PRIVACY & COOKIE POLICY
Last updated: 31 August 2026.
This policy explains what personal data BTFOdds (btfodds.com) collects, why, how long we keep it, who we share it with, and the rights you have over it under the EU General Data Protection Regulation (GDPR) and the UK GDPR.
1. Who is responsible for your data
The data controller for btfodds.com is BTFOdds.
You can reach us about anything in this policy at
info@btfodds.com
or through our contact form.
2. What we collect, why, and on what legal basis
| Data | Why we hold it | Legal basis |
|---|---|---|
| Email address, username, password (stored only as a salted hash – we never hold the password itself) | To create and secure your account | Contract – art. 6(1)(b) |
| First and last name, country, phone number, date of birth | Optional profile details. You can leave these blank | Consent – art. 6(1)(a) |
| IP address and session identifier at registration and at each login | Account security, detecting abuse of the service | Legitimate interests – art. 6(1)(f) |
| Timezone, preferred odds format, selected leagues, tip-alert preferences | So the site shows match times and odds the way you chose | Contract – art. 6(1)(b) |
| Subscription records and payment references | To give you access to paid features and to meet accounting obligations | Contract / legal obligation – art. 6(1)(b), (c) |
| Newsletter and tip-alert mailing records (sent, opened, unsubscribed) | To send only what you asked for and to honour opt-outs | Consent – art. 6(1)(a) |
We do not collect special-category data, we do not profile you to make automated decisions with legal effects, and the odds and results shown on the site are market data, not personal data.
3. Cookies
We set cookies in three groups. Only the first group is set before you choose – analytics runs on every visit and is not offered as a choice; marketing waits for your consent, which you gave or refused on the banner and can change at any time using the Cookie settings link in the footer.
Necessary (no consent needed – the site cannot work without them). Analytics is listed separately below and also runs without asking, though the site would work without it:
- Session cookie – keeps you logged in. Deleted when you close the browser.
- tz, tzsel – your timezone, so match times are correct. 1 year.
- oddtype – whether you read odds as EU, UK or US. 6 months.
- btfodds@leagues… – the leagues you filtered to. Expires the same day.
- btf_consent – records this very choice, so we stop asking. 6 months.
Analytics (always on – we tell you about it rather than asking):
- Google Analytics (
_ga,_ga_*) – which pages are used and how often. We switch on IP anonymisation. Up to 2 years. Provider: Google Ireland Limited.
Marketing (only with your consent):
- Facebook – social plugins (the share button). Provider: Meta Platforms Ireland Limited.
- OneSignal – browser push notifications, if you allow them.
- MailerLite – newsletter sign-up forms.
- Advertising – our ad partner may set cookies to measure ads.
If you refuse, none of those scripts are loaded at all – we do not load them and then switch them off, they are simply never requested.
4. Who else sees your data
We do not sell your personal data. We share it only with the providers we need to run the service, each acting on our instructions:
- TurboSMTP – delivers our email (account, tip alerts, newsletter).
- Google Ireland Limited – analytics. This runs on every visit; it is not conditional on the banner.
- Meta Platforms Ireland Limited – only if you use a social plugin such as the share button.
- OneSignal, MailerLite – push and newsletter delivery, if you consented.
- Our payment providers – they handle card details directly; we never see or store your card number.
- Our hosting provider – stores the site and its database.
We may also disclose data where we are legally required to.
5. Transfers outside the EEA
Some of the providers above may process data outside the European Economic Area. Where that happens the transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision. You can ask us for details.
6. How long we keep it
- Account data – while your account is open, and up to 12 months after you close it, in case you come back.
- Login and IP records – 12 months, for security.
- Subscription and payment records – as long as tax and accounting law requires (normally 6–10 years).
- Mailing records – until you unsubscribe, plus a minimal record of the opt-out itself so we do not mail you again.
- Analytics – as set by Google, up to 2 years.
7. Your rights
Under the GDPR you have the right to:
- Access your data and get a copy of it (art. 15).
- Correct anything inaccurate (art. 16). Most of it you can edit yourself on your account page.
- Erase your account and data (art. 17).
- Restrict or object to our processing (art. 18, 21), including profiling for direct marketing.
- Portability – receive your data in a machine-readable format (art. 20).
- Withdraw consent at any time (art. 7(3)) – use the Cookie settings link in the footer for cookies, the unsubscribe link in any email for mailings, or the notification settings on your account page.
To exercise any of these, email info@btfodds.com or use the contact form. We answer within one month, free of charge. We may ask you to confirm your identity first so we do not hand your data to someone else.
8. Complaints
If you think we have handled your data badly, please tell us first – we would like the chance to fix it. You also have the right to complain to the data protection authority in your country of residence or work (art. 77). A list of EU authorities is published at edpb.europa.eu.
9. Security
The site is served over HTTPS only. Passwords are stored as salted hashes and are never recoverable in plain text. Session cookies are marked Secure, HttpOnly and SameSite. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data, and we will notify you and the relevant authority if a breach is likely to put your rights at risk.
10. Age
This site is for adults. It is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has registered, contact us and we will delete the account.
11. Changes
If we change this policy substantially we will say so on the site, and where the change affects something you consented to we will ask you again. The date at the top always shows the current version.
