PRIVACY POLICY

Last updated 08/02/2024

Version 3.0.

Welcome to the GameTech Marketing Limited (hereinafter “The Controller”, “We”, “Our”, “Us”), privacy policy relating to the services (“Services”) rendered by LeoVegas and its related brands via its Affiliate website (“Website”) where your personal data (“Personal Data”) as defined under the applicable data protection laws are processed.

We respect your privacy and are committed to protecting your Personal Data and to processing it in compliance with applicable laws – notably:
- The EU and UK General Data Protection Regulations as may apply to your data;
- Any other applicable law.

This privacy policy will inform you as to how we look after your Personal Data when you visit Our Website and/or use Our services and tell you about your privacy rights and how the law protects you. Our goal is to always be as clear and transparent as possible, although, We appreciate that legal documents can sometimes be difficult to read. Please, do not hold back from contacting Us for any clarification you may need. You can find Our contact details below.

WHO WE ARE

1. GameTech Marketing Limited, is a company incorporated in Gibraltar with registered office at 327, Main Street Gibraltar, GX111AA, and forms part of the LeoVegas Mobile Gaming Group (hereinafter ‘Group’).
2. GameTech Marketing Limited is the entity responsible and acts as controller for the processing of personal data carried out via this website and for the purposes of managing and promoting the LeoVegas Affiliate program. We have appointed a global data protection officer (DPO) who is also responsible for overseeing questions in relation to this privacy policy. If you have any questions regarding the privacy policy or in order to exercise your rights as listed under part 8 of this policy, please contact Us or the DPO using the following details.
3. Email: privacy@leovegas.com
4. DPO contact email: dpo@leovegasgroup.com

CHANGES TO THE PRIVACY NOTICE AND YOUR DUTY TO INFORM US OF CHANGES

1. We reserve the right, at Our complete discretion, to change, modify, add and/or remove portions of this Privacy Policy at any time. You shall be informed by Us of any changes made to this Privacy Policy (as well as other terms and conditions relevant to the Website). We shall also archive and store previous versions of the privacy policy for your review upon request. You should also inform us if there is any change or update to your personal data.

THE DATA WE COLLECT ABOUT YOU

1. Data obtained from You when you sign up to our affiliate program:
   • a) Age
   • b) Name and surname
   • c) Email address
   • d) Telephone number
   • e) Gender
   • f) Nationality
   • g) Social Media Account
   • h) Bank Account Information
   • d) Analytics data with respect to your use of our Website and Services such as your IP address, click tracking, number of clicks on a game, number of visits to webpages.

Certain information is collected using cookies and/or similar tracking technology – please see further section “Cookies”.

2. If you fail to provide the requested Personal Data, We will not be able to provide you with Our affiliate services.
3. Data gathered or processed in connection with our affiliate program activities:From time to time, we may organise or participate in business events or similar activities where we connect with, introduce or otherwise promote our affiliate program to interested parties. In doing so, we may collect and process personal data as follows:
   • a) Name, surname and contact details when provided by interested parties (such as prospective affiliates);
   • b) Visual images (both videos and photographs) capturing individuals visiting our stand or dedicated area during the event.
4. We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

PURPOSE AND LEGAL BASIS FOR THE PROCESSING

1. The purpose and legal basis used in the collection of the categories of data set out in the previous clause is described below:
   • Name, surname, email address, phone, bank account information, Gender, Age, Nationality, and Social Media Account: This data is necessary and relevant for the purposes of performing our contractual relationship with yourselves as our Affiliate. The legal basis is our contractual relationship between ourselves when you sign-up to our Affiliate T&Cs.
   • Age: to make sure you have the legal age to receive direct marketing communications or promotions related to our product and services. The legal basis is Our legal obligation to target only individuals in the legal age.
   • Age and E-mail address: to send to you any promotions or direct marketing communications about the group products, services and different brands. The legal basis is your consent which you provide upon registration.
   • Analytic data to have a better understanding of how you use the Website. The legal basis is Our legitimate interest in learning how to offer a better service and user experience.
   • Name, surname and contact details provided by interested parties during business events or similar activities are processed for the purposes of initiating a business relationship (such as onboarding the contact as an affiliate). The legal basis is the data subject’s consent and/or our legitimate interests to reach out to individuals providing us with their contact information to initiate a business relationship.
   • Visual images (both videos and photographs) taken during business events or similar activities are used by the Controller or other Group entities to promote the LeoVegas Affiliate program or for other Group PR, branding and awareness initiatives. The legal basis is the data subject’s consent and/ or our legitimate interest.

RETENTION PERIOD

1. Criteria used to determine retention period: We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
2. The criteria We use to determine what is ‘necessary’ depends on the nature of the particular personal data in question. Our normal practice is to determine whether there is/are any specific EU and/or national law(s) (for example license requirement, tax or corporate laws) permitting or even obliging Us to keep certain personal data for a certain period of time (in which case We will keep the personal data for the maximum period indicated by any such law) and if not, whether there are any laws and/or contractual provisions that may be invoked against Us by you and/or third parties and if so, what the prescriptive periods for such actions are. In the latter case, We will keep any relevant personal data that We may need to defend Ourselves against any claim(s), challenge(s) or other such action(s) by you and/or third parties.
3. Where Your personal data is no longer required by Us or the legal basis we relied upon is no longer applicable, We will either securely delete or anonymise it.
4. If you register as an affiliate with Us, Your data will be stored for the duration of the contract and following the termination of the Agreement Your data will be retained for 6 years for the purposes of defending any legal claims that may be brought forward and being performed on the basis of a legitimate interest. In order to comply with our Tax and Accounting legal obligations, Personal data pertaining to registration data and transaction and usage data will be retained for 10 years from the date when the transaction was made. In the case of direct marketing data we will only retain this data 2 years after you terminate your contract with us.

RECIPIENTS OF YOUR PERSONAL DATA

1. Your personal data may be shared with other Group entities insofar as this is necessary to fulfil Your or Our own obligations established under the Terms and Conditions.
2. Where personal data concerning affiliate traffic is generated or processed via any other website pertaining to the Group, such data processing shall be subject to the privacy policy available on the respective website.
3. Your personal data relating to the affiliate services will also be disclosed to our technical service providers, such as, Netrefer, Google Analytics, Contentful and Bannerflow.
4. Personal data concerning visual images (photographs and videos) may be processed by third-parties engaged to provide these services (e.g. videographers) as well as by other Group entities if the material is posted on websites or social media channels managed by other Group entities.
5. Authorised disclosure: we will only share your Personal Data with relevant authorities upon request in the unlikely event of a legal investigation.

INTERNATIONAL TRANSFERS

1. Certain of our suppliers and partners (as highlighted above) are sometimes based outside of the United Kingdom (UK) and the European Economic Area (EEA) so their processing of your personal data will involve a transfer outside of these jurisdictions.
2. Whenever we transfer your personal data outside these jurisdictions, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
   • Transfer of your personal data is performed to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission and the UK.
   • Alternatively, where we use certain service providers, we may also rely on approved standard contractual clauses which are deemed to afford the same protection to the data when this is transferred outside the EU or the UK.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data.

YOUR RIGHTS UNDER THE DATA PROTECTION LAWS

1. As a Data Subject you have the following rights under the applicable data protection laws:
   • the right to access your data;
   • the right to have your data erased;
   • the right to have your data rectified;
   • the right to object to further processing;
   • the right to restriction of processing;
   • the right to data portability;
   • the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal;
   • the right to lodge a complaint with a supervisory authority. The competent authority in Gibraltar is the Gibraltar Regulatory Authority.

COOKIES

1. Our site uses cookies, for further information on what cookies are, which cookies we use, how and why we use cookies, and how you can control which cookies are dropped, please read our Cookie Policy.