1. Who is responsible for your data
The controller of your personal data is the operator of litzbet (company details will be published here once confirmed). For any privacy question or request, email support@litzbet.be or use the contact form.
litzbet runs entirely in practice mode. We do not take payments, so we never collect bank details, card numbers or other payment information.
2. The data we collect
Account data
When you register we collect your first name, last name, email address and date of birth, plus a record that you accepted our Terms and this policy. Your password is stored only as a one-way hash, which means we cannot read it.
Practice activity
While you use the site we record your bets, the ledger of your practice credits (starting balance, top-ups, withdrawals, stakes and returns), the limits you set, any time-out or self-exclusion, your favourite events and your session reminder settings.
Support messages
If you contact us through the form or by email, we keep your name, email address, subject and message. The contact form also stores your IP address so we can block floods of messages: no more than 5 messages per hour are accepted from the same source.
Technical data
Our servers log IP addresses and basic request information. A session cookie keeps you logged in. Details of every cookie and storage item are in our Cookie Policy.
We do not ask for identity documents and we do not use an identity verification provider.
3. Why we use your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating and running your account, placing and settling bets, keeping your practice balance | Performance of our contract with you |
| Checking that you are 18 or older | Legal obligation and legitimate interest in keeping minors off the site |
| Running limits, reminders, time-outs and self-exclusions | Legal obligation and legitimate interest in protecting players |
| Answering support messages | Performance of our contract, or legitimate interest where you are not a customer |
| Security, fraud and abuse prevention, server logs, flood protection | Legitimate interest in keeping the service safe |
| Optional cookies (analytics, preferences) | Your consent |
Where we rely on legitimate interest, we have weighed it against your rights and kept the data to the minimum needed.
How we use your email address
We use your email address to identify your account at login, to send password reset links and to reply to your support requests. We do not add it to advertising lists and we do not share it with anyone for marketing.
Automated checks
The only automated decision we make about you is the age check at registration: if the date of birth you enter shows you are under 18, the account is not created. Limits, time-outs and self-exclusions are applied automatically, but only because you set them yourself. We do not use profiling to target offers or to change prices for individual users.
4. Who we share your data with
We do not sell your data. We do not build advertising profiles, and we do not pass your data to third parties for marketing.
Our hosting provider stores the site and its data on our behalf. It acts as a processor under a written agreement and may use the data only to provide hosting. The hosting location will be confirmed here and will be within the European Union.
We may disclose data if the law requires it, for example to a court or a competent authority. Before doing so, we check that the request has a valid legal basis and share only what is needed.
Because our hosting will be in the European Union, we do not plan to transfer your personal data outside the European Economic Area. If that ever changes, we will update this policy and use the safeguards the GDPR requires, such as the European Commission's standard contractual clauses.
5. How long we keep your data
- Account data and practice activity: kept while your account is open. After you ask us to delete your account, we delete it within 30 days, unless we need part of it to establish or defend a legal claim.
- Time-out and self-exclusion records: kept for the full exclusion period, even if you ask for deletion, so that the exclusion can be respected.
- Support messages: 12 months.
- Server logs: 30 days.
- Password reset tokens: 1 hour, after which the link no longer works.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy;
- have inaccurate data corrected (rectification);
- have your data erased, subject to the retention rules above;
- restrict how we use your data in certain cases;
- receive your data in a portable, machine-readable format;
- object to processing based on legitimate interest;
- withdraw your consent at any time, for example through the "Cookie settings" link in the footer. This does not affect processing that took place before.
To use any of these rights, email support@litzbet.be from the address linked to your account. We reply within one month, as the GDPR requires. We may ask for information to confirm it is really you.
You can also complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) at www.dataprotectionauthority.be. We would appreciate the chance to sort out your concern first.
7. How we protect your data
- Passwords are stored only as one-way hashes.
- All traffic to litzbet.be is encrypted with HTTPS.
- Forms are protected against cross-site request forgery (CSRF).
- Your data is not sent to third parties, apart from our hosting provider acting as processor.
No system is free of risk. If a breach affecting your data occurs, we will inform you and the supervisory authority where the law requires it.
8. Children
litzbet is not for anyone under 18. We do not knowingly collect data from minors. If we learn that an account belongs to someone under 18, we close it and delete its data, apart from what we must keep to stop the person registering again. If you believe a minor has an account, please tell us at support@litzbet.be.
9. Changes to this policy
We may update this policy when the service or the law changes. The date and version at the top show the current version. If a change significantly affects how we use your data, we will tell you on the site or by email before it applies.