Privacy and Data Policy

Last updated: 25 September 2026

1. What this policy covers

This policy explains how personal information may be collected, used, disclosed, stored and protected in connection with BetExpress accounts, website use and support interactions.

2. Types of data we may obtain

Information can come directly from you, from your use of the website and from authorised service providers involved in identity, payments, security or compliance.

2.1 Data supplied directly by you

• Name, date of birth and contact details.
• Residential address and account credentials.
• Identity or verification information where required.
• Support, complaint and responsible gambling communications.

2.2 Data recorded automatically

Technical information may include device type, browser information, IP address, session activity, pages visited, cookie choices and security events.

2.3 Data received from other organisations

Where permitted, information may be received from identity-verification, payment, fraud-prevention, regulatory or support providers.

3. Purposes for processing personal data

Personal information may be used to create and protect accounts, deliver services, process requests, verify eligibility, prevent fraud, support responsible gambling and meet legal obligations.

4. Legal grounds for handling information

The lawful basis for processing depends on the activity and jurisdiction and may include contract performance, legal obligations, legitimate interests and consent where required.

5. Verifying identity and age

Identity and age information may be checked against documents or trusted verification sources where this is required for account access, security or compliance.

6. Payment and transaction data

Payment details and transaction records may be handled by payment providers and retained as required for account administration, fraud prevention, financial controls and legal recordkeeping.

7. Safer-gambling data

Limit settings, self-exclusion choices, account activity and support interactions may be used to apply safer-gambling controls and meet responsible gambling obligations.

8. Security and fraud detection

Security records can be used to detect unusual activity, prevent unauthorised access, investigate suspected fraud and protect accounts and payment activity.

9. Circumstances in which data may be disclosed

Information may be shared with service providers, regulators, law-enforcement bodies or professional advisers where authorised or required, and only for relevant purposes.

10. Transfers of information outside Australia

If information is handled in another country, appropriate contractual, security and legal safeguards should be considered for the transfer.

11. How long information is retained

Retention periods depend on the type of information, account status and applicable legal, financial, security and dispute-resolution requirements.

12. Promotional communications

Promotional messages should be sent only where permitted. Marketing preferences can be changed using available account or communication controls.

13. Cookies, storage and analytics

Cookies and browser storage may retain privacy choices, age confirmation, Bet Slip selections and other necessary settings. Optional analytics or marketing storage should follow the preferences selected in Cookie settings.

14. Your data-protection rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection or information about how your personal data is used.

15. Keeping information accurate

You should keep account and contact information current. Some changes may require additional verification to protect account security.

16. Information relating to minors

BetExpress is intended only for adults aged 18 or over. Accounts and wagering access should not be provided to minors.

17. Automated checks and processing

Automated tools may support security, identity, fraud, risk or responsible gambling checks. Human review should be available where required by law or policy.

18. Security incidents and data breaches

Security incidents should be assessed, contained and investigated, with notifications provided where applicable privacy law requires them.

19. Links to external websites

External websites have their own privacy practices. Review the privacy information of third-party services before providing personal information to them.

20. Revisions to this policy

This policy may be updated when services, legal requirements or data practices change. The current version should always show its latest revision date.

21. Privacy enquiries and complaints

Use the Contact or Complaints page for privacy enquiries.

The service is operated by BETEXPRESS PTY. LTD. and the operator details shown in the legal disclosure above form part of this Privacy and Data Policy.

22. Identity documents and verification records

Identity documents and verification results can contain sensitive information and should be accessed only by personnel or service providers who need the information for verification, security, compliance or dispute handling.

Where a third-party verification provider is used, that provider may process information under its own legal obligations as well as under contractual privacy and security requirements.

23. Device, network and security information

Security systems may record device characteristics, IP address, login time, browser data, session identifiers and signals associated with unusual or repeated access attempts. This information can help prevent account takeover, automated abuse and payment fraud.

Security records are not intended to be used for unrelated purposes and should be retained only for an appropriate period having regard to legal, fraud-prevention and dispute-resolution needs.

24. Data used for customer support and complaints

When you contact support, we may keep the content of the enquiry, related account information, attachments and the steps taken to resolve the issue. Calls or chats may be recorded where permitted and where appropriate notice is provided.

Complaint records may be retained for longer where this is required to demonstrate how a matter was reviewed or to respond to a regulator, dispute body or legal claim.

25. Data minimisation and access controls

We aim to collect only information reasonably required for the relevant account, service, legal, security or responsible-gambling purpose. Internal access should be limited according to role and business need.

Administrative safeguards can include access reviews, confidentiality obligations, security monitoring and controls designed to prevent unauthorised export or disclosure of personal information.

26. Correction, access and account records

A request to access or correct personal information may require identity verification before information is disclosed or changed. Some records cannot be altered if they must be retained as an accurate transaction, compliance or dispute history.

Where a correction cannot replace an original record, an explanatory note or linked correction may be used where appropriate so the record remains complete.

27. Data deletion and account closure

Closing an account does not necessarily mean all personal information can be deleted immediately. Financial, identity, wagering, security and complaint records may need to be retained for statutory periods or legitimate dispute and fraud-prevention purposes.

Information that no longer needs to be retained should be deleted, de-identified or securely isolated in line with the applicable retention schedule.

28. Contacting us about privacy

Privacy enquiries should identify the account or interaction concerned and explain the request clearly. Do not send passwords or full payment credentials in ordinary email or support messages.

If a privacy concern is not resolved through the internal process, information about any applicable external privacy complaint pathway should be provided with the response.