Privacy Policy

Last updated: 7 October 2026

1. Who we are

This Privacy Policy explains how West Energy S.A. collects, uses, shares and protects your personal data when you use exitobet.com.py.

West Energy S.A. operates the EXITOBET brand. This website exitobet.com.py is authorized and regulated by the National Gambling Commission (CONAJZAR) under CONAJZAR Resolution No. 23/2019 and Law 1016/1997.

West Energy S.A. is the controller of your personal data. This means that we decide why and how your personal data is processed.

We process your personal data in line with the applicable law of the Republic of Paraguay. Today this includes Law No. 4868/2013 on Electronic Commerce and, where it applies, Law No. 6534/2020 on the Protection of Personal Credit Data.

Law No. 7593/2025 on Personal Data Protection was published on 27 November 2025 and applies after a transition period. We are preparing for it, and we already give you the rights it sets out. See section 9.

This policy applies to everyone who visits our site, opens an account or contacts us. Read it together with our Terms and Conditions.

2. The personal data we collect

We collect these categories of personal data:

  • Registration data: name, surname, date of birth, cédula or passport number, email address, phone number, address, gender, username and password.

  • Verification documents: the front and back of your identity document, a selfie, proof of address, information about the source of your funds and a declaration of whether you are a politically exposed person (PEP).

  • Payment and transaction data: your deposits and withdrawals, the payment method you use and the related transaction records.

  • Gameplay and betting data: the games you play, your bets, wins, losses, balance and bonuses.

  • Device and location data: IP address, device type, browser, operating system and your approximate location.

  • Communications: your messages with our customer support by live chat or email.

  • Marketing preferences: whether you accept or refuse marketing by email and by SMS.

  • Cookie data: information that cookies and similar technologies collect. See section 14.

3. How we collect your data

We collect personal data in these ways:

  • From you, when you register, verify your identity, make payments, play or contact us.

  • Automatically, from your device and browser and through cookies, when you use our site.

  • From our service providers, such as payment providers and identity-verification providers, when they confirm a payment or the result of a check.

  • From an agent, if an agent registered your account for you.

4. Why we use your data and our legal bases

We use your personal data only when we have a legal basis for it. Our legal bases and purposes are the following.

To perform our contract with you. We use your data to:

  • open and manage your account;

  • let you play our games and place bets;

  • process your deposits and withdrawals;

  • give you the bonuses and promotions that you accept;

  • give you customer support.

To comply with our legal obligations. We use your data to:

  • verify your age and your identity;

  • prevent money laundering under Law No. 1015/1997 and report to SEPRELAD when the law requires it;

  • meet the identity-check, record-keeping and reporting duties that CONAJZAR sets for licensed operators;

  • comply with our tax obligations;

  • answer requests from courts and other competent authorities.

For our legitimate interests. We use your data to:

  • detect and prevent fraud and bonus abuse;

  • protect the security of your account, our site and our systems;

  • improve our site, our games and our services.

We use legitimate interest only when your rights and interests do not override it. You can object to this processing. See section 9.

With your consent. We use your data to:

  • send you marketing by email and by SMS;

  • use non-essential cookies on your device.

You can withdraw your consent at any time. This does not affect the processing that took place before you withdrew it.

If you do not give us the data that we need for the contract or for our legal obligations, we cannot open or keep your account, and we cannot process your withdrawals.

5. Marketing

We send you marketing by email or by SMS only with your consent.

You can refuse marketing or withdraw your consent at any time, free of charge:

  • ask our support team to stop marketing messages by email or SMS;

  • contact our customer support at soporte@exitobet.com or by live chat.

When you withdraw your consent, we stop sending you marketing. We continue to send you service messages about your account, your payments and your security.

6. Who we share your data with

We share your personal data only when it is necessary for the purposes in this policy. We share it with:

  • our platform provider EveryMatrix and our game providers, who run the platform, the games and the betting services;

  • payment service providers, who process your deposits and withdrawals;

  • identity-verification providers, who help us check your identity, your age and your documents;

  • our CRM and email provider, which sends our service messages and, with your consent, our marketing;

  • agents, for the players that they registered. An agent sees only the account activity that it needs to serve its players;

  • CONAJZAR, SEPRELAD, the tax authority, courts and other public authorities, when the law requires it.

Our service providers process your data only on our instructions, and they must protect it.

We do not sell your personal data.

7. International transfers

Some of our providers process personal data outside Paraguay.

When we transfer your data outside Paraguay, we put appropriate safeguards in place. These safeguards give your data a level of protection in line with Paraguayan law.

Contact us if you want more information about these safeguards.

8. How long we keep your data

We keep your personal data while your account is active.

After that, we keep your data for the periods that the law requires. For example, we keep the records that anti-money-laundering law requires for at least 5 years after our business relationship with you ends.

When these periods end, we delete or anonymise your data. Anonymised data can no longer identify you.

9. Your rights

You have the following rights, as set out in Law No. 7593/2025 on Personal Data Protection:

  • Access: ask us whether we process your personal data, and get a copy of it.

  • Rectification: ask us to correct data that is wrong or incomplete.

  • Deletion (cancellation): ask us to delete your data.

  • Opposition: object to processing based on our legitimate interests, and object to marketing at any time.

  • Portability: get the data that you gave us in a structured and commonly used format, or ask us to send it to another controller when this is technically possible.

  • Review of automated decisions: ask for a review of a decision that is based only on automated processing of your data, including profiling.

  • Withdrawal of consent: withdraw any consent that you gave us, at any time.

Some limits apply. We must keep the data that the law obliges us to keep, for example for anti-money-laundering, gaming-regulation and tax purposes. We cannot delete that data before the legal period ends. If we cannot delete some of your data, we tell you why.

10. How to exercise your rights

To exercise your rights, contact us by email at soporte@exitobet.com or by live chat. Our live chat is available 24 hours a day, 7 days a week.

To protect your data, we first check your identity. We can ask you for information or documents for this check.

We reply to your request within 30 days. Exercising your rights is free of charge.

11. Complaints

If you are not satisfied with how we process your personal data, contact us first. We will do our best to resolve your complaint.

If you are not satisfied with our answer, you can make a complaint to the competent Paraguayan authority.

12. Minors

Our services are only for persons aged 18 or over. We do not knowingly collect personal data from persons under 18.

If we find that a person under 18 has opened an account, we close the account. We delete that person's data, except the data that the law requires us to keep.

13. Security

We use technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure and change.

Only authorised staff and providers who need your data for their work can access it.

Keep your username and password secret. Do not share them with anyone. If you think that another person has used your account, contact our customer support immediately.

14. Cookies

Cookies are small text files that a website stores on your device.

We use essential cookies to run our site, keep you logged in and protect your account. These cookies do not need your consent.

We use non-essential cookies, such as analytics and marketing cookies, only with your consent.

To refuse non-essential cookies or change your choice, contact our support team.

You can also block or delete cookies in your browser settings. If you block essential cookies, some parts of our site do not work.

15. Changes to this policy

We can change this policy, for example when the law or our services change.

We publish the new version on our site with the date of the last update at the top. If we make an important change, we also show a notice on our site.

16. Contact us

If you have questions about this policy or about your personal data, contact us: