Betandeal Insights Privacy Policy

Last updated: June 9, 2026

This Privacy Policy governs the processing of personal data of users (hereinafter referred to as the "Creator" or "Creators") who use the Betandeal Insights tool, owned by GLOBAL GAMING MARKETING SERVICES, SL (hereinafter referred to as the "Company").

1. Data Controller

The entity responsible for processing your personal data is:

• Company Name: GLOBAL GAMING MARKETING SERVICES, SL
• Tax Identification Number: B51040673
• Registered Address: Calle Real nº 7, 51221 Ceuta, Spain
• Contact Email: [email protected]

2. Data Protection Officer (DPO)

In accordance with Article 37 of the GDPR and Article 34 of the Spanish Organic Law on Data Protection and Digital Rights (LOPDGDD), the Company has appointed a Data Protection Officer to handle any inquiries or complaints regarding the processing of your personal data:

• DPO Contact: Laura Gago Dominguez
• DPO Email: [email protected]
• Postal Address: P.º de la Castellana, 144, Chamartín, 28046 Madrid, Spain

3. Purpose of Data Processing

The personal data obtained through the connection of your social media accounts (Meta/Facebook and Instagram) to Betandeal Insights will be processed for the following purposes:

1. Access and account management: To allow the Creator to connect their digital assets to the platform.
2. Metrics and statistics analysis: To collect, centralize, and process performance data (reach, interactions, and audience demographics) for review by the Company and, where applicable, by the Creator.
3. Service optimization: To improve the tool's functionalities based on aggregated data usage.
4. Technical communications: To send notifications related to account connection status or security updates.

4. Legal Basis for Processing

Your personal data is processed on the following legal grounds:

• Consent of the data subject (Art. 6.1.a GDPR): By expressly authorizing the connection of your Meta accounts through the API authentication flow.
• Performance of a contract (Art. 6.1.b GDPR): Processing is necessary to provide the metrics analysis services accepted by the Creator under the General Terms and Conditions of Use.

5. Categories of Data Processed

Through the Meta API, Betandeal Insights accesses:

• Public profile data: Username, account ID, and profile picture.
• Performance metrics: Number of followers, impressions, clicks, video views, likes, and comments.
• Audience data: Aggregated demographic information (country, city, age range, and gender).

IMPORTANT: The platform NEVER requests, accesses, or stores the passwords of your Facebook or Instagram accounts. The connection is made using secure access tokens managed directly by Meta.

6. Data Retention Period

Data will be retained for as long as the contractual relationship remains in force and the Creator does not revoke the access permissions. Once the relationship ends or a deletion request is submitted, the data will remain blocked for the legally required limitation periods in order to address any potential liabilities, in accordance with Article 32 of the LOPDGDD.

7. Recipients and International Data Transfers

The Company will not disclose your personal data to third parties except where required by law. However, the use of the Meta API implies that data is processed through the infrastructure of Meta Platforms, Inc., which may involve an international transfer of data to the United States.

Such transfers are safeguarded by the Standard Contractual Clauses approved by the European Commission and the security measures implemented by Meta.

8. Creators' Rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability by sending a written request to the Data Protection Officer at the email address indicated above, together with a copy of your ID card or equivalent identification document to verify your identity.

You also have the right to withdraw your consent at any time and to lodge a complaint with the Spanish Data Protection Agency if you believe that the processing of your data does not comply with the applicable regulations.

9. Security Measures

The Company has implemented the technical and organizational measures necessary to ensure the integrity, confidentiality, and availability of personal data, preventing unauthorized alteration, loss, or access, in accordance with Article 32 of the GDPR.