Privacy Policy

This Privacy Policy explains how Matchserv Solutions N.V., operating the rivelo.bet website (including its Rivalo page for informational access by users located in the United Kingdom), collects, uses, discloses and protects your personal data when you visit our websites, create an account or use our online betting and gaming services. It applies to visitors, registered players and any person who contacts us through our digital channels. This Privacy Policy is effective from 6 November 2025 and complements, but does not override, any mandatory rights you may have under applicable data protection laws.

Who We Are

Matchserv Solutions N.V. ("Matchserv", "Rivalo", "we", "us", "our") is the company responsible for the processing of personal data in connection with rivelo.bet, including the Rivalo page.

Operator and Legal Details

Legal entity: Matchserv Solutions N.V., a Naamloze Vennootschap (N.V.) incorporated under the laws of Curaçao.
Registered address: E-Commerce Park Vredenberg, Curaçao.
Company registration number: 125676 (Curaçao commercial register).
Gambling licences: Antillephone N.V. licences 8048/JAZ2011-009 and 8048/JAZ2018-001 for online gambling operations under Curaçao jurisdiction. These licences do not provide UK-specific regulatory protection and do not constitute a UK Gambling Commission licence.
Primary website: https://rivelo.bet (including localized content and the Rivalo page).

UK Regulatory Context

UK market status: We do not hold a licence from the UK Gambling Commission ("UKGC") and our gambling services are not targeted at or legally available to persons located in the United Kingdom. Access from the UK is officially restricted and may be geo-blocked; use of VPNs or mirrors may breach our Terms and Conditions and lead to account closure and possible fund confiscation under the "Prohibited Jurisdictions" clause.
Scope of this policy for UK users: This Privacy Policy explains how we process personal data of UK-based visitors who access information (including the Rivalo page) or contact us, but it does not create any right to use our gambling services in the UK.

Contact and Data Protection Officer

General and complaints email: [email protected] (used for support, complaints and privacy-related queries).
Data Protection Officer (DPO): You can contact our DPO or data protection team by writing to "Data Protection Officer" at [email protected] and clearly indicating that your request concerns data protection or privacy.
Telephone: A dedicated phone number is not currently specified; email is our primary contact channel for privacy matters.
Postal contact: Data Protection Officer, Matchserv Solutions N.V., E-Commerce Park Vredenberg, Curaçao.

What Personal Data We Collect

We collect only the personal data that is necessary for the operation of rivelo.bet (including the Rivalo page), for offering our services, meeting legal obligations and improving user experience. The specific categories may vary depending on whether you are a website visitor, prospective customer or registered player.

Identification and Contact Data

Basic identification: Full name, date of birth, country of residence, username, account ID and gender (where provided).
Contact details: Email address (for example the address used to register on rivelo.bet or to communicate with [email protected]), telephone number if submitted, postal address and preferred language.
Verification data (KYC): Copies and details from identity documents (passport, ID card, driving licence), proof of address (utility bill, bank statement) and, where required, source-of-funds or source-of-wealth documentation in line with KYC/AML obligations applicable to our Curaçao-licensed operations and relevant LATAM requirements.

Account, Transaction and Behavioural Data

Account information: Registration date, account status, login history, security settings, communication preferences and responsible-gambling limits (e.g. deposit limits, self-exclusion).
Gaming and betting data: Bet history, game sessions, stakes, wins and losses, bonuses used, tournament participation, session duration and patterns of play used for risk management and responsible gambling monitoring.
Financial and payment data: Deposits and withdrawals, partial masked payment card details, bank account or e-wallet details (where necessary), payment approvals and chargeback information. We do not store full card numbers or CVV codes on our own systems where this can be avoided; such data is usually processed by certified payment processors.

Technical and Log Data

Device and connection data: IP address, device identifiers, browser type and version, operating system, language settings, time zone, screen resolution and basic device characteristics.
Usage and log data: Pages visited, referral URLs, clickstream data, access dates and times, session duration, error logs and interaction with site elements (including on the Rivalo page).
Geo-location indicators: Country or region inferred from IP address and similar technologies to enforce our "Prohibited Jurisdictions" rules, including restrictions for access from the United Kingdom.

Marketing and Communication Data

Marketing preferences: Records of consent to receive newsletters, promotions and special offers, preferred communication channels and any opt-outs or unsubscribe actions.
Campaign interaction data: Email open rates, clicks on promotional links, responses to surveys or feedback forms and participation in loyalty or VIP programmes.

Cookies and Similar Technologies

Cookies: Small text files placed on your device to remember your preferences, maintain sessions and understand how you use our site.
Tracking technologies: Web beacons, pixels, tags, SDKs and local storage used for analytics, security, fraud prevention and advertising (where permitted and subject to your consent).
Third-party cookies: Cookies set by analytics providers, advertising networks and payment or security partners when you access rivelo.bet or interact with embedded third-party content.

Legal Basis for Processing

We process personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation ("UK GDPR"), the EU GDPR where relevant, the Mexican Federal Law on Protection of Personal Data Held by Private Parties (for Mexican users) and local laws applicable to our operations in Curaçao and other LATAM markets. Depending on the specific processing activity, we rely on one or more of the following legal bases:

Performance of a Contract

Account creation and management: We process your identification, contact, account and transactional data to register you on rivelo.bet, maintain your account, enable gameplay and manage your balance.
Provision of services: We use your data to enable deposits, bets, withdrawals, bonuses, loyalty schemes and other features you request under the Terms and Conditions available through rivelo.bet and associated Rivalo pages.
Customer support: When you contact [email protected] or support channels, we process your data to respond, resolve issues, handle complaints and provide technical assistance.

Compliance with Legal Obligations

KYC/AML and responsible gambling: We process identity, verification, transactional and behavioural data to meet anti-money laundering (AML), counter-terrorist financing (CTF), fraud-prevention and responsible gambling obligations under Curaçao law and other applicable regulations.
Accounting and reporting: We retain and process financial and transactional data for accounting, tax, audit and regulatory reporting requirements.
Law enforcement and regulatory requests: We may process and disclose data when required to comply with orders, subpoenas or lawful requests from competent authorities in relevant jurisdictions.

Legitimate Interests

Service improvement and analytics: We use technical, usage and behavioural data to monitor performance, analyse trends, improve user experience and develop new features, ensuring that such processing is balanced against your privacy rights.
Security and fraud prevention: We analyse device, IP, location and behavioural data to detect and prevent fraud, abuse, bonus misuse, money laundering, account takeover and breaches of the "Prohibited Jurisdictions" clause, including attempted access from the UK via VPN.
Internal controls: We process limited personal data for internal governance, risk management, dispute handling and to protect our legitimate interests, provided these do not override your fundamental rights and freedoms.

Consent

Marketing communications: Where required by law (for example in the UK or Mexico), we send electronic marketing communications only with your explicit consent or where we can rely on a recognised soft opt-in. You can withdraw your consent or opt out at any time.
Cookies and tracking: Non-essential cookies and similar technologies (such as advertising and some analytics cookies) are used based on your consent through our cookie banner or settings panel, in line with UK Privacy and Electronic Communications Regulations ("PECR") and similar rules in other jurisdictions.
Special categories of data: We generally do not process special category data for gaming purposes. If, in limited cases, you provide such data (for example health-related information when raising responsible gambling concerns), we will process it only with your explicit consent or where permitted by law.

Purpose of Processing

We use personal data for specified, explicit and legitimate purposes. We do not process your data in a way that is incompatible with these purposes.

Provision and Operation of Services

Running the rivelo.bet platform: To allow you to register, log in, place bets, play games, manage your account and use all features available under the Rivalo brand, including informational pages such as Rivalo.
Payment processing: To enable deposits and withdrawals via trusted payment partners and to handle payment confirmations, refunds and chargebacks.
Customer support and complaints: To respond to queries, complaints and dispute correspondence sent to [email protected] or other communication channels.

Safety, Compliance and Risk Management

Anti-fraud and AML: To verify identity, detect suspicious transactions, prevent fraud, money laundering and abuse of bonuses or promotions.
Responsible gambling: To assess patterns of play, apply limits, self-exclusion and cooling-off periods, and to communicate with you about safer gambling where appropriate.
Jurisdiction controls: To enforce geographic restrictions, including preventing the use of our gambling services from prohibited jurisdictions such as the United Kingdom, even when users attempt to bypass controls.

Analytics, Personalisation and Marketing

Service improvement: To analyse how users interact with our website and apps, identify technical issues and enhance functionality.
Personalisation: To tailor content, game recommendations and promotional offers based on your profile and behaviour, where permitted.
Marketing and promotions: To send newsletters, bonuses and offers related to Rivalo and rivelo.bet, subject to your marketing preferences and applicable law.

Legal, Regulatory and Business Purposes

Legal defence and enforcement: To establish, exercise or defend legal claims, including in disputes with players, business partners or regulators.
Corporate governance: To conduct audits, compliance checks and internal reporting within Matchserv Solutions N.V. and its payment or service subsidiaries where relevant.
Business continuity: To support reorganisation, restructuring, mergers or transfer of business operations, subject to adequate data protection safeguards.

Disclosure & Sharing

We do not sell your personal data. We share it only where necessary for the purposes described in this Privacy Policy, subject to appropriate safeguards and, where required, contractual arrangements.

Service Providers and Payment Partners

Payment processors: Banks, card schemes and payment providers (which may include entities located in the European Union, Latin America or Cyprus) that process deposits, withdrawals and related financial transactions on our behalf.
IT and infrastructure providers: Hosting, cloud storage, content delivery networks, mailing platforms, SMS providers and customer support tools necessary to operate rivelo.bet and the Rivalo page.
Verification and risk services: KYC providers, fraud detection services, AML screening tools and identity verification services.

Group and Business Partners

Affiliates and marketing partners: Trusted partners who refer players to rivelo.bet or run joint promotions, receiving limited pseudonymised data when necessary to calculate commissions, subject to contractual safeguards and, where applicable, your consent.
Professional advisers: Lawyers, auditors, accountants and consultants engaged to provide professional services, bound by confidentiality obligations.
Corporate transactions: Third parties involved in potential or actual mergers, acquisitions or asset transfers relating to rivelo.bet, provided they agree to respect your privacy rights.

Authorities and Regulators

Regulatory authorities: Gambling and supervisory authorities in relevant jurisdictions, including Antillephone N.V. in Curaçao and other applicable regulators, where necessary to meet licence conditions or legal obligations.
Data protection authorities: Where required, we may share information with the UK Information Commissioner's Office (ICO), the Mexican National Institute for Transparency, Access to Information and Personal Data Protection (INAI) or other data protection authorities in relation to investigations or complaints.
Law enforcement and courts: Police, courts and law enforcement agencies where disclosure is legally mandated or necessary to protect our rights, your safety or the safety of others.

Advertising and Analytics Networks

Analytics providers: Third-party analytics services that help us understand website usage patterns using cookies or similar technologies, usually on the basis of our legitimate interests and, where required, your consent.
Advertising partners: Networks or platforms that deliver targeted advertising or measure campaign performance. We only share data for these purposes when permitted by law and, for many jurisdictions, only where you have consented to the relevant cookies or tracking technologies.

International Transfers

As an operator based in Curaçao with a focus on Latin American markets, we may transfer your personal data to countries outside the United Kingdom and the European Economic Area ("EEA"), including jurisdictions that may not provide the same level of data protection as your home country.

Destinations of Transfers

Curaçao: Core operational and gaming infrastructure is managed from Curaçao, where Matchserv Solutions N.V. is established and licensed.
Latin America: Brazil, Colombia, Mexico, Peru and Chile, especially where we use service providers or business partners located in these countries or where our local operations involve player support or marketing.
Europe and other regions: Cyprus and potentially other EEA countries where payment processing or support services are hosted, as well as other locations of cloud and IT providers.

Safeguards for International Transfers

Contractual safeguards: For transfers from the UK or EEA to countries without an adequacy decision, we aim to implement appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) and/or the European Commission's Standard Contractual Clauses (SCCs), adapted where necessary, together with additional technical and organisational measures.
Service provider assessments: We assess the security and privacy practices of third-party recipients and require them to handle personal data in line with our instructions and applicable data protection standards.
Compliance with evolving standards: We monitor developments in international data transfer frameworks and adjust our practices where required. We do not rely on the invalidated EU-US Privacy Shield for our transfers.

Information for UK and Mexican Users

UK users: When your data is transferred from the UK, we comply with the UK GDPR and guidance from the ICO. You may request a copy of the key protections used for your data (subject to redactions for security and confidentiality).
Mexican users: For users in Mexico, we strive to ensure that international transfers comply with the Mexican Federal Law on Protection of Personal Data Held by Private Parties and related regulations, including contractual clauses and notice of transfers where required.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes and to enforce our agreements. Retention periods may differ depending on the category of data and applicable laws in Curaçao, LATAM countries, the UK and other relevant jurisdictions.

General Retention Principles

Purpose limitation: Data is retained only while it is needed for the specific purposes described in this Privacy Policy or as required by law.
Legal and regulatory requirements: Certain financial, transactional and KYC records must be kept for minimum periods (often 5 to 7 years) to comply with AML, CTF and accounting obligations.
Dispute and enforcement needs: Data may be retained longer where necessary in connection with ongoing disputes, investigations or enforcement of our Terms and Conditions.

Indicative Retention Periods

Account and profile data: For active accounts, we keep your data for the duration of your relationship with us. After account closure, core identification and KYC data is typically retained for up to 5 years, and in some cases up to 7 years, to comply with AML and legal requirements.
Transaction and gaming history: Bet, game and transaction records are generally kept for at least 5 years from the date of the relevant transaction or account closure, whichever is later, to support audits, regulatory reporting and dispute resolution.
Technical and log data: Technical logs (such as IP addresses, device information and access logs) are usually retained for 1 to 2 years, unless a longer period is necessary for security investigations or legal proceedings.
Marketing data: Data relating to marketing consent and communications is retained until you withdraw consent, object to processing or your account is closed, plus a short period to record that no further marketing should be sent.

Deletion and Anonymisation

Deletion: When data is no longer needed, we securely delete it or render it inaccessible, except where retention is legally required.
Anonymisation: We may anonymise data so that it can no longer be associated with an identifiable individual. Anonymised data may be retained and used for statistical analysis, risk management and business planning without further notice to you.

Your Rights

Depending on your place of residence and applicable law (including the UK GDPR, EU GDPR where relevant and the Mexican Federal Law on Protection of Personal Data Held by Private Parties), you may have certain rights in relation to your personal data. We respect these rights and will facilitate their exercise in a fair, transparent and timely manner.

Key Data Protection Rights

Right of access: To obtain confirmation as to whether we process your personal data and to receive a copy of the data, along with information about how we use it.
Right to rectification: To request correction of inaccurate or incomplete personal data. We may ask you to provide evidence (e.g. a document) to support the requested changes.
Right to erasure ("right to be forgotten"): To request deletion of your personal data where there is no compelling reason for us to continue processing it, for example where it is no longer necessary for the purposes for which it was collected or where you have withdrawn consent and there is no other legal basis. This right is subject to legal and regulatory retention obligations (for example AML laws that require us to retain certain records).
Right to restriction of processing: To request that we restrict the processing of your data in certain circumstances (for example while we verify its accuracy or where processing is unlawful but you prefer restriction to erasure).
Right to object: To object at any time to processing based on our legitimate interests, including profiling related to such interests. You also have an absolute right to object to direct marketing, including profiling related to direct marketing.
Right to data portability: To receive personal data that you have provided to us in a structured, commonly used and machine-readable format and to request that we transmit it to another controller where technically feasible, when processing is based on consent or contract and is carried out by automated means.
Right to withdraw consent: Where we rely on your consent (e.g. for marketing or certain cookies), you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
Rights related to automated decision-making: To request human intervention, express your point of view and contest decisions that are based solely on automated processing and that produce legal or similarly significant effects, such as certain risk or responsible gambling assessments, where applicable under local law.

Mexican Law-Specific Rights (ARCO)

Access, Rectification, Cancellation and Opposition (ARCO): For users in Mexico, you have specific ARCO rights under the Mexican Federal Law on Protection of Personal Data Held by Private Parties. These include the right to access your data, request correction, request cancellation (subject to legal retention requirements) and oppose certain processing.
Consent management: Mexican users may also have rights to revoke consent for processing or transfers under certain conditions. We will assess such requests in line with Mexican law and our legal obligations.

How to Exercise Your Rights

Submitting a request: You can exercise your rights by contacting our DPO or data protection team at [email protected] with the subject line "Data Protection Request". Please specify the right(s) you wish to exercise and provide sufficient information to identify your account.
Verification: For security, we may request additional information or documentation (e.g. a copy of an ID document) to verify your identity before acting on your request, especially for access, portability or deletion.
Response time: We aim to respond to all valid requests within one month (30 days) of receipt. This period may be extended by a further one month where necessary due to complexity or number of requests, in which case we will inform you of the extension and reasons.
Fees: Requests are generally handled free of charge. However, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive (for example due to their repetitive nature), in accordance with applicable law.

Right to Lodge a Complaint

With us: We encourage you to contact us first at [email protected] so we can attempt to resolve your concern directly.
United Kingdom: If you are in the UK and believe that we have not handled your data in accordance with the UK GDPR or Data Protection Act 2018, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at https://ico.org.uk.
Mexico: If you are in Mexico, you have the right to file a complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) at https://www.inai.org.mx, in line with Mexican data protection regulations.
Other jurisdictions: You may also have the right to lodge a complaint with your local data protection authority, where such authority exists.

Cookies & Tracking Technologies

We use cookies and similar technologies on rivelo.bet (including the Rivalo page) to ensure the site works properly, to remember your preferences, to enhance performance and to support analytics and advertising where permitted.

Types of Cookies We Use

Strictly necessary cookies: Essential for the operation of the website, such as those that keep you logged in, enable basic navigation and provide core security functions. These cookies cannot be switched off without affecting the website's functioning.
Functional cookies: Used to remember your preferences (such as language or region), personalise your experience and provide enhanced features.
Analytics and performance cookies: Help us understand how visitors use the site, which pages are most popular, and how users move around the site. The information collected is generally aggregated and used to improve the performance and design of rivelo.bet.
Advertising and targeting cookies: Used to deliver more relevant ads and promotions, measure campaign effectiveness and limit the number of times you see an advertisement. These may be set by us or by third-party advertising partners.
Third-party cookies: Set by external services (such as analytics providers, social networks or embedded content providers) which may use the data they collect in accordance with their own privacy policies.

Managing Cookies

Cookie banner and settings: On your first visit and at intervals thereafter, you may be presented with a cookie banner allowing you to accept or reject non-essential cookies. You can adjust your preferences at any time through our cookie settings panel, where available.
Browser controls: Most browsers allow you to block or delete cookies via their settings. However, blocking certain cookies may affect site functionality and your ability to use some features.
Opt-out of analytics/advertising: Where applicable, you may use industry tools (such as those provided by Google or other partners) to manage your preferences for analytics or targeted advertising cookies.

Legal Basis for Cookies

Strictly necessary cookies: Placed on the basis of our legitimate interest in providing a secure, functioning site.
Non-essential cookies: Used only with your consent where required by law (for example under UK PECR) and can be withdrawn at any time via the cookie settings or browser controls.

Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure or destruction. No system is completely secure, but we strive to follow industry best practices and to review our security posture regularly.

Technical Measures

Encryption in transit: Data transmitted between your device and rivelo.bet is protected using Transport Layer Security (TLS) version 1.2 or higher, helping to safeguard it against interception.
Encryption at rest: Where appropriate, we encrypt sensitive data at rest or apply other strong protection mechanisms to reduce the risk of unauthorised access.
Access controls and authentication: Systems are protected with layered access controls, including unique user credentials, role-based access and, where applicable, multi-factor authentication for administrative access.
Network and application security: We use firewalls, intrusion detection and prevention systems, anti-malware tools and secure development practices to mitigate security vulnerabilities and attacks.

Organisational Measures

Staff training: Personnel with access to personal data receive training on data protection, confidentiality and security responsibilities, and are bound by appropriate confidentiality obligations.
Policies and procedures: Internal policies govern data handling, access management, incident response, retention, backup and recovery, and third-party risk management.
Vendor management: Service providers and partners who process personal data on our behalf are required to implement appropriate security measures and are subject to contractual obligations.

Security Standards and Audits

Alignment with standards: We aim to align our security controls with recognised international standards such as ISO/IEC 27001 and SOC 2 where practicable, although we do not claim formal certification unless explicitly stated on rivelo.bet.
Testing and reviews: We perform regular security reviews and may conduct vulnerability assessments or penetration testing to identify and address potential weaknesses.
Incident response: In the event of a data breach or security incident, we follow documented incident-response procedures, which include steps to contain the incident, assess impact, notify affected individuals and regulators where required, and implement remedial measures.

Complaints & Contacts

We are committed to handling your personal data transparently and to addressing your privacy concerns. If you have questions or complaints about this Privacy Policy or our data processing, you can contact us using the channels below.

How to Contact Us

Email (primary channel): [email protected] - for privacy requests, data protection questions and general complaints.
Postal address: Data Protection Officer, Matchserv Solutions N.V., E-Commerce Park Vredenberg, Curaçao.
Website: Further information about our services, Terms and Conditions and responsible gaming is available at https://rivelo.bet and related Rivalo pages.

Internal Complaint Procedure

Stage 1 - Contact support: If you have a question or concern (including about privacy), contact us at [email protected] with a clear description of the issue and any relevant account information.
Stage 2 - Escalation to DPO: If you are not satisfied with the initial response, request escalation to the Data Protection Officer or data protection team. We will review your case in more detail and may request further information.
Stage 3 - Final internal decision: We will provide a written response explaining our findings and any actions taken. We aim to respond to complaints as soon as reasonably possible, typically within 30 days.

Escalation to Supervisory Authorities

United Kingdom - ICO: If you are located in the UK and remain dissatisfied, you may contact the Information Commissioner's Office via https://ico.org.uk and follow its published guidance for raising concerns.
Mexico - INAI: If you are located in Mexico, you may escalate the matter to the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) via https://www.inai.org.mx in accordance with Mexican data protection law.
Other countries: You may have the right to contact your local data protection authority, where such a body exists in your jurisdiction.

Note: For gambling-related disputes (for example about bets, payouts or account closure), UK players do not benefit from UKGC or IBAS dispute resolution in relation to rivelo.bet because we do not hold a UKGC licence. Such disputes should be addressed directly to us at [email protected] and, where applicable, may be escalated to Antillephone N.V. as indicated in our Terms and Conditions. This is separate from your data protection rights described here.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, regulatory guidance or technical developments. The version published on rivelo.bet (including on the Rivalo page) is the one that currently applies.

Notification of Changes

Last updated date: The "Last updated" date at the end of this Privacy Policy indicates when it was last revised. Current version: Last updated 6 November 2025.
Material changes: Where we make significant changes that affect how we process your personal data, we will take reasonable steps to inform you in advance, for example by email, website banners, pop-up notices or alerts in your account dashboard (where you have an account).
Advance notice: For material changes, we will generally provide at least 30 days' notice before the new terms take effect, unless immediate changes are required by law or to address security or operational needs.

Your Options When the Policy Changes

Review updates: You should review the updated Privacy Policy to understand how any changes affect you.
Continued use: Where you continue to use rivelo.bet after the effective date of an updated Privacy Policy, this may be treated as your acknowledgement of the changes, to the extent permitted by law.
Objection and account closure: If you do not agree with any material change, you may choose to stop using our services and, if you hold an account in a permitted jurisdiction, you may request account closure and withdrawal of any remaining balance subject to our Terms and Conditions and applicable law.

Version Control and Change Log

Version records: We maintain internal records of previous versions of this Privacy Policy and significant changes made over time.
Summary of material changes: Upon request, we may provide a summary of key changes made in recent versions, particularly where these affect your rights or the way we process your personal data.

Last updated: 6 November 2025