletion — ask for removal of personal data from platform systems. Some records may be kept where required by law or needed for resolving open disputes.
- Right to restrict processing — limit specific uses of data, for example while a correction request is under review.
- Right to object — decline certain types of processing, particularly those based on legitimate interest rather than contractual necessity.
Requests are submitted through live chat or at [email protected]. Account security steps — such as two-factor authentication (2FA) or email confirmation — may be required to verify the identity of the person making the request. Response times depend on request complexity, but the support team aims to address all inquiries within a reasonable period.
Policy Changes and Data Breaches
Revisions to the privacy document and responses to security incidents follow defined procedures designed to protect user data and maintain transparency. The current version was last updated on April 13, 2026, and may be modified as regulatory conditions or operational needs shift.
How updates to the document are handled:
- Revised versions are published on the site with an updated effective date
- Modifications that affect user rights or data processing methods trigger direct email notifications to registered accounts
- Continued platform use after a posted update constitutes acceptance of the new terms
Security measures designed to prevent unauthorized access:
- On-chain transaction processing provides transparency and immutability for all crypto deposits and withdrawals
- TLS/HTTPS encryption secures data during transmission
- Two-factor authentication (2FA via Google Authenticator) adds a second layer of account protection
- Automated monitoring flags unusual activity — IP changes, new device logins, abnormal access patterns
- High-value or higher-risk withdrawals undergo manual security review
When a security incident affecting user data is detected, the platform takes immediate containment steps, assesses the scope of exposure, and notifies affected accounts. Suspected unauthorized access should be reported to support immediately, with the most recent deposit transaction hash provided as ownership proof.