Privacy Policy

This Privacy Policy explains how Da Vegas, operated for UK players via the website devegas.bet, collects, uses, discloses and protects personal data. It applies to all visitors to the site, registered players, and anyone who interacts with our services, whether you access our games, promotions or support channels. The policy is intended to comply with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as well as relevant international standards. The effective date of this Privacy Policy is 6 November 2025.

Observe: This policy sets out what data we process and why. Expand: It clarifies how long we keep your data, with whom we share it, and what rights you have. Reflect: By using devegas.bet you acknowledge that you have read and understood this Privacy Policy and that we process your data in accordance with it, as updated from time to time.

Who We Are

For the purposes of data protection law, the controller of your personal data in relation to the UK-facing website devegas.bet and the brand Da Vegas ("Da Vegas", "we", "us", "our") is AG Communications Limited. AG Communications Limited is a limited company established in Malta and operates Da Vegas as a white-label brand on the Aspire Global platform. It holds a remote gambling licence issued by the UK Gambling Commission under account number 39483, authorising it to provide gambling services to customers in Great Britain.

AG Communications Limited's registered office is located in Malta (full and current registered address as published on the Malta business register and on the UK Gambling Commission's public register for licence number 39483). Da Vegas is part of the wider Da Vegas brand portfolio, which is ultimately associated with Vegas Affiliates Group Ltd. in Malta; however, this Privacy Policy specifically governs processing in connection with devegas.bet and UK players.

You may contact us regarding privacy matters using the contact options provided in the "Contact Us" or "Help" sections of devegas.bet, or by writing to the registered office of AG Communications Limited as listed on the UK Gambling Commission's public register. For data protection queries, please mark your communication "Data Protection Officer". We have appointed a dedicated Data Protection Officer (DPO) or data protection function responsible for overseeing compliance with this Privacy Policy and data protection law.

Observe: This section identifies the legal entity responsible for your data. Expand: It clarifies the relationship between Da Vegas, AG Communications Limited, and the wider Da Vegas brand. Reflect: You should always treat AG Communications Limited as your contractual and data protection counterpart for services offered via devegas.bet in the UK.

What Personal Data We Collect

We collect and process personal data that you provide directly, data generated through your use of our services, and certain information from third parties. The exact categories depend on how you interact with us, but typically include:

Identity and contact data: full name, date of birth, username, address, country of residence, email address, telephone number, and verification documents (such as copies of ID, proof of address, and other KYC documentation) required under UKGC, KYC and AML rules.
Account and transactional data: account registration details, login credentials (stored securely and never in plain text), account status, bonus participation, game sessions, betting and wagering history, wins and losses, deposits, withdrawals, payment methods used, and related account notes.
Payment and financial data: partial payment card details (such as card type and masked card number), e-wallet identifiers, bank account identifiers, payment transaction IDs, and information from payment service providers for processing payments, chargebacks or refunds.
Technical and usage data: IP address, device identifiers, operating system, browser type and settings, language preferences, time zone, access dates and times, session duration, log files, game performance data, and diagnostic information used to keep the platform secure and stable.
Behavioural and profiling data: bets placed, game preferences, frequency and duration of sessions, response to offers, self-exclusion and responsible gambling indicators, interactions with customer support, and internal risk scores for fraud, AML and responsible gambling monitoring in line with UKGC requirements.
Communication data: copies of emails, messages submitted through on-site forms or live chat (where available), call logs or notes from telephone conversations, and responses to surveys or feedback requests.
Cookies and similar technologies: identifiers stored via cookies, SDKs, web beacons and similar technologies that help us recognise your browser or device, remember your preferences, secure your account, prevent fraud, analyse site performance and, where permitted, tailor marketing.

We may combine data from these sources with information obtained from third parties such as identity verification providers, AML and fraud screening services, address look-up services, and publicly available registers (including the UK Gambling Commission register and sanctions lists) to meet our regulatory obligations.

Observe: This section lists the categories of data we handle. Expand: It distinguishes between information you give us, data we generate through your activity, and data we receive from third parties. Reflect: Understanding these categories helps you assess how we use your information and exercise your rights effectively.

Legal Basis for Processing

We process personal data only where we have a valid legal basis under the UK GDPR and related legislation. Depending on the specific processing activity, we rely on one or more of the following legal grounds:

Performance of a contract: We process data that is necessary to enter into and perform the contract between you and AG Communications Limited for the provision of gambling services via devegas.bet. This includes creating and managing your account, verifying your identity, processing deposits and withdrawals, settling bets, crediting bonuses, and providing customer support. Without this processing, we cannot provide you with our services.
Compliance with legal obligations: We must comply with various statutory and regulatory requirements, including those arising from UK gambling law, anti-money laundering and counter-terrorist financing regulations, responsible gambling obligations, and tax and accounting rules. To do so, we process your data for identity and age verification, affordability and source-of-funds checks, transaction monitoring, suspicious activity reporting, retention of records for prescribed periods, and cooperation with the UK Gambling Commission, law enforcement, tax authorities and other competent bodies.
Legitimate interests: We process some data where it is necessary for our legitimate interests (or those of a third party) and where your interests and fundamental rights do not override those interests. This includes maintaining platform security and integrity, detecting and preventing fraud or misuse, defending and pursuing legal claims, conducting internal analytics and reporting, improving our products and services, personalising content, and managing business operations and risk. When relying on legitimate interests, we balance our interests against your rights through documented assessments.
Consent: In certain cases, we rely on your explicit consent, for example for sending electronic marketing communications about Da Vegas offers that are not strictly necessary for providing the service, or for the use of non-essential cookies and similar technologies for analytics or advertising. You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Protection of vital interests and legal claims: In rare circumstances, we may process your data to protect your vital interests or those of another person, or when necessary for the establishment, exercise or defence of legal claims.

Observe: This section explains why we are legally allowed to process your data. Expand: It shows how contract, legal obligation, legitimate interests and consent apply to different activities. Reflect: You can use this information to understand and, where applicable, challenge or object to particular processing operations.

Purpose of Processing

We use personal data for purposes that are specific, explicit and legitimate. We do not process your data in ways that are incompatible with these purposes. The main purposes are:

Provision and management of services: Operating devegas.bet, enabling you to register, log in and play games, processing deposits and withdrawals, awarding bonuses, calculating and paying winnings, administering loyalty programmes, and providing customer service and technical support.
Regulatory compliance and risk management: Fulfilling our obligations under UKGC licence 39483 and related regulations, including KYC, AML and responsible gambling duties; performing fraud checks, affordability assessments and ongoing monitoring; preventing bonus abuse, market manipulation and other prohibited behaviours; and maintaining records required by law.
Improvement and optimisation of our services: Analysing usage data, game performance and player behaviour to improve our platform, fix bugs, optimise user experience, develop new features and products, and ensure that our systems remain stable and secure.
Marketing and promotions (where permitted): Providing you with information about games, bonuses and promotions offered on devegas.bet, tailoring offers based on your profile and preferences, and analysing campaign effectiveness, subject to your marketing choices and applicable law.
Responsible gambling and player protection: Monitoring patterns of play, deposit and loss levels, time spent on site, use of responsible gambling tools, and other indicators in order to identify potential problem gambling behaviour and to intervene where appropriate, for example by providing information, setting limits, imposing time-outs or self-exclusions, or notifying relevant schemes such as GAMSTOP where required.
Business operations and legal purposes: Conducting internal audits, financial reporting, business planning, dispute resolution, complaint handling, and the establishment, exercise or defence of legal claims.

Observe: This section outlines what we do with your data. Expand: It links specific purposes to our regulatory obligations and business needs. Reflect: We do not use your data for unrelated purposes without informing you and, where required, obtaining your consent.

Disclosure & Sharing

We do not sell your personal data. We may share your data with selected third parties, always under appropriate safeguards and only to the extent necessary for the purposes described in this Privacy Policy or as required by law. Typical categories of recipients include:

Group and platform companies: Other entities within the Da Vegas and Vegas Affiliates Group structure, and associated platform providers such as Aspire Global, to operate and support the devegas.bet platform, subject to intra-group agreements and data protection safeguards.
Payment service providers and banks: Providers of payment processing, banking, e-wallet and card services that enable deposits, withdrawals, chargebacks, refunds and related financial operations.
Verification, AML and fraud-prevention partners: Identity verification providers, credit reference agencies (where permitted), sanctions and PEP screening services, address verification services, anti-fraud and risk management tools, and providers of responsible gambling analytics, all of whom assist us in meeting our regulatory obligations.
Technical and operational service providers: Hosting providers, IT security firms, analytics services, customer support tools, communication platforms, and other vendors who process data on our behalf under written data processing agreements.
Marketing and affiliate partners: Subject to your consent and preferences, we may share limited data with marketing agencies, affiliates and advertising networks to deliver and measure marketing communications relating to devegas.bet. These partners are required to comply with applicable data protection laws and our instructions.
Regulators, authorities and dispute bodies: The UK Gambling Commission, financial and tax authorities, law enforcement agencies, courts and tribunals, and other competent bodies such as the Independent Betting Adjudication Service (IBAS) when handling betting disputes, as well as national self-exclusion schemes like GAMSTOP, where required or permitted by law.
Corporate transactions: In the context of a merger, acquisition, reorganisation, transfer of business or similar transaction involving Da Vegas or AG Communications Limited, your data may be shared with prospective or actual purchasers, subject to confidentiality obligations and applicable law.

Whenever we share data with processors, we ensure they are bound by contracts that require them to implement appropriate security measures and process data only on our instructions. Where we disclose data to independent controllers, such as regulators or banks, they are responsible for their own compliance.

Observe: This section describes with whom your data may be shared. Expand: It distinguishes between processors acting on our behalf and independent controllers such as authorities. Reflect: We limit disclosures to what is necessary and lawful, and we take steps to protect your data in every sharing arrangement.

International Transfers

Because Da Vegas is operated by AG Communications Limited and associated entities based in Malta and other jurisdictions, your personal data may be transferred to and processed in countries outside the United Kingdom, including within the European Economic Area (EEA) and in certain "third countries". These transfers occur, for example, when our platform, hosting or support services are provided from outside the UK, or when we use international providers for payments, identity verification, analytics or marketing in relation to devegas.bet.

Transfers within the EEA (including Malta): Malta is an EU Member State and part of the EEA. Under current UK law, transfers of personal data from the UK to the EEA are generally permitted on the basis of an adequacy decision. When your data is processed in Malta or other EEA countries, it remains subject to protections equivalent to those in the UK GDPR.
Transfers to other countries: Where we transfer data to countries that do not benefit from a UK adequacy regulation, we implement appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, and conduct transfer risk assessments where required. In some cases, we may rely on other permitted derogations, such as where a transfer is necessary for the performance of a contract with you or for the establishment, exercise or defence of legal claims.
Service providers and infrastructure: Certain IT, security, analytics or communication service providers may host or access data in jurisdictions such as the United States or other countries. Where this is the case, we ensure that they are subject to appropriate contractual and technical safeguards and, where relevant, certified or otherwise assessed under recognised data protection frameworks, as updated from time to time.

You may contact us for more information about the specific safeguards we use for international transfers and, where applicable, to obtain a copy of the relevant contractual clauses (subject to redactions for confidentiality).

Observe: This section explains that your data may be processed outside the UK. Expand: It sets out the legal mechanisms we use to protect such transfers. Reflect: Regardless of where your data is processed, we strive to ensure a level of protection substantially equivalent to that required under UK law.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, regulatory, accounting or reporting requirements. The precise retention period varies depending on the type of data and our obligations under UK gambling, AML and tax laws, but generally follows these principles:

Player account and identification data: Core account details (such as name, contact information, date of birth, account history and verification documents) are typically retained for the duration of your relationship with us and for a period of up to five (5) years after account closure or the date of your last transaction, whichever is later, in order to comply with AML, counter-terrorist financing and gambling regulations.
Transactional and betting data: Records of deposits, withdrawals, bets, wins and losses, and related financial information are retained for periods mandated by applicable financial, tax and regulatory rules, usually five (5) to seven (7) years, to enable audits, investigations and resolution of disputes.
Responsible gambling and risk data: Self-exclusion records, responsible gambling interactions, internal risk scores and related notes may be retained for extended periods where necessary to protect you and comply with UKGC and GAMSTOP requirements, including to prevent re-registration contrary to an exclusion.
Marketing data: Information used solely for marketing purposes is generally retained until you withdraw your consent, object to processing, or become inactive for a defined period, after which it is removed from active marketing lists while we retain limited records of your preferences for compliance purposes.
Technical logs and security data: System logs, IP address logs and security-related records are kept for periods proportionate to security and fraud-prevention needs, typically between a few months and several years, depending on the system and regulatory context.

When retention periods expire, or when data is no longer needed, we either securely delete or irreversibly anonymise the data. In some cases we may retain limited information (such as a hashed identifier, account number or exclusion marker) for a longer period where this is necessary to comply with regulatory obligations, to defend or bring legal claims, or to enforce our terms (for example, to prevent the reopening of accounts that were closed for fraud or responsible gambling reasons).

Observe: This section sets out how long we keep different types of data. Expand: It links retention periods to legal and regulatory obligations. Reflect: You can request more detail about specific retention periods relevant to your account using the contact channels described in this policy.

Your Rights

Under the UK GDPR and related UK data protection laws, you have a number of rights in relation to your personal data. Where applicable, we also seek to align our practices with international standards, including the principles underlying EU GDPR and, for certain users, relevant provisions of Mexican data protection law, such as the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP). Your core rights include:

Right of access: You have the right to obtain confirmation as to whether we process your personal data and, if so, to receive a copy of that data together with information about the processing (for example, purposes, categories, recipients and retention periods). Subject to legal and regulatory restrictions (e.g. AML or fraud-prevention constraints), we will provide this information in a concise, transparent and understandable form.
Right to rectification: You may request that inaccurate or incomplete personal data be corrected or completed. In some cases, we may ask for supporting documentation (for example, an updated proof of address) to verify the change in line with regulatory requirements.
Right to erasure ("right to be forgotten"): You may request deletion of your personal data in certain circumstances, such as where the data is no longer necessary for the purposes for which it was collected, you withdraw consent (where consent was the sole legal basis), or you successfully object to processing. However, we may be unable to delete certain data where we are legally required to retain it, for example under AML and gambling regulations; in such cases, we will explain the legal grounds for continued retention.
Right to restriction of processing: You may ask us to restrict processing of your data in specific situations, for example while we verify its accuracy, assess an objection, or where processing is unlawful but you do not want the data erased. Where processing is restricted, we will store the data but not otherwise use it except as permitted by law.
Right to object: You may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests, including certain profiling. We will stop processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is necessary for legal claims. You have an absolute right to object to direct marketing, including profiling related to marketing, and we will act on such objections without undue delay.
Right to data portability: Where processing is based on consent or on a contract and carried out by automated means, you may request to receive the personal data you provided to us in a structured, commonly used and machine-readable format, and to have this transmitted to another controller where technically feasible.
Rights relating to consent and marketing: Where we rely on consent, you may withdraw it at any time using your account settings or by following the instructions in our communications. You may manage marketing preferences via your account, including opting out of email, SMS or push notifications relating to Da Vegas offers on devegas.bet.
Additional alignment with Mexican ARCO rights: For users to whom Mexican data protection law is relevant, we aim to respect rights broadly equivalent to the ARCO framework (Access, Rectification, Cancellation, Opposition) under the LFPDPPP. While the primary legal regime for devegas.bet is the UK GDPR and UK law, our processes for access, rectification, erasure/cancellation and objection/opposition are designed to be compatible with these international standards.

Procedures and timeframes: To exercise any of these rights, please contact us using the channels provided in the "Complaints & Contacts" section and clearly indicate your request (for example, "Access request", "Erasure request" or "Objection to marketing"). We may need to verify your identity to protect your account and data. We aim to respond to all valid requests within one month (30 days) from receipt, and may extend this period by up to two further months where the request is complex or numerous, in which case we will inform you of the extension and reasons. In general, we handle rights requests free of charge, but may charge a reasonable fee or refuse to act where requests are manifestly unfounded or excessive, particularly if they are repetitive.

Observe: This section summarises your main data protection rights. Expand: It explains how those rights operate in practice, including limits based on gambling and AML obligations. Reflect: You are encouraged to contact us if you believe your data is being processed in a way that is inconsistent with this policy or applicable law.

Cookies & Tracking Technologies

We use cookies and similar technologies on devegas.bet to ensure the site functions correctly, to secure your account, to understand how the platform is used, and, where permitted, to tailor content and marketing. Cookies are small text files stored on your device when you visit our website. They may be set by us ("first-party cookies") or by third parties providing services on our behalf ("third-party cookies").

Types of cookies

Strictly necessary cookies (session and persistent): These cookies are essential for the operation of the website and the provision of our services, such as enabling you to log in, maintain sessions, process transactions, prevent fraud and comply with security requirements. They are usually set in response to actions you take and cannot be switched off via our consent tools, though you may configure your browser to block them (which may affect site functionality).
Functional cookies: These cookies remember your choices and preferences (such as language, country, display settings or previously selected games) to provide enhanced, personalised features. They may be session-based or persistent.
Analytics and performance cookies: These cookies (which may be set by us or by third-party analytics providers) help us understand how visitors use devegas.bet, for example which pages are visited most often, how long users stay, and whether error messages occur. The information is generally aggregated and used to improve site performance and user experience.
Advertising and targeting cookies: Where permitted by law and your preferences, we may use cookies and similar technologies to deliver relevant Da Vegas promotions, both on devegas.bet and on third-party sites or apps, and to measure the effectiveness of such campaigns. These cookies may be set by us or by carefully selected marketing partners.

Managing cookies

On-site controls: When you first visit devegas.bet (and periodically thereafter), you may be presented with a cookie banner or preference centre that allows you to accept or reject non-essential cookies (such as analytics and advertising cookies). You can adjust your preferences at any time via the cookie settings or privacy section available on the site.
Browser settings: Most web browsers allow you to control cookies through settings that let you block or delete cookies, or alert you when cookies are set. Please note that blocking or deleting certain cookies may impact your ability to use some features of the site or to remain logged in.

For more detailed information about specific cookies used on devegas.bet, their purpose and duration, please refer to the cookie information available via our on-site cookie management tool.

Observe: This section explains what cookies we use and why. Expand: It differentiates between necessary, functional, analytics and advertising cookies, and explains your control options. Reflect: You may change your cookie preferences at any time, but essential cookies are needed to provide a secure and reliable gaming service.

Data Security

We take data security very seriously and implement technical and organisational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. While no system can guarantee absolute security, we continuously review and enhance our safeguards in light of industry standards, regulatory expectations and emerging threats.

Encryption in transit and at rest: Data transmitted between your browser and our servers is protected using modern transport layer security (TLS) protocols (TLS 1.2 or higher). Where appropriate, we also encrypt data at rest, for example within databases and backups, using strong cryptographic algorithms and properly managed keys.
Access controls and authentication: Access to personal data is restricted to authorised personnel who require it for their job functions, based on the principle of least privilege. Administrative access is protected using strong authentication mechanisms, including multi-factor authentication where feasible, and access rights are regularly reviewed.
Network and system security: Our infrastructure is protected by firewalls, intrusion detection and prevention systems, anti-malware solutions, secure configuration standards and regular patching. We separate production and test environments and follow secure development practices to minimise vulnerabilities.
Monitoring, testing and audits: We log and monitor access to systems handling personal data, perform periodic vulnerability assessments and, where appropriate, penetration testing, and engage in internal and external audits to evaluate the effectiveness of our controls. We strive to align our security practices with recognised frameworks (such as ISO 27001 or SOC 2 principles) where appropriate for the services we provide.
Staff training and policies: Employees and contractors with access to personal data are subject to confidentiality obligations and receive regular training on data protection, information security and responsible handling of customer information. Internal policies and procedures govern how data is accessed, used and shared.
Incident response: We maintain incident response procedures to detect, assess and respond to suspected personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, you, without undue delay in accordance with applicable law.

Observe: This section describes how we protect your data. Expand: It covers encryption, access controls, monitoring, staff training and incident response mechanisms. Reflect: Although no online service can eliminate risk entirely, we invest in layered security controls to reduce the likelihood and impact of security incidents.

Complaints & Contacts

If you have questions, concerns or complaints about how we process your personal data, or if you wish to exercise any of your data protection rights, you should contact us in the first instance so that we can seek to resolve the issue directly.

Primary contact channels: You can contact our customer support and data protection function via the contact methods made available on devegas.bet (for example, help or support sections, secure messaging or forms). Please indicate that your request relates to "Data Protection" or "Privacy" so that it can be routed appropriately.
Data Protection Officer: Communications addressed to "Data Protection Officer" or "Privacy" sent via our published contact channels or to the registered office of AG Communications Limited (as displayed on the UK Gambling Commission public register, licence 39483) will be directed to the responsible person or department overseeing compliance.
Response times: We will acknowledge your complaint or request as soon as reasonably practicable and aim to provide a substantive response within 30 days, extending this period where permitted by law if the matter is particularly complex, in which case we will inform you of the delay and reasons.

Escalation to supervisory authorities:

United Kingdom: If you remain dissatisfied after contacting us, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority. Details on how to contact the ICO and submit a complaint are available on its website (currently www.ico.org.uk) and via the contact information provided there.
European Economic Area: If you are located in the EEA and believe your data is processed in a way that infringes applicable law, you may also lodge a complaint with your local data protection authority, in addition to or instead of contacting the ICO.
Mexico: For users to whom Mexican data protection law is relevant, you may have the right to lodge a complaint with the Mexican data protection authority, currently the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI), in accordance with the LFPDPPP and its regulations. Details of how to exercise ARCO rights and lodge complaints can be found via INAI's official channels.

Please note that IBAS (Independent Betting Adjudication Service) is an Alternative Dispute Resolution (ADR) body for betting disputes regarding the outcome of gambling transactions, not primarily for data protection complaints. Issues concerning your personal data should be raised with us and, if necessary, with the relevant data protection authority as described above.

Observe: This section explains how to contact us and escalate complaints. Expand: It identifies the ICO as the primary UK authority and recognises relevant international authorities where applicable. Reflect: We encourage you to contact us first so we can address your concerns, but you always retain the right to approach a supervisory authority.

Updates

We may update this Privacy Policy from time to time to reflect changes in our processing activities, services, legal obligations, regulatory guidance or technological developments affecting devegas.bet and the Da Vegas brand. When we make material changes, we will take appropriate steps to inform you in advance, in accordance with applicable law and UK Gambling Commission expectations.

Notification methods: We may notify you of updates via email (where appropriate), on-site banners or pop-up notices, messages within your account dashboard, or other suitable channels linked to devegas.bet. For significant changes that materially affect your rights or how we process your data, we will provide clear and prominent notice.
Advance notice: Where a change is material, we will normally provide at least 30 days advance notice before the updated policy takes effect, unless immediate changes are required by law, regulation, supervisory guidance or to address urgent security or compliance issues.
Version control and "Last updated" date: Each version of this Privacy Policy will include a "Last updated" date at the end. As of this version, the policy was last updated in November 2025. We may also keep an internal changelog of significant amendments and, where appropriate, make summaries of material changes available to you.
Your choices in case of changes: If you do not agree with an updated Privacy Policy, you may choose to stop using devegas.bet and, where applicable, close your account subject to our Terms & Conditions and regulatory obligations (for example, we may still need to retain certain data). Continued use of the site after the effective date of an updated policy will constitute your acknowledgement of the changes.

Observe: This section describes how and why we may change this policy. Expand: It explains the notice periods and communication channels we will use. Reflect: You should review the Privacy Policy periodically to stay informed about how we protect and process your data when you use devegas.bet.