• Continuously improve internal processes as the appropriate means to offer products and services that meet the needs of each client and other interested parties, while ensuring proper Quality management and business continuity.
• Provide services in accordance with the Service Level Agreement (SLA) established with clients, ensuring the confidentiality, integrity, and availability of the information it manages, while considering interested parties' business continuity needs and all legal, contractual, and regulatory requirements.
• Ensure the continuity of critical business processes by implementing best practices that protect the company's human resources and assets.
• Consistently train all personnel to achieve service excellence, with particular emphasis on information security and business continuity training.
• Promote leadership and teamwork at every level of the company, ensuring fluid and reciprocal communication among all members of the organization.
• Manage employee performance and provide continuous feedback, promoting the achievement of objectives and the individual and team development.
• Raise awareness among internal and external suppliers so they join a sustained effort aimed at continuously improving the service provided.
• Test continuity plans and inform clients and other interested parties about business continuity management results, thereby ensuring the normal operation of the processes that make up the service in the event of contingencies.
• Ensure the inclusion of security controls and data validation in the development of information systems.
• Contribute to the sustainable development of society and the environment by implementing ethical and responsible practices throughout the company's activities, seeking a balance between economic, social, and environmental interests.
• Promote responsible and healthy gaming among clients, complying with current regulations and industry best practices.
• Comply with current regulations on personal data protection and privacy, ensuring the lawful, transparent, and responsible processing of information.

Every member of B-GAMING personnel plays an important role in the service we develop and provide to our clients. The success of this ongoing challenge depends on the commitment of each team member.

Responsible Disclosure Policy

Introduction

B-GAMING S.A. (hereinafter “B-GAMING”) is committed to the importance of adequately protecting the information entrusted to us by our clients, users, and team members (employees and suppliers) against different types of threats, in order to safeguard its confidentiality, integrity, and availability.

For this purpose, this Responsible Disclosure Policy defines the procedure to follow if a third party, whether affiliated with B-GAMING or not, detects a security Vulnerability in our systems, sites, and/or any asset belonging to us (hereinafter, “THIRD PARTIES”).

1. Definitions

Computer Security Incident Response Team (CSIRT): A team of multidisciplinary specialists trained to prevent, detect, manage, and respond to IT Incidents quickly and effectively.

Vulnerability: A weakness in an asset, system, or control that may be exploited by one or more cyber threats.

Incident: An unexpected or unwanted event that compromises the security of networks, equipment, and information systems.

Third Parties: Any individual or legal entity, whether affiliated with B-GAMING or not, that detects a security Vulnerability in our systems, sites, and/or any asset belonging to us.

2. Information for Third Parties

If you have experienced an Incident and/or believe that you have discovered a Vulnerability in our sites or systems, please follow the steps detailed below, which form part of our Responsible Disclosure Policy:

1. Send an email to csirt@boldt.com.ar
2. Use “Responsible Disclosure” as the subject.
3. In the body of the email, describe the nature of the error, Incident, or finding, identifying the steps required to reproduce it, the applications, programs, or tools used to detect the Vulnerability, and the date and time when you performed the tests. If appropriate, attach images or videos of what you detected.
4. Please include your personal information so that we can contact you.

For our part, we commit to:

• Send you an acknowledgment of receipt of your report.
• Inform you of its progress, and
• Notify you within a reasonable time when it has been resolved.

Please remember that the following are prohibited:

• Accessing our information.
• Exposing the privacy of other individuals or legal entities, for example through unauthorized access to or destruction of data, or interruption/degradation of our services.
• Accessing or modifying data without our express consent.
• Taking advantage of the security issue by attempting to demonstrate additional risks or discover further problems.

Additionally, the following actions are outside the scope of our Responsible Disclosure Policy because they may negatively affect the provision of B-GAMING services.

• Spam or social engineering techniques.
• Denial-of-service attacks.
• Code or content injection.
• Brute-force attacks.
• Manual or automated Vulnerability scans.
• Deliberately publishing, updating, linking to, sending, or storing malware, viruses, or similar software

THIRD PARTIES shall be fully liable for any damages and losses they may cause to B-GAMING S.A., clients, users, team members (employees and suppliers), licensees, or unrelated third parties through the use of any data, information, or documentation obtained as a result of the detected Vulnerability.

B-GAMING does not provide financial rewards to individuals or organizations for identifying potential or confirmed Vulnerabilities. Requests for monetary compensation will be considered a violation of this Responsible Disclosure Policy.

This site uses cookies to provide a better experience and analyze site usage. We do not collect personal information.

At B-GAMING, we are strongly committed to the security and integrity of our systems, and we thank you in advance for your Responsible Disclosure contributions.