Data Protection & Privacy

Data We Collect

Invicta Networks N.V., operating the website ggbet.ie under Antillephone license number 8048/JAZ2012-009, is the data controller responsible for the collection, processing, and storage of personal data pertaining to users of its services. The following categories of personal data are subject to systematic processing in the course of service provision:

Identification Data: Full legal name, date of birth, nationality, and government-issued identification document details, including passport numbers and national identity card references, are collected and retained for the purposes of identity verification and regulatory compliance.
Contact Information: Electronic mail addresses, telephone numbers, and residential addresses, including postal codes and country of residence, are recorded to facilitate communication and correspondence between the data controller and the data subject.
Financial Data: Payment instrument details, transaction histories, deposit and withdrawal records, account balances, and banking information are processed in accordance with applicable anti-money laundering legislation and financial regulatory requirements.
Account Credentials: Usernames, encrypted authentication credentials, security question responses, and session identifiers are maintained to ensure the integrity and security of individual user accounts.
Technical and Usage Data: Internet Protocol addresses, browser type and version, operating system information, device identifiers, geolocation data, access timestamps, page interaction records, and cookie-derived behavioral data are collected automatically upon access to the platform.
Communications Data: Records of correspondence submitted through customer support channels, including electronic messages, chat transcripts, and formal complaints, are retained for quality assurance, legal, and compliance purposes.
Responsible Gambling Data: Self-exclusion preferences, deposit limits, session duration restrictions, and responsible gambling declarations are recorded and processed as required under applicable regulatory obligations.

The collection of personal data is conducted in strict accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation) and all applicable national data protection legislation. Data is collected directly from the data subject, through automated technical means, or from authorized third-party verification service providers where applicable.

How We Use Data

Personal data collected from data subjects is processed exclusively for specified, explicit, and legitimate purposes as enumerated hereinafter. Processing activities are conducted on the basis of one or more lawful grounds established under Article 6 of the General Data Protection Regulation, including contractual necessity, compliance with legal obligations, legitimate interests pursued by the data controller, and, where required, the explicit consent of the data subject.

Account Administration and Service Provision: Personal data is processed to facilitate the creation, maintenance, and administration of user accounts, to enable access to the services provided through ggbet.ie, and to ensure the proper execution of service agreements between the data controller and registered users.
Identity Verification and Know Your Customer Compliance: Identification and financial data are processed to fulfill obligations arising from applicable anti-money laundering legislation, counter-terrorism financing regulations, and licensing conditions imposed by Antillephone under license 8048/JAZ2012-009. Such processing is mandatory and non-negotiable as a precondition for continued access to regulated services.
Financial Transaction Processing: Payment data and banking information are processed for the purposes of executing deposits, withdrawals, and financial transfers, as well as for the detection and prevention of fraudulent activity and unauthorized transactions.
Regulatory Compliance and Legal Obligations: Personal data may be disclosed to competent regulatory authorities, law enforcement agencies, and licensing bodies where such disclosure is required by applicable law, judicial order, or regulatory directive. Records are retained for periods prescribed under applicable legal and regulatory frameworks.
Customer Support and Communications: Contact information and communications data are processed to respond to inquiries, resolve disputes, administer complaints, and provide technical assistance to data subjects as required in the course of service delivery.
Security and Fraud Prevention: Technical and usage data, including IP addresses and device identifiers, are processed to monitor platform security, detect unauthorized access attempts, prevent fraudulent conduct, and maintain the integrity of the operational environment.
Responsible Gambling Compliance: Responsible gambling data is processed to implement player protection measures, enforce self-exclusion programs, apply account restrictions, and fulfill obligations imposed by the relevant gaming regulatory authority.
Service Improvement and Analytics: Aggregated and pseudonymized usage data may be analyzed for the purposes of improving platform functionality, optimizing user experience, and conducting internal performance assessments, provided that such processing does not result in decisions producing legal effects upon individual data subjects.

Personal data shall not be processed for purposes incompatible with those for which it was originally collected without the prior explicit consent of the data subject or the existence of a separate lawful basis for such processing. Personal data shall not be sold, transferred, or otherwise made available to third parties for commercial marketing purposes without the express consent of the data subject.

Data Protection

Invicta Networks N.V. is committed to the implementation and maintenance of appropriate technical and organizational measures designed to ensure a level of security commensurate with the risk posed by the processing activities conducted in connection with the operation of ggbet.ie. Such measures are implemented in accordance with Article 32 of the General Data Protection Regulation and applicable industry standards.

Encryption: All personal data transmitted between data subjects and the platform is protected through industry-standard Transport Layer Security (TLS) encryption protocols. Sensitive data stored within the data controller's systems, including authentication credentials and financial information, is subject to encryption at rest using appropriate cryptographic standards.
Access Controls: Access to personal data is restricted on a strictly need-to-know basis. Role-based access control mechanisms are implemented to ensure that only authorized personnel are permitted access to personal data in the course of their designated duties. Access permissions are reviewed and updated on a periodic basis.
Pseudonymization and Data Minimization: Where technically and operationally feasible, personal data is pseudonymized to reduce the risk associated with unauthorized access or disclosure. Data collection is limited to information strictly necessary for the specified processing purposes in accordance with the principle of data minimization.
System Security Monitoring: Continuous monitoring of information systems is conducted to detect, assess, and respond to security incidents, unauthorized access attempts, and anomalous activity. Security logs are retained for defined periods to support incident investigation and regulatory compliance.
Third-Party Processor Management: Where personal data is processed by third-party service providers acting as data processors on behalf of Invicta Networks N.V., contractual agreements incorporating appropriate data processing terms and security requirements are established in accordance with Article 28 of the General Data Protection Regulation. Due diligence assessments are conducted prior to the engagement of third-party processors.
Data Retention and Deletion: Personal data is retained only for such periods as are necessary to fulfill the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Upon the expiration of applicable retention periods, personal data is securely deleted or anonymized in a manner that prevents recovery or reconstruction.
Staff Training and Awareness: Personnel with access to personal data are subject to binding confidentiality obligations and receive appropriate training regarding data protection obligations, applicable legal requirements, and internal security policies.
Incident Response: Documented incident response procedures are maintained to facilitate the timely identification, assessment, containment, and notification of personal data breaches in accordance with the requirements of Articles 33 and 34 of the General Data Protection Regulation.

Notwithstanding the foregoing measures, no data transmission or storage system can be guaranteed to be entirely free from security vulnerabilities. Data subjects are accordingly advised to exercise appropriate caution in the management of their account credentials and to notify the data controller without undue delay upon becoming aware of any actual or suspected unauthorized access to their account.

User Rights

Data subjects whose personal data is processed by Invicta Networks N.V. in connection with the operation of ggbet.ie are vested with the following rights under the General Data Protection Regulation and applicable national data protection legislation. Such rights may be exercised by submitting a formal written request to the data controller via the contact details specified herein. Requests shall be responded to within the timeframes prescribed by applicable law, subject to verification of the requesting party's identity.

Right of Access (Article 15 GDPR): Data subjects are entitled to obtain confirmation as to whether personal data concerning them is being processed, and, where such processing is confirmed, to receive a copy of the personal data undergoing processing together with supplementary information regarding the purposes, categories, recipients, and retention periods applicable to such processing.
Right to Rectification (Article 16 GDPR): Data subjects are entitled to require the correction of inaccurate personal data concerning them and the completion of incomplete personal data, without undue delay.
Right to Erasure (Article 17 GDPR): Data subjects are entitled to request the deletion of personal data concerning them where one of the grounds enumerated under Article 17(1) of the General Data Protection Regulation applies, including where the data is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where the data has been unlawfully processed. It is noted that this right is subject to exceptions where processing is required for compliance with a legal obligation or for the establishment, exercise, or defense of legal claims.
Right to Restriction of Processing (Article 18 GDPR): Data subjects are entitled to request the restriction of processing of their personal data in circumstances prescribed under Article 18(1) of the General Data Protection Regulation, including where the accuracy of the data is contested, where processing is unlawful, or where the data subject has objected to processing pending verification of legitimate grounds.
Right to Data Portability (Article 20 GDPR): Where processing is based on consent or contractual necessity and is carried out by automated means, data subjects are entitled to receive personal data concerning them in a structured, commonly used, and machine-readable format, and to transmit such data to another controller without hindrance from the data controller.
Right to Object (Article 21 GDPR): Data subjects are entitled to object, on grounds relating to their particular situation, to the processing of personal data concerning them where such processing is based on legitimate interests pursued by the data controller. Upon receipt of such objection, processing shall be discontinued unless compelling legitimate grounds are demonstrated which override the interests, rights, and freedoms of the data subject, or unless processing is required for the establishment, exercise, or defense of legal claims.
Right to Withdraw Consent: Where processing is conducted on the basis of the data subject's consent, such consent may be withdrawn at any time without prejudice to the lawfulness of processing conducted prior to withdrawal. Withdrawal of consent may be effected by contacting the data controller via the specified contact details.
Right to Lodge a Complaint: Data subjects are entitled to lodge a complaint with the competent supervisory authority where they consider that the processing of personal data relating to them infringes applicable data protection legislation. The exercise of this right does not prejudice any other administrative or judicial remedy available to the data subject.

The exercise of the aforementioned rights is subject to applicable exemptions and limitations prescribed under the General Data Protection Regulation and national implementing legislation. Where a request is manifestly unfounded or excessive, the data controller reserves the right to charge a reasonable administrative fee or to decline to act upon the request, with written reasons to be provided to the requesting data subject.

Contact Us

All inquiries, requests, and formal correspondence relating to the processing of personal data by Invicta Networks N.V. in connection with the operation of ggbet.ie, including requests for the exercise of data subject rights, reports of suspected data protection violations, and general data protection queries, shall be directed to the data controller via the following channel:

Electronic correspondence: [email protected]

Requests submitted for the purpose of exercising data subject rights shall be required to include sufficient information to enable the verification of the requesting party's identity. The data controller shall acknowledge receipt of formal requests and shall provide a substantive response within the timeframe prescribed under applicable data protection legislation. Where a request cannot be fulfilled within the standard timeframe, the data subject shall be notified accordingly with an explanation of the reasons for the delay.

Invicta Networks N.V. is the data controller responsible for the personal data processed in connection with ggbet.ie, operating under Antillephone gaming license number 8048/JAZ2012-009. All data protection matters are administered in accordance with the General Data Protection Regulation and applicable national legislation governing the protection of personal data.