Privacy Policy
This Privacy Policy (hereinafter the "Policy") describes the manner in which Parimatch (hereinafter the "Operator", "we", or "the company"), operating the website https://basf-sh.cz, collects, uses, stores, shares, and protects the personal data of users (hereinafter the "Customer" or "you") in connection with the use of our gambling and betting services. The Operator holds a licence issued by the Curaçao Gaming Authority under the National Ordinance on Games of Chance (LOK), P.B. 2024, no. 157, and processes personal data in accordance with, among others, the General Data Protection Regulation (GDPR) (EU) 2016/679, the UK Data Protection Act (UK DPA 2018), and the California Consumer Privacy Act (CCPA). By registering and using our services, you consent to the processing of personal data in accordance with this Policy.
1. What Personal Data We Collect
As part of registration and use of the services available at https://basf-sh.cz, we collect identification data (name, date of birth, address), contact details (email address, phone number), payment and transaction data, documents required for identity verification (KYC) under anti-money laundering procedures, technical data about the device and IP address, as well as information on gaming activity and betting history. This data is necessary for the performance of the contract, identity verification, fraud prevention, and compliance with the Operator's legal obligations.
2. Legal Basis and Frameworks for Data Processing
We process personal data on the basis of performance of the contract with the customer, compliance with legal obligations (in particular in the area of anti-money laundering under NOPML, NORUT0, and NOIS, as well as FATF recommendations), the Operator's legitimate interest in ensuring the security and integrity of the platform, and in certain cases on the basis of the customer's consent. Processing of data of European customers is carried out in accordance with the GDPR (EU) 2016/679 regulation, as well as, where applicable, other relevant frameworks such as UK DPA 2018 or CCPA, if they apply to the customer.
3. Data Security
The Operator implements reasonable technical and organisational measures to protect personal data, including standard SSL/TLS encryption for data transmission. Bank card data is processed exclusively through certified payment service providers that comply with the PCI DSS standard. Access to personal data is restricted to authorised employees and is regularly monitored by the internal compliance department, whose task is to oversee compliance with data protection policies and anti-money laundering regulations.
4. Sharing Personal Data with Third Parties
Personal data may be shared with payment service providers, gaming content providers, supervisory authorities, in particular the Curaçao Gaming Authority ([email protected]), and other regulatory or law enforcement authorities where required by law. Data is not sold to third parties for marketing purposes without the customer's explicit consent.
5. Data Retention
We retain data relating to betting history and payment transactions for at least 5 years from the termination of the business relationship, in accordance with anti-money laundering requirements and the Operator's internal rules. After this period, data is securely deleted or anonymised, unless the law requires a longer retention period.
6. Your Rights
In accordance with GDPR and other applicable regulations, you have the right to access your personal data, to have it corrected, deleted, or its processing restricted, the right to data portability, and the right to object to processing. You also have the right to lodge a complaint with the relevant supervisory authority. Requests concerning the exercise of your rights should be sent to the contact email address listed in the Contact section.
7. Cookies
Our website https://basf-sh.cz uses cookies and similar technologies to improve user experience and analyse traffic. Detailed information about the cookies used can be found in the separate Cookie Policy available on our website.
8. Contact and Complaint Resolution
For any questions regarding the processing of personal data, please contact us at [email protected] or via live chat available 24/7 at https://basf-sh.cz. Formal complaints must be submitted within 6 calendar months from the date of the event; general complaints are acknowledged within 7 calendar days and resolved within 28 calendar days (extendable by up to 4 weeks for complex cases). If you are not satisfied with the outcome of the review, you have the right to refer the matter to an independent alternative dispute resolution (ADR) mechanism, which is free of charge and whose decision is binding on both parties. Complaints regarding breaches of regulatory obligations may also be submitted directly to the Curaçao Gaming Authority at [email protected].
9. Changes to This Policy
The Operator reserves the right to amend this Policy at any time in connection with changes in legislation or business practice. The current version is always available at https://basf-sh.cz. We recommend checking this page regularly to stay informed of any changes concerning the processing of your personal data.