Personal Data Processing Policy
General Provisions
This Personal Data Processing Policy (the “Policy”) is issued by the Operator and applies to all personal data processed by the Operator via the website or related services in accordance with the laws and regulatory requirements of Great Britain, including the Data Protection Act 2018 and the UK General Data Protection Regulation (“UK GDPR”).
The purpose of this Policy is to inform data subjects about the collection, use, processing, storage, and protection of their personal data.
Legal Basis for Processing of Personal Data
Personal data is processed in accordance with the following legal bases set out by the UK GDPR and the Data Protection Act 2018:
- The performance of a contract to which the data subject is party or to take steps at the request of the data subject prior to entering into a contract.
- Compliance with a legal obligation to which the Operator is subject.
- The legitimate interests pursued by the Operator or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
- The data subject has given consent to the processing of their personal data for one or more specific purposes.
Categories of Personal Data Collected
The Operator may collect and process the following categories of personal data:
- Identification data (such as full name, date of birth, and identification documents)
- Contact data (such as postal address, email address, phone number)
- Account data (including login credentials and transaction information)
- Technical data (such as IP address, device information, cookies, and log files)
- Financial data (such as payment method details, transaction records)
- Other information required for compliance with the applicable legal and regulatory requirements
Purposes of Personal Data Processing
Personal data is processed strictly for the following purposes:
- Provision of services and operation of user accounts
- Verification of identity and age as required by applicable law
- Fulfilment of legal and regulatory obligations, including anti-money laundering and gambling regulations
- Prevention of fraudulent activity and security monitoring
- Communication with users regarding their account and service management
- Processing of payments and financial transactions
- Resolution of disputes and enforcement of contractual rights
- Compliance with requests from competent authorities or courts
Data Sharing and Disclosure
Personal data may be transferred to:
- Government authorities, regulatory bodies, or law enforcement agencies in compliance with statutory obligations
- Payment service providers, banks, or other financial institutions in the context of transaction processing
- Professional advisors, auditors, or contractors engaged by the Operator
- Parties in connection with corporate transactions, in accordance with applicable legal requirements
All data sharing is performed in line with the requirements of the Data Protection Act 2018 and the UK GDPR.
Data Storage and Retention
Personal data will be stored for no longer than is necessary for the purposes for which it is processed, unless a longer retention period is required or permitted by law. The Operator implements technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or disclosure.
Rights of Data Subjects
Pursuant to the UK GDPR, data subjects have the following rights in respect of their personal data:
- The right to access their personal data
- The right to rectification of incorrect or incomplete personal data
- The right to erasure (“the right to be forgotten”) under certain circumstances
- The right to restrict processing under certain conditions
- The right to data portability
- The right to object to processing
- The right to withdraw consent at any time, where processing is based on consent
- The right to lodge a complaint with the Information Commissioner’s Office (ICO)
Procedures for Exercising Data Subject Rights
To exercise the rights stated above, data subjects may submit a request by contacting the Operator by email at [email protected] or by post at Data Protection Officer, 123 Regent Street, London, W1B 4DS, United Kingdom.
The Operator will process all requests in accordance with applicable UK data protection legislation. The Operator may require verification of identity before processing any such request.
Changes to the Policy
This Policy may be updated from time to time to reflect changes in legal, regulatory, or operational requirements. The updated version will be published on the website and will take effect immediately upon publication. Continued use of the website and services constitutes acceptance of the updated Policy.
Contact Information
For all questions, comments, or requests regarding this Policy or the processing of personal data, please contact the Operator at:
Data Protection Officer
123 Regent Street
London, W1B 4DS
United Kingdom
Email: [email protected]
Telephone: +44 20 7946 0321
Date of last revision: 10 June 2024