Privacy Policy of BetMines

1. Owner and Data Controller

Email: [email protected].

Soltek Mines SL is responsible for deciding why and how BetMines processes personal data. Contact us at the address above about this policy or to exercise your rights.

2. Personal data we collect and where it comes from

On mobile devices, the categories below may also include app version, operating system, push subscription identifiers and advertising identifiers where available under your settings and permissions. The data sent depends on the SDK configuration and your choices.

• Information you provide: first and last name, email, registration and sign-in credentials, account settings, preferred language, saved filters, selected matches or leagues, your profile image and public username, and information you include in support requests.
• Information from sign-in providers: account identifiers and the profile information made available when you choose Google, Facebook or Apple sign-in. The Google-specific rules at the end of this policy apply to all data received through Google OAuth.
• Subscription and payment information: selected plan, subscription status, transaction and customer references, payment status and invoice details provided during checkout or returned by the payment provider.
• Technical and usage information: IP address, browser and device information, requested pages, timestamps, errors, interactions with features and promotions, referring pages, and browser storage identifiers. Analytics events may include language and whether the visitor is anonymous, signed in or subscribed.
• Privacy preferences: consent choices and records needed to apply and demonstrate those choices.

We receive data directly from you, automatically from your browser as you use the website or apps, and from providers you use to sign in or pay. The data involved depends on the feature you choose.

Account and payment details needed to fulfil a request are required for that feature: without them we may be unable to create an account, complete a purchase or respond to you. Optional marketing and non-essential tracking choices are separate from registration. Please do not send sensitive personal information or another person's data unless necessary and lawful.

3. Why we process data and our legal bases

When relying on legitimate interests, we consider the impact on your rights and use only data needed for the stated purpose. You can object as described below. Consent can be withdrawn at any time without affecting the lawfulness of earlier processing.

4. Services and providers

Hosting and databases — DigitalOcean

DigitalOcean hosts the service infrastructure and databases on servers in Amsterdam, the Netherlands. Account records, saved settings and other service data are processed on this infrastructure to operate BetMines. See DigitalOcean’s Privacy Policy.

Email delivery — Twilio SendGrid

SendGrid delivers our email communications. This involves recipient addresses, message contents and delivery information. Transactional messages are used to operate your account; login data is not automatically added to a newsletter. See Twilio’s privacy information.

Push notifications — OneSignal

OneSignal delivers push notifications. This can involve push tokens or subscription identifiers, device and app information, IP addresses, notification preferences and delivery or interaction information. You can disable push permissions in your browser or device settings. See OneSignal’s Privacy Policy.

Mobile advertising — Google AdMob

AdMob supports advertising in the mobile apps. Depending on your device settings, consent and the ad configuration, processing can involve IP addresses, device or advertising identifiers, app interactions and ad delivery or performance information. Google-provided consent messages present applicable privacy choices. Google OAuth account data is not supplied for advertising profiles. See Google’s advertising information.

Advertising partners and consent choices

The mobile apps use advertising partners managed through the AdMob consent system. You can consult the participating partner list, their disclosed purposes and privacy information in the app’s consent interface and make the available privacy choices there. This policy describes the advertising data categories and purposes; the consent interface provides the partner-level details.

Registration and authentication

Google sign-in lets us authenticate you using your Google account; see the dedicated disclosure below. Facebook sign-in requests public profile and email permissions. Sign in with Apple uses an Apple sign-in identifier and the name and email Apple makes available; the email may be a private relay address you choose through Apple.

These providers also process information under their own policies: Google, Meta/Facebook and Apple.

Payments and subscriptions — Stripe

Stripe provides checkout and subscription management. Payment details are processed in the payment flow; BetMines uses transaction references, payment status and billing information to manage your purchase. Additional payment-method providers may participate when you select their method at checkout. Stripe describes its processing and roles in its Privacy Policy.

Website measurement — Google Analytics 4 and Google Tag Manager

Google Analytics 4 measures page visits and interactions, including clicks on subscription promotions. Google Tag Manager manages website tags. Information may include browser/device data, online identifiers, visited pages, language and interaction events. These activities are subject to the cookie and consent provisions below. See how Google uses information from sites that use its services.

Abuse prevention — Google reCAPTCHA

reCAPTCHA helps protect registration and sign-in-related forms from automated abuse. It may process IP addresses, browser/device information and interaction signals to assess requests. Google explains its handling in its Privacy Policy and Terms of Service.

Consent management — InMobi Choice

InMobi Choice provides the website's consent interface and communicates privacy choices to participating services. It processes preference information and associated technical records. The consent interface provides information about participating vendors and their purposes.

5. Cookies and similar technologies

In the apps, SDKs and device identifiers perform some of the functions that cookies perform on the web. You can manage available tracking and advertising permissions in Android or iOS settings, and notification permissions separately. Refusing an optional permission may disable the associated optional feature.

The website uses cookies and local storage to support authentication, remember preferences and retain selected views or filters. Clearing browser storage can sign you out or reset saved settings on that device.

Analytics and advertising technologies can recognise browsers, measure activity and, where enabled with the required consent, support personalised advertising. Google OAuth profile data is excluded from those activities.

You can review the purposes and participating vendors in the consent interface and choose whether to allow optional processing. Withdrawing consent applies to future consent-based processing. Browser controls also let you delete or block storage, although blocking necessary storage may affect site functionality.

6. Email, notifications and public information

Mobile camera and photo-library permissions

The mobile apps request camera or photo-library access to let you take or select your account profile image. The photo is used only as your profile image and is not displayed to other users. You can decline the permission or revoke it through the operating system settings; the feature requiring that access will then be unavailable. Where the operating system offers selected-photo access, you can limit the images made available.

Public profiles

Only your username is visible to other users. Your email address, real name, profile image and other private account details are not made public. The public username is separate from any advertising profile; login data is not added to advertising profiles.

Email and push notifications

We use account contact details for messages necessary to provide the service, such as verification, password recovery, billing and support. Optional marketing messages require a separate choice and can be stopped through their unsubscribe mechanism or by contacting us. Signing in with Google does not authorise us to add Google-sourced data to a marketing list.

If you configure match alerts, we use your selected matches, rules and notification settings to provide those alerts. Browser or device permissions, where requested, can be changed through the relevant settings.

7. Who may receive your data

Data needed to operate the service may be accessible to authorised personnel and providers supporting hosting, authentication, payments, communications, security and consent management. Providers acting on our behalf must process data under appropriate instructions and contractual obligations. Some providers, such as payment or sign-in services, also act independently for their own purposes.

Analytics or advertising recipients depend on the services in use and your applicable privacy choices. We may also disclose necessary information to professional advisers or authorities where required by law or to establish, exercise or defend legal claims.

External bookmaker or partner links take you to services governed by their own privacy policies. Any referral or measurement data involved must be described in the applicable tracking information.

The specific limits in the Google OAuth section apply to Google user data throughout this policy. General descriptions of analytics, marketing, advertising or recipients do not authorise a conflicting use of that data.

8. Where data is processed and international transfers

The controller is established in Spain. The DigitalOcean servers hosting our service and databases are located in Amsterdam, the Netherlands. Service providers may process personal data in other countries, including outside the European Economic Area. Transfers subject to the GDPR require an appropriate legal mechanism, such as an applicable adequacy decision or contractual safeguards, together with any additional measures required in the circumstances.

You can contact us to ask which safeguards apply to a transfer of your data and how to obtain a copy, subject to protection of confidential information.

9. How long we keep data and how to request deletion

We retain personal data for the purpose for which it is collected, taking account of the service relationship, legal duties and the need to resolve disputes. Different records may have different retention periods.

• Account information and saved settings: for the time needed to provide and manage your account, then deleted or anonymised when no longer needed, subject to applicable exceptions.
• Payments and invoices: for the applicable accounting, tax and claims periods, including where records must remain after account closure.
• Support and security records: for the period justified by the enquiry, incident, security purpose or legal claim.
• Marketing and consent records: until withdrawal or the end of the relevant purpose; limited evidence of choices or suppression records may be needed to respect an opt-out and demonstrate compliance.
• Cookies, analytics and backups: according to the applicable tool configuration and deletion cycle.

We delete accounts within a few days of receiving a deletion request. To request account and associated data deletion, email [email protected]. We may need proportionate information to verify that the request concerns your account. Where we must retain some records, we will explain the relevant exception. Cancelling subscription renewal, revoking a sign-in connection and requesting data deletion are different actions.

10. Security and access

We apply technical and organisational measures appropriate to the processing risks to protect personal data against unauthorised access, loss, alteration and disclosure. Access should be limited to personnel and providers who need it for their responsibilities. No internet service can guarantee absolute security. Contact us promptly if you believe your account or personal data has been compromised.

11. Profiling, sports predictions and automated decisions

Sports predictions and statistical tools are features of the service. Their use of sports information is distinct from processing personal data about a visitor. Website interaction measurement, and personalised advertising if enabled, can involve analysis of online behaviour. The relevant purposes and choices are described in the analytics and cookie sections.

Google OAuth data is not used for profiling or training artificial intelligence models.

12. Your data protection rights

Subject to the conditions and exceptions under applicable law, you can request access to your data, correction, erasure, restriction of use or portability. You can withdraw consent and object to processing based on legitimate interests. You may object to direct marketing at any time.

Send requests to [email protected]. We normally respond within one month. If a permitted extension is necessary, we will explain the reason within that month. Requests are normally free; the law permits exceptions for manifestly unfounded or excessive requests.

You may complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority, including in the EU country where you live or work. You do not need to contact us first.

13. Children

BetMines is intended for adults aged 18 and over, as stated in our terms. If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.

14. Changes and definitions

We update this policy when our services or data practices change. The published version will show its latest revision date. Where required, we will give an additional notice and obtain consent before introducing a new consent-based use. A policy update does not itself grant permission for a new use of Google data.

Personal data means information relating to an identified or identifiable person. Processing includes collecting, using, storing and sharing that information. A controller decides the purposes and means of processing; a processor handles data on a controller's behalf. Trackers include cookies and similar technologies that store or access information on a device.

15. Google OAuth User Data Disclosure

BetMines accesses, collects and uses the personal data provided through Google OAuth authentication exclusively for user authentication and the creation and management of your personal BetMines account.

• Data collected: email address, unique Google ID and basic profile information (name and avatar image). This sign-in flow does not request access to your Gmail messages, Google Drive files, contacts or calendars.
• Use, sharing and transfer: Google user data is not used for marketing, targeted advertising, profiling or training artificial intelligence models, and is not sold, transferred or disclosed to third parties for these purposes. The other sections of this policy do not authorise these uses of Google OAuth data.
• Service access: any access by personnel or service providers must be necessary for the permitted account functions or otherwise permitted by the applicable Google policy, such as for security or legal compliance, and subject to its restrictions. It does not permit independent advertising or marketing use.
• Storage and deletion: data is kept only as long as needed to provide the service, subject to applicable legal retention obligations. Request deletion of your account and associated data at [email protected].
• Revoking access: you can remove the connection through your Google Account connections settings. This does not automatically delete your BetMines account or data already stored by BetMines. Contact us to request deletion.
• Limited Use: BetMines’ use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.