Data Controllers

For the purpose of our Privacy Policy, any definitions used will be according to our rules

We take the privacy of your information very seriously and ask you to read this Privacy Notice carefully as it contains important information on:

• The personal information we collect about you and why
• What we do with your information
• The measures applied to ensure the security of your personal data
• Who your information might be shared with - Your rights

Under the EU’s General Data Protection Regulation (“GDPR”), personal data is defined as any information relating to an identified or identifiable natural person. It can include obvious identifiers like your name but also identification numbers, online identifiers and/or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person. Special category data includes data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and genetic data, biometric data, data concerning health or data concerning a person’s sex life or sexual orientation.

We collect and process personal data based on one or more of the following legal bases:
Consent: the individual has given clear consent for us to process their personal data for a specific purpose
Contract: the processing is necessary for a contract we have with the individual or their organisation, or because they have asked us to take specific steps before entering into a contract
Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations)

By using our websites or by contacting us by phone, email, or in writing, you may be providing us with the following information when you open an account with us or interact with our gaming platform:

• Your name
• Date of birth
• Current address and proof of address
• Proof of identity
• Email address
• Mobile and telephone numbers
• Financial debit card information (in line with current Payment Card Industry Data Security Standard)
• Recordings of telephone calls and email or message communications

When you visit our websites, we may automatically collect the following information:

• Technical information used to connect your computer to the internet
• Login information, your geographic location, browser type and version
• Browser types operating system and platforms
• Information about your visit
• Financial transactions
• Your gaming activities

Cookies are small text files that are stored on your computer or equipment when you visit certain pages of the website that record your preferences. We use cookies to track your use of the website and services. We may also use cookies to monitor traffic to the website and services and make it easier/more relevant for your use.

Information with relevance to cookies may be obtained from third parties (such as financial institutions, identification verification agencies, credit providers, credit reference agencies) for us to follow legal gaming requirements (e.g. to identify you, Anti-Money Laundering, Anti-Fraud, prevention of terrorist financing). These third parties have all been thoroughly vetted as part of our Information Security Controls. and in accordance with the requirements of our remote gambling licence.

You can learn more on cookies by visiting www.allaboutcookies.org

We require your information to:

• Set up, manage and administer your account
• Provide you with our services (make/settle/pay Bets, playing games, etc.)
• Improve the quality or service and gaming experience for you
• Comply with obligations as set out in our terms and conditions (contractual obligations)
• Comply with legal, licensing and regulatory requirements

Your personal data may also be used by the Group for customer modelling, statistical and trend analysis, with the aim of developing and improving our products and services. If your data is used in this way, then it will be anonymised.

We will only contact you about our products and services if we have your consent to do so. You can freely manage your consent at any time via our tools within personal details.

We use personal information in an endeavour to personalise your interaction and experience with our services. Personalisation or user profiling is necessary for the purpose of delivering and displaying relevant content to our players which we deem to be our legitimate interest.

We may share the personal data we hold about you across the Group to enable us to better understand your needs and run your accounts in the efficient way that you expect.

To ensure we follow legal obligations set by the gaming industry, we may be required to disclose information with specific third parties (e.g. to identify you, Anti-Money Laundering, Anti-Fraud, prevention of terrorist financing). As detailed above, these third parties have all been thoroughly vetted as part of our Information Security Controls, which we are required to follow as part of gaming requirements.

We will not share/sell your information outside of the Group (e.g. to other gaming companies, or unrelated companies), as this is not part of our scope of business.

We may need to disclose your information to a third party if required by law. In this case, we would follow the law’s strict rules on sharing information.

We will ensure personal data is not kept for longer than is necessary. We will always follow the below controls to ensure that the storage of personal data conforms to this:

• Review the length of time personal data is retained
• Review and consider the purpose for retaining the personal data
• Securely delete personal data which is no longer required
• Ensure personal data held is updated and, when appropriate, is archived securely

We are the controllers of the information collected and will only use your personal data in the course of provision of services to you.

We will take all steps reasonably necessary to ensure that your data is treated securely.

Your information and transactions are transmitted using encryption technology and securely stored in line with our Information Security Policies.

If you are required to send us your debit card information, your card details will always be transmitted securely. Any debit card information stored by us are in an encrypted form and can only be viewed by employees with the appropriate level of security clearance.

The data collected from you (including recorded calls) will be transferred, processed and stored at our dedicated secured offices and data centres. By submitting your personal data, you agree to this transfer, processing and storing.

Where we have given you a password which enables you to access certain parts of any of our websites, you are responsible for keeping this password confidential, including not sharing it with other persons. Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to any of our websites. In addition to the steps that we take to protect your personal data, you should take steps to help protect yourself against Internet fraud.

Outside of the website, we may communicate any service and transactional information with you via email, SMS, phone call or post via the contact details you provided upon registering with Wewin. Any marketing communications will only be sent to the channels you have selected in your marketing preferences, which can be found in your Account Settings under Personal Details > Emails and Notifications > Promotions and Marketing materials.

Any communications with files and confidential information transmitted to and from the official communication channels of Wewin may be privileged or contain confidential information which is solely intended for you and for the purpose of the business relationship between you and us. This may include proof of identity, address, and affordability requests in line with our internal policies. As touched upon, we will take all steps reasonably necessary to ensure that your data is treated securely.

If you are not the intended recipient of any communications sent to you, please be aware that any disclosure, copying, distribution or use of confidential contents is strictly prohibited and may be illegal. If you have received any communications in error with confidential information, please notify us immediately via our support channels and delete it from your system.

Use of our communication systems is monitored to secure its effectiveness and for other lawful purposes. Communications will be monitored and may be recorded to secure effective operation and for other lawful business purposes.

We do not accept responsibility for changes made to communications after they are sent. You are advised to scan communications for viruses as we cannot accept liability for any loss or damage which may be caused as a result of any computer virus. You should take steps to help protect yourself against Internet fraud.

Under GDPR you have several rights to your personal data, which are detailed below:

Right to Access personal data: You have a right to request a copy of the personal information that we hold about you. Please visit the Contact Us page to get in touch, should you wish to make such a request. In your request, please give as much information as possible to identify yourself with, to assist us in gathering the information requested.

We will respond to such a request within one month which will require your identification to be verified prior to release of relevant personal data.

Your information provided by us, on your request, will be communicated to you in a way which can be transferred to another party if required.

Right to Erasure: You can request us to erase your personal data where there is no lawful basis requiring us to continue processing this personal data. This right only applies in certain circumstances given that our legal obligations include data retention periods.

Right to Rectification of Personal data: You can request that we correct any personal data that we are processing about you which is incorrect.

Right to be informed: Where the application of a personal data right has impacted on your personal data, you have the right to be informed.

Right to data portability: Similar to the right to access personal data, this right allows you to obtain your personal data in an electronic format that would enable you to transfer that personal data to another organisation, should it be relevant.

Right to restrict / object to processing of personal data: In certain circumstances you have the right to object to or restrict the processing of your personal data, where this processing is based on consent, contractual obligation or our legitimate interest.

However, despite your objections or wish to restrict processing, where there are compelling legitimate grounds or legal obligations, we have the right to continue to process your personal data.

Rights relating to automated decision making and profiling: You have the right to not be subject to a decision which is based only on automated processing, i.e. without human involvement. In instances where a decision has a legal impact or otherwise significantly affects you, particularly. We confirm that we do not make automated decisions of this nature.

As referred to above, you also have the general right to withdraw the consent you have given us to process your personal data (in respect of our marketing activities) and where this processing is based on what we deem to be our legitimate interest.

You have a right to opt-out of any marketing communications, which players can do so by opting-out through your account. This can be found in your Account Settings under Personal Details > Emails and Notifications > Promotions and Marketing materials.

Please ensure you inform us of any changes to your information to ensure accuracy is maintained. You can do this by contacting our customer support team.