burger icon
Nu Bet United Kingdom
Log In

Privacy Policy

This Privacy Policy explains how NuGen Gaming Ltd, operating the Nu Bet online gambling service via the website bednu.com, collects, uses, discloses, and protects your personal data. It applies to players, prospective players, and visitors who access or use bednu.com or related interfaces made available to customers in the United Kingdom.

The policy reflects the requirements of UK data protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, as well as applicable sector-specific and international standards relevant for online gambling. It is effective as of 6 November 2025 and was last updated on November 2025. If you continue to use bednu.com after any update becomes effective, you agree to the revised Privacy Policy.

Who We Are

Observe: Nu Bet operates in the UK market under a UK Gambling Commission licence, with its operating company based in Malta. This requires clear identification of the legal entity responsible for data processing and transparent contact routes for privacy queries.

Expand: For the Nu Bet service on bednu.com, the controller must be clearly named, together with its location and regulatory framework, while acknowledging where certain corporate details are not publicly provided in this policy.

Reflect: We provide the core corporate details, licensing framework, and the way you can reach our privacy team, while avoiding unsupported or fabricated registration information.

Operator and Controller

  • Legal entity: The Nu Bet gaming service available via bednu.com is operated by NuGen Gaming Ltd.
  • Legal form and registration country: NuGen Gaming Ltd is a limited liability company (Ltd) registered in Malta.
  • Registered / legal address: NuGen Gaming Ltd, legal and operational headquarters in Sliema, Malta (full street address and postal code are not specified in this policy and may be obtained via official corporate registries or by contacting us).
  • Company registration / tax numbers: Specific company registration and tax identification numbers are not listed in this Privacy Policy. They are available through relevant Maltese registries or upon justified request.

Gambling Licence and Regulatory Context

  • UK gambling licence: Nu Bet (Nu Bet) is operated under the UK Gambling Commission licence number 39483, held by NuGen Gaming Ltd.
  • Primary regulator for gambling services to GB players: United Kingdom Gambling Commission (UKGC).
  • Alternative dispute resolution (ADR): Independent Betting Adjudication Service (IBAS) is listed as the ADR provider for UK players of the Nu Bet brand.
  • Brand distinction: This Privacy Policy applies only to the UKGC-licensed Nu Bet service at bednu.com and does not apply to any offshore brands or mirror sites (including any Curaçao-licensed "Nubet" entities operated by VeliServices N.V. or similar).

Data Protection Contact

  • Data controller: For the purposes of UK GDPR, NuGen Gaming Ltd is the controller of personal data processed in connection with Nu Bet on bednu.com.
  • Data Protection Officer / privacy team: A dedicated data protection function oversees compliance with UK GDPR and related regulations. A named individual and specific email address are not published in the data provided for this policy.
  • How to contact us about privacy: You may contact our data protection team using the contact and support channels made available from time to time on bednu.com (for example, customer support or "privacy" / "data protection" options where offered). Please indicate that your request is a "Data protection / privacy request".
  • Language: We generally handle privacy communications in English. Reasonable accommodations will be considered where required by applicable law.

What Personal Data We Collect

Observe: Operating Nu Bet via bednu.com requires detailed identification (KYC), payment processing, technical operation, behavioural monitoring, and responsible gambling tools.

Expand: These operational needs translate into several categories of personal data, including identity, contact, financial, technical, behavioural, and cookie data, all of which must be described in a clear and structured way.

Reflect: The following categories show what we collect, why it is collected at all, and how they relate to the services we provide.

Identity and Contact Data

  • Identity data: Full name, date of birth, nationality, gender (where requested), government-issued identification details (e.g. ID or passport number and copies), proof of address documents, and any information required to satisfy KYC/AML obligations.
  • Contact data: Email address, residential address, country of residence, mobile or landline numbers (when provided), preferred language, and communication preferences (e.g. consent for marketing).
  • Account data: Username, hashed passwords, security questions and answers, account settings, responsible gambling settings (deposit limits, time-outs, self-exclusion, GamStop status, Panic Button usage).

Payment and Financial Data

  • Payment instruments: Partial card details (in tokenised or truncated form), payment method identifiers (e-wallet, bank, voucher), and related billing information as required by our payment partners.
  • Transaction data: Deposits, wagers, wins/losses, bonuses, withdrawals, chargebacks, and related transactional logs.
  • Compliance-related financial data: Source-of-funds and source-of-wealth information, where required to comply with AML and affordability checks under UK regulations.

Technical and Usage Data

  • Device and connection data: IP address, approximate location derived from IP, device identifiers, operating system, browser type and version, screen resolution, and language settings.
  • Log data: Access times, login attempts, session IDs, pages visited, clicks, game launches, errors, and system messages.
  • Security logs: Records of suspicious activity, changes in device or location patterns, and security events used for fraud detection and system protection.

Behavioural and Profiling Data

  • Gameplay and betting data: Game selections, stake levels, betting history, session duration, wins/losses, bonus usage, and in-game interactions.
  • Responsible gambling signals: Frequency and duration of sessions, repeated deposit patterns, reaction to reality checks, use of limits, time-outs, self-exclusion and GamStop flags.
  • Preference data: Language preference, favourite games, preferred payment methods, and interaction with marketing messages (opens, clicks, opt-outs).

Cookies and Similar Technologies

  • Cookie identifiers: Unique identifiers assigned to your browser or device for session management and recognition.
  • Tracking technologies: Cookies, web beacons, pixels, local storage, and similar tools used to operate the site, provide analytics, and support marketing (subject to consent where required).

Legal Basis for Processing

Observe: UK GDPR requires every processing activity to be grounded in a lawful basis such as consent, contract, legal obligation, or legitimate interest.

Expand: For Nu Bet on bednu.com, lawful bases reflect gambling-specific duties (KYC/AML, safer gambling), the need to perform our contract with you, and the use of data for fraud prevention and analytics.

Reflect: We describe each legal basis in relation to the specific activities, so you can understand why we process your data and when your consent is required.

Performance of a Contract

  • Account creation and management: We process identity, contact, and account data to register you as a player, verify eligibility, and maintain your Nu Bet account.
  • Provision of gambling services: We use your data to enable deposits, gameplay, bonuses, withdrawals, and customer support.
  • Execution of transactions: Payment and transaction data are processed to accept deposits, place bets, settle wagers, and pay out winnings.

Compliance with Legal Obligations

  • KYC/AML and affordability rules: We process identity, financial, and behavioural data to comply with anti-money laundering, counter-terrorist financing, and safer gambling regulations in the UK.
  • Regulatory reporting: We may be legally required to share specific data with the UK Gambling Commission, tax authorities, law enforcement, or other competent authorities.
  • Record-keeping: We keep certain data for minimum statutory retention periods, for example to evidence compliance and respond to regulator queries.

Legitimate Interests

  • Security and fraud prevention: We process technical, behavioural, and transactional data to detect and prevent fraud, abuse, bonus misuse, and attempts to circumvent self-exclusion or GamStop.
  • Service improvement and analytics: We analyse aggregated and pseudonymised usage data to improve games, user experience, and platform stability.
  • Defence of legal claims: We may retain and use relevant data to establish, exercise, or defend legal claims or regulatory investigations.
  • Where we rely on legitimate interests, we balance these against your rights and expectations and implement appropriate safeguards.

Consent

  • Marketing communications: We send electronic marketing (email, SMS, push notifications) about Nu Bet on bednu.com only where you have given valid consent or where otherwise permitted by law.
  • Non-essential cookies: Analytics, advertising, and certain personalisation cookies are used based on your consent where required under applicable law.
  • Withdrawal: You can withdraw your consent at any time through your account settings, unsubscribe links, or by contacting us via the channels indicated on bednu.com. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

Purpose of Processing

Observe: Each processing activity must have a clear purpose, particularly in a regulated environment such as UK online gambling.

Expand: For Nu Bet on bednu.com, purposes include provision of core services, compliance, risk management, product development, and marketing.

Reflect: By mapping purposes to the categories of data previously described, you can better understand how and why your data is used.

Core Service Provision

  • Operating your account: Creating, verifying, maintaining, and closing your player account, including responsible gambling tools such as deposit limits, reality checks, time-outs, self-exclusion, and GamStop integration.
  • Providing games and services: Enabling you to deposit funds, place bets, participate in games, receive bonuses, and withdraw winnings.
  • Customer support: Handling your queries, complaints, and requests via available support channels.

Compliance, Risk, and Integrity

  • Regulatory compliance: Meeting obligations under UK gambling law, UKGC licence conditions, KYC/AML regulations, and safer gambling requirements.
  • Fraud and abuse prevention: Detecting and preventing fraud, identity theft, bonus abuse, money laundering and other criminal or unlawful activity.
  • Platform security: Keeping bednu.com, systems, and users safe through authentication, monitoring, logging, and incident response.

Analytics, Optimisation, and Personalisation

  • Service analytics: Analysing usage patterns (such as game popularity and technical performance) to improve stability and functionality.
  • Product development: Developing new features, games, and tools (including responsible gambling enhancements) based on aggregated insights.
  • Personalised content: Subject to consent and legal limits, tailoring certain offers, recommendations, and communications based on your profile and behaviour.

Marketing and Communication

  • Promotional communication: Sending marketing about Nu Bet on bednu.com where you have consented or where legally permitted, including information about promotions, tournaments, and new features.
  • Service communications: Sending non-marketing communications such as changes to terms, privacy updates, and important account/service notices (these are not based on consent and are necessary for the service).

Disclosure & Sharing

Observe: To operate Nu Bet, we must work with payment providers, technology vendors, regulators, and dispute-resolution services.

Expand: Sharing is restricted to what is necessary, subject to contracts and safeguards, and consistent with UK GDPR and gambling regulations.

Reflect: The following outlines whom we share data with, under what circumstances, and how your interests remain protected.

Service and Infrastructure Providers

  • Payment partners: Banks, card schemes, e-wallet providers, payment gateways, and other financial intermediaries that process deposits and withdrawals. They receive transaction and limited identity data as necessary to perform their services.
  • IT and hosting providers: Cloud hosting, data centre operators, content delivery networks, and technical service providers that support the operation of bednu.com and related systems.
  • Game and platform providers: Licensed game studios and platform vendors that supply the games and tools you use, where necessary for gameplay, fairness checks, and security.

Compliance, Risk, and Professional Services

  • Regulators and authorities: The UK Gambling Commission, law enforcement agencies, courts, tax authorities, and other competent bodies where required by law or regulation.
  • Fraud prevention bodies: Risk, AML, and fraud prevention services that help detect and prevent financial crime and account abuse.
  • Professional advisers: Auditors, legal advisers, and consultants who require access to certain data to provide their services under confidentiality obligations.

Affiliates and Marketing Partners

  • Group and white-label partners: Where relevant, other entities involved in operating or supporting the Nu Bet brand, under strict data protection agreements.
  • Advertising networks: Subject to your consent and local law, selected marketing and advertising partners may receive pseudonymised or aggregated data to deliver or measure campaigns relating to Nu Bet on bednu.com.

Mandatory and Other Disclosures

  • Legal obligations and protection: We may disclose data to third parties if required to comply with a legal obligation, protect the rights, property, or safety of NuGen Gaming Ltd, players, or others, or to detect or respond to suspected unlawful activity.
  • Business changes: In the event of a merger, acquisition, restructuring, or similar transaction, your data may be transferred as part of the transaction, subject to continuity of protections at least equivalent to those in this policy.
  • We do not sell your personal data in the sense of "selling" for separate monetary consideration as commonly understood under data protection and consumer privacy laws.

International Transfers

Observe: The Nu Bet service is directed at players in Great Britain, but NuGen Gaming Ltd is based in Malta and relies on various international service providers.

Expand: This naturally involves transfers of personal data from the UK to the European Economic Area (EEA) and, in limited cases, to other countries.

Reflect: We implement recognised legal mechanisms and safeguards to ensure your data remains protected when transferred internationally.

Transfers Within the UK and EEA

  • UK to Malta / EEA: Personal data may be processed in Malta and other EEA countries where our systems, staff, or service providers are located. The UK currently recognises the EEA as providing adequate protection, and UK data exported to the EEA benefits from that adequacy framework.

Transfers Outside the UK / EEA

  • Non-EEA providers: Where we use providers located outside the UK/EEA (for example, certain cloud services, analytics or payment providers), we ensure an appropriate transfer mechanism is in place.
  • Standard Contractual Clauses and UK addenda: We rely on the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the SCCs, as appropriate, together with risk assessments and complementary technical and organisational controls.
  • Other safeguards: Where relevant, we rely on additional legal bases permitted by UK GDPR, such as explicit consent or necessity for the performance of a contract, always ensuring that your fundamental rights remain protected.

Data Retention

Observe: UK gambling and financial regulations require us to retain certain records for defined periods.

Expand: Retention must respect both legal minimums and data minimisation principles, deleting or anonymising data when it is no longer needed.

Reflect: We apply structured retention schedules for Nu Bet data processed through bednu.com, aligned with regulatory expectations as at 2025.

Retention Principles

  • Purpose limitation: We keep personal data only for as long as necessary for the purposes described in this policy or as required by law.
  • Regulatory minimums: Certain records must be kept for mandatory periods to comply with anti-money laundering, gambling, tax, and accounting rules.
  • Anonymisation: Where appropriate, we anonymise data so it can no longer be associated with you, and we may use such anonymised information indefinitely.

Indicative Retention Periods

  • Player account data: Generally retained for the duration of your active account and for up to five (5) years after account closure, to meet regulatory, anti-fraud, and legal requirements.
  • Financial and transactional records: Typically retained for at least five (5) years from the date of the relevant transaction or relationship, or longer if required by AML or tax laws.
  • KYC and verification data: Retained for at least five (5) years after the end of the business relationship or last transaction, in line with AML obligations.
  • Technical logs and security data: Retention periods vary but are generally shorter (e.g. from several months up to two (2) years), unless required longer for investigations or legal claims.
  • Marketing data: Retained while you maintain a marketing relationship with us and for a limited period after you withdraw consent or opt out, to evidence compliance with your preferences.

Deletion and Archiving

  • Deletion or anonymisation: Once retention periods expire, data is securely deleted or irreversibly anonymised, unless we have a legal basis to retain it longer.
  • User-initiated deletion: If you request deletion of your data and we are not legally required to retain it, we will delete or anonymise your data in line with legal obligations and technical capabilities.

Your Rights

Observe: Players using Nu Bet via bednu.com have rights under UK GDPR, and similar rights may exist under other privacy laws such as Mexican data protection law for affected individuals.

Expand: These rights cover access, rectification, erasure, restriction, objection, data portability, and control over marketing consent, plus protections when automated decision-making is involved.

Reflect: We explain each right, how to exercise it, the expected timelines (generally 30 days), and how it aligns with broader international standards, including Mexican regulations where relevant.

Key Data Protection Rights

  • Right of access: You have the right to obtain confirmation as to whether we process your personal data and to receive a copy, together with information about how we use it.
  • Right to rectification: You can request correction of inaccurate or incomplete personal data (for example, updating your address or contact details).
  • Right to erasure ("right to be forgotten"): You may request deletion of your data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and there is no other legal basis), or where processing is unlawful. We may need to retain certain records to comply with UK law and regulatory obligations.
  • Right to restriction: You may request restriction of processing in certain circumstances (for example, where you contest the accuracy of data or object to processing pending verification).
  • Right to object: You can object to processing based on our legitimate interests, including profiling. We will stop such processing unless we can demonstrate compelling legitimate grounds which override your interests, or where processing is required for legal claims.
  • Right to data portability: In certain cases, you can request that we provide your personal data in a structured, commonly used and machine-readable format and transfer it to another controller where technically feasible.
  • Rights in relation to marketing: You can withdraw consent to marketing at any time and object to marketing communications. We will respect your choice and update our systems accordingly.
  • Automated decision-making and profiling: If we use automated decision-making that has legal or similarly significant effects, you have rights to obtain human intervention, express your point of view, and contest the decision, as required by law.

Procedures for Exercising Your Rights

  • How to submit a request: Please contact our privacy team using the contact and support options available on bednu.com, clearly stating that your request concerns "Data protection / privacy". Where available, you may also use any dedicated privacy or "My data" tools in your account.
  • Verification: For your security, we may ask for additional information (for example, confirming certain account details) before acting on a request.
  • Timeframe: We aim to respond to all valid requests within one (1) month (30 days) of receipt. If your request is particularly complex or we receive numerous requests, we may extend this period by up to a further two months, in which case we will inform you of the extension and reasons.
  • Charges: Requests are processed free of charge. We may charge a reasonable fee or refuse to act only where a request is manifestly unfounded or excessive, in line with UK GDPR.
  • UK and EU framework: These rights are primarily grounded in UK GDPR and the Data Protection Act 2018. Where EU data protection law applies (for example, to certain EU-based users accessing services), similar GDPR rights apply via the competent EU supervisory authorities.
  • Mexican privacy alignment: To the extent individuals are protected by Mexican data protection law (such as the Mexican Federal Law on Protection of Personal Data Held by Private Parties), comparable rights of access, rectification, cancellation, and opposition (often referred to as "ARCO" rights) are supported. Requests from such individuals will be addressed in line with both this policy and applicable Mexican regulations, to the extent they apply.

Cookies & Tracking Technologies

Observe: bednu.com uses cookies and similar technologies to operate Nu Bet, secure sessions, and deliver analytics and marketing.

Expand: Cookies differ in duration (session vs persistent), ownership (first-party vs third-party), and purpose (functional, analytics, advertising).

Reflect: We explain how each category is used and the controls available to you.

Types of Cookies We Use

  • Session cookies: Temporary cookies that exist only for the duration of your browsing session and are deleted when you close your browser. They enable essential functions such as login sessions and security checks.
  • Persistent cookies: Cookies stored on your device for a defined period to remember your preferences (such as language or saved settings) and, with your consent where required, to support analytics and marketing.
  • First-party cookies: Cookies set directly by bednu.com to operate the Nu Bet service.
  • Third-party cookies: Cookies set by approved partners (e.g. analytics tools, advertising networks, or game providers) to measure performance, security, or marketing effectiveness, subject to your consent where required.

Purposes of Cookies

  • Strictly necessary / functional: Required for the operation of bednu.com (for example, enabling login, keeping your session active, and processing transactions). These cannot be disabled via our consent tools as they are essential.
  • Analytics and performance: Help us understand how players use the site, which games are popular, and how to improve performance and usability.
  • Advertising and personalisation: Used, with your consent where required, to provide relevant offers about Nu Bet on bednu.com and measure campaign effectiveness.

Managing Cookies

  • Browser settings: You can configure your browser to block or delete cookies. Doing so may affect the functionality of bednu.com and the Nu Bet service.
  • On-site controls: Where provided, you may use our cookie banner or preference centre on bednu.com to manage non-essential cookies (such as analytics or advertising cookies).
  • Opting out of marketing: Adjusting your cookie preferences does not automatically change your email/SMS marketing preferences, which you may manage separately via account settings or unsubscribe links.

Data Security

Observe: Online gambling services process sensitive transactional and behavioural data and must adopt robust security controls.

Expand: For Nu Bet on bednu.com, we employ layered technical and organisational measures aligned with industry standards.

Reflect: While no system can be guaranteed as perfectly secure, we continuously work to protect your data against unauthorised access, alteration, disclosure, or destruction.

Technical Security Measures

  • Encryption in transit: Data transmitted between your device and bednu.com is protected using TLS 1.2+ or equivalent secure protocols to reduce the risk of interception.
  • Encryption at rest: Sensitive data, such as passwords and certain financial information, is stored using strong cryptographic techniques and hashing algorithms.
  • Access controls and authentication: Role-based access controls, multi-factor authentication for administrative accounts, and strict authentication mechanisms aim to ensure that only authorised personnel can access production systems.
  • Network and infrastructure security: Firewalls, intrusion detection/prevention systems, segmentation, and other controls help protect the network environment hosting Nu Bet services.

Organisational Measures

  • Policies and training: Staff handling personal data are subject to confidentiality obligations and receive regular training on data protection, security, and responsible gambling obligations.
  • Security governance: We maintain internal policies and procedures for security management, change control, and incident response, reflecting recognised standards such as ISO 27001 and SOC 2 frameworks where applicable.
  • Vendor due diligence: Third-party providers with access to personal data are subject to vetting and contractual obligations, including security and data protection requirements.
  • Incident response: We operate procedures for detecting, investigating, and responding to suspected security incidents. Where a personal data breach creates a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals in accordance with UK GDPR.

Complaints & Contacts

Observe: Players must be able to contact us about their data, raise concerns, and escalate to supervisory authorities if unsatisfied.

Expand: Complaint handling should be transparent, time-bound, and aligned with UK and, where applicable, Mexican and EU data protection oversight frameworks.

Reflect: We provide a clear path from initial contact with NuGen Gaming Ltd to escalation before competent authorities.

Contacting Us About Privacy and Complaints

  • First contact: If you have questions or concerns about this Privacy Policy or how NuGen Gaming Ltd processes your data in connection with Nu Bet on bednu.com, please contact us through the support and contact channels made available on bednu.com, indicating that your query relates to "Privacy / Data protection".
  • Information to include: Provide your account identifier, a clear description of your concern, and any relevant supporting information. Do not include full payment card numbers or passwords.
  • Response time: We aim to acknowledge your complaint promptly and to provide a substantive response within 30 days, or inform you if more time is needed for complex issues.

Escalation to Supervisory Authorities (UK / EU)

  • United Kingdom: If you are located in the UK and believe that your data protection rights have been violated, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). For the most up-to-date contact details, please see https://ico.org.uk/.
  • European Union: Where EU data protection law applies (for example, to certain EU-based individuals), you may lodge a complaint with your local data protection authority in the EU. Contact details for EU supervisory authorities are available via the European Data Protection Board (EDPB) website.

Mexican Data Protection Authority

  • Mexico: To the extent Mexican data protection law applies to you, you may lodge a complaint or query with the Mexican data protection authority, the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). For current contact information, please consult its official website (for example, starting from https://home.inai.org.mx/).
  • We will cooperate with competent supervisory authorities and follow their directions, where applicable, in relation to the Nu Bet service operated via bednu.com.

Updates

Observe: Privacy laws, regulatory expectations, and our own services evolve over time.

Expand: We must update this Privacy Policy when necessary and notify players in a timely and transparent manner.

Reflect: The following describes how we manage policy updates for Nu Bet on bednu.com, including notice periods and your options.

How and When We Update This Policy

  • Ongoing review: We review this Privacy Policy periodically, at least once per year, and whenever there are material changes in law, regulatory guidance, or our processing activities.
  • Last updated: This version was last updated on November 2025.

Notification of Changes

  • Minor changes: For non-material changes (for example, clarifications or corrections), we may update the policy by posting the revised version on bednu.com with an updated "Last updated" date.
  • Material changes: For significant changes that affect how we process your data or your rights, we will provide more prominent notice, which may include:
    • Email notifications to the address associated with your Nu Bet account, where available.
    • On-site banners or pop-ups on bednu.com.
    • Notifications within your account dashboard, where applicable.
  • Advance notice: Where feasible and required by law, we will give at least 30 days' advance notice before material changes become effective, particularly if they introduce new purposes or legal bases that may materially affect you.

Your Options in Case of Changes

  • Reviewing changes: We encourage you to review this Privacy Policy periodically to stay informed about how we process your data for Nu Bet on bednu.com.
  • Objection and account closure: If you do not agree with material changes to this Privacy Policy, you may object to certain processing where permitted by law or choose to close your account. We will continue to process data to the extent necessary to comply with legal and regulatory obligations, even after account closure.