Introduction
Zar Prive, trading as BetMatch (referred to as “BetMatch,” “we,” “us,” or “our”), is deeply committed to protecting your privacy and personal data. This policy outlines how we collect, use, disclose, and protect your Personal Information when you use our services in South Africa, including our website and mobile applications.
BetMatch is both the Data Controller and a Data Processor of your Personal Information. Xanadu Consultancy Ltd, which provides the platform technology, acts as a Data Processor on our behalf.
This policy is designed to comply with all applicable South African data protection regulations, specifically the Protection of Personal Information Act, 2013 (Act No. 4 of 2013) (“POPIA”).
- Information We Collect
We may collect and process the following categories of Personal Information:
Information You Provide to Us
- Identity Data: Name, surname, date of birth, gender, and South African Identity Document (ID) number or passport number.
- Contact Data: Postal address, email address, and telephone number.
- Financial Data: Bank account details, payment card details, and details of payments to and from you.
- Transaction Data: Details about the services you have purchased from us and your betting activity.
- Profile Data: Username and password, preferences, feedback, and survey responses.
Information Collected Automatically
Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
Usage Data: Information about how you use our website, products, and services.
Information From Other Sources
Verification Data: Information from third-party service providers and public sources for identity verification, anti-money laundering (AML), and know-your-customer (KYC) checks, in compliance with the Financial Intelligence Centre Act (FICA).
- How We Use Your Information
We use your Personal Information for the following purposes, based on the lawful processing grounds under POPIA:
POPIA Compliance: Purpose of Processing
- To register you as a new customer and verify your identity. Necessary for the performance of a contract and compliance with a legal obligation (FICA, gambling regulations)
- To process your bets, transactions, and manage payments. Necessary for the performance of a contract
- To manage our relationship with you, including notifications about changes to our terms or policies. Necessary for the performance of a contract and our legitimate interests (running our business)
- To enable you to participate in promotions, competitions, or surveys. Consent or Necessary for the performance of a contract
- To administer and protect our business and services (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data). Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, and preventing fraud)
- To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you. Consent or Necessary for our legitimate interests (studying how customers use our products/services, to develop them, to grow our business, and to inform our marketing strategy)
- To comply with legal and regulatory obligations, including responsible gambling and AML checks. Compliance with a legal obligation
- Disclosure of Your Information
We may share your Personal Information with the following parties:
- Xanadu Consultancy Ltd: As our core platform provider, Xanadu Consultancy Ltd acts as a Data Processor and will process your Personal Information to provide the betting and platform services on our behalf.
- Service Providers: Third-party service providers who provide services such as payment processing, identity verification, IT and system administration, and marketing support. These parties are contractually bound to protect your data and are required to comply with POPIA.
- Regulators and Law Enforcement: We will disclose Personal Information when required by South African law, regulation, or a valid request from a regulatory body (e.g., the National Gambling Board) or law enforcement.
- Professional Advisers: Lawyers, bankers, auditors, and insurers who provide professional services to us.
- International Data Transfers
The BetMatch platform is provided by Xanadu Consultancy Ltd, which may involve the processing of your Personal Information outside of South Africa, particularly in the European Economic Area (EEA).
Where we transfer your Personal Information outside of South Africa, we will ensure a comparable level of protection by implementing adequate safeguards as required by POPIA. This may include transferring data to a country with equivalent data protection laws or by implementing binding corporate rules or contractual clauses approved by the Information Regulator of South Africa.
- Security
We have implemented appropriate security measures to prevent your Personal Information from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. Access to your Personal Information is limited to employees, agents, contractors, and other third parties on a need-to-know basis, and they are subject to a duty of confidentiality.
- Retention of Your Information
We will only retain your Personal Information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (e.g., FICA-related data retention periods).
- Your Rights Under South African Data Protection Regulations (POPIA & PAIA)
As a Data Subject in South Africa, you have the following rights concerning your Personal Information:
The Right to be Notified
- Your Personal Information is being collected: You must be made aware of the collection of your data. This privacy policy serves this purpose.
- There has been a security compromise (Data Breach): You have the right to be notified if your data has been compromised in a breach that affects your Personal Information.
The Right of Access
You have the right to request access to the Personal Information that BetMatch holds about you. This is often called a “data subject access request.” This allows you to receive a copy of the Personal Information we hold about you and to check that we are lawfully processing it.
The Right to Correction, Destruction, or Deletion
You have the right to request us to correct, destroy, or delete Personal Information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully.
The Right to Object to Processing
You have the right to object, on reasonable grounds relating to your particular situation, to the processing of your Personal Information, unless the processing is required by law.
You can also object to the processing of your Personal Information for the purposes of direct marketing by BetMatch at any time.
The Right to Non-Automatic Decision Making
You have the right not to be subject to a decision based solely on automated processing of your Personal Information, intended to provide a profile of you, unless that decision is:
- Carried out in the course of entering into or performance of a contract.
- Authorised by law.
- Based on your consent.
The Right to Lodge a Complaint
You have the right to lodge a complaint with the Information Regulator of South Africa if you believe that BetMatch has contravened POPIA in the processing of your Personal Information.
The process details for raising a complaint with the Information Regulator are available on the following website:
www.inforegulator.org.za/complaints/
The Right to Judicial Redress
You have the right to institute civil proceedings in a court of law against BetMatch for breach of POPIA.
- Cookies
We use cookies to enhance your experience, track usage, and for security purposes. Our detailed Cookie Policy, which explains what cookies we use and how to manage them, is available here: XXXXX.
9. Contact Details
If you have any questions about this privacy policy or our privacy practices, please contact our Information Officer:
Email: dataprivacy@betmatch.co.za
10. Changes to the Privacy Policy
This policy may be updated from time to time. The latest version of this policy is effective from Date. We will notify you of any significant changes where required by law.