Trust and Security

BetBank holds your account, your settings and the bets you track. This page explains how we protect them, where they are stored, and what to do if you think something is wrong.

How we protect your account

• Passwords need at least 8 characters, with an upper case letter, a lower case letter, a number and a symbol. We refuse passwords that have appeared in known data breaches.
• You confirm your email address before you can sign in.
• You can turn on two-factor authentication with an authenticator app in Settings, under Security. Once it is on, every sign-in asks for a code from the app.
• Repeated sign-in and password reset attempts are limited, so a password cannot be guessed by trying over and over.
• New accounts verify a mobile number. Verification only accepts numbers from the countries our members sign up from, which blocks automated sign-up abuse.
• Settings shows the devices you are signed in on, and lets you sign out every other device at once.

Payments

Website subscriptions are paid through Stripe. You enter your card on Stripe's own checkout page and manage it in Stripe's billing portal, so BetBank never sees or stores your full card number. Subscriptions bought in our iPhone or Android app are handled by Apple or Google.

Where your data is stored

Your account and the bets you track are stored in our database in Sydney, Australia. The website runs on servers in Sydney too, and it only loads over an encrypted (HTTPS) connection.

Some of the services we use, such as payments, email and the BetBank AI assistant, may process data outside Australia. Our Privacy Policy lists them and explains what each one receives.

Deleting your account

You can delete your account at any time in Settings, or from the Delete Account page. If you subscribed on our website, deleting your account cancels that subscription first. Subscriptions bought through Apple or Google must be cancelled in your App Store or Google Play settings, because only they can stop those payments.

If something goes wrong

If we find that your personal information has been accessed without permission and it could cause you serious harm, we will tell you directly, explain what happened and what you can do, and notify the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme sets out.

Report a security issue

If you think your account has been used by someone else, or you have found a security problem in BetBank, email support@betbank.ai with “Security” in the subject. A person reads every message.

Responsible disclosure

If you are reporting a vulnerability, please:

• Tell us what you found and the steps to reproduce it.
• Only use your own account, and never access, change or delete another member's data.
• Avoid anything that slows the service down for others, and don't use social engineering or spam.
• Give us reasonable time to fix the problem before you share it publicly.

We will confirm we have your report, keep you updated while we fix it, and credit you if you would like. We don't run a paid bug bounty.