Privacy Policy

This Privacy Policy explains how the online casino product Fast Bet, operated via the website festbets.com (the "Website") under the brand "Fast Bet", collects, uses, discloses, and protects your personal data. It applies to all Website visitors, registered players, prospective customers, and individuals who communicate with us in relation to our services. Please read it carefully before using the Website or creating an account. By accessing or using festbets.com, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective from 6 November 2025 and replaces any previous version published on festbets.com.

Who We Are

The Website festbets.com, through which Fast Bet is offered, is operated by Rapid Payouts B.V., a private limited liability company (B.V.) incorporated under the laws of Curaçao.

Data controller:

• Legal entity: Rapid Payouts B.V.
• Registered / legal address: Dr. H. Fergusonweg 1, Willemstad, Curaçao
• Jurisdiction of incorporation: Curaçao
• Gaming licence: Master License of Gaming Services Provider N.V. #365/JAZ, issued by the Gaming Control Board (GCB) of Curaçao (gamingcontrolcuracao.org). The real-time status of this licence can be verified through the licence validator available on festbets.com.

For the purposes of applicable data protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, Rapid Payouts B.V. acts as the controller of your personal data in relation to festbets.com and Fast Bet.

Contact details:

• Website: https://festbets.com
• Privacy & general support email: [email protected] (24/7; please include "Privacy" in the subject line for data-protection matters)
• Postal contact for privacy matters: Data Protection Team, Rapid Payouts B.V., Dr. H. Fergusonweg 1, Willemstad, Curaçao
• Telephone: We do not provide telephone support. All privacy- and account-related queries must be submitted via email or live chat on the Website.

Rapid Payouts B.V. has designated an internal data protection contact (Data Protection Team) responsible for privacy compliance. You can reach this team using the contact details above.

What Personal Data We Collect

When you use festbets.com and the Fast Bet product, we collect and process different categories of personal data, depending on how you interact with us and which services you use.

Identification and contact data

• Account details: full name, username, password (stored in hashed form), date of birth, nationality, preferred language, and account ID.
• Contact information: email address (e.g. the address used to contact [email protected]), country of residence, billing address where required, and any other details you choose to provide when communicating with us.
• Verification information (KYC/AML): copies or data extracted from identity documents (such as passport, ID card, driving licence), proof of address (such as utility bills, bank statements), selfies or other images for identity checks, and information obtained from sanctions or politically exposed persons (PEP) lists where required by law.

Technical and usage data

• Technical identifiers: IP address, device identifiers, browser type and version, operating system, time zone and language settings, and approximate location derived from your IP address.
• Log and event data: login times, logout times, account changes, successful and failed login attempts, session duration, and error logs.
• Device and connection data: information about the device and network you use to access festbets.com, including hardware model, unique device identifiers, and mobile network information.

Payment and transactional data

• Payment data: partial payment card details (in tokenised or masked format), bank account details or wallet identifiers where necessary for withdrawals, transaction IDs, and payment method type. Full card details are processed by our payment partners and are not stored by us in plain form.
• Transaction history: records of deposits, withdrawals, bets, wins and losses, bonuses claimed, chargebacks, refunds, and account balances.

Behavioural and profile data

• Gaming behaviour: betting history, game preferences, frequency and duration of play, stakes and wagered amounts, bonus usage, and features you interact with across festbets.com and our related brands (such as QuickieSpins Casino and VeloBet operated by the same company).
• Interaction data: clicks, pages visited, navigation patterns, and responses to in-site messages and promotions.
• Responsible gambling data: self-exclusion status, deposit and loss limits, time-out settings, reality checks, and records of interactions relating to responsible gaming (e.g. chat transcripts with our support team referring to safer-gambling concerns).

Communication and customer support data

• Support contacts: records of emails sent to and from [email protected] and logs of our 24/7 live-chat interactions (including complaints, payment queries and communications with our "payments and security department").
• Feedback and surveys: information you provide when completing surveys, entering promotions, or giving feedback via the Website.

Cookies and similar technologies

• Cookies: small text files stored on your device to remember your preferences, maintain sessions, and analyse site usage.
• Similar technologies: web beacons, pixels, tags, SDKs and local storage used to measure performance, detect fraud, and deliver relevant marketing (where legally permitted).

Further details about how we use cookies and similar technologies are provided in the section "Cookies & Tracking Technologies" and may be supplemented by our standalone cookie information on festbets.com.

Legal Basis for Processing

We process your personal data only when we have a lawful basis to do so under the UK GDPR and other applicable data protection laws. Depending on the circumstances, we rely on one or more of the following legal grounds:

• Performance of a contract: We process your data when it is necessary to enter into or perform our contract with you, including:
  • creating and managing your player account on festbets.com;
  • verifying your identity and eligibility to use Fast Bet;
  • processing deposits, bets, payouts and withdrawals;
  • providing customer support and communicating with you about your account, transactions, and gameplay;
  • implementing responsible gambling tools you choose (limits, self-exclusion, time-outs).
• Compliance with legal obligations: We process your data where required to comply with applicable laws and regulations, including anti-money laundering (AML), counter-terrorist financing (CTF), fraud prevention, tax and accounting obligations, record-keeping, and regulatory reporting obligations in Curaçao and other relevant jurisdictions. This includes KYC checks, monitoring transactions, retaining records for legally mandated periods, and responding to lawful requests from competent authorities.
• Legitimate interests: We process your data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. These interests include:
  • securing our systems, preventing abuse of our services, and detecting, investigating and preventing fraud and other illegal activities;
  • maintaining, improving and optimising festbets.com and Fast Bet, including through analytics, statistics, and service monitoring;
  • personalising your experience, such as recommending games or promotions based on your profile, where this does not rely on consent-based profiling;
  • defending our legal rights and managing disputes, complaints and claims, including in relation to our other brands operated by Rapid Payouts B.V.;
  • ensuring business continuity and corporate governance, including internal audits and risk management.
• Consent: In specific cases, we rely on your consent, for example:
  • sending you electronic marketing communications (e.g. promotional emails, SMS, push notifications) where required by law;
  • using non-essential cookies or similar technologies for analytics and advertising purposes;
  • sharing certain data with affiliates and advertising networks for targeted marketing in jurisdictions where such activities are permitted.
  You may withdraw your consent at any time as explained in the "Your Rights" and "Cookies & Tracking Technologies" sections.
• Protection of vital interests and legal claims: In rare situations, we may process data to protect your vital interests or those of another person, or when necessary to establish, exercise, or defend legal claims.

Purpose of Processing

We use your personal data for clearly defined purposes. The main purposes include:

• Providing and operating our gaming services:
  • setting up and administering your account on festbets.com for Fast Bet;
  • enabling you to deposit funds, place bets, participate in games and tournaments, and withdraw winnings;
  • managing bonuses and promotional offers in line with the terms at https://festbets.com/bonus-terms.
• Compliance, risk management and responsible gambling:
  • carrying out identity verification (KYC) and affordability checks;
  • meeting AML/CTF and other legal obligations as described in our AML/KYC policy at https://festbets.com/aml-kyc-policy;
  • implementing and monitoring responsible gaming measures, as detailed at https://festbets.com/responsible-gaming.
• Customer support and communication:
  • responding to your enquiries to [email protected] and via live chat;
  • notifying you of changes to our terms (https://festbets.com/terms-and-conditions), this Privacy Policy, or other policies;
  • handling complaints and dispute resolution.
• Improvement and analytics:
  • monitoring and analysing usage of festbets.com to improve performance, design, and usability;
  • testing and developing new features, services, and promotional structures;
  • generating aggregated, anonymised statistics that do not identify you directly.
• Marketing and personalisation (where permitted):
  • sending you promotional communications about Fast Bet and our related brands when you have consented or where permitted by law;
  • customising content and offers on festbets.com based on your profile and activity;
  • measuring the effectiveness of our marketing campaigns.
• Security and fraud prevention:
  • monitoring accounts and transactions to detect suspicious behaviour, multi-accounting, chargebacks, bonus abuse or collusion;
  • implementing technical safeguards to protect our systems and your data.
• Legal, regulatory and corporate purposes:
  • complying with record-keeping, tax, regulatory, and audit requirements;
  • cooperating with regulators, supervisory authorities and law-enforcement bodies in Curaçao, the UK, Mexico and other jurisdictions where required;
  • supporting corporate transactions or restructuring relating to our business.

Disclosure & Sharing

We treat your personal data as confidential and share it only when necessary and lawful. Categories of recipients include:

• Payment and financial service providers: Banks, card schemes, payment processors, e-wallet providers and other financial institutions that process your deposits, withdrawals and other payment-related transactions. These providers process your data as independent controllers or processors under their own legal obligations.
• Technology and service providers: Third-party companies that provide services necessary for operating festbets.com, such as:
  • hosting and infrastructure providers;
  • identity verification and KYC service providers;
  • fraud detection and risk scoring tools;
  • email delivery, SMS and live-chat platforms;
  • analytics and security solutions.
  These providers act primarily as processors and are bound by contractual obligations to process your data only on our instructions and to implement appropriate security measures.
• Regulators, supervisory authorities and law enforcement: We may disclose data to:
  • the Gaming Control Board of Curaçao and other gambling regulators;
  • tax authorities and financial intelligence units involved in AML/CTF oversight;
  • data protection authorities, such as the UK Information Commissioner's Office or the Mexican data protection authority, when required;
  • courts, law-enforcement agencies and other competent authorities based on lawful requests.
• Group companies and related brands: Other brands operated by Rapid Payouts B.V., such as QuickieSpins Casino and VeloBet, may receive limited personal data when necessary for shared operational functions (e.g. consolidated risk management, payments, or customer support infrastructure) and only to the extent permitted by law and this Privacy Policy.
• Affiliates and advertising networks: Subject to your consent where required, we may share limited information (such as technical identifiers, cookie-based IDs or aggregated statistics) with affiliates, media partners and advertising networks to measure and optimise marketing campaigns. We do not sell your personal data as understood under UK data protection law.
• Professional advisers: Lawyers, auditors, consultants, and other professional advisers who require access to personal data to provide their services to us, subject to confidentiality obligations.
• Corporate transactions: In connection with any merger, sale of assets, financing, reorganisation or acquisition involving Rapid Payouts B.V. or its brands, your data may be transferred to third parties involved in the transaction, subject to appropriate confidentiality and data protection safeguards.

Where we share data with third parties acting as processors, we put in place written data processing agreements to ensure they process data only under our instructions, with adequate security and in line with applicable data protection laws.

International Transfers

Because Rapid Payouts B.V. is established in Curaçao and works with global service providers, your personal data may be transferred to, stored in, and accessed from countries outside the United Kingdom and the European Economic Area ("EEA"), including Curaçao and other jurisdictions that may have different data protection standards.

• Transfers to Curaçao: Your data will be processed at our registered office in Curaçao and by local service providers where necessary to provide gaming services and comply with regulatory obligations.
• Transfers to other non-UK/EEA countries: Some of our technology, payment, KYC and support providers may be located in or process data from countries that are not subject to an adequacy decision by the UK government or the European Commission.
• Safeguards: Where we transfer personal data from the UK or EEA to countries that do not provide an equivalent level of data protection, we implement appropriate safeguards, which may include:
  • standard contractual clauses (SCCs) approved by the European Commission, together with the UK International Data Transfer Addendum or the UK International Data Transfer Agreement (IDTA);
  • technical and organisational measures such as encryption, pseudonymisation and strict access controls;
  • contractual commitments from recipients to protect your data in line with UK GDPR standards.
• Transfers based on legal exemptions: In limited cases, we may rely on specific legal exemptions, such as where the transfer is necessary for the performance of a contract with you, for the establishment, exercise or defence of legal claims, or where you have explicitly consented.

You may contact us at [email protected] if you would like more information about the safeguards we use for international data transfers or to obtain a copy of the relevant contractual protections, where applicable and not subject to confidentiality obligations.

Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to protect our legitimate interests. Retention periods may vary depending on the type of data and applicable law, but in general:

• Account and identification data: We retain your core account information (such as name, contact details, KYC documents, and account history) for the duration of your relationship with us and, after account closure, typically for up to five (5) years, or longer where required by AML, gaming or other regulatory rules.
• Transaction and payment records: Records of deposits, withdrawals, bets, winnings, and related financial information are generally stored for at least five (5) years following the end of the business relationship or the date of the transaction, in line with AML and financial record-keeping requirements.
• Responsible gambling data: Data related to self-exclusions, limits, and safer-gambling interactions is retained for the duration of any active restriction and for an additional period that allows us to comply with responsible gaming obligations and demonstrate compliance to regulators.
• Marketing data: We retain information used for marketing until you withdraw your consent or object to such processing, or until it is no longer necessary for the purpose for which it was collected, after which it may be anonymised or deleted.
• Customer support and complaints: Emails with [email protected], live-chat transcripts and complaint records are kept for as long as necessary to resolve your enquiry or dispute and for a subsequent period (typically up to five (5) years) to allow us to demonstrate handling, respond to follow-up questions, and comply with legal obligations.
• Technical logs and security data: Security logs, access logs and related technical data are retained for shorter periods, unless needed in connection with an investigation, dispute or regulatory request, in which case they may be kept longer.

When we no longer need personal data, we will either securely delete or anonymise it so that it can no longer be associated with you. We may retain anonymised or aggregated data for statistical, analytical or business planning purposes without further notice to you.

Your Rights

Subject to applicable law, including the UK GDPR, the Data Protection Act 2018, and where relevant Mexican data protection legislation (such as the Federal Law on the Protection of Personal Data Held by Private Parties and its regulations), you have a range of rights in relation to your personal data.

• Right of access: You can request confirmation as to whether we process your personal data and obtain a copy of the data we hold about you, together with information about how we use it.
• Right to rectification: You can ask us to correct inaccurate or incomplete personal data. In many cases, you can update certain information directly through your account settings on festbets.com.
• Right to erasure: You can request that we delete your personal data in certain circumstances, for example where the data is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis. This right may be limited where we are required to retain data for legal or regulatory reasons (for example, AML rules and gaming regulations may require us to retain certain records for at least five years).
• Right to restriction of processing: You can request that we restrict the processing of your data in certain situations, such as when you contest its accuracy or object to processing based on legitimate interests, while we verify your request.
• Right to object: You may object to processing of your personal data carried out on the basis of our legitimate interests, including profiling related to such interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms or where processing is necessary for legal claims. You also have an absolute right to object at any time to the use of your data for direct marketing.
• Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you may request to receive the personal data you provided to us in a structured, commonly used and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to withdraw consent: Where we rely on your consent (for example, for marketing or certain cookie-based analytics), you may withdraw your consent at any time. This will not affect the lawfulness of processing prior to withdrawal.
• Rights under Mexican data protection law: If you are located in Mexico and local law applies, you may have additional rights, including ARCO rights (Access, Rectification, Cancellation and Opposition) and rights related to the limitation or revocation of consent, which we will respect in line with the applicable legislation.

How to exercise your rights:

• Submit your request by email to [email protected] with the subject "Privacy Request". You should clearly state which right you wish to exercise and provide sufficient information to verify your identity and your relationship with festbets.com.
• We may ask for additional information to confirm your identity before responding, especially for sensitive requests such as access to or deletion of account data.
• We will respond to your request as soon as reasonably possible and in any event within one (1) month of receipt, as required by the UK GDPR. This period may be extended by up to two (2) further months where necessary due to complexity or number of requests; in such cases we will inform you of the extension and reasons for the delay.
• We do not normally charge a fee for handling your request. However, we may charge a reasonable fee or refuse to act if your request is manifestly unfounded or excessive, in particular because of its repetitive character.

Cookies & Tracking Technologies

festbets.com uses cookies and similar technologies to provide, secure and improve the Fast Bet service, and to deliver relevant content and marketing where permitted by law.

Types of cookies we use

• Strictly necessary (functional) cookies: These cookies are essential for the operation of the Website and to enable basic functions such as page navigation, secure login, and access to protected areas. The Website cannot function properly without these cookies. They are usually set in response to your actions, such as logging in or setting your privacy preferences.
• Preference cookies: These remember choices you make (such as language settings, region, or interface preferences) to provide a more personalised experience across sessions.
• Analytics and performance cookies: These help us understand how visitors use festbets.com, for example which pages are visited most often, how users move around the site, and where errors occur. The information collected is aggregated and used to improve the performance and design of the Website.
• Advertising and tracking cookies: These may be set by us or by third-party advertising or affiliate networks to build a profile of your interests and show you relevant advertisements on other websites. They may use information about your visits to festbets.com and our related brands. These cookies are only used where permitted by law and, where required, with your consent.
• Similar technologies: We may use pixels, tags, local storage objects and SDKs for purposes similar to cookies, including analytics, security, fraud detection, and marketing.

Managing cookies

• You can manage or disable cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when a cookie is being set. The help function of your browser contains instructions.
• If you block or delete cookies, some features of festbets.com (especially login and gameplay functionalities) may not work properly and your experience may be affected.
• Where a cookie banner or preference centre is available on festbets.com, you can use it to accept or reject non-essential cookies (such as analytics and advertising cookies) and to change your choices at any time.

For more detailed information about specific cookies used on festbets.com, their purposes and lifetimes, we may provide or link to a dedicated cookie overview on the Website.

Data Security

We take the security of your personal data seriously and implement technical and organisational measures designed to protect it against unauthorised access, loss, misuse or alteration, taking into account the nature of the data and the risks involved in processing it.

• Encryption in transit and at rest: Data transmitted between your browser and festbets.com is protected using Transport Layer Security (TLS) version 1.2 or higher. Where appropriate, we also use encryption or pseudonymisation to protect stored data, including passwords (which are hashed) and certain sensitive information.
• Access controls and authentication: Access to personal data is strictly limited to authorised personnel who need it to perform their job duties. We use role-based access controls, strong authentication mechanisms, and, where appropriate, multi-factor authentication for administrative access to systems processing personal data.
• Network and infrastructure security: We deploy firewalls, intrusion detection and prevention systems, anti-malware tools and other security technologies to protect our infrastructure. Systems are regularly patched and updated to address known vulnerabilities.
• Monitoring, audits and testing: We monitor our systems for suspicious activities and perform periodic security assessments, including internal audits and vulnerability testing, to evaluate the effectiveness of our controls. Where relevant, we align our practices with recognised international security standards (such as ISO/IEC 27001 or SOC 2), even if we are not formally certified.
• Staff training and confidentiality: Employees and contractors who have access to personal data are subject to confidentiality obligations and receive appropriate training on data protection, security and responsible handling of player information.
• Incident response: We maintain procedures for identifying, investigating and responding to potential personal data breaches. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required by law, inform affected individuals without undue delay.

While we strive to use commercially reasonable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential and for using unique, strong passwords on festbets.com and any related accounts.

Complaints & Contacts

If you have any questions, concerns or complaints about how we handle your personal data, or if you wish to exercise your rights, you should contact us first so that we can try to resolve the issue.

How to contact us

• Email (preferred): [email protected] (24/7). Please include "Privacy Complaint" or "Privacy Question" in the subject line.
• Postal address: Data Protection Team, Rapid Payouts B.V., Dr. H. Fergusonweg 1, Willemstad, Curaçao.
• Website: You may also contact us via the live-chat functionality available on festbets.com, where support agents can log and escalate privacy-related issues to the data protection team.

Complaint handling procedure:

1. Submit your complaint or question using one of the channels above, providing as much relevant detail as possible (for example, your account ID, a description of the issue, and any supporting documentation).
2. We will acknowledge receipt of your complaint within a reasonable time (usually within a few business days).
3. Our data protection team or an appropriately trained member of staff will investigate your complaint and may contact you for further information if needed.
4. We aim to provide a substantive response within one (1) month from receipt of your complaint. For complex matters, this period may be extended; in such cases, we will inform you about the extension and expected timeframe.

Escalation to supervisory authorities

If you are not satisfied with our response or believe that your data protection rights have been infringed, you have the right to lodge a complaint with a competent data protection authority, in particular in the country where you live, work, or where the alleged infringement took place. Examples include:

• United Kingdom: Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom. Website: https://ico.org.uk/.
• Mexico: Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). Website: https://home.inai.org.mx/.
• European Union/EEA: If EU data protection law applies, you may contact the competent supervisory authority in your EU/EEA Member State (information available via the European Data Protection Board's website).

In addition, for issues specifically related to gaming regulation, you may contact the Gaming Control Board of Curaçao via its official website at https://gamingcontrolcuracao.org/. Please note that such gaming-related complaints are distinct from data protection complaints and may follow different procedures.

Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, regulatory guidance, or technical developments affecting festbets.com or the Fast Bet service.

• Notification of changes: When we make material changes, we will take appropriate steps to inform you in advance, which may include:
  • email notifications sent to the address associated with your account on festbets.com;
  • prominent notices or banners on the Website;
  • alerts or messages displayed in your account dashboard.
• Advance notice: For significant changes that affect your rights or the way we process your data, we will provide at least thirty (30) days' notice where practicable before the changes take effect, unless applicable law or regulatory guidance requires a different timeframe.
• Your options: If you do not agree with the updated Privacy Policy, you may choose to stop using festbets.com and request the closure of your account. Continued use of the Website after the effective date of the updated policy will be deemed acceptance of the changes, to the extent permitted by law.
• Version control: At the top of this Privacy Policy, we state the effective date and may include a version identifier. On request, we can provide you with previous versions or a summary of material changes.

Last updated: November 2025.