Privacy Policy

JustBet operates and is responsible for the personal data processed through this platform, and acts as the party managing the personal-data database for the purposes of Law No. 8968.

For any privacy matter — including questions, requests or complaints about how your data is handled — you can contact our privacy team at privacy@just.bet.

We collect the following categories of personal data:

• Account & identity data — username, profile details and account preferences.
• Email and social identifiers — obtained through our authentication provider, Privy, when you sign in by email or a linked social account.
• Wallet data — embedded or externally owned wallet addresses provisioned or connected via Privy, and related key metadata managed by Privy.
• KYC / AML documents — identity documents and verification information where identity checks are required.
• Contact data — email address and any details you provide when contacting support.
• Device & usage data — IP address, device and browser information, and how you interact with the platform.
• On-chain transaction data — wallet addresses, deposits, wagers, settlements and withdrawals recorded on the blockchain.

Please note that data written to a public blockchain — including wallet addresses and transaction history — is public and immutable. It cannot be altered, hidden or deleted from the blockchain by JustBet or by you, and will remain publicly accessible independently of this platform.

We process your personal data for the following purposes:

• Creating and operating your account and wallet;
• Settling gameplay and processing deposits, wagers and withdrawals;
• Identity verification (KYC), anti-money-laundering (AML), fraud prevention and platform security;
• Complying with applicable legal and regulatory obligations;
• Communicating with you about your account, support requests and service updates.

Providing certain personal data is necessary to use JustBet. If you choose not to provide the data required to create an account, verify your identity, or meet our legal and security obligations, we will not be able to open or maintain your account, verify you, or allow you to deposit, play or withdraw. Providing data beyond what is required (for example, optional profile details) is voluntary and refusing it does not prevent core use of the platform.

We share personal data only as necessary with the following categories of recipients:

• Privy — authentication and wallet infrastructure (login, key management and wallet provisioning);
• Payment and PSP providers that facilitate deposits and withdrawals;
• KYC / identity-verification vendors;
• Analytics and performance providers;
• Cloud, hosting and infrastructure providers;
• Game providers integrated into the platform;
• Lawful authorities, regulators or courts where required by law or to prevent fraud or crime.

Our processing is based on your informed, express consent as required by Law No. 8968. Consent is unequivocal, freely given, specific and provided in written or digital form when you create an account and accept this Policy. Where processing is necessary to perform our contract with you or to comply with a legal obligation, that also forms a basis for the relevant processing.

Subject to applicable law, you have the right to access your personal data, to rectify inaccurate data, to request its deletion or cancellation, and to object to certain processing. To exercise any of these rights, contact us at privacy@just.bet and we will respond within the timeframes set by law.

You also have the right to lodge a complaint with PRODHAB (Agencia de Protección de Datos de los Habitantes), the Costa Rican data-protection authority, if you believe your data has not been handled in accordance with the law.

Note that rights of deletion or rectification cannot be applied to data already recorded on a public blockchain, because such records are immutable and outside our control.

Some recipients and service providers may process data outside Costa Rica. Law No. 8968 follows an adequacy model for international transfers. Where the destination country is not recognised as providing an adequate level of protection under PRODHAB's criteria, we rely on your express consent or on the necessity of the transfer to perform our contract with you, and we take reasonable steps to ensure your data remains protected.

We apply technical and organizational safeguards designed to protect personal data against unauthorized access, loss, misuse or alteration — including access controls, encryption in transit, and segregation of sensitive data. No method of transmission or storage is entirely secure, but we work to protect your data using measures appropriate to its sensitivity.

In the event of a security breach affecting your personal data, we are committed to notifying PRODHAB and the affected users within five (5) business days of becoming aware of the breach, together with the information required by law and the steps being taken to address it.

We retain personal data for as long as necessary to provide the platform, comply with our legal, tax and regulatory obligations (including AML record-keeping), resolve disputes and enforce our agreements. When data is no longer required, we delete or anonymize it, except for on-chain records, which remain on the blockchain permanently.

JustBet is strictly for adults aged 18 or older. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a minor, we will delete it and close the associated account.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you. Your continued use of the platform after changes take effect constitutes acceptance of the updated Policy.

For any question or request regarding this Policy or your personal data, contact our privacy team at privacy@just.bet. See also our Cookie Policy and Terms & Conditions.