Privacy Policy
Last updated: 9 June 2026
This Privacy Policy explains how how Does nba Betting Work (“we”, “our”, “us”) collects, uses, stores and protects personal data of visitors to our website. We are committed to handling your data lawfully and transparently in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
Who We Are
how Does nba Betting Work is an independent editorial publication providing educational content about NBA betting markets, regulation and consumer protection in the United Kingdom. We are not a licensed bookmaker, we do not accept wagers, and we do not handle player accounts or funds.
Personal Data We Collect
We collect only the data necessary to operate the website, measure audience interest in our content and respond to enquiries. The categories of personal data we may process are limited to the following.
Technical and analytics data. When you visit the site, our servers and analytics tools automatically receive standard technical information transmitted by your browser, including your IP address (in truncated or anonymised form where supported), the user agent string, the referring page, the pages you view on our site, the time of your visit and the approximate region derived from your IP address.
Cookie and consent data. If you grant or decline consent through our cookie banner, we record your choice so that we can apply it on subsequent visits. The full list of cookies we use is described in our Cookie Policy.
Voluntary correspondence. If you contact us directly, we will hold the contents of your message and any contact details you provide, solely for the purpose of responding to your enquiry.
We do not knowingly collect special category data (such as health, ethnicity or political opinions) and we do not collect data from anyone we know to be under the age of 18. Our content is intended exclusively for adults of legal gambling age in their jurisdiction.
How We Use Your Data
We use the personal data described above for the following limited purposes: to operate the website and ensure it functions correctly across devices; to measure aggregate audience metrics so that we can improve editorial coverage; to detect and prevent abuse, fraud or unauthorised access; to comply with our legal obligations as a UK publisher; and to respond to messages you choose to send us.
We do not sell personal data. We do not share your data with bookmakers or advertisers for the purpose of allowing them to market gambling products to you. We do not build behavioural advertising profiles.
Lawful Bases for Processing
Under the UK GDPR we rely on the following lawful bases. For strictly necessary technical processing, our lawful basis is legitimate interests in operating a functional website. For analytics and any non-essential cookies, our lawful basis is your consent, freely given through the cookie banner and withdrawable at any time. For correspondence, our lawful basis is either your consent or our legitimate interest in responding to enquiries. For any compliance-related processing, our lawful basis is legal obligation.
Cookies and Tracking Technologies
We use a small number of cookies and similar technologies. Strictly necessary cookies are set by default and cannot be refused, because the site cannot function without them. All other cookies, including any analytics cookies, are set only after you grant consent. Full details, including cookie names, providers, durations and purposes, are set out in our Cookie Policy.
Data Retention
We retain personal data only for as long as is necessary for the purposes described above. Server logs are typically retained for up to twelve months and then deleted or anonymised. Cookie consent records are retained for the duration set in your browser, typically up to twelve months. Correspondence is retained for as long as is necessary to handle your enquiry, and then deleted within a reasonable period unless we are required to keep it for compliance reasons.
Data Sharing and Transfers
We share personal data only with carefully selected processors who provide infrastructure services on our behalf, such as web hosting, content delivery, analytics and security monitoring. Each processor is bound by a written data processing agreement requiring it to handle your data only on our instructions and in accordance with the UK GDPR. Where processors are located outside the United Kingdom, we ensure that an appropriate transfer mechanism is in place, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment where required.
Your Rights
You have the following rights under the UK GDPR in relation to the personal data we hold about you: the right to be informed about how we use your data; the right of access to a copy of the data we hold; the right to rectification of inaccurate data; the right to erasure in defined circumstances; the right to restriction of processing in defined circumstances; the right to object to processing carried out on the basis of legitimate interests; the right to data portability where processing is based on consent or contract and is carried out by automated means; and the right to withdraw consent at any time without affecting the lawfulness of processing already carried out on that basis.
To exercise any of these rights, please contact us using the details below. We will respond within one calendar month, in line with our statutory obligation, and free of charge unless your request is manifestly unfounded or excessive.
Right to Complain
If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk. We would, however, appreciate the opportunity to address your concerns directly before you contact the regulator.
Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration or disclosure. These include encryption in transit (HTTPS), restricted administrative access, regular software updates and a documented incident response procedure. No method of transmission over the internet is, however, completely secure, and we cannot guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, regulation or our editorial practices. The date of the most recent update is shown at the top of the page. Material changes will be highlighted on the site for a reasonable period.
Contact
For privacy enquiries or to exercise any of the rights described above, please contact the editorial team via the contact form on how Does nba Betting Work. We aim to respond to all enquiries within seven working days and, in any event, within the statutory one-month period required by the UK GDPR.