Privacy Policy

OBSERVE: This privacy notice explains how Karamba, operated for the Karamba project on the keramba.bet website, collects and uses your personal data when you visit the site, open an account, play games, place bets, or otherwise interact with our services.

EXPAND: It applies to all visitors and registered players who access keramba.bet from the United Kingdom (Great Britain) and, where relevant, to users in other countries whose data we process in connection with the UK-facing services. It covers online gambling services, customer support, marketing communications, and all related technical operations.

REFLECT: Please read this policy carefully so you understand what data we collect, why we collect it, how long we keep it, with whom we share it, and the choices and rights you have. By using keramba.bet after the effective date, you acknowledge that you have read this notice. This policy is effective and Last updated: November 2025.

Who We Are

Observe - Our Identity

keramba.bet is a gambling website branded as Karamba and operated for Karamba by AG Communications Limited, a company incorporated in Malta with registration number C48328 and registered address at 135 High Street, Sliema SLM 1548, Malta.

AG Communications Limited holds UK Gambling Commission remote operating licence number 39483 to provide online gambling services to players in Great Britain. It also holds Irish betting licence number 1014834 for sports betting in Ireland. Our appointed alternative dispute resolution (ADR) provider for UK disputes is the Independent Betting Adjudication Service (IBAS).

Expand - Regulatory Context and Responsibility

Data controller: For players and visitors of keramba.bet in the UK, AG Communications Limited acts as the "data controller" for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Regulatory oversight: Our gambling activities are regulated by the UK Gambling Commission. Our licence details can be verified on the public register (licence number 39483) maintained by the Commission.
Compliance improvements: In November 2022, AG Communications Limited received a financial penalty from the UK Gambling Commission related to anti-money laundering checks by a third party. Since then, we have strengthened our internal controls, including data governance and AML monitoring, to better protect your information and meet regulatory expectations.

Reflect - Contact Channels and DPO

Data Protection Officer / privacy contact: AG Communications Limited has a data protection function responsible for overseeing compliance and handling privacy queries. You can contact our data protection team using the contact methods provided on keramba.bet (for example via the "Contact Us" or help channels available in your account) and clearly marking your request as "Privacy" or "Data Protection".
Postal contact for privacy matters: Data Protection Team, AG Communications Limited, 135 High Street, Sliema SLM 1548, Malta.
Regulator information: For UK data protection matters, our primary supervisory authority is the UK Information Commissioner's Office (ICO), as explained in the "Complaints & Contacts" section.

What Personal Data We Collect

Observe - Main Categories of Data

When you use keramba.bet as part of Karamba, we collect and process different categories of personal data. Some data is provided directly by you, some is generated by your use of our services, and some is obtained from third parties for regulatory, security, and payment purposes.

Expand - Detailed Data Types

Identification and contact data: Full name, date of birth, residential address, nationality, email address, mobile and landline phone numbers, username, and copies or details of identity documents (such as passport, driving licence, residence permit) used for KYC and age verification.
Account and gameplay data: Account registration details, login credentials (stored securely), account status, responsible gambling settings, game sessions, betting history, wins and losses, bonuses used, tournament participation, and customer support interactions (including call recordings and chat transcripts where permitted by law).
Payment and financial data: Deposit and withdrawal details, partial card numbers (masked), card expiry date, payment instrument type, bank account or e-wallet identifiers, transaction history, chargeback records, and information received from payment processors to prevent fraud and comply with AML obligations.
Technical and usage data: IP address, approximate geolocation derived from IP, device identifiers, browser type and version, operating system, language settings, session identifiers, log files, access times, pages viewed, clicks, referral URLs, and performance/error logs.
Behavioural and profiling data: Game preferences, betting patterns, time of play, responsible gambling indicators (e.g. sudden changes in deposit behaviour), marketing interaction data (email opens, link clicks), and information used to assess potential problem gambling, fraud, or money laundering risk.
Verification and compliance data: Results of age and identity checks, sanctions and politically exposed person (PEP) screening, affordability and source-of-funds information, and information we receive from credit reference agencies or other due-diligence providers where permitted by law.
Cookies and similar technologies: Unique identifiers stored in cookies, tags, pixels and local storage that record your preferences, remember your session, measure site performance, and support analytics and advertising activities, as described in the "Cookies & Tracking Technologies" section.

Reflect - Sources and Necessity

Sources of data: We obtain data directly from you (for example when you register or provide documents), automatically through your use of keramba.bet (for example via logs and cookies), and from third parties such as payment providers, verification services, and regulatory or law enforcement bodies.
Mandatory vs. optional data: Some data is required to open and maintain an account, to comply with UK gambling, KYC and AML rules, and to protect you and us against fraud. If you choose not to provide such information, we may be unable to create or maintain your account or allow you to continue using keramba.bet.

Legal Basis for Processing

Observe - Applicable Legal Framework

Our processing of personal data in connection with Karamba on keramba.bet is primarily governed by the UK GDPR and the Data Protection Act 2018. Where relevant, EU GDPR and other national laws (including Mexican privacy laws for certain users) may also apply.

Expand - Specific Legal Bases

Contract necessity: We process data when it is necessary to enter into and perform our contract with you, including:
- Setting up and managing your keramba.bet player account;
- Verifying your age and eligibility to gamble;
- Accepting deposits and paying out winnings;
- Providing games, bets, promotions and customer support;
- Managing account security and authentication.
Legal obligations: We process data to comply with legal and regulatory duties, including:
- Gambling regulation under UK law and UKGC licence conditions (e.g. player verification, fair and open gambling, self-exclusion management);
- Anti-money laundering and counter-terrorist financing laws, including transaction monitoring, enhanced due diligence and regulatory reporting;
- Responsible gambling requirements, record retention and complaints handling obligations;
- Tax, accounting and statutory reporting obligations.
Legitimate interests: We process data where this is necessary for our legitimate interests and where your rights are not overridden, for example:
- Preventing fraud, abuse, account takeovers and other unlawful activity;
- Maintaining network and information security and improving our IT systems;
- Analysing how keramba.bet is used to improve performance, content and user experience;
- Defending and exercising legal claims and responding to regulatory investigations.
Consent: We rely on your consent when required by law, including:
- Sending certain types of direct electronic marketing (for example promotional emails or SMS, where consent is required);
- Using non-essential cookies or similar technologies for advertising or cross-site tracking; and
- Sharing data with certain advertising partners where consent is the appropriate basis.

Reflect - Balancing and Withdrawal

Balancing test: When we rely on legitimate interests, we perform an internal assessment to ensure that our interests do not unfairly override your privacy rights and expectations in the UK gambling context.
Withdrawal of consent: Where we process data based on your consent, you may withdraw that consent at any time (for example by changing your marketing preferences or cookie settings). This will not affect processing that has already taken place but may impact our ability to provide certain optional features.

Purpose of Processing

Observe - Core Service Purposes

We only use your personal data for specific, explicit and legitimate purposes connected with providing and securing keramba.bet as part of Karamba.

Expand - Detailed Purposes

Provision of gambling services: To register your account, verify your age and identity, process deposits and withdrawals, provide casino games and betting services, credit bonuses, manage loyalty programmes, and provide multi-channel customer support.
Compliance and risk management: To comply with UK gambling regulation, licence conditions, KYC and AML requirements; to monitor gameplay and transactions for fraud, money laundering and other prohibited behaviour; to manage self-exclusion and responsible gambling tools; and to maintain appropriate business records.
Service improvement and analytics: To understand how players use keramba.bet, measure performance of games and features, detect technical issues, and improve usability, content and security. This includes aggregated and anonymised statistical reporting.
Personalisation: To tailor content, game recommendations and offers to your preferences and playing patterns, within responsible gambling limits and legal requirements.
Marketing and promotions: To send you information about promotions, special offers and new features via email, SMS, push notifications or on-site messages, in accordance with your consent and preferences and applicable UK marketing and e-privacy rules.
Legal claims and business administration: To manage disputes, respond to complaints, cooperate with regulators, enforce our terms and conditions, and carry out internal audits and corporate reporting.

Reflect - Limitation and Compatibility

Purpose limitation: We do not use your personal data for purposes that are incompatible with the purposes described in this policy. If we need to use data for a new, materially different purpose, we will update this policy and, where required, notify you in advance.
Aggregated data: We may aggregate or anonymise personal data for statistical, research or reporting purposes. Once data is irreversibly anonymised, it is no longer treated as personal data.

Disclosure & Sharing

Observe - Types of Recipients

In order to operate keramba.bet for Karamba in a secure and compliant way, we share personal data with carefully selected third parties under appropriate contractual safeguards.

Expand - Categories of Recipients

Payment and financial partners: Banks, card schemes, payment processors, e-wallet providers and fraud-prevention services that process your deposits, withdrawals and chargebacks and help us monitor transactions for fraud and AML purposes.
Technology and service providers: Hosting providers, IT infrastructure and security vendors, game and platform providers, communication tools (for email, SMS, live chat), analytics services and other suppliers who support the operation and improvement of keramba.bet.
Verification and compliance partners: Identity verification and age-check providers, credit reference agencies, sanctions screening and PEP screening services, and other due-diligence providers used to meet our legal and regulatory obligations.
Group and business partners: Other entities within our wider corporate group and selected business partners (for example platform or white-label partners) involved in providing the Karamba brand and back-office services, strictly for purposes compatible with this policy.
Marketing and advertising partners: Subject to your consent and preferences, we may share limited data with marketing agencies, affiliate partners and advertising networks to manage campaigns, measure performance and avoid sending duplicate or unwanted messages.
Regulators, authorities and ADR: The UK Gambling Commission, other gambling and financial regulators, tax authorities, law enforcement, courts, and our appointed ADR body (IBAS) where we are required or permitted by law to share information, including for regulatory reporting, dispute resolution or enforcement purposes.
Corporate transactions: Potential buyers, investors, advisers or other parties in connection with mergers, acquisitions, reorganisations or similar corporate events, under confidentiality and data protection obligations.

Reflect - Safeguards on Sharing

Contractual protection: Where third parties process data on our behalf, we require them by contract to use the data only on our instructions, to keep it secure, and to comply with applicable data protection law.
No sale of data as a product: We do not sell your personal data as a standalone commercial product. Any sharing for marketing or analytics is controlled, limited, and based on an appropriate legal basis (such as consent) and opt-out options.

International Transfers

Observe - Where Data May Go

Because AG Communications Limited is incorporated in Malta and uses international service providers, your personal data may be transferred outside the United Kingdom, including within the European Economic Area (EEA) and to other countries where our group companies, platform providers or suppliers operate.

Expand - Legal Mechanisms for Transfers

EEA and adequate countries: Transfers from the UK to the EEA and to countries that the UK government has recognised as providing an adequate level of protection are permitted under UK law. In such cases, additional specific safeguards are generally not required.
Standard contractual clauses and equivalent tools: Where we transfer personal data from the UK to countries that do not benefit from an adequacy regulation, we use appropriate safeguards such as standard data protection clauses approved by the European Commission (as adopted under UK law) or UK-specific international data transfer agreements or addenda.
Supplementary measures: We assess the legal environment in destination countries and, where necessary, implement additional technical and organisational measures (such as strong encryption, access restrictions and minimisation) to ensure protection equivalent to UK standards.

Reflect - Your Information and Rights

Access to safeguards: You can contact us to obtain more information about the international transfer mechanisms we rely on or to request a copy of the key contractual safeguards (with commercially sensitive information redacted where necessary).
Consistent protection: Regardless of where your data is processed, we handle it in line with this privacy policy and applicable UK data protection law.

Data Retention

Observe - General Retention Approach

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, accounting, regulatory and reporting requirements, and then securely delete or anonymise it.

Expand - Retention Periods by Category

Player account and identification data: Typically retained for the life of your keramba.bet account and then for up to five (5) years after account closure, to meet UK gambling, KYC and AML obligations, resolve disputes and respond to regulatory queries.
Transaction and gameplay records: Usually retained for up to five (5) to seven (7) years from the date of the relevant transaction or game session, in line with applicable AML, tax and regulatory record-keeping requirements.
Customer support communications: Retained for up to five (5) years from the date of the interaction, or longer where needed to follow up on ongoing complaints, regulatory investigations or legal claims.
Marketing data and preferences: Retained for as long as you remain subscribed to marketing communications and for a limited period (generally up to two (2) years) after you unsubscribe, solely to maintain a suppression list and demonstrate compliance.
Technical logs: Kept for shorter periods which vary depending on the type of log (typically between a few months and two (2) years), unless we need them for security investigations or legal purposes.

Reflect - Deletion Criteria and Exceptions

Deletion and anonymisation: When data is no longer required, we either securely delete it or irreversibly anonymise it so that it can no longer be linked to you.
Legal and dispute-related holds: If we are legally required to keep data for longer (for example due to an investigation by the UK Gambling Commission or another authority) or if it is needed in connection with an ongoing dispute or legal claim, we will retain it only for the extended period strictly necessary.
Your requests: Your right to deletion ("erasure") is subject to the legal retention obligations described above. Where we cannot delete data due to legal requirements, we will inform you and restrict processing where possible.

Your Rights

Observe - Overview of Rights

You have a range of rights in relation to your personal data under the UK GDPR and, where applicable, under the EU GDPR and Mexican privacy laws. These rights allow you to understand and influence how we use your data in connection with keramba.bet and Karamba.

Expand - UK/EU GDPR Rights

Right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how we use it.
Right to rectification: You can ask us to correct inaccurate or incomplete personal data we hold about you (for example if your address or contact details change).
Right to erasure: In certain circumstances, you can request that we delete your personal data. This right is subject to important exceptions where we must retain data to comply with legal obligations, particularly in the regulated gambling and AML context.
Right to restriction: You can ask us to restrict processing of your data in certain situations (for example while we verify its accuracy or where you have objected to processing).
Right to object: You can object at any time to processing based on our legitimate interests and to the use of your data for direct marketing, including profiling related to marketing. We will then stop such processing unless we demonstrate compelling legitimate grounds or are required by law to continue in limited respects.
Right to data portability: For certain data you have provided to us and which we process by automated means based on consent or contract, you can request it in a structured, commonly used, machine-readable format and ask us to transmit it to another controller where technically feasible.
Rights related to automated decision-making: Where we make decisions based solely on automated processing that significantly affect you (for example certain fraud or responsible gambling risk flags), you have the right to obtain human review, to express your point of view and to contest the decision, subject to legal and regulatory constraints.

Expand - Mexican Privacy Law Alignment (ARCO Rights)

For users whose data is subject to Mexican law (such as the Federal Law on the Protection of Personal Data Held by Private Parties), similar rights exist, commonly known as ARCO rights:
- Access: To know what personal data we hold and how we use it;
- Rectification: To request correction of inaccurate or incomplete data;
- Cancellation: To request the deletion of data in certain cases; and
- Opposition: To oppose specific processing activities, including for marketing.
We aim to handle such requests in a manner consistent with both UK/EU standards and applicable Mexican provisions, subject to jurisdictional limits and regulatory requirements.

Reflect - How to Exercise Your Rights

Submission of requests: You can exercise your rights by contacting our data protection team through the contact methods provided on keramba.bet (for example via the "Contact Us" function or the channels available in your account) and clearly stating that your request concerns your privacy or data protection rights.
Information to provide: To protect your account and prevent fraud, we may ask you to provide additional information to confirm your identity before acting on your request.
Response time: We aim to respond to all valid requests within one (1) month (30 days) of receipt. In complex cases, this period may be extended by a further two (2) months, in which case we will inform you of the extension and reasons.
Cost: We will handle your request free of charge, unless it is manifestly unfounded or excessive (for example, repeated frequent requests). In such cases, we may charge a reasonable fee or refuse to act, as allowed by law.
Marketing consent: You can withdraw your consent to direct marketing at any time by using the unsubscribe link in emails, adjusting your account settings (where available), or contacting us. Withdrawal of marketing consent does not affect service communications (such as important account and regulatory notices).

Cookies & Tracking Technologies

Observe - What Cookies We Use

keramba.bet uses cookies and similar technologies to operate the site, remember your preferences, enhance your experience and support analytics and marketing in connection with Karamba.

Expand - Types and Purposes of Cookies

Strictly necessary (functional) cookies: Session and persistent cookies that are essential for the operation of keramba.bet, enabling core features such as secure login, balance display, bet placement, language settings, and fraud prevention. These cookies are usually set in response to actions you take and cannot be switched off through our systems.
Performance and analytics cookies: Cookies (including some third-party cookies) that help us understand how visitors use keramba.bet, which pages are most popular, and whether users encounter errors. We use this information in aggregated form to improve site performance and usability.
Functionality cookies: Cookies that remember your choices and preferences (for example, language, region or display options) so that the site can provide enhanced, more personalised features.
Advertising and targeting cookies: Subject to your consent, these cookies may be set by us or by our advertising and affiliate partners to build a profile of your interests and show relevant adverts on keramba.bet or on other websites, and to measure the effectiveness of marketing campaigns.
Similar technologies: We may use web beacons, pixels, tags and local storage in conjunction with cookies to activate features, track interactions and prevent fraud.

Reflect - Managing Your Cookie Choices

Cookie banner and settings: On your first visit (and periodically thereafter), you will be presented with a cookie notice that allows you to accept or manage non-essential cookies. You can update your preferences at any time via the cookie or privacy settings made available on keramba.bet, where provided.
Browser controls: Most web browsers allow you to block or delete cookies via their settings. If you choose to block strictly necessary cookies, some parts of keramba.bet may not function correctly, and you may be unable to log in or place bets.
Do Not Track and similar signals: Our response to browser-based "Do Not Track" signals or equivalent mechanisms may be limited by technical and legal constraints, but we will continue to honour consent and choice mechanisms required by applicable laws.

Data Security

Observe - Our Security Objectives

We take the protection of your personal data on keramba.bet extremely seriously and implement technical and organisational measures designed to ensure an appropriate level of security, taking into account the nature of the data and the risks inherent in online gambling services.

Expand - Technical and Organisational Measures

Encryption in transit and at rest: Data transmitted between your browser and our servers is protected using modern encryption protocols (such as TLS 1.2 or higher). We apply encryption, pseudonymisation and other safeguards to sensitive data at rest where appropriate.
Access controls and authentication: Access to personal data is restricted to authorised personnel and service providers on a need-to-know basis, controlled by role-based access management, strong authentication mechanisms and logging.
Infrastructure and application security: We use firewalls, intrusion detection and prevention systems, anti-malware measures, secure development practices, and regular vulnerability assessments to protect our systems.
Multi-factor authentication and account protection: Where available, we support additional authentication measures and monitor accounts for suspicious activity, taking action to mitigate account takeover risks.
Training and awareness: Staff with access to personal data receive training on data protection, information security, responsible gambling and AML obligations relevant to their role.
Policies and standards: We maintain internal policies covering information security, incident response, access control and data handling, and we aim to align our practices with recognised standards such as ISO 27001 and SOC 2 where appropriate. This does not imply formal certification in all cases.

Reflect - Incident Response and Residual Risk

Incident detection and response: We monitor for security incidents and have procedures in place to detect, assess and respond to potential breaches. Where required by law, we will notify the relevant supervisory authority and affected individuals without undue delay.
Your responsibilities: You are responsible for keeping your account credentials confidential, choosing strong passwords, enabling recommended security features where available, and promptly informing us if you suspect unauthorised access.
No absolute guarantee: While we strive to protect your personal data, no system is completely secure. We continuously review and enhance our safeguards to reduce residual risks.

Complaints & Contacts

Observe - How to Reach Us

If you have questions, concerns or complaints about how we handle your personal data in connection with keramba.bet and Karamba, we encourage you to contact us first so we can try to resolve the issue.

Expand - Internal Complaint Procedure

Step 1 - Contact our support team: Use the contact options available on keramba.bet (for example, live chat, email forms or other account support channels) and clearly state that your query is about privacy or data protection. Provide enough details for us to identify you and understand your concern.
Step 2 - Escalation to data protection team: If your concern is not resolved by frontline support, it will be escalated to the data protection function or another appropriate specialist team within AG Communications Limited.
Step 3 - Response timeframe: We aim to acknowledge your complaint promptly and to provide a substantive response within one (1) month (30 days), in line with UK GDPR standards. For complex or multiple complaints, this period may be extended, in which case we will keep you informed.
Step 4 - Further steps: If you remain dissatisfied with our response, you may have the right to raise the matter with a supervisory authority or seek judicial remedies, as outlined below.

Reflect - Escalation to Supervisory Authorities

United Kingdom (primary authority): If you are in the UK or your data is otherwise subject to UK law, you can lodge a complaint with the UK Information Commissioner's Office (ICO). Further information is available at ico.org.uk or by writing to: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
European Economic Area: If EU data protection law applies to your situation, you may complain to your local data protection authority in the EEA. Details of these authorities are available on the website of the European Data Protection Board (EDPB).
Mexico: For users whose data is subject to Mexican privacy law, you may have the right to submit a complaint to the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI), the Mexican data protection authority. Please refer to the official INAI website for up-to-date contact details and procedures.
Alternative dispute resolution (ADR): For gambling-related disputes in the UK that remain unresolved after following our complaints process, you may be able to refer the matter to our appointed ADR provider, the Independent Betting Adjudication Service (IBAS), in accordance with UK Gambling Commission rules.

Updates

Observe - Why We Update This Policy

We may update this privacy policy from time to time to reflect changes in our services, legal requirements, regulatory guidance, industry best practices or our internal processes related to keramba.bet and Karamba.

Expand - Notification and Version Control

Last updated: The current version of this privacy policy was last updated in November 2025. Previous versions may be retained for reference and compliance purposes.
Notification methods: When we make material changes, we will take appropriate steps to inform you, which may include:
- Displaying a notice or banner on keramba.bet;
- Sending you an email or on-site message; and/or
- Highlighting the updated policy in your account area.
Advance notice for significant changes: Where required by law or where changes significantly affect your rights or how we use your data (for example, new categories of recipients or new purposes), we will provide advance notice where reasonably practicable, generally at least 30 days before the changes take effect.
Changelog of material changes: Material updates may be summarised in a short changelog (for example, clarifications about international transfers, updates to cookie practices, or changes driven by regulatory developments in 2025) so that you can quickly understand how your rights and our obligations are affected.

Reflect - Your Options When the Policy Changes

Continued use: If you continue to use keramba.bet after the effective date of an updated policy, this will generally mean that you acknowledge the updated terms, to the extent permitted by law.
Right to object or close your account: If you do not agree with a material change, you may have the right to object to certain processing, update your preferences (for example marketing or cookies), or close your account. We will explain any relevant options in the change notice where required.