Privacy Policy

How BETon4X collects, uses and protects your personal data.

Last updated: 14 August 2026

1. Who we are

BETon4X operates beton4x.com, a peer-to-peer wagering exchange on short-horizon price movement. For the purposes of data protection law we are the data controller for the information described here. If you want to reach us about anything in this policy, including a request to see or delete your data, email privacy@beton4x.com.

2. What we collect

2.1. In demo mode — what we ask for now

• Email address — your login, and how we reach you about your account.
• Password — stored only as a cryptographic hash. We cannot read it, and neither can anyone who obtains a copy of our database.
• Username — shown publicly on leaderboards. Choose one you are happy for other players to see.
• Date of birth — used to confirm you are 18 or over. We keep this even in demo mode, because a wagering product should not be open to minors whatever the stake is worth.
• Your play — the wagers you place, their outcomes and your beton balance.

2.2. Only if real-money play launches

We would then be legally required to verify who you are before paying anyone out. That would add your full name, residential address, and identity and proof-of-address documents. We do not ask for any of this in demo mode, and we would ask for it at the point you first deposit — not at signup.

2.3. Collected automatically

• Cookies — a session cookie that keeps you logged in, and, only if you tick "remember me", a signed cookie that lasts 60 days. Both are strictly necessary to operate the site.
• Technical logs — ordinary server logs, and error reports when something breaks.
• IP address and browser — recorded in our audit trail for administrator actions, as a security control on our own staff. We do not build a browsing profile of players.

3. Why we use it, and our legal basis

• To run your account and the game — necessary to perform our contract with you.
• To confirm you are over 18 — a legal obligation, and our own policy.
• To keep the platform secure and fair — our legitimate interest in preventing fraud, abuse and manipulation.
• To tell you when real-money play opens — only if you opt in on the Bank page. You can withdraw that consent at any time.
• Identity verification, if real money launches — a legal obligation under anti-money-laundering rules.

4. How we protect it

• Encrypted at rest. Names, dates of birth, addresses and identity documents are encrypted with AES-256-GCM before they are written to the database, so they cannot be read from a database backup or a stolen copy.
• Passwords are hashed, never stored in a readable form.
• Encrypted in transit. The site is served over HTTPS.
• Staff access is restricted and recorded. Administrators hold only the permissions their role requires, must pass two-factor authentication, and the highest-risk actions require a second administrator's approval. Every administrative action is written to an append-only audit log.
• A tamper-evident ledger. Every movement of value is chained cryptographically to the one before it, so the record cannot be altered after the fact without detection — including by us.

5. Who else sees it

We do not sell your personal data, and we do not share it for anyone else's marketing. We use a small number of service providers to run the platform:

• Our hosting provider — operates the servers the platform runs on.
• Our email provider — delivers account emails such as password resets. It receives your email address and the message.
• Our error-monitoring provider — receives technical diagnostics when something goes wrong, so we can fix it.

Our market-price providers supply price data to us. They receive nothing about you. We may also disclose data where the law requires it, or to establish or defend legal claims.

6. How long we keep it

We keep your account data while your account is open. If you close it, we delete or anonymise your personal data, except where we must keep records to meet a legal obligation or to resolve a dispute. Financial and audit records are retained where law requires it — for real-money accounts this is typically five years after the relationship ends.

7. Your rights

Depending on where you live, you have some or all of these rights. In the UK and the EU you have all of them:

• Access — get a copy of the data we hold about you.
• Correction — have inaccurate data fixed.
• Deletion — have your data erased, where we are not required to keep it.
• Portability — receive your data in a machine-readable form.
• Objection and restriction — object to processing based on legitimate interests, or ask us to limit it.
• Withdraw consent — where processing relies on consent, such as launch notifications.
• Complain — to your local data protection authority. In the UK that is the Information Commissioner's Office.

Email privacy@beton4x.com to exercise any of these. We will respond within one month.

8. Children

BETon4X is strictly for adults aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, contact us and we will close the account and delete the data.

9. International transfers

Our service providers may process data outside your country. Where data leaves the UK or the European Economic Area, we rely on safeguards recognised under data protection law, such as standard contractual clauses.

10. Changes to this policy

We will update this page when our practices change, and change the date at the top. If a change materially affects your rights — for example, if real-money play launches and identity verification begins — we will tell you directly rather than rely on you noticing.

11. Contact

Questions, requests or complaints: privacy@beton4x.com.