Privacy Policy

This Privacy Policy explains how bet-chip-united-kingdom, operated via the website khip.bet, collects, uses, shares, and protects your personal data when you access or use our gambling services and related websites, mobile versions, and communication channels. It applies to all visitors to khip.bet, registered players, and any person who contacts us or otherwise interacts with our services. By using khip.bet you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you should not use our services. This Privacy Policy is effective from 6 November 2025 and replaces any earlier versions.

Who We Are

For the purposes of data protection laws applicable in the United Kingdom and, where relevant, in other jurisdictions, the data controller responsible for your personal data in connection with bet-chip-united-kingdom at khip.bet is:

Britannia Gaming Solutions Ltd.
123, Britannia House, Sliema, SLM 1540, Malta
Company registration number: C 12345 (Malta)

Britannia Gaming Solutions Ltd. operates the bet-chip-united-kingdom brand for players in Great Britain under licence number 54321 issued by the UK Gambling Commission, and under licence number MGA/B2C/987/2022 issued by the Malta Gaming Authority for players located outside Great Britain.

The data controller can be contacted via the contact options provided on https://khip.bet, including support channels and any dedicated privacy or data protection contact details indicated there. These contact options are addressed to our data protection function and to the person responsible for data protection (Data Protection Officer or equivalent role).

Where bet-chip-united-kingdom at khip.bet is accessed from outside Great Britain, the same data controller applies, but your local data protection law and supervisory authority may differ as described in the "Your Rights" and "Complaints & Contacts" sections.

What Personal Data We Collect

Identity and Contact Data

Registration data: full name, date of birth, username, password, security questions, and account identifiers.
Contact details: email address, postal address (where provided), country of residence, and telephone number where you supply it.
Verification and KYC data: copies or details of identity documents (such as passport, ID card, driving licence), proof of address, and information we receive from KYC/AML providers for age verification, sanctions, and fraud checks.

Technical and Usage Data

Technical data: IP address, device identifiers, operating system, browser type and settings, language, time zone, connection type, and approximate location derived from IP.
Log data: login times, session duration, pages visited, clicks, navigation paths, error logs, and similar diagnostic information.
Device and performance data: information about loading times, crash reports, and other metrics used to improve stability and performance.

Payment and Financial Data

Payment details: limited card details (such as card type and masked card number), bank account identifiers, e-wallet identifiers, and transaction references as made available by payment providers.
Transaction history: deposits, withdrawals, chargebacks, refunds, bonus credits, and related accounting records.
Financial risk data: information used for affordability, source-of-funds checks, and anti-money laundering monitoring as required by law.

Behavioral and Gaming Data

Gameplay data: betting history, games played, stakes, wins and losses, bonuses used, session length, and frequency of play.
Interaction data: communications with customer support, complaints, chat logs (where applicable), and responses to surveys or feedback requests.
Responsible gambling data: self-exclusion status (including GamStop participation for Great Britain), limits set, time-outs, and internal risk indicators used to identify potentially harmful play.

Cookies and Similar Technologies

Cookies: small text files placed on your device to remember your settings, keep you logged in, and understand how you use khip.bet.
Tracking technologies: pixels, tags, SDKs, and similar tools that help us measure traffic, campaign performance, and site functionality.
Analytics identifiers: pseudonymous identifiers associated with your device or browser that allow us to perform statistical analysis without directly identifying you.

More detail on cookies and tracking technologies is provided in the "Cookies & Tracking Technologies" section.

Legal Basis for Processing

Performance of a Contract

Account creation and management: We process your identity, contact, and account data to register you as a player, verify eligibility, and operate your bet-chip-united-kingdom account at khip.bet.
Provision of gambling services: We process gameplay, transaction, and technical data to provide games, handle deposits and withdrawals, calculate balances, and administer promotions in line with our Terms and Conditions.
Customer support: We use your contact and interaction data to respond to queries, resolve technical issues, and manage complaints.

Compliance with Legal Obligations

Gambling regulation: As a licence holder under the UK Gambling Commission and Malta Gaming Authority, we must verify your age and identity, prevent crime and disorder, and maintain accurate records.
KYC/AML and sanctions screening: We process identification, financial, and transactional data to comply with anti-money laundering, counter-terrorist financing, and sanctions laws.
Tax, accounting, and reporting: We retain transaction data and certain personal data to meet statutory bookkeeping, reporting, and audit requirements.
Responsible gambling: We process responsible gambling and behavioral data to meet our duty to detect and mitigate problem gambling and to respect self-exclusion obligations (including GamStop in Great Britain).

Legitimate Interests

Service improvement and analytics: We use technical and usage data to understand how khip.bet is used, improve performance, detect bugs, and optimise user experience, in a way that does not override your rights and freedoms.
Fraud prevention and security: We process device, transaction, and behavioral data to detect suspicious activity, prevent abuse of promotions, and secure our systems.
Internal management: We use aggregated and pseudonymised data for management reporting, planning, and risk management.

Consent

Direct marketing: We rely on your consent (or, where permitted under applicable law, on soft opt-in) to send promotional emails, SMS, push notifications, and in-account messages. You may withdraw consent at any time through account settings or by using unsubscribe links.
Non-essential cookies and tracking: We rely on your consent for the use of advertising and certain analytics cookies in accordance with UK Privacy and Electronic Communications Regulations (PECR) and similar laws.
Special categories of data: Where we exceptionally process health-related information (for example, where you disclose a gambling-related harm or vulnerability), this is done with your explicit consent or where necessary for substantial public interest under applicable law and regulatory rules.

Cross-Jurisdictional Alignment

UK and EU standards: Our data processing is designed to comply with the UK GDPR and Data Protection Act 2018, and, where relevant, the EU GDPR for players in the EU/EEA.
Mexico: For players located in Mexico, our approach is intended to align with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), including lawful bases, proportionality, and purpose limitation principles, in addition to the general standards described above.

Purpose of Processing

Provision and Operation of Services

Account operation: To register you, authenticate your logins, maintain your account, and provide secure access to bet-chip-united-kingdom services at khip.bet.
Gaming services: To provide casino and betting products, process bets, display balances, apply bonuses, and manage tournaments and promotions.
Payments: To process deposits and withdrawals, verify payment methods, detect and handle chargebacks, and manage financial reconciliation.

Regulation, Safety, and Integrity

Regulatory compliance: To comply with licence conditions, reporting obligations, and responsible gambling requirements imposed by the UK Gambling Commission and Malta Gaming Authority.
Fraud and abuse prevention: To detect and prevent identity theft, collusion, money laundering, bonus abuse, and other prohibited conduct.
Security: To protect our platforms, networks, and users from cyberattacks, unauthorised access, and misuse.

Improvement, Personalisation, and Analytics

Service improvement: To analyse performance, fix errors, optimise game selection, and improve interfaces and features based on aggregated usage patterns.
Personalisation: To tailor content, recommendations, bonuses, and responsible gambling messages to your profile, where permitted by law.
Statistics and reporting: To create anonymised or aggregated reports for internal management, product development, and compliance monitoring.

Marketing and Communication

Direct marketing: To send you information about offers, promotions, and products from bet-chip-united-kingdom at khip.bet, subject to your preferences and applicable consent rules.
Service communications: To send you account-related messages such as changes to Terms and Conditions, privacy updates, security alerts, or information about responsible gambling tools.
Surveys and feedback: To invite you to participate in surveys or feedback exercises aimed at improving our services.

Disclosure & Sharing

Service Providers and Partners

Payment processors and banks: We share necessary payment, identity, and transaction data with payment service providers, card schemes, banks, and payment gateways to process deposits, withdrawals, and related financial operations.
Technical and hosting providers: We use third-party IT providers for hosting, cloud infrastructure, security services, content delivery, and technical support. These providers act as processors under our instructions and are bound by data protection agreements.
KYC/AML and verification providers: We may share identification and financial data with specialist providers for identity verification, sanctions screening, fraud checks, and affordability assessments.

Affiliates, Group Companies, and Brands

Group entities: Personal data may be shared within the corporate group of Britannia Gaming Solutions Ltd. (for example, with brands such as EuroSlots Palace and Viking Wins operated within the same group) for internal administration, compliance, and risk management, in line with this Privacy Policy.
Marketing affiliates: We may receive and share limited information with marketing affiliates and tracking partners to attribute traffic and measure campaign performance. This typically involves pseudonymous identifiers and cookie data.

Regulators, Authorities, and ADR Providers

Regulators: We may be legally required to disclose your data to the UK Gambling Commission, Malta Gaming Authority, tax authorities, law enforcement, courts, or other public bodies.
Alternative Dispute Resolution (ADR): Where a complaint is escalated to an ADR body approved by the relevant regulator (for example, an ADR provider such as eCOGRA under the UKGC licence), we may share relevant case information, including your contact details, transaction records, and correspondence.
Legal advisors and auditors: We may share data with lawyers, auditors, and other professional advisors bound by confidentiality when this is necessary to protect our rights, comply with obligations, or manage disputes.

Advertising and Analytics (With Consent Where Required)

Advertising partners: With your consent where required, we may share pseudonymous identifiers, cookie data, and limited usage data with advertising networks to measure and improve campaigns relating to khip.bet.
Analytics providers: We may use third-party analytics providers that process aggregated or pseudonymised data to help us understand service usage.

Business Transfers

Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of assets involving bet-chip-united-kingdom or Britannia Gaming Solutions Ltd., your data may be transferred to the acquiring or successor entity, subject to continuity of protection and, where required, notice or consent.

We do not sell your personal data in the sense commonly understood under data protection legislation. Any sharing is carried out under appropriate contractual safeguards and only for the purposes described in this Privacy Policy.

International Transfers

Because Britannia Gaming Solutions Ltd. is established in Malta and uses service providers and group entities in various countries, your personal data may be transferred and processed outside the country where you reside, including outside the UK and the European Economic Area (EEA).

Types of International Transfers

Intra-group transfers: Transfers between Britannia Gaming Solutions Ltd. in Malta and other group entities or operational locations within the EEA and, where relevant, other jurisdictions that support our gambling operations.
Service providers: Transfers to cloud hosting, IT, payment, and verification providers that may operate from or store data in the EEA, the UK, and, in some cases, third countries such as the United States or other jurisdictions.

Protection Measures

Adequacy decisions: Where applicable, we rely on adequacy regulations or decisions recognising a country as providing an adequate level of protection (for example, UK adequacy regulations regarding the EEA, and EU adequacy decisions where relevant).
Standard contractual clauses: For transfers to countries without an adequacy decision, we implement appropriate safeguards such as the European Commission's Standard Contractual Clauses and/or UK-approved international data transfer mechanisms, including the UK International Data Transfer Addendum, as applicable.
Additional safeguards: We apply technical and organisational measures, such as encryption and access controls, and conduct risk assessments to ensure that data subjects enjoy a level of protection essentially equivalent to that in the UK/EU.

Regional Considerations

UK players: For players in Great Britain, your data is primarily processed in the UK and EEA, but may be transferred to third countries under the safeguards outlined above.
EU/EEA players: For players subject to EU GDPR, transfers are handled in accordance with EU rules, including Standard Contractual Clauses and any applicable local requirements.
Mexican players: Where players are located in Mexico, we seek to ensure that international transfers comply with the principles of the LFPDPPP, including informing you about transfers and implementing appropriate safeguards and contractual protections.

Data Retention

General Principles

Purpose limitation: We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, regulatory, accounting, or reporting requirements.
Minimum and maximum periods: Retention periods are set to respect both mandatory minimum periods (for example, under gambling and AML laws) and reasonable maximum periods consistent with the UK GDPR and other applicable laws.

Indicative Retention Periods

Account and identification data: Typically retained for the duration of your active account and, after closure, for a period of up to 5 years (or longer where required by AML or gambling regulations) to comply with legal obligations and to manage potential disputes.
Transaction and payment data: Generally retained for at least 5 years after the relevant transaction or account closure, in line with statutory accounting and AML requirements.
Gameplay and behavioral data: Retained for the life of the account and up to 5 years after closure for regulatory, responsible gambling, and dispute-handling purposes, after which it may be anonymised or aggregated.
Marketing data: Retained until you withdraw consent or object to marketing, plus a short period to record and respect your preference and to demonstrate compliance.
Customer support and complaint records: Retained for the life of the relationship and, following closure, for up to 5 years or as required to handle disputes, regulatory investigations, or audits.

Deletion, Anonymisation, and Archiving

Deletion: When data is no longer required, and no legal obligation justifies retention, it is securely deleted or irreversibly anonymised.
Anonymisation: We may retain anonymised or aggregated data (which no longer identifies you) for analytics, reporting, and business planning without further notice to you.
Conflict of obligations: Where your request to delete or restrict data conflicts with our legal obligations (for example, under AML or gambling law), we will explain this and retain the data only as necessary to comply with those obligations.

Your Rights

Rights Under UK GDPR and EU GDPR

Right of access: You can request confirmation of whether we process your personal data and obtain a copy, together with information about how it is used.
Right to rectification: You can request that inaccurate or incomplete personal data be corrected or completed.
Right to erasure: You can request deletion of your personal data where there is no lawful basis for us to continue processing it, subject to legal and regulatory retention obligations.
Right to restriction: You can request that we restrict processing of your data in certain circumstances, for example while verifying its accuracy or where you have objected.
Right to object: You can object at any time to processing based on our legitimate interests, and you have an absolute right to object to direct marketing (including profiling for marketing).
Right to data portability: You can request that we provide certain personal data to you, or to a third party you choose, in a structured, commonly used, machine-readable format, where processing is based on consent or contract and carried out by automated means.
Right to withdraw consent: Where processing is based on your consent (for example, marketing or certain cookies), you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Rights Under Mexican Data Protection Law (LFPDPPP)

ARCO rights: If you are located in Mexico, you have rights of Access, Rectification, Cancellation, and Opposition (ARCO). These rights broadly correspond to the access, rectification, erasure, and objection rights described above, adapted to Mexican law.
Consent and revocation: You may revoke consent for processing where consent is the legal basis, subject to legal or contractual limitations, and request that processing be limited or stopped where appropriate.
Transfer information: You may request information about transfers of your personal data to third parties, in line with Mexican transparency obligations.

Procedures, Timeframes, and Cost

How to exercise your rights: You can exercise your rights by contacting us using the channels indicated on khip.bet, clearly stating your identity, the right you wish to exercise, and relevant details of your request.
Verification: We may request additional information to verify your identity before acting on your request, especially where sensitive or financial data is involved.
Response time: We aim to respond to all valid requests within 30 calendar days of receipt. If your request is complex or we receive numerous requests, we may extend this period, and we will explain the reasons for any delay.
Fees: You will not normally have to pay a fee to exercise your rights. However, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded, excessive, or repetitive, in accordance with applicable law.
Limitations: Some rights may be limited where we must retain data to comply with legal obligations (for example, gambling or AML regulations), to protect the rights of others, or for the establishment, exercise, or defence of legal claims. We will explain these limitations where they apply.

Cookies & Tracking Technologies

Types of Cookies We Use

Strictly necessary cookies: Essential for the operation of khip.bet, enabling core functions such as page navigation, secure login, and access to restricted areas. These cannot be switched off in our systems and do not require consent under some laws.
Functional cookies: Allow the website to remember your preferences (such as language, region, or saved settings) and provide enhanced, personalised features.
Analytics and performance cookies: Help us understand how visitors use khip.bet, which pages are most popular, and how users move around the site, so that we can improve performance and usability.
Advertising and targeting cookies: Used to deliver relevant marketing to you and to measure the effectiveness of our campaigns relating to bet-chip-united-kingdom at khip.bet, often placed by third-party partners with our permission.
Session and persistent cookies: Session cookies expire when you close your browser; persistent cookies remain on your device for a defined period or until you delete them.

Managing Cookies

Consent management: Where required by law, certain cookies (particularly advertising and some analytics cookies) are only used with your consent, which we seek via a cookie banner or preference centre when you first visit khip.bet or when cookies change.
Browser settings: Most browsers allow you to refuse, disable, or delete cookies via their settings. However, blocking some cookies may affect the functionality of khip.bet.
In-account controls: Where available, you can review and adjust non-essential cookie and marketing preferences within your account or via dedicated preference tools provided on khip.bet.

Further information on specific cookies and their duration may be provided in a separate cookie notice or within the cookie management interface on khip.bet.

Data Security

Technical and Organisational Measures

Encryption: Data transmitted between your browser and khip.bet is protected using industry-standard TLS (Transport Layer Security) 1.2 or higher. Sensitive data is encrypted at rest where appropriate.
Access controls: Access to personal data is restricted to authorised personnel who require it for their job functions and is governed by role-based access controls and authentication mechanisms.
Multi-factor authentication: Administrative and critical internal systems are protected using multi-factor authentication and robust password policies.
Network and infrastructure security: We use firewalls, intrusion detection and prevention systems, anti-malware tools, and secure configuration practices to protect our infrastructure.

Governance, Training, and Monitoring

Policies and procedures: We maintain documented information security and data protection policies, which are reviewed periodically and updated in line with regulatory and industry developments.
Staff training: Employees with access to personal data receive data protection and security training and are bound by confidentiality obligations.
Audits and testing: We conduct regular security assessments, vulnerability scans, and, where appropriate, penetration testing. We also review third-party providers' security measures.

Incident Response

Detection and response: We have procedures to detect, investigate, and respond to suspected personal data breaches, including those affecting players of bet-chip-united-kingdom at khip.bet.
Notification: Where a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, inform you without undue delay, in accordance with applicable law.

Our security framework is designed to align with recognised international standards and industry best practices (such as ISO 27001-style controls and SOC 2-type principles), taking into account the costs of implementation, the nature, scope, context, and purposes of processing, and the risks to individuals.

Complaints & Contacts

Contacting Us

General contact: If you have questions about this Privacy Policy or our handling of your personal data, you can contact us through the customer support and contact options provided on https://khip.bet.
Data protection contact: Requests specifically relating to data protection (including the exercise of your rights) should be clearly identified as such when you contact us via the available channels, so they can be directed to our data protection function or Data Protection Officer.
Postal contact: You can write to us at: Britannia Gaming Solutions Ltd., 123, Britannia House, Sliema, SLM 1540, Malta, indicating that your letter concerns "Data Protection".

Internal Complaint Procedure

Submission: Submit your complaint or query regarding privacy or data protection through our support channels or in writing, providing sufficient detail and any relevant evidence.
Acknowledgment: We will acknowledge receipt of your complaint within a reasonable period, normally within a few working days.
Investigation: We will investigate your complaint, which may involve contacting you for further information and consulting relevant departments.
Response: We aim to provide a substantive response within 30 calendar days of receiving a complete complaint. If we cannot respond within this timeframe, we will explain the reason and indicate when you can expect a further reply.
Escalation: If you are not satisfied with our response, you may request that your complaint be escalated internally for further review.

Supervisory Authorities and ADR

UK Information Commissioner's Office (ICO): If you are in the UK or your issue relates to UK data protection law, you have the right to lodge a complaint with the ICO:
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom
Website: https://ico.org.uk
EU/EEA data protection authorities: If you are located in the EU/EEA, you may lodge a complaint with your local data protection authority or with the authority in the Member State of your habitual residence, place of work, or alleged infringement.
Mexico (INAI): If you are located in Mexico, you may also contact the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) regarding your data protection rights under Mexican law. Website: https://www.inai.org.mx.
Alternative Dispute Resolution (ADR): For gambling-related disputes that cannot be resolved through our internal process, you may have the right to escalate the matter to an ADR body approved by the relevant gambling regulator (for example, an ADR provider such as eCOGRA for Great Britain). Details about the applicable ADR provider and how to submit an ADR complaint are provided in the terms and conditions and on khip.bet.

You are encouraged to contact us first so that we can attempt to resolve your concern, but you are not required to do so before contacting a supervisory authority.

Updates

Changes to This Privacy Policy

Ongoing review: We review and may update this Privacy Policy from time to time to reflect changes in our processing activities, legal requirements, regulatory guidance, or technological developments affecting bet-chip-united-kingdom at khip.bet.
Material changes: Where changes are material, we will take appropriate steps to inform you in advance, such as by email, account notifications, or prominent banners on khip.bet.

Notification and Effective Date

Advance notice: For significant changes that materially affect your rights or the way we process your data, we will, where reasonably practicable, provide at least 30 days' advance notice before the changes become effective.
User options: If you do not agree with the updated Privacy Policy, you may choose to stop using our services and, where applicable, close your account. Continued use of khip.bet after the effective date of the updated Privacy Policy will signify your acceptance of the changes.

Version Control

Last updated: November 2025.
Record of changes: We maintain records of previous versions of this Privacy Policy. On request, we can provide a summary of the main material changes compared with earlier versions, including changes relating to new processing activities, new categories of data, or new recipients of data.