SBK Privacy Policy
Privacy and your SBK account
Our privacy page at this website explains how personal information is handled in connection with SBK accounts and services, and the choices available to you.
Smarkets (Malta) Limited is the data controller identified in the SBK privacy policy. Smarkets Limited also acts as a controller when carrying out certain corporate support functions for that company. The account-processing practices described below belong to those entities.
Information used by the operator
The information involved depends on how you use the service and what you provide.
| Information category | Examples |
|---|---|
| Details you supply | Your contact details, birth date, payment information, identity documents and evidence of your address |
| Account activity | Bets, transfers and communications concerning your account |
| Technical records | IP addresses, browser and device details, login records and navigation through the website or app |
| Information from partners | Data received from advertising, analytics and search-service providers |
Forms, emails and live-chat conversations can contain personal information. Registration, payments and enquiries may therefore produce different records.
Reasons for processing
Smarkets (Malta) Limited describes several grounds for using personal data:
- Contractual purposes: running accounts, supplying the service, handling payments, answering enquiries and performing identity or security checks. Checks can involve trusted providers and soft searches of credit-reference records.
- Legitimate interests: protecting and improving the service, personalising features, investigating complaints, tackling fraud and other crime, and dealing with legal claims or regulatory matters.
- Consent: certain marketing activities, cookies or similar technologies, and other uses explained when consent is requested.
- Legal duties: meeting regulatory requirements and responding to authorised investigations.
For its betting service, the company may also give liquidity partners trading information derived from usage. This includes an anonymous identifier representing a counterparty and the markets accessed. Details of its legitimate-interest assessments can be requested from the company.
Sharing and international transfers
The operator uses external providers for payments, identity and credit checks, fraud prevention, digital marketing and content delivery. Advertising vendors may receive information to show adverts informed by earlier visits to Smarkets.
Disclosure may also involve regulators, public authorities or law enforcement where the stated purposes or applicable requirements justify it. Sporting organisations with relevant group agreements may receive information for integrity work, rule enforcement or crime prevention.
A business sale or integration can involve disclosure to advisers and a prospective buyer's advisers, followed by transfer to the new owner.
For transfers outside the EEA to recipients in countries without an EU adequacy decision, the operator's policy describes safeguards such as European Commission-approved contractual clauses or a provider's binding corporate rules for processors. The company can supply the relevant safeguard on request.
How long records remain
These are the retention periods described for the operator's processing:
| Record or purpose | Retention approach |
|---|---|
| Registration information | Throughout active use, followed by six years to meet legal obligations |
| Information used to provide services | Six years after the last interaction |
| Marketing or consent-based processing | Until a stop request, plus a brief implementation period |
| Record of an objection to marketing or processing | Kept indefinitely so the request can continue to be honoured |
Closing an account or withdrawing consent does not automatically erase every record. Other grounds for keeping or processing information may still apply.
Your choices and requests
The operator's policy provides for requests to:
- Access your personal information and correct inaccuracies.
- Erase data or restrict its processing where applicable.
- Receive eligible data supplied under consent or a contract in a machine-readable form, or have it transferred to another controller.
- Object to processing in relevant circumstances.
- Exercise protections concerning decisions made entirely by automated means.
These rights have limits. A request may affect another person's privacy or rights, or concern records that must remain for legal reasons or compelling legitimate interests. The operator explains any exemption it relies on when responding.
You can withdraw consent for processing that depends on it. You can also stop direct marketing, including profiling for that purpose, at any time by using the message's opt-out instructions or contacting support. Some marketing may rely on legitimate interests rather than consent. The marketing opt-out still applies.
Automated processing
Smarkets states that decisions with legal or similarly significant consequences are not made solely by automated processing. It does use automation and profiling for other purposes, including identity checks, crime prevention and product personalisation.
Privacy questions
For questions about this page, use the support channel within your SBK account. For an account-data request, use your SBK account's support channel and specify the information or processing you want reviewed. A question sent to this website is not confirmation that an operator-held record has been changed or deleted.
The operator's policy also provides for complaints to a data protection authority if an EU or UK citizen's concerns remain unresolved. Check the privacy notice of any other website before giving it personal information.