Privacy Policy

This Privacy Policy explains how Ecua Bet, operated for the Ecua Bet project on the website ecya.bet, collects, uses, shares and protects your personal data when you visit our website, create an account or use our betting and casino services. It applies to all visitors to ecya.bet and to all registered players who access our services from Great Britain or other locations where our services are lawfully offered.

This Privacy Policy is intended to help you understand what data we collect, why we collect it, how long we keep it, with whom we share it, what rights you have and how you can exercise those rights. It should be read together with our Terms and Conditions and other policies available on https://ecya.bet.

By using ecya.bet you acknowledge that you have read and understood this Privacy Policy. Where required by law, we will ask for your explicit consent for certain types of processing (for example, for non-essential cookies or direct marketing).

Effective date: 6 November 2025

Who We Are

For the purposes of this Privacy Policy, references to "Ecua Bet", "Ecua Bet", "we", "us" or "our" refer to the licensed operator responsible for the processing of your personal data in connection with the website ecya.bet for Great Britain players.

Data controller for Great Britain players

Legal entity: Andean Gaming UK Ltd., a private limited company incorporated in England and Wales.
Company number: 13374201 (registered with Companies House in England and Wales).
Registered office: London, England, United Kingdom (full registered address as listed on the UK Companies House register for Andean Gaming UK Ltd.).
Gambling licence (Great Britain): Account number 59321, issued by the UK Gambling Commission for Real Event Betting, Casino and Gambling Software activities.

Platform and software provider

Entity: ProgressPlay Ltd.
Role: Technology platform, game library and certain payment processing services.
Licence: UK Gambling Commission account number 39335 for Gambling Software.
ProgressPlay Ltd. generally acts as our data processor, processing your data on our documented instructions where they provide the platform and related services to us.

Parent company

Entity: Andean Gaming Group N.V., a public limited company (N.V.) registered in Curaçao.
Role: Parent company of Andean Gaming UK Ltd. with strategic and corporate oversight.

Data Protection Officer / privacy contact

We have appointed a data protection officer (DPO) or equivalent data protection contact responsible for overseeing privacy matters for Ecua Bet.
Primary contact channel: via the secure contact facilities on https://ecya.bet, including:
- 24/7 Live Chat (initially via chatbot, with escalation to a human agent on request); and
- our on-site email contact form in the Help/Contact section.
If you wish to contact our DPO or data protection team about this Privacy Policy or your rights, please:
- use the "Contact Us" or similar form available on https://ecya.bet; or
- contact support via Live Chat and request that your query is forwarded to the Data Protection Officer.
Where a dedicated privacy email address is provided on ecya.bet (for example, in the Help/Contact or Privacy sections), you may also use that address to contact us directly for all privacy-related matters.

What Personal Data We Collect

We collect and process different categories of personal data depending on how you interact with Ecua Bet and the services available on ecya.bet. The main categories are set out below.

Identification and contact data

Account registration data: full name, date of birth, country of residence, address details (including city and postcode where collected), email address, username, password and preferred language.
Contact details: email address and any contact details you provide in support tickets or through our contact forms. We do not provide or require telephone support, and you are not required to share a telephone number unless the verification process or regulatory requirements make it necessary.
Verification (KYC/AML) data: copies or details of identity documents (such as passport, national ID card, driving licence), proof of address (such as utility bill or bank statement), source of funds and source of wealth information, and any additional documents requested to comply with UKGC, anti-money laundering (AML) and counter-terrorist financing (CTF) obligations.

Technical and device data

Technical identifiers: IP address, device identifiers, browser type and version, operating system, time zone setting, and similar technical information arising from your use of ecya.bet.
Usage and log data: login and logout times, session duration, pages and features accessed, internal error logs, security logs (such as failed login attempts) and other diagnostic information generated by our platform and our providers, including ProgressPlay Ltd.

Payment and financial data

Transaction data: deposits, withdrawals, bonuses, wagers, wins and losses, payment method used, currency, amounts and timestamps.
Payment instrument data: limited card or account details as required to process payments (for example, masked card numbers, card type and expiry date) processed via secure payment providers. Full payment instrument data is typically handled directly by regulated payment processors and not stored in full by Ecua Bet.
Fraud and risk data: internal risk scores, chargeback details, sanctions screening results and information required to investigate suspicious or fraudulent transactions.

Behavioural and gaming data

Betting and gaming history: records of bets placed, games played, stakes, outcomes, bonus usage, session duration and time spent on different products.
Interaction data: clicks, page navigation, device interactions, response to campaigns and offers, and engagement with responsible gambling tools (for example, deposit limits, time-outs and self-exclusions).
Profile and preference data: marketing preferences, language settings, favourite games, and other preferences you set in your account.

Communications and support data

Customer support interactions: records of chat transcripts (including Live Chat, chatbot interactions and human agent responses), messages sent via our contact forms, complaint correspondence and any attachments you provide.
Recorded decisions: outcomes of complaints, responsible gambling reviews, account closures, exclusions and dispute resolution processes.

Cookies and similar technologies

Cookies: small text files stored on your device to remember your preferences, secure your sessions and understand how you use ecya.bet.
Similar technologies: local storage, pixels, tags, SDKs and other tracking technologies used on our website and in some communications to measure performance and personalise your experience.
For more details about specific cookie types and how to manage them, see the "Cookies & Tracking Technologies" section below and the dedicated cookie information on https://ecya.bet where available.

Legal Basis for Processing

Ecua Bet processes your personal data on the legal bases set out in the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and, where applicable, in line with EU GDPR and relevant Mexican privacy laws. Depending on the specific processing activity, one or more of the following legal bases may apply.

Performance of a contract

Account creation and management: we process your identification, contact and account data to register you as a player, verify your age and identity, and manage your account.
Provision of betting and gaming services: we use your data to accept and settle bets, offer games, credit winnings, manage bonuses and provide other services described in the Terms and Conditions on https://ecya.bet/terms-and-conditions.
Payments: we process your payment and transaction data to accept deposits, process withdrawals, manage chargebacks and handle any related financial operations.

Compliance with legal obligations

UKGC, AML and responsible gambling requirements: we are legally obliged under the UK Gambling Commission's Licence Conditions and Codes of Practice (LCCP), anti-money laundering laws and responsible gambling regulations to:
- verify your age and identity;
- monitor transactions and behaviours for AML and CTF purposes;
- identify and manage problem gambling or vulnerable player indicators; and
- keep appropriate records for the periods required by law and regulation.
Tax, accounting and reporting: we may process and retain transaction and account data to meet tax, accounting, regulatory reporting and record-keeping requirements.
Responding to authorities: we may process and disclose data when required by courts, regulators, law enforcement or other competent public authorities in accordance with applicable law.

Legitimate interests

Service security and integrity: we process technical and behavioural data to protect our systems, prevent fraud and abuse, detect unauthorised access, and ensure the stability and integrity of ecya.bet.
Business analytics and optimisation: we analyse aggregated and pseudonymised data about how our services are used to improve performance, optimise game offerings, plan capacity and enhance user experience, while respecting your privacy.
Internal governance and risk management: we use your data to manage risk, conduct audits, enforce our Terms and Conditions, protect our rights, pursue or defend legal claims and support corporate transactions involving Ecua Bet or its parent company.
When relying on legitimate interests, we carefully balance our interests against your rights and freedoms and implement safeguards such as access controls, minimisation and pseudonymisation where appropriate.

Consent

Non-essential cookies and similar technologies: where required by law, we rely on your consent to use analytics, advertising or other non-essential cookies and similar technologies. You can withdraw your consent at any time through our cookie settings or your browser.
Direct marketing communications: we may send you promotional emails, SMS or push notifications about offers and products if you have given us your consent or if the law permits us to do so. You can withdraw your consent or object at any time through your account settings or the unsubscribe options in our messages.
Special categories of data: if, in limited cases, we need to process special category data (for example, health-related information you voluntarily provide in the context of responsible gambling), we will do so only where permitted by law and, where necessary, with your explicit consent.

Purpose of Processing

We process your personal data for clearly defined purposes linked to the provision, improvement and regulation of our services for Ecua Bet on ecya.bet.

Providing and operating our services

To create, verify and manage your player account and maintain accurate player records.
To provide access to our betting and casino products, settle bets, process winnings and handle bonuses and promotions.
To process deposits and withdrawals through our payment partners and to maintain transaction records.

Compliance, risk management and responsible gambling

To conduct age and identity verification, affordability checks and other due diligence in line with UKGC and AML/CTF requirements.
To monitor activity for fraud, money laundering, match fixing and other prohibited conduct, and to take appropriate action where suspicious behaviour is detected.
To identify patterns that may indicate problem gambling or vulnerability and to apply appropriate safer gambling measures (such as limits, time-outs or self-exclusion), in line with our Responsible Gaming Policy at https://ecya.bet/responsible-gaming.

Customer support and service quality

To provide customer support via 24/7 Live Chat, chatbot and email contact forms, including investigation and resolution of queries and complaints.
To record and review communications for training, quality assurance and dispute resolution.

Analytics, improvement and personalisation

To analyse usage patterns, game performance and site performance in order to improve ecya.bet, develop new features and optimise the user experience.
To personalise content, recommend games or offers and adjust the presentation of our services to your device and preferences, where permitted by law and your settings.

Marketing and promotions

To send you marketing communications about Ecua Bet products, promotions and loyalty programmes if you have consented or where the law otherwise permits such communications.
To measure the effectiveness of campaigns, including by tracking interactions with our emails, banners and other marketing materials, and to prevent abuse of promotions.

Legal, regulatory and business purposes

To comply with legal and regulatory obligations, respond to lawful requests from authorities and cooperate with regulatory audits and inspections.
To enforce our Terms and Conditions, to protect our rights, property and safety, and to pursue or defend legal claims.
To support corporate governance, internal reporting, audits and potential corporate transactions involving Andean Gaming UK Ltd. or its parent company Andean Gaming Group N.V.

Disclosure & Sharing

We treat your personal data as confidential and only share it where necessary for the purposes described in this Privacy Policy, where we have a legal obligation, or where you have given your consent. In all cases we take steps to ensure that recipients only have access to the data they need and are subject to appropriate confidentiality and security obligations.

Group companies and platform providers

Group companies: we may share your data with Andean Gaming Group N.V. and other affiliated entities, to the extent necessary for group-level management, reporting, compliance and support, in accordance with applicable data protection laws and intra-group agreements.
ProgressPlay Ltd. and technology partners: as our platform and software provider, ProgressPlay Ltd. processes data to operate the gaming platform, provide games, ensure technical support and security, and support payments. Other technology providers may assist with hosting, content delivery, security monitoring and analytics.

Payment service providers and financial institutions

We share necessary payment and identification data with banks, card schemes, e-wallet providers and other payment processors to process deposits, withdrawals and refunds, and to prevent and investigate fraud and chargebacks.

Service providers and professional advisers

We may use third-party service providers for identity verification, sanctions screening, fraud detection, analytics, email delivery, customer support tools and other operational services.
We may share data with professional advisers (such as lawyers, auditors and consultants) where necessary for legal, audit or consultancy purposes, subject to confidentiality obligations.

Regulators, authorities and dispute resolution bodies

Regulatory authorities: we may disclose data to the UK Gambling Commission and other competent authorities in Great Britain and other relevant jurisdictions where required by law or licence conditions.
Law enforcement and courts: we may disclose data in response to court orders, legal processes or lawful requests from law enforcement agencies, tax authorities or other public bodies.
Alternative dispute resolution (ADR): for gambling-related disputes, we may share relevant data with the Independent Betting Adjudication Service (IBAS) at https://ibas-uk.com/ or other ADR bodies, after you have followed our internal complaints procedure.

Affiliates, marketing and advertising partners

Where you have consented, or where permitted by law, we may share limited data (such as cookie identifiers or hashed contact details) with advertising networks, affiliates and marketing partners to measure, attribute and optimise marketing campaigns relating to ecya.bet.
We do not sell your personal data to third parties. Any sharing with marketing partners is carried out under strict contractual controls and in line with applicable data protection laws.

Business transfers

If we undergo a corporate transaction such as a merger, acquisition, reorganisation or sale of assets relating to Ecua Bet, your data may be transferred as part of that transaction, subject to appropriate confidentiality and data protection safeguards and, where required, notification to you.

International Transfers

Because Ecua Bet operates within an international group and relies on global service providers, your personal data may be transferred to and processed in countries outside the United Kingdom, including countries that may not offer the same level of data protection as the UK.

Categories of international transfers

Within our corporate group: transfers to Andean Gaming Group N.V. and other group entities located in Curaçao or other jurisdictions for group-level management, compliance and support functions.
Technology and payment providers: transfers to service providers and partners located in the European Economic Area (EEA), Malta (including ProgressPlay Ltd.), and potentially other countries where our technical infrastructure, support teams or payment processors are located.
Regulators and authorities: where required by law, we may transfer data to regulators, courts or law enforcement agencies outside the UK in connection with legal or regulatory proceedings.

Safeguards for international transfers

Adequacy decisions: where data is transferred to countries or territories that have been recognised by the UK as providing an adequate level of data protection, we rely on those adequacy regulations.
Standard contractual clauses (SCCs): for transfers to countries without an adequacy decision, we implement appropriate safeguards such as the UK-approved international data transfer addendum to the EU standard contractual clauses or other contractual mechanisms approved by the UK Information Commissioner's Office (ICO).
Additional safeguards: where appropriate, we apply additional measures such as pseudonymisation, strict access controls, encryption in transit and at rest, and technical and organisational controls aligned with our risk assessments.
We continually monitor legal developments on international data transfers and will update our transfer mechanisms as needed to ensure ongoing compliance with UK GDPR and, where relevant, EU GDPR and Mexican data protection requirements.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes and to enforce our agreements. Retention periods may vary depending on the type of data and our legal obligations under UK law, including UKGC requirements, and where applicable, EU and Mexican regulations.

Retention principles

We apply documented retention schedules that specify how long different categories of data are kept.
After the relevant retention period expires, we will either securely delete or irreversibly anonymise the data so that it can no longer be associated with you.
Where we rely on your consent (for example, for marketing), we will stop processing the relevant data for that purpose if you withdraw your consent, but may retain minimal records of your preference to ensure we honour your choice.

Typical retention periods

Account and identification data: generally retained for the duration of your relationship with us and for up to five (5) years after your account is closed, to comply with AML/CTF, UKGC and record-keeping obligations.
Transaction and gaming data: retained for at least five (5) years after the relevant transaction or account closure, in line with legal and regulatory requirements and for dispute resolution.
Verification (KYC) documents: typically retained for up to five (5) years after the end of the business relationship or the last transaction, unless a longer period is required by law or necessary for legal claims.
Responsible gambling and self-exclusion records: retained for durations mandated or recommended by the UK Gambling Commission and other relevant regulators (for example, at least the duration of the self-exclusion plus an additional period specified in applicable guidance).
Customer support and complaint records: usually retained for up to six (6) years after the complaint or case is closed, to evidence how we handled the matter and for legal claims.
Marketing data: retained for as long as you remain subscribed to marketing and for a reasonable period thereafter (usually up to two (2) years) to understand historical campaign performance, unless you request earlier deletion where permitted by law.
Technical logs and security data: retained for shorter periods (typically from a few days up to two (2) years), depending on the type of log and security requirements.

Criteria for determining retention periods

Applicable statutory and regulatory requirements (including those of the UKGC and AML/CTF regulations).
The nature and sensitivity of the data and potential risks of unauthorised use or disclosure.
Whether the data is required for ongoing disputes, investigations or to defend legal claims.
Business needs balanced against your privacy rights and expectations.

Your Rights

Depending on your location and applicable law, you have various rights in relation to your personal data. For Great Britain players this includes rights under the UK GDPR and the Data Protection Act 2018. Where you are located in the European Union or Mexico, additional or similar rights may apply under EU GDPR and Mexican privacy laws, including the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and related regulations.

Core data protection rights

Right of access: you can request confirmation of whether we process your personal data and receive a copy of that data, along with information about how we use it.
Right to rectification: you can ask us to correct inaccurate or incomplete personal data. In many cases you can update your details directly in your ecya.bet account.
Right to erasure: you can request deletion of your personal data where there is no longer a legal basis for us to keep it (for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis). We may retain certain data where required by law, for regulatory purposes, or to establish, exercise or defend legal claims.
Right to restriction of processing: you can request that we restrict processing of your data in certain circumstances (for example, while we verify its accuracy, or where you have objected to processing and we are considering your request).
Right to object: you can object to processing based on our legitimate interests (including profiling based on those interests) and we will stop processing unless we have compelling legitimate grounds that override your interests and rights, or the processing is needed for legal claims. You can also object at any time to the use of your data for direct marketing, in which case we will stop processing for that purpose.
Right to data portability: where processing is based on consent or contract and carried out by automated means, you can request that we provide your data in a structured, commonly used and machine-readable format, or transmit it to another controller where technically feasible.
Right to withdraw consent: where we rely on your consent (for example, for marketing or certain cookies), you can withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Mexican ARCO rights and related protections

If Mexican privacy laws apply to you, you may also exercise ARCO rights (Acceso, Rectificación, Cancelación y Oposición) regarding your personal data, broadly corresponding to access, rectification, cancellation (erasure) and objection.
In accordance with Mexican regulations, you may also limit the use or disclosure of your data for specific purposes permitted under local law.

How to exercise your rights

Contact channels: to exercise any of your rights, please contact us via the on-site contact form or Live Chat on https://ecya.bet and clearly state that your request concerns your privacy or data protection rights.
Information required: we may ask you for specific information to confirm your identity and ensure that we do not disclose data to anyone who has no right to receive it. This may include providing verification documents or confirming account details.
Response timeframe: we aim to respond to all valid requests within one (1) month (30 days) from receipt. In complex cases or where you have made multiple requests, we may extend this period by up to two further months, in which case we will inform you of the extension and reasons.
Fees: in general, we will handle your requests free of charge. However, we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded, repetitive or excessive, in line with applicable law.

Limitations to your rights

Your rights are subject to certain legal and regulatory limitations. For example, we may be required to retain certain data for AML, UKGC or other legal obligations even if you request deletion.
Where our obligations under UK, EU or Mexican law require us to keep data or restrict its deletion, we will retain only the minimum data necessary and restrict its use to the relevant legal purposes.

Cookies & Tracking Technologies

Ecua Bet uses cookies and similar tracking technologies on ecya.bet to ensure the website functions properly, to enhance your experience, to perform analytics and, where permitted, to support marketing and advertising activities. You can control many aspects of cookie use through your browser and, where available, through our internal cookie management tools.

Types of cookies we use

Strictly necessary (session) cookies: these cookies are required for the website to function and cannot be switched off in our systems. They are usually set in response to your actions, such as logging in, placing bets, setting privacy preferences or filling in forms. They are typically session-based and expire when you close your browser or log out.
Functional (persistent) cookies: these cookies allow the website to remember choices you make (such as language, region or display preferences) and provide enhanced, more personalised features. They may remain on your device for a longer period and are activated each time you visit ecya.bet.
Analytics and performance cookies: these cookies help us understand how visitors use ecya.bet by collecting information such as pages visited, time spent on site, and error messages. This data is typically aggregated and used to improve website performance and user experience.
Advertising and targeting cookies: these cookies may be set by us or by our advertising partners to build a profile of your interests and show relevant adverts on our site and elsewhere. They may uniquely identify your browser or device through an identifier, but do not directly store information such as your name.
Similar technologies: we may also use pixels, tags, SDKs and local storage to achieve similar purposes, such as measuring campaign performance or preventing fraud.

Managing and disabling cookies

Browser settings: most browsers allow you to block or delete cookies, or to set preferences for certain sites. Please consult your browser's help section for specific instructions. Note that blocking certain cookies may affect your ability to use some features of ecya.bet.
On-site controls: where available, you can manage your cookie preferences via our cookie banner or cookie settings panel on ecya.bet, choosing which categories of cookies you accept or reject (except strictly necessary cookies).
Third-party opt-outs: some analytics and advertising providers offer their own opt-out mechanisms. Links and details may be provided in our detailed cookie information on ecya.bet where applicable.

By continuing to use ecya.bet without adjusting your browser or cookie settings, you consent to our use of cookies and similar technologies as described in this Privacy Policy and any specific cookie notices on the site, to the extent required and permitted by applicable law.

Data Security

Ecua Bet takes the security of your personal data very seriously and implements technical and organisational measures designed to protect it against unauthorised access, loss, misuse, alteration or destruction. Our security approach is continually reviewed and updated to reflect industry practices, regulatory expectations under UKGC requirements and broader international standards.

Technical security measures

Encryption in transit: data transmitted between your browser and ecya.bet is protected using TLS (Transport Layer Security) version 1.2 or higher, helping to prevent unauthorised interception or tampering.
Encryption at rest: where appropriate, we encrypt or pseudonymise personal data stored within our systems and databases, particularly sensitive categories such as authentication credentials and certain financial information.
Access controls and authentication: access to systems and data is restricted based on role and necessity, and is protected by strong authentication mechanisms. We encourage you to use strong, unique passwords and may implement additional verification measures for high-risk activities.
Network and infrastructure security: our systems are protected by firewalls, intrusion detection and prevention systems, secure configuration and other layered controls designed to mitigate common security threats.

Organisational and procedural measures

Policies and training: we maintain internal data protection and security policies and provide regular training to staff and contractors on privacy, security and responsible handling of customer data.
Vendor management: we carefully select third-party service providers, including ProgressPlay Ltd. and payment processors, and require them to implement appropriate security controls through contracts and due diligence.
Segregation and minimisation: we restrict access to personal data to those who need it for their roles and minimise the amount of data processed to what is necessary for each purpose.

Monitoring, audits and incident response

Monitoring and testing: we monitor our systems and may conduct security testing, vulnerability assessments and other checks to identify potential weaknesses.
Incident response: we maintain incident response procedures to act promptly in case of a suspected or actual personal data breach, including containment, investigation, remediation and communication with affected individuals and regulators where required by law.
Standards and best practices: our controls are designed with reference to recognised industry standards and frameworks (such as ISO 27001 and SOC 2) to the extent appropriate for our operations, although Ecua Bet may not hold formal certifications unless explicitly stated on ecya.bet.

Complaints & Contacts

We are committed to handling your personal data transparently and to addressing any concerns you may have. If you have questions, requests or complaints about how we process your data, you have several options for contacting us and, where applicable, for escalating your concerns to supervisory authorities.

Contacting Ecua Bet

Support channels: you can contact us at any time via:
- 24/7 Live Chat available on ecya.bet (initially via chatbot, with escalation to a human agent on request); and
- the on-site email contact form or similar contact facility in the Help/Contact section.
For privacy-specific issues: please clearly state that your request concerns "data protection" or "privacy" so that it can be promptly directed to our Data Protection Officer or privacy team.
Postal correspondence: you may also write to our registered office at Andean Gaming UK Ltd., London, England, United Kingdom (full address as listed on Companies House, company number 13374201). Please indicate that your letter is for the attention of the Data Protection Officer.

Our internal complaint procedure

Submit your complaint: send us a detailed description of your concern via Live Chat, the on-site contact form or by post. Include relevant dates, account details and any supporting documentation.
Acknowledgement: we will acknowledge receipt of your complaint as soon as reasonably possible, usually within a few working days.
Investigation: our team will investigate your complaint, which may include reviewing logs, communications and relevant policies, and, where necessary, consulting with our DPO, risk, compliance or security teams.
Response: we will provide a substantive response within one (1) month (30 days) of receiving your complaint, or inform you if more time is needed due to complexity, together with the reasons for any delay.
Further steps: if you are not satisfied with our response, we will inform you about further options, including your right to escalate the matter to a supervisory authority or, where relevant, to an ADR body for gambling-related disputes (although privacy-specific issues are generally handled by data protection authorities rather than gambling ADR bodies).

Supervisory authorities and escalation

United Kingdom (primary regulator for GB players): if you believe we have not handled your personal data in accordance with data protection law, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
- Website: https://www.ico.org.uk
- Address (as of 2025): Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
European Union residents: if you are located in the EU, you may also have the right to lodge a complaint with the data protection authority in your country of residence or work, or where you believe an infringement has occurred.
Mexico: where Mexican data protection law applies to you, you may lodge a complaint or enquiry with the competent Mexican data protection authority (for example, the National Institute for Transparency, Access to Information and Personal Data Protection - INAI) in accordance with local procedures.

Please note that while IBAS (Independent Betting Adjudication Service) at https://ibas-uk.com/ is available as an Alternative Dispute Resolution (ADR) body for certain gambling-related disputes, privacy and data protection issues are generally handled by data protection authorities such as the ICO.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, regulatory guidance, technology or our internal practices. When we make changes, we will take appropriate steps to inform you in advance where the changes are material or where required by law.

How we notify you of changes

Website updates: the latest version of this Privacy Policy will always be available on https://ecya.bet/privacy-policy or another clearly signposted area of ecya.bet.
In-account notifications: for significant changes, we may display alerts or banners when you log into your account, directing you to the updated policy.
Email or equivalent communication: where required by law or where we deem it appropriate, we may also notify you by email or similar communication using the contact details associated with your account.

Effective date, version control and advance notice

Last updated: November 2025.
Each version of this Privacy Policy will be identified by an "Effective date" and/or version reference so that you can see when it was last revised.
For material changes that significantly affect your rights or how we process your data, we will, where practicable and required, provide you with at least 30 days' advance notice before the changes become effective, giving you an opportunity to review them.
If you do not agree with the updated Privacy Policy, you may choose to close your account and stop using ecya.bet. Continued use of the services after the effective date of the updated policy will constitute your acknowledgement of the changes, to the extent permitted by applicable law.

If you have any questions about this Privacy Policy, how it applies to Ecua Bet or how your data is processed on ecya.bet, please contact us using the methods described in the "Complaints & Contacts" section above.