Matchbook Privacy Policy
This independent review explains how Matchbook — the betting exchange and casino operated by Triplebet Limited under a UK Gambling Commission licence — collects, uses, shares and protects the personal data of customers in the United Kingdom. It also sets out the rights players hold under UK GDPR and the Data Protection Act 2018, based on what the operator documents.
Table of contents
Information We Collect
Matchbook collects the data it needs to run a licensed betting exchange and casino account: identity and contact details at registration, behavioural data from how the account is used, and payment information tied to deposits and withdrawals. As a UK Gambling Commission licensee, the operator is required to gather enough information to verify every customer before any withdrawal is processed.
Personal data collected during registration
Opening an account requires standard identity fields: full name, date of birth (the minimum age is 18), residential address, email address and phone number. Before a first withdrawal, Matchbook requires KYC verification through a biometric photographic ID plus a document verifying address, both uploaded in the account section. The credentials chosen at sign-up — username, password and any security settings — also form part of the stored personal record.
Behavioural and usage data
The operator logs how the account is used: betting exchange activity, casino play across the NetEnt and Red Tiger slots and the Evolution live tables, login history, device and browser data, and IP addresses. This usage data supports fraud detection, responsible-gambling monitoring (deposit limits, reality checks, time-outs and self-exclusion are all offered) and the settlement of bets.
Payment information
Deposits and withdrawals in GBP are processed through Visa debit card, Mastercard debit card, Apple Pay, Google Pay, Skrill, Neteller, PaysafeCard and bank transfer. Matchbook records transaction details — method, amount, timestamps — rather than full card numbers, which are handled by payment processors. Withdrawals must return to the same method used for the deposit where cards are concerned, so payment records are retained to enforce that rule.
How We Use Your Information
Matchbook uses personal data for three core purposes: running and verifying the account, sending marketing communications where consent exists, and meeting its legal obligations as a UK-licensed operator. Each purpose has a defined lawful basis under UK GDPR, as the operator documents.
Account management and verification
Identity data underpins account creation, login security, bet settlement and payment processing. Verification documents — biometric photographic ID and proof of address — are used to confirm identity before withdrawals, to prevent underage gambling and to satisfy anti-money-laundering checks. Transaction history is also used to assess withdrawal requests, including the operator’s stated right to apply a fee where withdrawal activity does not correspond to a sufficient volume of play.
Marketing and promotional communications
Where a customer opts in, Matchbook uses contact details to send offers and promotions, including communications related to its new-customer offer of Get £30 in Free Bets when you bet £20 with bonus code BB30. Marketing relies on consent, which can be withdrawn at any time through account settings or the unsubscribe mechanism in each message. Opting out of marketing does not affect service messages about the account itself.
Legal and regulatory compliance
As a UK Gambling Commission licensee operated by Triplebet Limited, Matchbook processes data to meet licensing conditions: age and identity verification, anti-money-laundering monitoring, responsible-gambling interventions, and reporting duties. Betting and transaction records must be kept in an auditable form, which is why certain data cannot be deleted on request while statutory retention obligations apply.
Data Sharing & Third Parties
Matchbook shares personal data only with the categories of recipient needed to operate the service and satisfy the regulator: payment processors and service providers, and regulatory or legal authorities where required. The operator does not sell personal data.
Payment processors and service providers
Card payments, Apple Pay and Google Pay transactions, Skrill and Neteller e-wallet transfers, PaysafeCard vouchers and bank transfers all involve third-party processors who receive the data necessary to execute the payment. Matchbook also uses specialist suppliers for identity and biometric verification, game platform delivery from providers such as NetEnt and Red Tiger, and customer-support tooling. Each processor is bound by a data-processing agreement.
Regulatory bodies and legal requirements
Data may be disclosed to the UK Gambling Commission, law-enforcement agencies, courts and tax authorities where the law requires it, and to sporting integrity bodies where suspicious betting patterns on the exchange must be reported. Such disclosures are limited to what is legally necessary.
No sale of personal data
Matchbook does not sell customer personal data to third parties. Any sharing beyond the categories above would require a separate lawful basis and, where applicable, explicit consent.
Your Rights & Data Control
UK customers hold the full set of UK GDPR rights over the data Matchbook holds: access, correction, deletion in defined circumstances, and control over marketing. Requests are made through the account section or by contacting the operator, and identity may need to be re-verified before a request is actioned.
Access, correction, and deletion requests
Customers can request a copy of their personal data, ask for inaccurate details to be corrected, and request erasure where no overriding legal retention duty applies. Because gambling transaction records must be retained for regulatory and anti-money-laundering purposes, deletion requests may be partially refused with an explanation of the legal ground.
Opt-out of marketing
Marketing consent can be withdrawn at any time via account preferences or the unsubscribe link in promotional messages. Withdrawal of consent does not affect the lawfulness of marketing sent before the opt-out, and transactional account messages will continue.
GDPR and data protection rights
Beyond access, rectification and erasure, UK GDPR grants rights to restrict processing, object to processing based on legitimate interests, data portability for information provided under contract or consent, and the right to lodge a complaint with the Information Commissioner’s Office. The operator documents these rights in its own privacy notice, which this independent website summarises rather than replaces.
Security & Data Retention
Matchbook protects account and payment data with industry-standard technical and organisational measures and retains personal data only for as long as legal and operational obligations require. As an operator running under a UK Gambling Commission licence since its establishment in 2004, Triplebet Limited maintains retention schedules shaped by gambling regulation.
How we protect your information
The operator applies encrypted connections for data in transit, access controls limiting staff exposure to personal data, and verification procedures — including the biometric photographic ID check — to stop unauthorised account access. Payment data is handled by compliant processors, and responsible-gambling flags are monitored to protect vulnerable customers. Customers share responsibility by keeping login credentials private.
Data retention periods
Account and transaction records are kept for the life of the account and for a defined period after closure, driven by anti-money-laundering and gambling-regulation requirements. Verification documents, betting history and payment records fall under these statutory schedules, after which the data is securely deleted or anonymised. Marketing data is retained only while consent remains active.
Frequently Asked Questions about Matchbook
Is Matchbook legal in United Kingdom?
Yes. Matchbook operates legally for UK customers as a licensed betting exchange and casino, with its licence listed as the UK Gambling Commission. The brand is run by Triplebet Limited, a company based in Alderney that has offered exchange betting and casino games online since 2004. Players must be 18 or over.
How do I create a Matchbook account?
Registration requires standard personal details — name, date of birth, address, email and phone number — followed by choosing login credentials. Before the first withdrawal, accounts must be verified with a biometric photographic ID plus a document verifying address, both uploaded through the account section as part of the KYC process.
What payment methods does Matchbook support in United Kingdom?
UK customers can deposit and withdraw in GBP using Visa debit card, Mastercard debit card, Apple Pay, Google Pay, Skrill, Neteller, PaysafeCard and bank transfer. Withdrawals on cards must go back to the deposit method. The default minimum withdrawal is £10, while bank wire transfers carry a £500 minimum.
How do I claim the Matchbook welcome bonus?
The offer is Get £30 in Free Bets when you bet £20. Sign up with bonus code BB30, then bet and settle 1x£10 on the Matchbook Exchange at odds of 2.0 or more. Within 72 hours of settlement, 3x £10 Bet Builder Free Bets are credited. First deposits via Skrill, Neteller or PaysafeCard do not qualify. 18+ only, T&Cs apply, Be Gamble Aware.
For the full picture of how the operator handles accounts, payments and the current new-customer offer, our main review covers everything in one place.