Privacy Policy

Last updated: 2 October 2026

This Privacy Policy explains how personal data is processed on this website and on the other websites operated under the Vitisport / Vitibet brand (vitisport.cz, vitibet.com, vitisport.de, vitisport.es, vitisport.it, vitisport.nl, vitisport.ro, vitisport.hu, vitisport.se, vitisport.dk, vitisport.gr, vitisport.ru).

1. Who is responsible for your data

The data controller is:

Ing. Jan Vitáček
Pod bateriemi 1097/1a, 162 00 Praha 6 – Střešovice, Czech Republic
Business ID (IČO): 71799851
Registered as a sole trader in the Czech Trade Licensing Register since 20 February 2006
E-mail: admin@vitisport.cz

We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 GDPR.

2. What data we process

You can use the website without registering. Creating a user account is optional. We never ask for your postal address or payment details. The data processed is limited to the following:

• Technical data from your request — IP address, browser type and version, operating system, screen resolution, referring page, requested URL, date and time. This is recorded in standard web server logs.
• Approximate location — your country is derived from your IP address using a local MaxMind GeoLite database on our own server. The lookup is performed locally; your IP address is not sent to MaxMind for this purpose. We use the country only to select the language and the advertising shown.
• Cookies and similar identifiers — see section 4.
• Data you send us voluntarily — if you contact us by e-mail, we process the content of your message and your e-mail address.
• User account data (only if you create an account) — see below.

User account

You can create an optional free account by signing in with your Google account. If you do so, we process:

• Data received from Google — your name, e-mail address, profile picture (as a link to Google's servers) and a unique Google account identifier. We do not receive your Google password or any other data from your Google account.
• Account records — the date of registration, the website and language where you registered, your country (derived from your IP address by the local GeoIP lookup described above, stored as a two-letter code only, without the IP address itself), the date and time of your last sign-in, your confirmation that you are at least 18 years old (date and version of the wording), and whether you agreed to receive our newsletter (date of consent or withdrawal).
• Your favourites — leagues, teams and matches you mark with the star symbol, including their names and, for matches, the kick-off time and a link to the match page.
• Sign-in records — for each sign-in: the website, language and time; for each day on which you visit while signed in: the date and the website (kept for 400 days, used only for aggregate statistics); for each active sign-in on a device: a technical identifier stored only in hashed form, its creation and last-use time, and your browser's user-agent string.

Match notifications (optional). If you switch on notifications for followed matches on the My account page, your browser creates a technical subscription with its push service (for example Google Firebase Cloud Messaging, Mozilla Push Service or Apple Push Notification service). We store the address of this subscription and its encryption keys, the website and language where you switched it on, which events you want to receive (kick-off, goals, full time) and a record of notifications sent (type, match, time). The content of each notification is encrypted so that the push service cannot read it. Optional sounds on an open page are a setting stored only in your browser (local storage).

One account works on all websites listed above. When you follow a link from one of our websites to another while signed in, we pass a one-time technical token (valid for 60 seconds and usable only once) so that you stay signed in. No other data is passed in this way.

We do not knowingly process any special categories of personal data under Article 9 GDPR.

3. Why we process it and on what legal basis

• Operating and securing the website — legitimate interest (Art. 6(1)(f) GDPR) in delivering the service, preventing abuse and diagnosing technical faults.
• Advertising, including personalised advertising, and audience measurement — your consent (Art. 6(1)(a) GDPR), collected through the consent banner described in section 5.
• Answering your e-mail — legitimate interest in responding to your enquiry.
• Providing your user account and its features (sign-in, favourites, "My matches", the My account page) — performance of a contract with you (Art. 6(1)(b) GDPR), i.e. the free service you requested by creating the account.
• Sign-in records and protection of accounts — legitimate interest (Art. 6(1)(f) GDPR) in keeping accounts secure and preventing misuse.
• Match notifications — your consent (Art. 6(1)(a) GDPR), given by switching notifications on in your browser and on the My account page; you can switch them off there or in your browser at any time.
• Newsletter — your consent (Art. 6(1)(a) GDPR), which is optional, is not pre-ticked and can be withdrawn at any time.

4. Cookies and third parties

This website uses cookies and similar technologies. Strictly necessary cookies (for example your language and session preference) are used without consent. All other cookies are set only after you consent.

Cookies used for user accounts

The following cookies are strictly necessary for signing in and for keeping you signed in. They are set only when you use the sign-in or account features and are not used for advertising or tracking:

• PHPSESSID — session cookie of the website; deleted when you close the browser.
• viti_auth — keeps you signed in on this website; contains a random identifier (only its hashed form is stored on our server); expires after 180 days or when you sign out.
• viti_zpet, viti_jazyk — remember the page you came from and your language during sign-in; expire after 10 minutes.
• g_csrf_token — set by Google Sign-In to protect the sign-in process against forgery.

Google Sign-In

Sign-in is provided by Google Ireland Limited / Google LLC ("Google Sign-In"). Google's sign-in script is loaded only on our sign-in page, not on other pages of the website. When you sign in, Google processes your data as an independent controller under its own privacy policy (policies.google.com/privacy) and passes us only the data listed in section 2. You can remove our access at any time in your Google account under myaccount.google.com/connections.

Google AdSense and advertising partners

We display advertising through Google AdSense. Google and its advertising partners use cookies and device identifiers to serve, measure and — where you have consented — personalise advertising. Google may also use its own advertising cookie (DoubleClick) to serve ads based on your visits to this and other websites.

You can find out how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites, and you can manage Google ad personalisation at adssettings.google.com.

Our consent banner is provided by Google and operates within the IAB Europe Transparency & Consent Framework (TCF v2.2), CMP ID 300. The current list of third-party vendors who may process your data for advertising purposes is shown in the banner itself, under the vendor list. You may accept or reject each purpose and each vendor individually.

Google Analytics

We use Google Analytics 4 (property G-8G9K37556C) to understand how the site is used — which pages are visited, from which countries, and on which devices. IP addresses are truncated by Google before storage. We do not combine this data with any other information that would identify you.

TOPlist

We use the Czech traffic measurement service TOPlist (TOPlist s.r.o., Czech Republic) for basic visit counting. See toplist.cz.

Links to bookmakers and other partners

Some pages contain advertising links to betting operators and other partners, including affiliate links. If you follow such a link, the destination site becomes an independent controller of any data it collects, and its own privacy policy applies. We do not transfer your personal data to these partners; they may, however, learn that you arrived from our website.

5. Withdrawing or changing your consent

You can change or withdraw your advertising consent at any time using the Cookie settings link in the footer of every page, or the shield icon displayed by the consent tool. Withdrawal does not affect the lawfulness of processing carried out before you withdrew it. You can also delete cookies directly in your browser settings.

6. How long we keep data

• Web server access logs: 6 months, then deleted.
• Google Analytics: 14 months, as configured in the Analytics property.
• Advertising cookies: as stated in the consent banner vendor list; typically up to 24 months.
• E-mail correspondence: for as long as necessary to deal with the matter, normally no longer than 12 months.
• User account data, favourites and sign-in records: for as long as the account exists. When you delete your account, all of this data is deleted immediately on all our websites.
• Followed matches: deleted automatically 24 hours after kick-off.
• Sign-in on a device (cookie viti_auth and its server record): 180 days, or until you sign out.
• Newsletter consent: until you withdraw it or delete your account.
• Notification subscriptions: until you switch notifications off, the browser withdraws the subscription, or you delete your account. Records of sent notifications: 7 days.

7. Transfers outside the EEA

Google LLC (including for Google Sign-In and push notifications delivered to Chrome and Android) and some advertising vendors are established in the United States or process data there. Such transfers are made under the European Commission's adequacy decision for the EU–US Data Privacy Framework, or under Standard Contractual Clauses where the recipient is not certified under that framework.

8. Your rights

Under the GDPR you have the right to request access to your personal data, rectification, erasure, restriction of processing, and data portability; to object to processing based on legitimate interest; and to withdraw consent at any time. To exercise any of these rights, write to admin@vitisport.cz.

If you have a user account, you can exercise several rights yourself on the My account page (available from the menu next to your name when signed in): see your favourites, remove them, switch the newsletter on or off, and delete your account. Deleting the account immediately and permanently erases all your account data on all our websites.

If you do not have an account, please note that in most cases we hold no data that would allow us to identify you as an individual (Art. 11 GDPR). If you ask us to exercise a right, we may therefore need additional information from you — for example the approximate time of your visit and your IP address — in order to locate any relevant record.

You also have the right to lodge a complaint with a supervisory authority. Our lead authority is the Office for Personal Data Protection of the Czech Republic (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic — uoou.cz. You may also complain to the supervisory authority in your own country of residence.

9. Children

This website is not intended for persons under 18 years of age. It contains advertising related to betting, and we do not knowingly collect data from children. Creating a user account requires you to confirm that you are at least 18 years old. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal effects concerning you. Our sports predictions are generated from statistical match data and are not based on any personal data about visitors.

11. Changes to this policy

We may update this policy to reflect changes in the services we use or in the law. The date at the top of this page always shows the current version.

12. Disclaimer

The predictions published on this website are statistical estimates provided for information and entertainment only. They are not betting advice and no outcome is guaranteed. Gamble responsibly — 18+.