Privacy Policy

This Privacy Policy explains how personal data is collected and used when you visit or use the Vegas Mobile project operated via the website vegasmobile.bet (the "Site") and related services ("Services"). It applies to website visitors, registered players, and any individual whose data is processed in connection with our online gambling Services. Please read it carefully so you understand how and why we use your data and the choices you have. This Privacy Policy is effective as of 6 November 2025 and replaces any previous versions relating to vegasmobile.bet.

Who We Are

For UK players and visitors to vegasmobile.bet, the controller of your personal data is:

Operator: ProgressPlay Limited, a limited company registered in Malta.
Registered number: C58305.
Country of registration: Malta.
Gambling licences: For UK players, ProgressPlay Limited operates Vegas Mobile on vegasmobile.bet under UK Gambling Commission licence account number 39335. For non-UK players, the Services are operated under Malta Gaming Authority licence MGA/B2C/231/2012.

The registered office and full postal address of ProgressPlay Limited are published on the corporate and regulator registers and may be updated from time to time. The most up-to-date address details can always be found on vegasmobile.bet and on the relevant regulator's public register.

We have appointed a Data Protection Officer ("DPO") / data protection contact point responsible for overseeing questions in relation to this Privacy Policy and our data protection practices.

Data Protection contact: Data Protection Officer, ProgressPlay Limited
Email: [email protected] (or any replacement privacy contact email published on vegasmobile.bet)
Postal contact: "Data Protection Officer - ProgressPlay Limited", using the latest corporate address published on vegasmobile.bet or in the applicable regulator's register

When this Privacy Policy refers to "Vegas Mobile", "we", "us" or "our", it refers to ProgressPlay Limited operating the Vegas Mobile project via vegasmobile.bet for the relevant jurisdiction (UK or, where applicable, MGA-licensed territories).

What Personal Data We Collect

Account and Identity Data

Registration data: When you create an account, we collect your full name, date of birth, residential address, email address, mobile/telephone number, username, password and security information.
Verification data (KYC/AML): To comply with "Know Your Customer" and anti-money laundering (AML) obligations, we may collect copies of identity documents (such as passport, ID card, driving licence), proof of address (utility bill, bank statement), information about the source of funds/wealth, and other information required by applicable law or our regulators (UKGC and, where applicable, MGA).
Account profile data: Preferences, language, communication choices, responsible gambling settings (deposit limits, time-outs, self-exclusion, including GamStop-based exclusions for UK players) and other profile information that you choose to provide.

Technical and Usage Data

Technical identifiers: IP address, device identifiers, browser type and version, operating system, time zone setting, and other device configuration data collected when you access vegasmobile.bet.
Usage and log data: Login and logout times, pages visited, clicks, navigation paths, game session logs, session duration, error logs, and similar diagnostic data generated by your use of the Services.
Cookies and similar technologies: We use cookies, pixels, tags, SDKs and similar technologies to recognise your browser or device, enable core functionality, remember your preferences, and measure performance and marketing effectiveness. More information is provided in the Cookies & Tracking Technologies section and in any dedicated cookie notice on vegasmobile.bet.

Gaming and Behavioural Data

Transaction and gameplay data: Stakes, wins, losses, bonuses claimed, wagering requirements, game type, frequency and duration of play, bet history and game outcomes.
Behavioural patterns: Patterns of play, device and account behaviour, risk and affordability indicators, responsible gambling and potential harm indicators, and other behavioural data derived from our monitoring tools, including tools required by the UK Gambling Commission and, where applicable, the Malta Gaming Authority.
Communication data: Records of chats, emails, messages, telephone calls and complaints with customer support or other departments, including transcripts and call recordings where legally permitted and notified.

Payment and Financial Data

Payment method data: Limited card details (such as card type, tokenised card identifier and last four digits), e-wallet or alternative payment method identifiers (for example, PayPal, Skrill, Neteller, ecoPayz, PayviaPhone, Apple Pay, Paysafecard), and billing information.
Transaction records: Deposits, withdrawals, fees (for example, any PayviaPhone fee), chargebacks, refunds, and related financial operations in supported currencies (including GBP, EUR, USD and CAD, where applicable).
Anti-fraud and AML data: Internal and third-party checks, risk scores, sanctions/PEP screening results and information related to financial investigations or suspicious activity reports.

Data from Cookies and Similar Technologies

Functional cookies data: Information that allows us to remember your login session, language, game settings and other choices to provide a consistent service.
Analytics and performance data: Aggregated and pseudonymised data about how users interact with vegasmobile.bet (for example, pages visited, time spent, click paths) to help us improve our Services.
Advertising and marketing data: Data relating to how you respond to marketing communications or promotions, where permitted (for example, whether you opened an email or clicked on a promotion), and advertising identifiers where we use advertising cookies or similar technologies with your consent.

Legal Basis for Processing

We process personal data only where we have a valid legal basis under the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, and, where applicable, the GDPR and relevant non-UK laws (including Mexican data protection law, to the extent it applies to you). Depending on the specific processing activity, we rely on the following legal grounds:

Performance of a contract: We process your data when it is necessary to enter into and perform our contract with you, including:
- Creating and managing your Vegas Mobile account on vegasmobile.bet;
- Processing deposits and withdrawals, handling payments and payouts;
- Providing access to casino games, promotions and loyalty programmes;
- Providing customer support and resolving operational issues.
Compliance with legal obligations: We process data where required to comply with laws and regulations applicable to licensed gambling operators, such as:
- Identity verification, anti-money laundering and counter-terrorist financing requirements;
- Responsible gambling obligations (including monitoring and interventions required by the UKGC and, where applicable, MGA rules);
- Record-keeping, accounting, regulatory reporting and responding to lawful requests from authorities.
Legitimate interests: We process data where it is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests, for example:
- Preventing and detecting fraud, misuse, bonus abuse and other unlawful or harmful activities;
- Ensuring network and information security, including preventing unauthorised access;
- Improving and developing our Services, products and customer experience;
- Establishing, exercising or defending legal claims.
Consent: In specific situations, we rely on your consent, such as:
- Sending direct electronic marketing about our products and promotions where consent is required under PECR or other applicable laws;
- Using non-essential cookies and similar technologies for analytics and advertising purposes;
- Sharing certain data with selected partners for personalised offers, where required by law.
You may withdraw your consent at any time (see the "Your Rights" section), but this will not affect the lawfulness of processing before withdrawal.

Purpose of Processing

We use your personal data only for specified, explicit and legitimate purposes and do not process it in a manner incompatible with those purposes. In particular, we process your data for the following purposes:

Providing and operating the Services: To create and manage your Vegas Mobile account on vegasmobile.bet, enable you to play casino games, process your transactions, and provide customer support.
Compliance and risk management: To perform age and identity checks, meet KYC/AML obligations, ensure responsible gambling (including GamStop and internal self-exclusion tools), conduct affordability and risk assessments, and comply with licence conditions and regulatory codes of practice.
Improving our Services: To analyse performance, user behaviour and feedback to enhance game offerings, site functionality, stability and security, and to develop new features tailored to our players' needs.
Marketing and promotions: To provide you (where permitted) with offers, bonuses and promotions tailored to your profile and preferences, via email, SMS, push notifications, on-site messages and other channels, subject to your marketing preferences and applicable laws.
Analytics and statistics: To compile aggregate statistics about our players and the use of vegasmobile.bet, measure campaign effectiveness, and better understand our customer base and market trends.
Fraud prevention and security: To detect and prevent fraud, abuse, collusion, money laundering, account takeovers and other unlawful or harmful activities, and to protect the integrity and security of our systems, platform and other players.
Legal and regulatory purposes: To establish, exercise or defend legal claims, respond to lawful information requests from regulators or law enforcement, and comply with our legal obligations in the UK and, where applicable, other relevant jurisdictions.

Disclosure & Sharing

We treat your personal data as confidential but may share it with trusted third parties where necessary for the purposes described in this Privacy Policy and where we have a legal basis to do so. We require all recipients to protect your data and to process it only in accordance with our instructions and applicable law.

Payment and banking partners: We share necessary payment data with banks, card schemes and payment service providers (for example, Visa, Mastercard, PayPal, PayviaPhone, Apple Pay, Paysafecard, Skrill, Neteller, ecoPayz) to process deposits, withdrawals, refunds, chargebacks and to detect and prevent fraud.
Service providers and processors: We use trusted third parties to provide services such as IT hosting and infrastructure, platform support, game providers, analytics and business intelligence, communication tools (email/SMS providers), identity and AML screening, and customer support tools.
Group entities and white-label partners: Where necessary, we may share data within the ProgressPlay Limited group and with relevant white-label or platform partners strictly for operational, compliance, support and reporting purposes, including applying network-wide responsible gambling measures (for example, group self-exclusion across ProgressPlay brands).
Regulators, ADR and public authorities: We may disclose data to the UK Gambling Commission, the Malta Gaming Authority, approved alternative dispute resolution (ADR) entities such as the Independent Betting Adjudication Service (IBAS) for UK players or the relevant ADR used under the MGA regime, and other competent authorities or regulators where required by law.
Advertising and marketing partners: With your consent where required, we may share limited data or use third-party tools (for example, analytics or advertising platforms) to deliver and measure marketing campaigns. Where possible, this data is pseudonymised or aggregated.
Professional advisers and purchasers: We may share data with lawyers, auditors, consultants, insurers and other professional advisers, and, in the context of corporate transactions, with actual or potential purchasers, financiers or merger partners, subject to confidentiality obligations.
Legal obligations and protection of interests: We may disclose personal data where we reasonably believe it is necessary to comply with a legal obligation, protect our rights, property or safety, or that of our players, employees or others, or to investigate or respond to suspected illegal activity or security incidents.

International Transfers

Because ProgressPlay Limited is registered in Malta and uses international service providers, your personal data may be transferred to and processed in countries outside the United Kingdom and, where applicable, outside the European Economic Area ("EEA"). These countries may have data protection laws that differ from those in your home jurisdiction.

Intra-group and Malta transfers: Data may be processed in Malta in connection with the operation of our MGA-licensed services and central platform infrastructure operated by ProgressPlay Limited and its service providers.
Service providers outside the UK/EEA: Some of our processors (for example, IT hosting, analytics and communications providers) may be located in, or process data from, countries that do not provide an equivalent level of data protection under UK or EU law.
Safeguards: Where we transfer your data outside the UK or EEA and the destination country has not been recognised as providing an adequate level of protection, we implement appropriate safeguards, such as:
- Standard Contractual Clauses approved by the European Commission and/or the UK International Data Transfer Addendum/Agreement;
- Technical and organisational measures (for example, encryption, access controls and minimisation);
- Risk assessments and, where required, supplementary measures to ensure the transferred data enjoys a level of protection essentially equivalent to that in the UK/EEA.

You can obtain more information about the safeguards we use for international transfers (including copies of relevant contractual protections, where legally permissible) by contacting our Data Protection Officer.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting or reporting requirements. Retention periods may vary depending on the type of data and applicable law, particularly UK gambling regulations, AML/CTF legislation and, where relevant, MGA and other local requirements.

Account and identification data: Core account records and verification documents are generally retained for the duration of your relationship with us and, after account closure, for a period typically between five (5) and seven (7) years, or longer if required by AML or gambling regulations or in connection with ongoing investigations or legal claims.
Transaction and financial data: Payment and transaction records are retained for periods required by financial, tax and AML legislation, typically at least five (5) years from the date of the relevant transaction, and may be stored for up to seven (7) years or longer where legally required.
Gaming and behavioural data: Betting history, game logs and responsible gambling records (including self-exclusion data) are retained for the period necessary to meet regulatory obligations, network self-exclusion requirements (for example, GamStop for UK players and group-wide exclusions across ProgressPlay brands) and to protect our legitimate interests in the event of complaints or disputes.
Marketing and consent records: Records of marketing preferences and consent withdrawals are kept for as long as necessary to prove compliance with data protection and marketing laws (for example, to demonstrate when consent was given or withdrawn), typically up to six (6) years after the last relevant communication.
Cookies and similar technologies: Data derived from cookies is retained in accordance with the lifetimes of the individual cookies as described in our cookie notice, and is often aggregated or anonymised after the expiry of the underlying cookie.

When data is no longer needed and we are not required to keep it, we will delete, anonymise or securely destroy it. Where anonymisation is used, the resulting information is no longer treated as personal data. If you exercise certain rights (for example, erasure), we may retain limited information to demonstrate compliance, maintain suppression lists or comply with legal obligations.

Your Rights

Subject to applicable law, including the UK GDPR, the Data Protection Act 2018, and, where relevant, the EU GDPR and Mexican privacy regulations, you have a number of rights in relation to your personal data. These rights may vary depending on your location and the legal regime that applies to you, but we aim to respect and facilitate them consistently.

Right of access: You have the right to obtain confirmation of whether we process your personal data and, if so, to receive a copy of that data along with certain information about how we use it.
Right to rectification: You can request correction of inaccurate or incomplete personal data. You should keep your account information up to date through the account settings on vegasmobile.bet and by contacting customer support if needed.
Right to erasure ("right to be forgotten"): You can ask us to delete your personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent. This right is not absolute and may be limited where we must retain data to comply with legal obligations (for example, AML record-keeping, gambling regulations or legal claims).
Right to restriction of processing: You may request that we restrict processing of your data where you contest its accuracy, where the processing is unlawful and you prefer restriction to deletion, or where we no longer need the data but you require it for legal claims.
Right to object: You can object to processing based on our legitimate interests, including profiling, where we rely on that basis, and we will stop processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms or the processing is required for legal claims. You have an absolute right to object at any time to direct marketing (including profiling related to such marketing).
Right to data portability: In certain circumstances, you may receive your personal data in a structured, commonly used and machine-readable format and have the right to request that we transfer it to another controller, where technically feasible and legally permitted.
Rights regarding consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal, but we will stop the relevant processing going forward.

Where Mexican privacy law applies to you (for example, if you are a data subject located in Mexico using services covered by applicable Mexican law), you may also have rights consistent with the ARCO framework under the Federal Law on the Protection of Personal Data Held by Private Parties, namely: Access, Rectification, Cancellation and Opposition, together with rights related to consent and limitation of data disclosure. We will address such requests in line with those requirements where they apply.

How to exercise your rights:

Submit a request via email to our Data Protection Officer at [email protected] or via any dedicated privacy/contact form provided on vegasmobile.bet, clearly indicating:
- Your full name and registered account details;
- The right(s) you wish to exercise;
- Any relevant details to help us locate your data.
We may need to verify your identity to protect your data. This may involve requesting additional information or supporting documents.
We will respond to your request without undue delay and in any event within one (1) month of receipt. For complex or numerous requests, this period may be extended by up to a further two (2) months; if so, we will inform you of the extension and the reasons.
We will generally handle your request free of charge. However, where permitted by law, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, in particular because of their repetitive character.

Cookies & Tracking Technologies

vegasmobile.bet uses cookies and similar technologies to provide, protect and improve the Vegas Mobile Services and to deliver relevant marketing where permitted. Cookies are small text files stored on your device when you visit our Site.

Types of Cookies We Use

Strictly necessary (session) cookies: These cookies are essential for the operation of the Site and to enable you to log in, navigate and use core features (for example, accessing secure account areas, placing bets, processing transactions). They are usually session cookies that expire when you close your browser.
Functional (persistent) cookies: These cookies remember your preferences and settings (such as language, region, game favourites and display settings) to provide a more personalised experience. They may remain on your device for a defined period or until you delete them.
Analytics and performance cookies: These cookies help us understand how visitors use vegasmobile.bet, which pages are most popular, and how campaigns perform. We use this information to improve site performance, usability and the relevance of content. Data is often aggregated or pseudonymised.
Advertising and targeting cookies (third-party): Subject to your consent where required, these cookies may be set by us or by third-party partners to build a profile of your interests and display relevant ads or promotions on our Site or other websites and apps. They may also limit how often you see a particular advertisement.

Managing Cookies

Browser settings: Most browsers allow you to manage cookies by adjusting your settings to accept or reject cookies, delete existing cookies, or notify you when cookies are being set. If you disable certain cookies, some features of vegasmobile.bet may not function properly or your experience may be less personalised.
On-site controls: Where available, we may provide an internal cookie management tool or preference centre that allows you to enable or disable certain categories of cookies (excluding strictly necessary cookies which are essential for the Services).
Third-party opt-outs: For third-party analytics or advertising cookies, you may also be able to opt-out using tools provided by those third parties or industry bodies, where available.

For more details about the specific cookies used on vegasmobile.bet, their lifetimes and purposes, please refer to any dedicated cookie notice or banner provided on the Site, which may be updated from time to time.

Data Security

We take the security of your personal data very seriously and implement a combination of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction or damage, in line with industry best practice and our regulatory obligations.

Encryption: Data transmitted between your browser and vegasmobile.bet is protected using TLS (Transport Layer Security) version 1.2 or higher. Where appropriate, we use encryption or pseudonymisation to protect data at rest, particularly for sensitive or high-risk information.
Access controls and authentication: Access to personal data is restricted to authorised personnel who require it to perform their job duties, based on role and "need-to-know" principles. Strong authentication mechanisms, including multi-factor authentication for administrative access, are applied where appropriate.
Secure infrastructure: Our systems are hosted in secure environments with firewalls, intrusion detection or prevention systems and other safeguards. We implement regular patching, hardening and monitoring activities to reduce vulnerabilities.
Monitoring, logging and testing: We maintain logs of key activities, monitor systems for suspicious behaviour and conduct regular security testing and assessments. Where relevant, we align our practices with recognised security frameworks and standards (for example, ISO 27001-style controls or SOC-type practices), even if formal certification is held by specific providers rather than by us directly.
Staff training and policies: Employees and contractors who handle personal data receive training on data protection, confidentiality and information security. We maintain internal policies covering acceptable use, access management, incident response and data handling.
Incident response: We have procedures in place to detect, investigate and respond to suspected personal data breaches. Where required by law, we will notify the relevant data protection authority and affected individuals without undue delay, including providing information on the steps we have taken to mitigate potential harm.

While no system can ever be guaranteed as completely secure, we continually review and enhance our security measures to reflect legal, technological and operational developments.

Complaints & Contacts

If you have any questions, concerns or complaints about how we handle your personal data, we encourage you to contact us first so we can seek to resolve the issue directly and promptly.

Contacting Us

Initial contact: You can contact our Data Protection Officer or data protection contact point using:
- Email: [email protected] (or any replacement privacy contact email published on vegasmobile.bet);
- Online: through any contact or privacy form provided in your account area or on vegasmobile.bet, clearly marking your message as "Data Protection" or "Privacy";
- Postal: write to "Data Protection Officer - ProgressPlay Limited", using the latest corporate address published on vegasmobile.bet or in the relevant regulator's register.
Our response: We will review your complaint or query and aim to respond in writing without undue delay, typically within thirty (30) days. For complex matters, we may need longer; if so, we will inform you of the extension and explain the reasons.
Escalation within our organisation: If you are not satisfied with the initial response, you may ask for the matter to be escalated to our senior management or compliance team. We will provide you with information about the escalation process as appropriate.

Supervisory Authorities and External Remedies

You also have the right to lodge a complaint with a data protection authority if you believe that your data protection rights have been infringed. Without limiting your rights:

United Kingdom: If you are in the UK or your data is primarily processed under UK law, you can complain to the Information Commissioner's Office (ICO):
- Website: https://ico.org.uk
- Telephone (UK): 0303 123 1113
- Postal: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom.
European Economic Area / Malta: Where EU/EEA data protection law applies (for example, in relation to our MGA-licensed operations), you may complain to your local supervisory authority or to the Office of the Information and Data Protection Commissioner (IDPC) in Malta (the Maltese data protection authority) whose details are available at https://idpc.org.mt.
Mexico: Where Mexican data protection law applies to you, you may lodge a complaint with the competent Mexican data protection authority (currently the National Institute for Transparency, Access to Information and Personal Data Protection - INAI, or its successor), in accordance with the procedures set out in Mexican privacy regulations.

Nothing in this Privacy Policy limits your right to seek other remedies, such as judicial protection, where available under applicable law. Please note that dispute resolution mechanisms specific to gambling services (for example, Independent Betting Adjudication Service (IBAS) for UK gambling disputes or relevant ADR bodies under the MGA regime) are typically focused on betting or transactional issues and do not replace your rights to complain to data protection authorities regarding privacy matters.

Updates

We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal obligations, regulatory guidance, or the Services offered through vegasmobile.bet as part of the Vegas Mobile project. When we make changes, we will update the "Last updated" date at the end of this Privacy Policy.

Notification of changes: We will take appropriate steps to inform you of material changes. This may include:
- Displaying a prominent notice or banner on vegasmobile.bet;
- Publishing an updated version of the Privacy Policy on our Site;
- Sending you an email or in-account message where the changes are significant or where we are legally required to do so.
Advance notice for significant changes: For material changes that significantly affect how we process your data or your rights, we will, where reasonably practicable, provide at least thirty (30) days' advance notice before the new terms take effect, unless immediate implementation is required by law or regulatory guidance.
Your review and options: We encourage you to review this Privacy Policy regularly. If you do not agree with an update, you may choose to adjust your privacy settings, withdraw consent (where applicable), or close your account and stop using the Services. Continued use of vegasmobile.bet after the effective date of an updated Privacy Policy will be treated as acceptance of the updated terms, to the extent permitted by law.

Last updated: 6 November 2025.