Skip to content
BetDeskCreate account

Privacy Policy

Effective 2 October 2026.

BetDesk is an Australian business, called "we" and "us" here. This policy says what personal information we hold about you, why, where it is kept and who else handles it. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. The short version

  • We hold your email address, your name, date of birth, state or territory and mobile number, your settings, and the bets you choose to record. We do not ask for your address or identity documents.
  • Your password is stored only as a hash. Card details go to Stripe and never reach us.
  • BetDesk has no analytics, no advertising and no third-party scripts. It sets no cookies of its own.
  • We do not sell your information or share it for marketing.
  • Your data is kept on a server in Australia. You can delete your account and data yourself, in Settings.

2. What we collect

Your account. Your email address; your password, stored only as a salted hash that cannot be read back; an account ID we generate; and when you signed up and last signed in. The sign-in system also keeps a record of sign-ins and session renewals, which may include the IP address they came from.

Your details. We ask for these once, when you sign up:

  • your name, so we know whose account it is;
  • your date of birth, to confirm you are 18 or older;
  • the state or territory you bet from, to confirm you are in Australia;
  • your mobile number, only to contact you about your account. We check that it is written as an Australian mobile number. We send no code to it and no marketing.

Your settings. The bookmakers you say you bet with, your default stake, the amount you round stakes to, and any stake limit you enter for a bookmaker.

Your tracked bets. Only bets you record in My bets. For each: the bookmaker, when it was placed, the stake, the odds, whether it was a bonus bet or a paper bet, any tags and note you add, the event, market and selection, the result, what was returned and the profit. We add closing prices to measure the bet against. This is betting history, so we treat it with care.

Your plan. Which plan you are on and when it runs to. If you pay, Stripe tells us that you paid and for which plan, and gives us a customer reference. We never receive your card number.

Technical records. Our server sees your IP address on each request and uses it to limit how fast one address can make requests. The web server keeps no access log. The application and the sign-in system write operating logs, which may include IP addresses, times and the page or address requested. We keep them for up to 30 days.

Emails you send us. If you write to us, we keep the conversation.

What we do not collect. We do not have access to your bookmaker accounts, balances or logins. BetDesk does not read your bets from any bookmaker: it knows only what you enter. We do not collect your address, your device's location, contacts or device identifiers, and we do not build an advertising profile.

3. Cookies and browser storage

BetDesk sets no cookies. It keeps these in your browser's local storage, on your device:

  • your sign-in session, so you stay signed in (and, briefly, a one-time code while you confirm your email or reset your password);
  • the last screen you were on, so BetDesk opens where you left off;
  • whether you skipped the first-run setup;
  • the details you typed when signing up, until your first sign-in sends them to us and removes them (if that has not happened within an hour, they are removed when you next open BetDesk); and after that, a note that you have given them.

Signing out removes the session, those details and the note. Clearing your browser's site data removes all of it.

Cloudflare, which carries traffic to the site, may set a cookie of its own that it needs to tell people from bots. Stripe sets its own cookies on its checkout page.

There are no analytics, advertising or social media scripts on BetDesk. The site's security policy lets a page load code and make calls only to BetDesk's own address. When you follow a link to a bookmaker, your browser is told not to say you came from BetDesk.

4. Why we use it

  • To run your account: sign you in, confirm your email, reset your password.
  • To show you BetDesk as you set it up: opportunities at your bookmakers, stakes planned to your settings and limits, and your bet record and figures.
  • To take payment and give you the plan you paid for.
  • To send service emails: confirmation, password reset, and notices about your plan, price changes or changes to our terms. We do not send marketing email.
  • To keep the service secure and working: limit request rates, find faults, stop misuse.
  • To keep BetDesk to adults in Australia, and to contact you about your account.
  • To meet our legal obligations.

We do not use your information for anything else without asking you first.

5. Where it is kept

Your account, details, settings, bets and plan are kept in a database on our server at Oracle Cloud's Melbourne region, in Australia. Backups are kept on the same server, and a copy of each is kept in Cloudflare's storage (R2), which we ask Cloudflare to hold in Oceania. The sign-in system (Supabase's open-source software) runs on that server too: your email and password hash are not sent to Supabase the company.

6. Who else handles it

We use these companies to run BetDesk. Each receives only what its job needs.

  • Oracle (Oracle Cloud Infrastructure) hosts the server, in Australia.
  • Cloudflare carries traffic between your browser and our server, delivers our emails, and stores a copy of our backups. It handles your IP address, the requests you make, and your email address and the content of emails we send you; the backups it stores hold your account, settings, bets and plan.
  • Stripe takes payment. It collects your card details, name, billing details and email on its own checkout page, under its own privacy policy.

Outside Australia. Cloudflare and Stripe are based in the United States and operate worldwide, so the information they handle may be processed outside Australia, including in the United States. We take reasonable steps to make sure they handle it consistently with the Australian Privacy Principles.

We do not sell personal information, and we do not give it to bookmakers, advertisers or data brokers. We disclose it otherwise only if the law requires it, or to a business that takes over BetDesk, which must then keep to this policy.

7. How long we keep it

  • Account, your details, settings and tracked bets: until you delete your account, or ask us to remove them.
  • Backups: a backup is taken every hour. The server keeps them for up to 14 days. The copies in Cloudflare's storage are deleted 30 days after they are made, and are gone within a day after that. Something you delete can therefore remain in a backup for up to 31 days. Backups are used only to restore the service.
  • Server logs: up to 30 days.
  • Payment records: Stripe keeps its records under its own policy. We keep the records tax law requires for as long as it requires.
  • A barred account: if we have barred an account for breaking the terms, we keep the account ID and the fact that it is barred after the rest is deleted, so the bar holds.

8. Seeing, correcting and deleting your information

  • See it. Your details and settings are in Settings and your bets are in My bets. For a copy of anything else we hold about you, email us.
  • Correct it. Change your name, state or territory, mobile number and settings in Settings at any time. Your date of birth cannot be changed there. A recorded bet can be settled in the app but not edited or removed one at a time: to correct or remove a bet, to change your email address or date of birth, or to correct anything else, email us.
  • Delete it. In Settings, under Account, you can delete your account. Your account and data are deleted: your sign-in, your details, your bookmakers, stake settings and limits, every tracked bet, and your plan. It takes effect at once and cannot be undone. Copies in backups go as section 7 says. Deleting your account does not cancel a bet at a bookmaker, and you should cancel a paid plan first.

We answer requests within 30 days and do not charge for them. If we refuse a request, we say why.

9. Security

  • The site is served over HTTPS only.
  • Passwords are stored as salted hashes. We cannot read them.
  • The database and the sign-in system accept connections only from the server itself. The only way in from the internet is the web server.
  • Sign-in, email and API requests are rate limited.
  • Backups stored off the server are encrypted at rest.

No system is perfectly secure. If a data breach is likely to cause you serious harm, we tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

10. Children

BetDesk is for adults. We do not knowingly collect information from anyone under 18. If the date of birth you give makes you under 18, we close the account and do not keep the details you entered. If we learn an account belongs to someone under 18, we close it and delete its data.

11. Changes to this policy

If we change this policy, we post the new version here with a new date. If the change is significant, for example a new company handling your information, we email you before it takes effect.

12. Questions and complaints

Email support@betdesk.com.au. Tell us what happened and what you would like done. We reply within 30 days.

If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au/privacy/privacy-complaints or 1300 363 992.

13. Gambling help

If gambling is a problem for you or someone close to you, Gambling Help Online gives free, confidential support at any hour: call 1800 858 858 or visit gamblinghelponline.org.au. To block yourself from all licensed Australian online and phone bookmakers, use BetStop, the National Self-Exclusion Register: betstop.gov.au.