Privacy Policy

BetTrading.net

Effective Date: August 8, 2026

1. Introduction

Who we are. BetTrading.net is a service operated by JIA Software Limited, a company registered in England and Wales under company number 11905293, whose registered office is at Belmont Suite, Paragon Business Park, Chorley New Road, Horwich, Bolton, England, BL6 6HG. JIA Software Limited is the data controller for the personal data described in this policy. In this policy, "we", "us", "our" and "the Company" mean JIA Software Limited.

We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your data.

BetTrading.net is an online subscription platform that provides a desktop trading application to our users. Our mission is to deliver a secure, reliable service while maintaining the highest standards of data protection and privacy.

This Privacy Policy applies to our website (BetTrading.net), desktop application, and all related services. Please read this policy carefully. By registering for an account or using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Account Registration Information

When you create an account with BetTrading.net, we collect the following information:

Email address
Password (stored securely as a cryptographic hash using Argon2id)
Age confirmation (18 years or older)

We do not ask for your name when you create an account. Registration collects only the three items above.

Display name is optional and is not collected at registration. Your account has one optional field for a name: a short display name you may add afterwards from your account settings. It exists for a single purpose — to greet you by name in the guides panel inside the desktop application — and nothing identifies, authenticates or bills you by it. You choose what it says, it need not be your real name, it may be left unset, and you can change or clear it at any time. If you do set one it is personal data like any other: it is included in the copy of your data we provide under Section 6, and it is erased with the rest of your account under Section 5. The other place we ask for a name is the pre-launch mailing list described in Section 2.8, which is a separate record and is not an account.

Country of residence is optional and is not collected at registration. You may add it afterwards from your account settings, where it determines the tax treatment applied to a Pro subscription. It may be left unset, and you can change or clear it at any time.

2.2 Subscription and Billing Information

We collect subscription and billing data including:

Subscription status (Active, Inactive, Past Due, Paused, or Cancelled)
Billing period dates
Payment transaction records
Paddle customer and subscription identifiers (Paddle is our payment processor)
Cancellation and pause history

2.3 Analytics and Usage Data

We collect two types of analytics data:

Anonymous Pre-Login Analytics (visitors not logged in):

Event names and actions performed
Browsed pages and routes
Search queries and result counts
Device classification (mobile, tablet, desktop)
Note: No cookies, IP addresses, or persistent identifiers are stored
Data retained for 90 days then deleted

Authenticated Product Telemetry (logged-in users):

User ID and session ID
Event names and actions taken within the application
Surface accessed (website, desktop app)
Client version number
Your account's subscription tier (Basic or Pro)
Feature adoption and usage patterns
Help article interactions
Note: We NEVER collect betting information, including stakes, prices, selections, markets, profit/loss, or account balances
Data retained for 180 days then aggregated for long-term reporting

Website Analytics (Google Analytics 4):

User acquisition channels and traffic sources
Landing pages and user navigation paths
Device and browser information
Geographic location
Campaign performance data
Note: GA4 requires your consent before data collection begins

2.4 Attribution Data

We track your first-touch attribution to understand how you discovered BetTrading.net:

Initial traffic source (organic, direct, referral, paid campaign)
Marketing medium
Campaign name (if applicable)
Landing page

2.5 Legal and Compliance Data

We collect and maintain records of your acceptance of our legal terms:

Age confirmation (18+ years)
Privacy Policy acceptance (versioned, timestamped, and IP-recorded)
Terms of Service acceptance (versioned, timestamped, and IP-recorded)
Consent for analytics cookies (if accepted)
Your product telemetry preference (see "Legal bases for processing" below — telemetry runs on legitimate interest, so we record your opt-out rather than an opt-in)
Marketing email opt-in/opt-out status

2.6 Security and Audit Logs

We maintain detailed audit logs of security-related activities for your protection:

Login attempts and authentication events
Account access by support staff
Subscription status changes
Role changes and permission modifications
Timestamps and IP addresses associated with these events

2.7 Device and Technical Information

When you use our desktop application, we may collect:

Application version number
Desktop operating system information
Client-side session information
Note: No personal behavioral or betting data is transmitted from the desktop application

2.8 Mailing List and Registration of Interest

Before we launch, our website invites you to register your interest so that we can tell you when BetTrading.net becomes available. This is separate from an account: joining the mailing list does not create an account, there is no password, and you are not signed in.

If you complete that form, we collect:

First name
Last name
Email address
Your marketing choice — whether you want to hear from us — and the date it was recorded
The same first-touch attribution fields described in Section 2.4 (traffic source, marketing medium, campaign name, and landing page)

Lawful basis: consent. The form asks whether you want to be emailed and we record that choice against your entry. Because the form is public and unauthenticated, a later submission of your address can switch that consent off but can never switch it back on — nobody can consent to marketing on your behalf.

What we use it for: telling you when BetTrading.net launches, and sending news and offers about the service. We do not sell this list, share it with other companies for their own marketing, or use it to advertise to you elsewhere.

How to unsubscribe: every marketing email we send will carry an unsubscribe link. That link opens the /unsubscribe page on our website and records your withdrawal immediately — you do not need an account and you do not need to sign in. You can also email privacy@bettrading.net at any time and ask to be removed. No marketing email has been sent yet, because we have not launched.

Retention: we keep your entry until you ask us to remove it, or until the mailing list has served the purpose it was collected for, whichever comes first. If you unsubscribe rather than asking for erasure, we keep your email address and the record that you withdrew, so that you are not added back. If you hold a BetTrading.net account under the same email address, the matching mailing-list entry is erased when you delete that account, and it is included in the copy of your data we provide under Section 6.

3. How We Use Your Information

We use the information we collect for the following purposes:

Account Administration: Creating, managing, and maintaining your account
Service Delivery: Providing and improving the BetTrading.net platform and desktop application
Authentication: Verifying your identity and managing your login sessions securely
Subscription Management: Processing subscription purchases, renewals, cancellations, and pauses through Paddle
Communications: Sending transactional emails (verification, password reset, subscription confirmations)
Legal Compliance: Maintaining age verification records and terms acceptance for legal compliance
Product Analytics: Understanding feature adoption, user engagement, and platform improvements
Security: Detecting and preventing fraud, unauthorized access, and abuse
Support: Providing customer support when you contact us
Marketing Attribution: Tracking which campaigns successfully convert users (with consent)

We use your data in an aggregated, anonymized form to:

Generate analytics reports and dashboards
Identify usage trends and optimize platform performance
Create weekly analytics snapshots for long-term reporting
Make informed decisions about feature development and product roadmap

3.1 Legal bases for processing

Under UK GDPR we must tell you the lawful basis for each kind of processing:

Performance of a contract — creating and running your account, authenticating you, and managing your subscription. Without this data we cannot provide the service you are paying for.
Legal obligation — age verification records, terms and privacy acceptance records, and subscription and billing history retained for tax and accounting purposes.
Consent — analytics cookies and Google Analytics 4, and the mailing list described in Section 2.8. Analytics cookies are not set until you accept them, and you may withdraw either consent at any time (see Section 6).
Legitimate interests — authenticated product telemetry, security and audit logging, and fraud prevention. Our legitimate interest is in understanding which features are used so we can improve the product, and in keeping accounts secure.

For product telemetry specifically, we rely on legitimate interests rather than consent, and we balance that against your rights by: collecting no betting information of any kind; retaining event-level data for only 180 days; and giving you an opt-out in your account settings and in the desktop application's Preferences. When you opt out, the server stops recording your telemetry on arrival — it does not rely on the application choosing not to send it.

You have the right to object to processing based on legitimate interests at any time (see section 6).

4.1 Third-Party Service Providers

We share your information with trusted third-party service providers who assist us in operating our platform:

Paddle (Payment Processing):

Paddle is our Merchant of Record and handles all payment processing. We share your email address and subscription information with Paddle to process payments, manage subscriptions, and handle billing inquiries. Paddle also provides webhook notifications that update our subscription records. Importantly, we do NOT share credit card or other sensitive payment details with BetTrading.net; Paddle handles all PCI compliance requirements.

Azure Services (Cloud Infrastructure):

Azure SQL Database: Stores your encrypted personal and subscription data
Azure Key Vault: Secures our cryptographic keys and secrets
Azure Communication Services: Sends transactional emails on our behalf

Google Services:

Google Analytics 4: Tracks website usage with your consent
Google BigQuery: Receives daily raw event exports from GA4 (you can opt out of this collection)
Google Search Console: Provides search query data and SEO insights

All third-party service providers are contractually required to maintain the confidentiality and security of your data and to use it only for purposes authorized by us.

4.2 Legal Requirements

We may disclose your information if required by law, regulation, or legal process, including but not limited to:

Responding to a subpoena, court order, or government agency request
Enforcing our Terms of Service or other agreements
Protecting the safety, rights, and property of BetTrading.net, our users, or the public

4.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice of any such change in ownership or control of your personal information.

5. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. Specific retention periods are:

Account Data: Retained for the life of your account, plus 30 days after account deletion for GDPR compliance
Anonymous Analytics: Deleted after 90 days
Authenticated Product Telemetry: Retained for 180 days, then aggregated into permanent snapshots
Weekly Analytics Snapshots: Retained permanently for historical reporting
Audit Logs: Retained for security and compliance purposes, minimum 1 year
Consent Records: Retained for the life of your account and 30 days after deletion
Mailing List Entries: Retained until you ask to be removed. If you unsubscribe rather than asking for erasure, your email address and the record of your withdrawal are kept so that you are not added back (see Section 2.8)
Subscription History: Retained for 7 years for financial and tax compliance
Azure Database Backups: Minimum 7-day retention for disaster recovery

When you request account deletion, we:

Immediately soft-delete your account (marking it as deleted but retaining data)
Permanently erase all personal data within 30 days
Erase associated analytics events, attribution data, and help article feedback
Erase any mailing-list entry held under the same email address
Retain subscription history for 7 years to meet legal requirements

If you are located in the European Union, United Kingdom, or other jurisdictions with similar privacy laws, you have the following rights:

Right to Access (Data Subject Access Request):

You have the right to request a copy of all personal data we hold about you. We will provide this information in a structured, commonly-used format (typically JSON) within 30 days of your request.

Right to Rectification:

If you believe any of your personal data is inaccurate or incomplete, you may request that we correct it. You can change your display name and your country of residence yourself in your account settings, and clear either of them there. To correct your email address, or anything else, email us at privacy@bettrading.net and we will make the change.

Right to Erasure ("Right to be Forgotten"):

You have the right to request deletion of your account and all associated personal data. Upon such a request, we will:

Delete your account immediately
Erase all personal data within 30 days
Note: Some data (such as subscription history) may be retained to comply with legal and financial obligations

Right to Data Portability:

You have the right to receive a copy of your personal data in a structured, commonly-used, machine-readable format (JSON) and to request that we transfer it to another service provider. We will provide this within 30 days of your request.

Right to Object to Processing:

You have the right to object to our processing of your personal data for marketing purposes, analytics, or other non-essential purposes. Each preference has its own control, and they are deliberately kept apart because they cover different processing on different lawful bases:

Analytics cookies and Google Analytics (consent) — use the Cookie settings section at the end of our Cookie Policy, which every page's footer links to as Cookies. Before we launch, a Cookie settings link on the pre-launch page reopens the consent banner instead. This choice is remembered in the browser you make it in, not against your account.
Product telemetry (legitimate interests) — use the Product analytics opt-out in your account settings, or the equivalent setting in the desktop application's Preferences. This one is stored against your account and applies on every device you sign in from.

These two are separate controls over separate processing, and neither changes the other. Declining analytics cookies does not switch off product telemetry, and opting out of product telemetry does not decline analytics cookies — so if you want both stopped, set both. Your account page shows the state of each and links to the other.

Marketing email (consent) — every marketing email we send will carry an unsubscribe link, which opens the /unsubscribe page on our website and records your withdrawal immediately. You do not need an account and you do not need to sign in. You can also email privacy@bettrading.net and ask to be removed. Section 2.8 sets out what the mailing list holds and how long we keep it.

Right to Withdraw Consent:

For any data processing that requires your consent (that is, analytics cookies and Google Analytics), you may withdraw that consent at any time in the Cookie settings section at the end of our Cookie Policy, reachable from the Cookies link in the footer of every page. Withdrawing is exactly as easy as giving consent — the same two buttons, side by side — takes effect immediately, and does not affect the lawfulness of processing carried out before you withdrew.

Right to Lodge a Complaint:

If you believe we have violated your privacy rights, you have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK).

To exercise any of these rights, please contact us at privacy@bettrading.net with your request. We will respond within 30 days.

7. Cookies and Online Tracking

7.1 Essential Cookies

We use strictly necessary cookies to operate the BetTrading.net platform. These cookies are essential for:

Maintaining your login session (HttpOnly, Secure, SameSite=Strict)
Rotating your refresh tokens securely
Protecting against cross-site request forgery (CSRF), which the SameSite=Strict attribute above does without needing a second cookie

We set exactly one cookie, refreshToken, and it expires 30 days after it is issued. It does not require your consent, as it is necessary for the service to function — without it we cannot keep you signed in. The Cookie Policy, Section 3.1, lists it in full with its security attributes.

7.2 Analytics Cookies (Google Analytics 4)

We use Google Analytics 4 (GA4) to understand how visitors use our website and improve user experience. GA4 uses cookies to track:

Pages visited
Duration of visit
Traffic sources
Device and browser information

Analytics cookies REQUIRE YOUR CONSENT before they are placed. You will be prompted to accept or decline analytics cookies when you first visit our website. You can change your preference at any time in the Cookie settings section at the end of our Cookie Policy, reachable from the Cookies link in the footer of every page.

7.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

View cookies stored on your device
Delete specific cookies or all cookies
Disable cookies entirely (though this may prevent BetTrading.net from functioning properly)

You can also opt out of GA4 tracking using Google's Opt-Out Browser Add-on.

8. Data Security

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

8.1 Encryption and Authentication

All data in transit: Encrypted using TLS 1.2 or higher (HTTPS)
All data at rest: Database encryption using Transparent Data Encryption (TDE)
Passwords: Hashed using Argon2id with per-user salting (we cannot recover or view your password)
Authentication tokens: Signed using RS256 asymmetric cryptography
Secrets management: All cryptographic keys and secrets stored in Azure Key Vault

8.2 Session Management

Access tokens: Expire after 15 minutes
Refresh tokens: Expire after 30 days
Refresh token rotation: Every time a new token is issued
Reuse detection: If a previously-rotated token is used again, the entire token family is revoked and you must re-authenticate
Desktop app tokens: Stored securely using Windows DPAPI or Credential Manager (never in plaintext)

8.3 Access Control

All endpoints require authentication (deny-by-default model)
Role-based access control: permissions are granted according to your account's subscription tier
Ownership verification: Every API call is validated server-side to prevent unauthorized access to other users' data
Rate limiting: Protective limits on login, registration, and password reset endpoints to prevent brute-force attacks

8.4 Network Security

Database firewall: SQL Database restricted to Azure services only
CORS policy: Explicit origin allowlist (never wildcard)

8.5 Monitoring and Incident Response

Centralized logging: Security-relevant events are written to a server-side audit log
Audit trail: Detailed audit logs of all security-relevant actions, including repeated failed logins, refresh-token reuse and account-lockout events
Automatic responses: Some suspicious events are acted on by the service itself at the moment they occur, without waiting for anyone to read a log. Repeated failed logins trigger an increasing lockout on the account, and if a refresh token is presented after it has already been rotated, the entire token family is revoked and every session on that account must sign in again
What we do not do: we do not currently operate automated alerting that notifies a person of an individual security event as it happens. Suspicious events are recorded to the audit log and acted on automatically as described above, and where an incident would affect you the breach-notification commitment below applies. We state this rather than leave it to be assumed
Data breach response: We will notify affected users within 72 hours of discovering a breach, as required by law

8.6 Secure Development

Dependency scanning: Automated vulnerability scanning using Snyk
Code review: All code changes reviewed before deployment
Parameterized queries: All database queries use parameterized statements to prevent SQL injection
Input validation: All user input validated server-side
Security headers: Content-Security-Policy, X-Frame-Options, HSTS, and other protective headers enabled

9. Payment Processing

9.1 Payment Processor

BetTrading.net uses Paddle as our payment processor. Paddle is a Merchant of Record and is responsible for all payment processing, including:

Processing credit card and other payment methods
Calculating and collecting VAT/GST/sales tax
Handling refunds and chargebacks
Storing and managing subscription data

9.2 Card Data Security

We do NOT store, process, or transmit credit card information. When you make a purchase:

You are redirected to Paddle's hosted checkout (Paddle.js)
Card data is encrypted and transmitted directly to Paddle
We only receive confirmation that payment was successful
This keeps us outside the scope of PCI DSS compliance requirements

9.3 Subscription Management

Paddle handles all subscription management, including:

Recurring billing on your chosen schedule
Automatic retries for failed payments (with a 24-hour grace period)
Pause, resume, and cancellation of subscriptions

9.4 Billing History

We retain subscription and billing history for 7 years to comply with tax and accounting regulations.

10. Children's Privacy

BetTrading.net is not intended for use by children under 18 years of age. We do not knowingly collect personal information from anyone under 18.

Upon registration, you confirm that you are 18 years of age or older. We verify this age confirmation at account creation and maintain records of your acceptance.

If we become aware that we have collected personal information from a minor, we will immediately delete such information and terminate the minor's account.

If you believe we have collected information from a child, please contact us immediately at privacy@bettrading.net.

11. International Data Transfers

BetTrading.net is operated from the United Kingdom, and your personal data is stored on Azure infrastructure located in UK South and UK West data centers.

If you are located outside the United Kingdom, your data will be transferred to, stored in, and processed within the UK. By using BetTrading.net, you consent to this transfer.

For transfers outside the UK (such as to Google Analytics in the United States), we rely on standard contractual clauses and other legal mechanisms approved by UK and EU data protection authorities.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact the data controller:

Data controller: JIA Software Limited (registered in England and Wales, company number 11905293)
Registered office: Belmont Suite, Paragon Business Park, Chorley New Road, Horwich, Bolton, England, BL6 6HG
Email: privacy@bettrading.net
Website: www.bettrading.net

We will respond to all privacy inquiries within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority (in the UK, this is the Information Commissioner's Office at ico.org.uk).

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of material changes by:

Posting the updated policy on our website with a new "Effective Date"
Sending you an email notification if we have your email address on file
Requesting your explicit consent if the changes materially alter how we process your data

Your continued use of BetTrading.net after changes become effective constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly.

You can view the version history of this Privacy Policy and see when material changes were made by reviewing the "Effective Date" at the top of this document.

Last Updated: August 8, 2026

BetTrading.net Privacy Policy

All legal documents