Data Privacy and GDPR Compliance Policy

This Privacy Policy ("Policy") explains how Melbet (Pelican Entertainment N.V.) collects, processes, stores and uses our players' personal data. By using our services you consent to your data being processed under the terms of this Policy. The Policy complies with the European GDPR and applicable data protection legislation.

The Data Controller

The data controller under this policy is Pelican Entertainment N.V., a company registered under the laws of Curaçao. All questions can be sent to [email protected].

At Melbet we take your privacy seriously. This policy informs you about:

• Which data we collect and why we collect it
• Your legal rights regarding your data
• The measures we take to protect your data
• How to contact us with questions or concerns

What Are Personal Data and Special Category Data?

Under the GDPR, "personal data" is any information relating to an identified or identifiable natural person. That covers not only explicit identifiers such as first and last name, but also user ID numbers, online identifiers (device ID, IP) and any factor relating to physical, economic, cultural or social identity.

"Special category data" means information such as health records, biometric data, ethnic origin, religious belief and sexual orientation — data whose leakage would cause a serious privacy breach. Melbet does not process such data unless strictly necessary.

Which Information Do We Collect?

We process your data on one or more of the following legal bases:

1. Explicit consent: for certain processing types such as marketing communications we ask for your explicit consent; you can withdraw it at any time.
2. Performance of a contract: required to manage your account and deliver the service.
3. Legal obligation: obligations arising from laws such as AML/KYC and tax regulations.
4. Legitimate interest: improving service quality, preventing fraud and maintaining security.
5. Vital interest: in rare cases, to protect the vital interests of the user or another person.

Typical data categories we collect: identity details (name, date of birth, national ID number), contact details (e-mail, phone, address), financial details (payment method, transaction history), usage data (sessions, IP, device, logs) and KYC documents.

Cookies

Cookies are small text files stored on your device when you visit certain pages of the site. We use cookies for the following purposes:

• Usage tracking: measuring your interaction with the site to improve functionality
• Traffic analysis: understanding user behaviour to optimise content
• Convenience: remembering your preferences and settings (session, language, odds display)

You can control, delete or block cookies through your browser settings. Note that if essential cookies are blocked, account login and betting transactions may stop working.

Why Do We Use Your Data?

• Creating and managing your account
• Accepting bets, running games, receiving/sending payments
• Improving service quality and the gaming experience
• Fulfilling legal, licensing and regulatory obligations
• Preventing fraud, money laundering and the financing of terrorism

Before using your data for marketing we obtain your explicit consent — and you can withdraw it any time under "Account → Communication Preferences".

Do We Share Your Data?

For operational and legal reasons, we share your data in a limited way with the following parties:

• Regulatory authorities and government bodies (where legally required)
• Payment providers and financial institutions (to process transactions)
• Identity verification agencies (under AML/KYC)
• Fraud prevention and security audit providers

We never sell your data to third parties for marketing. Every transfer is encrypted and audited.

How Long Do We Keep Your Data?

• Retention period: only as long as the purpose of collection requires
• Deletion: when the period expires, data is deleted or anonymised
• Regular review: the necessity of stored data is reviewed periodically
• Legal retention: some data may be kept for 5–10 years under AML/tax legislation

Your Personal Data Rights

Under the GDPR you have the following rights:

• Right of access: learn which of your data is processed and for what purpose
• Right to rectification: request correction of wrong/incomplete data
• Right to erasure (to be forgotten): request deletion once the processing purpose has ended
• Right to restrict processing: request suspension of processing in certain conditions
• Data portability: receive your data in a structured format and transfer it
• Right to object: object to processing based on legitimate interest
• Exemption from automated decisions: request that decisions are not made by automated systems alone
• Right to complain: lodge a complaint with your national data protection authority

To exercise these rights, simply send a written request to [email protected]. Requests are answered within 30 days at the latest.