Privacy Policy

Introduction
This Privacy Policy complements the section of the Terms of Use dedicated to personal data protection. It provides users of our services with clear and precise information about the types of data being processed, the purposes and methods of data collection, and their rights regarding their personal data in compliance with the Personal Data Protection Act No. 11 of 2022 (the Act) is the general law that protects data and privacy in Tanzania.

Data Controller
The data controller is Bittech Company Limited a limited liability company based in Dar es salaam, 10 Mindu Street,TIN No: 133-817-352 (hereinafter referred to as the “Controller”). The Controller is also the data processor.

Legal Basis for Data Collection
Processing is lawful only if one of the following conditions is met:

1. The data subject has consented to processing their personal data for one or more specific purposes.
2. Processing is necessary to perform a contract to which the data subject is a party or to take steps at the request of the data subject before entering into a contract.
3. Processing is necessary to comply with the Controller’s legal obligations.
4. Processing is necessary to protect the vital interests of the data subject or another natural person.
5. Processing is necessary to perform tasks carried out in the public interest or to exercise the Controller’s official authority.
6. Processing is necessary for the legitimate interests pursued by the Controller or a third party unless these interests are overridden by the interests or fundamental rights and freedoms of the data subject that require protection of personal data, particularly if the data subject is a minor.

The Controller’s obligation to collect data is established by the Law on the Prevention of Money Laundering and Terrorist Financing (Section 32 (5) of the Anti-Money Laundering and Countering the Financing of Terrorism Act, 2020 (“AML/CFT Act”) and the AML/CFT Institutional Risk Assessment Guidelines issued by the Financial Intelligence Unit (“FIU”). The data being processed includes identification details from a valid ID document and other information specified by law, which the Controller, as a gaming organizer, is obliged to collect from service users upon initiating cooperation.

Furthermore, based on the data subject’s consent, the Controller processes data in a manner and to the extent necessary to fulfill the predetermined purpose for which the consent was given. The data subject has the right to withdraw consent at any time. If consent is withdrawn, and further data collection necessary for the Controller’s operations is not possible, the user’s account will be terminated. Withdrawal of consent does not affect the legality of processing based on consent before its withdrawal.

Types of Personal Data Collected
Personal data we may collect from you includes:

• Information is shared with us through forms for account registration or any data sent via the website, mobile app, or email.
• Information obtained during correspondence with the Controller.
• Information about website or app visits, including traffic data, weblogs, and other communication data.
• Information about possible criminal activities or actions related to money laundering.
• Transaction data with us.
• Data on your use of our services.
• Information obtained through surveys or competitions you participate in.
• Your preferences and betting history.
• Information obtained from publicly available data about you.

Data Processing Cases
In line with data processing principles, the type and scope of collected data are determined according to the specific purpose of each service. Data may be collected in the following cases:

• During account registration.
• During transactions with players.
• While using the website.
• During visits to betting locations.
• During communication with the service user.
• When sending offers and promotions of interest to you.
• During the processing of publicly available data.
• While fulfilling legal obligations under the Law on the Prevention of Money Laundering and Terrorist Financing (Section 32 (5) of the Anti-Money Laundering and Countering the Financing of Terrorism Act, 2020 (“AML/CFT Act”) and the AML/CFT Institutional Risk Assessment Guidelines issued by the Financial Intelligence Unit (“FIU”).

As participation in games of chance is prohibited for persons under 18, proof of age is required during registration. Data collected includes name, address, date of birth, gender, ID number, phone number, email, username, and password.

Security of Processing and Data Transfer to Third Parties
The Controller undertakes various technical, organizational, and personnel measures to ensure data processing complies with the law. Data security is provided on servers located in the Republic of Serbia and is not transferred abroad. Data may only be shared upon request from a competent authority for criminal prosecution, anti-money laundering agencies, addiction treatment institutions, advisors, lawyers, courts, etc.

PROMOTIONAL USE

In the event of major competitions and/or jackpot winnings, Meridian Tech may publish and use players' data (name, surname, photo, video, and audio material of receiving prize/money, etc.) without compensation in printed, image, and video materials without time or spatial restrictions.

Data Retention Period
User data is stored only for the period necessary to achieve the purpose for which it was collected. Special retention periods are specified by law (e.g., for electronic games of chance, data must be retained for 10 years from the end of the business relationship or transaction).

User Rights

• Right to Access: You may request information on the type of personal data processed, purpose, and data retention period.
• Right to Rectification and Supplementation: You may request that inaccurate or incomplete personal data be corrected or supplemented.
• Right to Data Deletion: You may request data deletion in cases such as data no longer being necessary for the purpose, withdrawal of consent, objection to processing for public interest or direct marketing, or unlawful processing.
• Right to Restriction of Processing: You may request processing restrictions if you contest the data’s accuracy, the processing is unlawful, the Controller no longer needs the data but you need it for legal claims, or if the processing is objected to while legal grounds are evaluated.
• Right to Complaint: You may contact customer service by phone at 768 988 200, Viber, or email at info@meridianbet.co.tz  with questions or complaints regarding the Privacy Policy.

Right to Appeal

If you believe there has been a breach of personal data protection law, you may submit a complaint to the Commissioner for Information of Public Importance.

Changes to the Privacy Policy
The Privacy Policy may change, so we recommend reviewing it regularly. In the event of significant changes, we will notify you via email, website notification, or other means, with appropriate time to review the changes before they take effect.