Glorbet Keeps Customer Data for 10 Years After the Account Ends and Reserves the Right to Keep the Email and Mobile Number After an Erasure Request

Glorbet's privacy policy, last updated on 18 January 2026, names Digital GBI of Costa Rica as operator of glorbet.com and says it acts as data controller for the purposes of applicable data protection legislation. The policy names no statute and no regulator.

• Ten years after the customer relationship ends. The policy reads: "If you are no longer a customer of glorbet, We will keep your data for 10 years as required to comply with the purposes set out in this policy." It adds that personal records are kept even if the account is blocked, deactivated, deleted or otherwise no longer active. Deleting the account does not end the ten years.
• An erasure request leaves the email address and mobile number in place. The rights list includes "Erasure of any Personal Data that We process". The text below it reads that "upon your request We can delete any Personal Data after the account is blocked/deactivated/deleted/otherwise no longer active, except email and mobile number." Glorbet reserves the right to keep both "to avoid unlawful registering using the same email and mobile number", and states that a standalone email address or mobile number "is not considered as Personal Data". No period is given for how long they are kept, and personal data cannot be deleted while an account is temporarily suspended at the player's request. The policy offers erasure in one place and ten years of retention in another and does not say which prevails.
• A list of what may be collected, not of what will be. Account details may include first and last name, email address, residential address, gender, birth data, ID number, phone number and occupation, and for KYC and anti-money-laundering purposes "source of funds, identity, connection to criminal authorities, utility bill copies". A copy of a governmental ID or passport is required "in certain instances". The list is introduced with the words that the scope "is not mandatorily collected/stored/used/processed by us". The policy does not say which player is asked for which item.
• Support calls are recorded. The policy reads: "Telephone or video calls to and from our Support office are recorded for KYC, training and security purposes along with the resolution of any queries arising from the Service you receive." It gives no separate retention period for the recordings.
• Device checks apply to players who download the Software. The clause begins "If you download the Software to your device" and says Glorbet may gather information about other software running at the same time, to detect software associated with fraud ("robots, malware, AI, etc."), and may check whether the connection is "via a VPN or proxy". The policy does not say what follows from a positive result.
• Gameplay data can be published under a nickname or initials. Glorbet records deposits, crypto-wallet balances, bets, bonuses, session duration and high scores, and the policy reads: "We may also share and publish such information through any of our Platforms using your nickname or initials in cases if the user wins a sum worthy of publicity." No amount is set for a win worthy of publicity and no way to decline is described. Wallet balances are among the data the sentence covers.
• Marketing affiliates can receive name, email and phone number. The policy reads: "We may share and disclose said Personal Information with our Marketing Affiliates for the purpose of providing you different marketing offers, which We, or our Marketing Affiliates, believe are relevant for you." The affiliates "may use this Personal Information for different marketing techniques, such as direct email, post, SMS and telephone marketing purposes", and the information includes name, email address and telephone number. The rights list offers withdrawal of consent and objection to processing for legitimate interests, and the policy names no way to stop the marketing in particular.
• Two statements about changes. The policy says "The amended Privacy Policy will be effective upon posting on the site" and that continued use means acceptance, and later says "We will not enforce material changes to the Privacy Policy without your express consent." Both cannot apply to a material change. The rights list also includes portability, objection to processing based on legitimate interests (where "compelling grounds for processing such information may over-ride your right to object"), a human review of a decision made entirely by automated processing, and a complaint to a data protection authority.

The policy gives the player an erasure right and a ten-year retention rule and does not say which governs. For the email address and mobile number, it reserves the right to keep them.