Matchbook Privacy Policy
Matchbook believes that transparency isn't just a principle for betting — it applies to how we handle your personal information too. This policy explains what data we collect from you as a Matchbook exchange user, why we process it, how long we keep it, and what rights you have over it. We comply fully with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Personal Data We Collect
When you register with Matchbook, you provide basic account information: your full name, date of birth, email address, postal address, and telephone number. This is necessary to set up your account and comply with the UK Gambling Commission's requirement that we identify and verify all registered users.
As a betting exchange, Matchbook is obligated to carry out rigorous Know Your Customer (KYC) checks. This means we collect identity documents — typically a passport or driving licence and a recent utility bill — to confirm your age, identity, and address. These documents are stored securely and accessed only by authorised compliance staff.
We collect detailed financial information to operate the exchange: your payment method details, a complete record of all deposits and withdrawals, and a full history of your bets matched on the platform. This financial data underpins our anti-money laundering compliance and enables us to resolve any disputes about account activity.
Technical data — including your IP address, device type, browser, and session activity — is collected automatically when you use the Matchbook platform. This is used to maintain platform security, detect suspicious access patterns, and continuously improve the trading experience.
How and Why We Process Your Data
The primary reason we process your data is to deliver the Matchbook exchange service — matching your bets against other users, settling markets correctly, and maintaining your account. Without processing your personal data, we cannot provide this service.
We also process data to comply with our legal obligations as a UK Gambling Commission licensee. This includes identity verification, anti-money laundering monitoring, transaction reporting, and maintaining records in the format and for the periods required by law.
Fraud prevention and platform security represent a legitimate interest that justifies processing technical and financial data. We use this processing to protect all users of the exchange, not just individual accounts.
Where you have given consent, we send marketing emails about promotions, new features, or exchange developments. You can withdraw consent at any time by clicking the unsubscribe link or contacting support.
Sharing Your Information
Matchbook does not sell your personal data to third parties. We share your information only where necessary to operate the platform: payment service providers process your transactions; identity verification agencies conduct our KYC checks; and fraud prevention networks receive limited data to protect exchange integrity. Regulatory authorities, including the UK Gambling Commission and HMRC, receive data where required by law. Every third-party processor is contractually bound to protect your data under UK GDPR-compliant terms.
Retention Periods
Your account data and transaction history are retained for a minimum of five years following account closure, as required by UK anti-money laundering legislation. Where records are relevant to ongoing regulatory matters or disputes, they may be retained for longer. Once the relevant retention period expires, all personal data is permanently deleted or anonymised beyond recovery.
Your Rights Under UK GDPR
You hold substantive rights over your personal data. You can access the information we hold, request corrections to any inaccuracies, and — where legally permitted — request that we delete your data. You can object to processing based on legitimate interests, restrict processing while a dispute is under review, and request a portable copy of your data in machine-readable format.
To exercise any of these rights, write to us at [email protected]. We will acknowledge your request within 72 hours and respond in full within one calendar month. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.
This privacy policy is reviewed annually and updated whenever our practices or applicable law changes. Significant updates will be communicated to you by email. The current version is always published on this page.