1.OVERVIEW |
Welcome to the Betfair UK & Ireland privacy statement, which relates to our use of personal data of Betfair users in the United Kingdom (UK) or Republic of Ireland*.
(*For Betfair users residing outside the UK or Ireland, you can find the Betfair International privacy policy here.)
At Betfair UK & Ireland, we like to make things easier for our customers and that includes being clear and open about how and why we use your personal data.We know there`s nothing more off-putting than the sight of a lot of boring small print, so this privacy statement (Statement;) is designed for you to easily access the information you need, when you need it. It`s also written in plain English, to make it clear, simple, and easy to read.
This Statement applies to our websites, applications, online products or services that are made available to individuals located in the UK or Ireland that do not have a separate privacy statement (collectively our "Services").
In this first section of the Statement, we provide an Introduction to Betfair UK & Ireland (including our contact details), we provide information on Privacy and Data Protection at Betfair UKI, we explain How to navigate and read this document and we also explain how to stay abreast of Changes to the Statement.
We hope that you find this Statement helpful but if you have any concerns or questions please feel free to get in touch via the contact methods listed in the Contact details, including DPO section below.
References in this document to "us", "our", "we", Betfair UK & Ireland;, Betfair UKI" or BF UKI; are references to:
For more company information in relation to licensed entities and regulatory matters, please refer to the Betfair Regulatory Information page.
Please note that this Statement does not relate to customers of Betfair that are located outside the UK or Ireland. Such customers are customers of Betfair International;. Please refer to the Betfair International privacy policy for information on Betfair International`s use of personal data.
Betfair UKI is a member of the Flutter Group of Companies. Any reference to the "Group" within this Statement includes Flutter Entertainment plc and all or any of its direct or indirect subsidiary undertakings, joint venture partners, and their related companies wherever located in the world as may exist from time to time including, but not limited to, Paddy Power, Sky Betting and Gaming, Tombola, Betfair International, Sportsbet, FanDuel, TVG, Adjarabet, Junglee Games, Sisal and PokerStars.
The Flutter Group is split into four regional divisions, namely UK & Ireland (UKI;), US, Australia and International, with each one housing a number of the abovementioned Flutter Group brands. Betfair UKI is within the U &I division, alongside Paddy Power, Sky Betting and Gaming, and Tombola.
Please note that the Flutter Groupalso operates other gambling companies and your use of those products and services will be subject to privacy statements that may differ to the one contained herein. Any exercise of your privacy or data protection rights in accordance with this Statement will only relate to the personal data being processed by the Betfair UKI companies listed in the Controller details section and will not apply in regard to any products or services operated directly by the Flutter Group unless otherwise stated in this Statement.
The Flutter Group operates separate privacy policies for individuals residing in the UK which are available at:
PokerStars UK users: https://www.pokerstars.uk/privacy/
Paddy Power: https://www.paddypower.com/aboutUs/Privacy.Policy/
Betfair non-UK or Ireland users: [URL need
Sky Betting and Gaming: https://support.skybet.com/s/article/Privacy-Policy
Tombola: https://www.tombola.co.uk/privacy-policy
If you have any concerns about how Betfair UKI handles your personal data, you can contact our Data Protection Officer (DPO) and Data Protection Team at:dataprotection@paddypowerbetfair.com. If you wish to exercise your Data Protection rights, please see YOUR DATA SUBJECT RIGHTS.
Data protection is all about keeping your personal data safe and secure, and ensuring that your legal rights in relation to your data are respected. Privacy is a fundamental right, and you are entitled to have your personal data protected, used in a fair and legal way, and made available to you when you ask for a copy.
At Betfair UKI, we take the protection of our customers` personal data and privacy very seriously, and we never lose sight of the fact that your personal data is YOUR personal data.
We believe in using your personal data to make things simpler and better for you, and we will always keep your personal data safe using the highest standards of security.We`ll be clear and open with you about why we collect your personal data and how we use it, and where you have choices or rights, we`ll explain them to you and respect your wishes.
What`s more, we manage customer personal data in a tightly controlled way to ensure we deliver our products in a safe and reliable fashion, to do all we can to proactively protect our customers from harm, and to ensure our business meets its legal and regulatory obligations and is protected against attack, crime or other potential risks.
To meet these commitments, we employ the following 5 principles at Betfair UKI. These principles are at the heart of everything we do and ensure that your rights are considered at every step.
We have designed this Statement so that you can easily access the information you need. It is split into four parts as follows:
For information on cookies, please see our onsite Cookie Banners, onsite Privacy Preference centre (located at the bottom of our websites) or visit our Cookie Policy
It is important to check back often for updates to this Statement. If we make material and important changes, we will let you know by placing a notice on the relevant Service and/or contacting you using other methods such as email.
2.PERSONAL DATA TYPES WE USE |
We gather and use different types of personal data that you provide to us, that is generated through your use of our Services or is which we have collected from other sources. This data includes your registration information, verification and know your customer documentation, your interactions with our customer operations teams, payment information, betting and transactional information, financial information, safer gambling information, device, tracking and other online information, profiling and analytical information, as well as information from other sources including public sources and trusted third parties.
Below, you can find out more about the personal data submitted by you, the personal data generated from your use of our Services, and personal data obtained from other sources.
When using our Services, we collect the following types of information provided by you:
Registration Information
When you register an account with us, you are required to provide us with your name, date of birth, gender, postal address, e-mail address, phone number, security questions, marketing preferences and any other details as might be requested from you for the purpose of registration and/or continued use of our Services.
As a condition to using our Services, we will ask you to share your precise geolocation so we can ensure that we are authorised to provide the Services to you in your location.
Verification and Know Your Customer ('KYC') Information
In order to verify your identity, you may be required to provide documents such as a copy of your passport or driver`s licence, documentation establishing your address such as utility bills, or any other information we deem necessary to confirm your age and/or identity.
Interactions with Customer Operations
When you interact with our customer operations via live chat, phone, email or social media platforms we will retain a record of your conversations with our staff, as well as notes relating to these interactions and their outcomes.
Where you contact us through a social media account we will be provided with a copy of the social media profile details (name, profile photo and other information) you make available to us as well as the content of your messages to us.
Payment Information
Information in relation to your chosen payment method such as debit card details, cardholder name, e-wallet details, or information in relation to your alternative payment method.
Financial Information
Payslips or other documents proving your source of wealth and/or source of funds including but not limited to proof of earnings, bank statements and evidence of business ownership.
Safer Gambling Information
Data your provide to us in relation to concerns you may have about gambling risk, harm or safety, or as part of a vulnerability assessment. Some other Safer Gambling Information is also created while you use our Services see Data created by using our Services below.
Posts, Comments and Messages
Information about the way you contribute to and communicate with, and through, our Services, for example when you post comments via our social media channels or chat functionalities such as forums, chat rooms and message boards, profile comments, blog post comments, in-game challenges and chat messaging with game operators or other users.
Responses to Surveys and Market Research
Responses to surveys or market research that we conduct.
Special Category Data
Special category data is personal data that needs more protection because it is sensitive. It includes biometric data that may be used for identification purposes, genetic data, data concerning an individual`s health, sex life or sexual orientation, or personal data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs.
In the course of your contacts with customer operations, if you provide information to us on health conditions that you may have, we may retain this information and use it to add further protections to your account, where appropriate.
Especially, where you have vulnerabilities which may affect your ability to safely use our Services, we may request further information or may take extra steps to enhance protection for you. This may involve health information.
We will only ever use special category data when absolutely necessary and where lawful to do so. Where possible, we will always ask for your consent before we proactively request or use this information. In limited circumstances where consent is not possible, we may need to use this information to protect your vital interests or for reasons of substantial public interests in accordance with law.
Some of the personal data we process relating to you is generated by your use of the Services .
Betting and Transactional Information
Your betting, gaming, deposits, payments, and other account transactions.
Safer Gambling Information
Safer Gambling controls that you decide to apply through your use of our Services, such as deposit limits, cool off periods, or self exclusions, or controls that we pro-actively decide to apply in order to prevent harm, such as spend limits or enforced exclusions.
Device Information
Details relating to your device and communication data, including IP address, browser type, unique device identifier, Apple`s identifier for advertisers (IDFA;), hardware model, operating system and version, software, preferred language, serial numbers, device motion information, mobile network information and location data.
Server Logs and Traffic Information
Information such as dates and times of access, the app features or pages you view, app crashes and other system activity, and the third-party site or service you were using immediately before visiting our site.
Cookie and Tracking Information
When you access or use our content, products, and Services, we may collect information from your devices through the use of 'cookies' and similar technologies.
These technologies can collect a wide variety of information about how you interact with our Services, such as your language preferences, pages visited and content viewed, links and buttons clicked, and URLs visited before and after you use our Services.
For further detail on cookies, please refer to our Cookie Policy To manage your cookie preferences, please go to our onsite Privacy Preference centre (located at the bottom of our websites).
Information derived from Profiling and Analysis
We carry out profiling and analysis to understand our customers and business as best we can. The analysis and profiling is based on various different data points, which differ depending on what we are trying to understand. For example, profiling and analysis to predict a customer`s risk of gambling related harm will be based on different data than the models used to provide you a more personalised version of our Services. The data used may include what we know about you, such as your age, location, betting and transactional information, interactions with us and our Services, etc., as well as other relevant data points such as aggregated (non-personal data) data or data about you that we have obtained from publicly or commercial available sources.
Not all the personal data we hold about you will always come directly from you or from your use of our Services. As detailed below, we may also collect information from third parties such as our partners, service providers and publicly available websites (i.e. social media platforms), to comply with our legal and regulatory obligations, offer Services we think may be of interest, to help us maintain data accuracy and to provide and enhance the Services.
Social media profile details
Your name, profile photo and other information you make available to us when you connect with or contact us through your social media account.
Credit Reference Agencies
Data provided by trusted credit reference agencies who may perform a soft check for verification and affordability purposes which do not affect your credit score. A record of the outcome of these checks is provided back to us.
Publicly Available Sources
In accordance with our legal obligations, we may consult publicly available information about you such as your social media pages, information available on the world wide web, property ownership details, the electoral roll, publicly available company information , area deprevation information pr other information from national statistics offices, industry bodies of which you may be a member, County Court Judgments and insolvency registers.
From other Flutter brands
In some circumstances, as detailed in the HOW AND WHY WE USE YOUR PERSONAL DATA and Group sharing sections below, we may receive or get access to some personal data from other brands within our Flutter Group. For example, and as detailed in the Safer Gambling section below, we operate a cross brand self exclusion mechanism between the Flutter Group brands that operate in the UK whereby if you self exclude from Paddy Power, Sky Betting and Gaming, Tombola or PokerStars, that data will be shared with us here in Betfair UKI so that the exclusion can be applied to Betfair UKI as well.
Information from your family, friends or contacts
Data may be received by us from third party contacts if you ask for a family member to support you with the management of an issue or complaint, if you have legal power of attorney representing you or if someone contacts us to tell us about a customer of ours who they have concerns about. In these instances we will have records of the third party contact details and recordings of the interactions. For the avoidance of doubt, we will also need to obtain and use contact information from these third party family members, friends or contacts in order to manage our communication with them strictly and only for the purposes mentioned above.
Information from law enforcement, courts or other bodies
Data about you may be received from law enforcement, courts, government bodies, regulatory bodies or other similar bodies as part of an information disclosure request we receive.
3.HOW AND WHY WE USE YOUR PERSONAL DATA |
We only use your personal data where necessary and where it is lawful to do so. Our use of your personal data is needed to enable us to deliver the Services to you, to meet our legal or regulatory obligations, to meet or protect yours, ours, the wider public`s or other third parties` interests, and sometimes for other reasons only where we have your explicit consent to do so.
Below, we explain how and why we need to use your personal data, providing you with information on our different uses of your personal data. This includes detailed information on the reasons for using your data, the types of personal data we use and also information on the legal basis for using your data, which may include using your personal data:
Click on each different use of personal data below to find out more about how and why we use your personal data.
All visitors to Betfair UKI websites, apps or other online assets that are covered by this Statement.
Site and app performance, diagnostics, research and development
We use your personal data to provide you with the Services and ensure that our sites and apps are functioning correctly.We use technical information about your device, operating system and browser version to present you with the correct version of our website or app and to keep it functioning securely. This information is also used to diagnose system problems, improve and test the features and functions of our Services, and carry out testing.
Site and app localisation
In order to abide by our legal and regulatory requirements, we will also check your location to ensure users are using our Services in licensed countries, and that the correct version of the site is presented to them.
Site and app analysis
We conduct analysis of the performance and usage of our website and apps to help improve your user experience. This analysis is based on cookies and similar tracking technologies, which are used subject to your consent. For further information on cookies, please refer to our Cookie Policy. If you are a customer of ours, this website and app analysis data may be combined with other personal data we hold about you and used as part of some of our wider customer analysis purposes, which are explained in other sections of this Statement.
|
Purpose |
Categories of PD |
Legal basis |
|---|---|---|
|
Site and app performance, diagnostics, research, and development: To ensure our Services are operating correctly, to help diagnose system problems, to administer our websites and apps, to improve and test the features and functions of our Services, and to carry out testing and analysis. |
Device Information Server Logs and Traffic Information |
Performance of a contract |
|
Site Localisation Verifying that you are using the site in a licenced jurisdiction and presenting you with the correct version of the site. |
Registration Information Device Information |
Performance of a contract Legal and Regulatory Obligations |
|
Analysis Statistics and analysis on how users interact with our Services. |
Device Information Server Logs and Traffic Information Cookie and Tracking Information Information derived from Profiling and Analysis |
Consent, where required to use non-essential cookie or related information |
All customers that register and verify an account.
Account Registration
When you register an account with us, you are required to provide us with certain information in order to set up your account and begin the relationship with you as a customer.
Electronic Verification
As part of the registration process, we electronically check the information you provided to us at registration against trusted third party databases in order to verify your age, address and identity. This allows us to ensure that you are who you claim to be and that you are old enough to use the Services. This may include checks against publicly available available information, such as electoral rolls, to verify the accuracy of the details you have provided.
Document Verification
Unfortunately, the electronic verification checks are not perfect, and we cannot validate 100% of our customers electronically. This is not the fault of you, the customer, but a limitation of the databases we use. In these circumstances, you will be required to provide us with a copy of your photographic identification, such as passport or driver`s licence. We may also ask you to provide us with proof of address, such as a copy of a recent utility bill.
Once you provide your identification documentation, we will perform matching checks against information entered when opening an account and if the match is confirmed, verification is successful. Where we have been unable to successfully match a customer`s details, an account suspension may be applied. The process is overseen by our Customer Operations teams. To allow quicker account registration, should you open a betting account with Betfair UKI and you already have an account with Paddy Power, we may use the verification documents submitted to Paddy Power in order to complete the verification for your Betfair UKI account (and vice versa). If you have any queries or concerns about the verification process or an account suspension, please get in touch and one of our advisors will be able to assist.
Additional Validation Checks
At the point of registration, several system checks are performed to prevent a customer opening duplicate accounts, prevent registration from prohibited jurisdictions and to prevent and protect our Services against risk, fraud and crime.
Affordability
To help us comply with our legal and regulatory obligations, we may perform an affordability check, to ensure you have no markers of financial vulnerability when you use our Services. This assessment is performed on our behalf by a trusted third-party, TransUnion, and will leave a search footprint which will not negatively impact your TransUnion credit score. For further information, please refer to TransUnion`s Privacy Statement: http://www.transunion.co.uk/legal-information/bureau-privacy-notice
|
Purpose |
Categories of PD |
Legal basis |
|---|---|---|
|
Account Registration Gathering essential information from you in order to set up your account and begin the relationship with you. |
Registration Information |
Performance of a contract Legal and regulatory obligations |
|
Electronic Verification Eletronic verification of a customer`s age, address and identity using trusted third parties. |
Registration information Verification and KYC Information Publicly Available Information |
Performance of a contract Legal and regulatory obligations |
|
Document Verification Verifying customer`s identification documents. |
Registration Information Verification and KYC Information |
Performance of a contract Legal and regulatory obligations |
|
Additional Validation Checks Checks to prevent fraud, crime and breach of our terms and conditions. |
Registration Information Verification and KYC Information Device Information Cookie and Tracking Information Publicly Available Information |
Performance of a contract Legal and regulatory obligations |
|
Affordability Check (UK Customers) Checks, using a trusted Credit Reference Agency, Transunion, to verify how much you can afford to spend onsite. |
Registration Information Verification and KYC Information |
Performance of a contract Legal and regulatory obligations |
All registered customers who add a payment method to, deposit to or withdraw from their account.
Processing payment method additions, deposits and withdrawals
In order to process your payment method addition, deposits and withdrawals, we will use information in relation to your chosen payment methods. These details are used to provide you with swift and secure deposits, to prevent, where possible, fraudulent use of your payment methods, and to monitor trends and performance in relation to our payment Services.
When you make a deposit and withdrawal to your account, your card details or details in relation to your bank or e-wallet provider will be used in order to process these transactions.
Investigating escalations and complaints relating to payments
If you have concerns in relation to a deposit or withdrawal that you have made, we will investigate your query promptly and may use further information in relation to your account to support this investigation. You may be asked to provide further information, and in certain circumstances, we may contact your bank or payment provider to resolve the issue.
Monitoring alerts and Reporting
We perform monitoring on all payment method additions, deposits or withdrawals made, and also on your location, IP address or device, in order to rapidly identify suspicious activity, including activity that may be in breach of our Services terms and conditions. These processes use the minimum personal data necessary to alert the relevant teams who may then investigate further.
Payment proof of ownership
In certain circumstances, where we have concerns over payments being made on customer accounts, we may perform additional due diligence to confirm that funds are being sent and received from the true owner of the account. We may examine details in relation to your location, IP address or device to confirm where payments are being made from. We may also require you to submit additional verification documentation to confirm your ownership of the payment method in question.
|
Purpose |
Categories of PD |
Legal basis |
|---|---|---|
|
Processing payment method additions, deposits and withdrawals Using your payment details to process the transactions you request. |
Registration Information Payment Information Device Information Cookie and Tracking Information |
Performance of a contract |
|
Investigating escalations and complaints relating to payments. Investigating concerns you or others may raise in relation to payments made on your account, or using your payment information. |
Registration Information Payment Information Betting and Transactional Information Device Information Cookie and Tracking Information |
Performance of a contract Legal and regulatory obligations Consent, where required to use non-essential cookie or related information |
|
Monitoring alerts and Reporting Real-time monitoring of deposits and withdrawals to identify trends and transactions requiring further review |
Registration Information Payment Information Betting and Transactional Information Device Information Cookie and Tracking Information |
Performance of a contract Legal and regulatory obligations Consent, where required to use non-essential cookie or related information |
|
Payment proof of ownership Confirming funds are being sent or received from owner that holds account with us |
Registration Information Payment Information Betting and Transactional Information Device Information Cookie and Tracking Information Verification and KYC Information |
Legal and regulatory obligations Performance of a contract Consent, where required to use non-essential cookie or related information |
All registered customers who transact, view and place bets or play games on the website(s) or mobile app(s).
Providing our Services
We will use your information to deliver the Services and process the bets and transactions that you make. For these purposes, your betting and transactional information may be analyised in order to improve the Services we provide, in order to investigate and resolve issues with the functioning of the Services, and in order to fulfil promotions you have opted into. This processing is in line with the Services terms and conditions and any promotion terms and conditions which you have agreed to.
Onsite/In-App Personalisation
Where relevant, we use personal data to deliver and suggest tailored content to personalise your experience with our Services. This is processing which is necessary for the purpose of our legitimate interests in delivering or presenting relevant content to our customers.
Whichever Services you use, wherever and however you interact with us, we want to give you the same great level of service and make it personal to you. We will tailor your experience, personalising the layout and content of our sites according to what we know about you, your preferences and the way you like to play or bet. For example, we will present you with features we know you have used or think you are likely to use or show you the type of score card or bet slip that best suits your style of betting.
We also look at aggregated (non-identifiable) data showing how our customers use our products and features and which games they tend to enjoy. We use this information to suggest games we think you`ll enjoy because they are popular with others who play the same games as you.
We believe this personalised experience makes betting and gaming better and we want to give you the best customer experience we can. Using your personal data in this way enables us to do that in a way that we believe does not have an impact on your privacy. If you don`t want your data used in this way your option is to not use our Services and to close your account.
Please note that some aspects of your customer experience are provided via cookies. If you have provided consent for these cookies, we will personalise certain aspects of our site, such as remembering your user name and location. You can change these preferences at any time via our Cookie Management centre located at the bottom of our websites. For more information visit our Cookie Policy
Risk Management
In order to provide the Services to you in accordance with the Services` terms and conditions, and for our legitimate purposes, we process your personal data to evaluate our commercial performance and manage risks to our business.
Most people use our products and Services fairly, but we carry out monitoring of how our customers bet, play and interact with our products and Services, to identify behaviour that is not in line with our customer Terms & Conditionsor that could be prejudicial to our commercial interests.
At our discretion, we have the right to use this information in making decisions about whether to place restrictions on people`s accounts or, on very rare occasions, to close their accounts.We take this very seriously, and consider a wide variety of factors in making such a decision, taking into the information we hold about you as well as any information obtained from industry databases. The processes may involve an element of profiling, upon which decisions to restrict or close an account may be made. These decisions are made in accordance with our terms and conditions. If you wish to query or challenge any restriction, you can do so by contacting our support teams.
Customer Analysis
We carry out analytics to help us understand, how, when, where and why our customers use our Services, and how our business is performing. This helps us monitor and plan everything from the effectiveness of our advertising through to ensuring we have enough staff available to handle queries at peak times. It also gives us a much clearer picture of our customers generally, the broad demographic groups they fit into (e.g. age group, gender, location, etc.), their commercial value to us as a business, and the products and Services they use, which in turn helps us to develop better and more relevant features, products and Services.
Chat Rooms, Messaging, Community Forums and Blogs
A number of our Services provide features including chat rooms, messaging, community forums and blogs for collaboration, peer connection, games, and information exchange purposes. Depending upon the Service, the personal data you choose to post, share, upload, or make available may be public and visible to others who use those Services. You should never post or share any information that is confidential or about others unless you have permission to do so. We may use information you provide in community and event profiles and forums to personalise your experience and to make content and peer connection recommendations. These Services may have their own terms of use and, where appropriate, their own privacy statements.
|
Purpose |
Categories of PD |
Legal basis |
|---|---|---|
|
Delivery of The Services Providing the Services and processing the bets and transactions that you make |
Registration Information Payment Information Betting and Transactional Information Device Information Cookie and Tracking Information |
Performance of a contract Consent, where required to use non-essential cookie or related information |
|
Onsite/In-App Personalisation Tailoring your onsite experience to match your preferences |
Registration Information Betting and Transactional Information Cookie and Tracking Information Device Information Information derived from profiling and analysis |
Legitimate Interests Consent, where required to use non-essential cookie or related information |
|
Risk Management Manual and automated oversight of your activity to evaluate and manage commercial risk to our business. This may include, where appropriate, placing restrictions on your account or, on very rare occasions, closing your account. |
Registration Information Betting and Transactional Information Posts, Comments and Messages Device Information Information derived from profiling and analysis |
Performance of a contract |
|
Customer Analysis Monitoring and analysing customer behaviour to improve the performance of our business |
Registration Information Betting and Transactional Information Device Information Server Logs and Traffic Information Cookie and Tracking Information Information derived from profiling and analysis |
Legitimate interests Performance of a contract Consent, where required to use non-essential cookie or related information |
|
Chat rooms, messaging, and community forums Provide chat, messaging, forum functionality or blog post comment capabilities as a component of certain elements of our Services |
Registration Information Device Information Posts, Comments and Messages |
Performance of a contract |
This section applies to any person that contacts Customer Operations via email, chat, phone, and social media.
Queries and account openings/closures
From time to time, you may experience issues with or have queries about your account or the Services. You may also need assistance in opening or closing an account with us.
When you contact our Customer Operations teams via the contact methods we offer, we will use information relating to your account and activity, as well as the information you provide to our staff, to investigate your query and work towards a resolution.
In order to process your query, you may be asked for additional information in relation to the issue you are facing. Any information you provide may be shared internally with other relevant operational teams. For example, if you raise a concern in relation to Safer Gambling, your details may be shared with our Safer Gambling teams for further review.
Complaints and Alternative Dispute Resolutions
Should you decide to raise a complaint, a dedicated complaints procedure will be followed, including, where appropriate, escalation to our dedicated complaints team. If you remain dissatisfied by the final outcome of the investigation, and still wish to pursue a dispute or complaint, then you can raise a complaint with one of the Alternative Dispute Resolution ('ADR') providers, that Betfair UKI engage with. In such circumstances, we may share any information we deem relevant to the dispute with the relevant ADR provider.
NOTE: For information about contacting Customer Operations for Safer Gambling reasons, please see the Safer Gambling section below.
|
Purpose |
Categories of PD |
Legal basis |
|---|---|---|
|
Queries amd account openings/closures Resolving queries related to your account or the Services, or processing data to register or close accounts via our Customer Operations team. |
Registration Information Verification and KYC Information Interactions with Customer Operations Posts, Comments and Messages Device Information Betting and Transactional Information Social media profile details |
Legal and regulatory obligations Performance of a contract |
|
Complaints and Alternative Dispute Resolution Investigate complaints and work towards a resolution. Sharing information to defend complaints made by you to ADR providers. |
Registration Information Verification and KYC Information Interactions with Customer Operations Posts, Comments and Messages Device Information Betting and Transactional Information Social media profile details |
Legal and regulatory obligations Performance of a contract |
Anyone to whom Betfair UKI directly or indirectly markets, promotes or advertises its products
Types of Marketing
(i) Direct Marketing
Subject to any consent preferences you have expressed (where applicable), we use personal data to deliver marketing and event communications to you across various platforms and methods, such as email, SMS, post, phone and push notification.
We will do this during the period of your relationship with us and, unless specifically instructed otherwise by you, for a maximum of 2 years after your account has been inactive in order to inform you about products, services, promotions and special offers which we think may be of interest to you.
If you wish to opt out of receiving direct marketing through specific channels (i.e. email, SMS, post, phone and push), about specific products (i.e. sports or gaming), or about products offered by other companies within the Flutter Group, you can do so by going to your MyAccount section when you login to your account and changing your channel, product or Flutter Group direct marketing preferences.
Please allow up to 28 days for any changes you make to your marketing preferences to be fully processed. Please remember that even if you opt out of receiving direct marketing, we may still send you important information related to the Services. Also, please note that if you opt out of direct marketing, you will still continue to receive bespoke offers and bonuses online while using the Services unless your personalised marketing preferences are updated – see ‘Personalised Marketing’ below.
Please note that if you hold separate accounts within the Group, you should consider your marketing preferences for each separately. For example, if you opted out of marketing for any other product within the Flutter Group and not Paddy Power, you will continue to receive marketing communications directly from Paddy Power unless updated.
(ii) Online and Social Marketing
We will work with social media companies (such as Facebook and Twitter), online advertising platforms (such as Google) and other trusted third parties and websites across the world wide web to provide you with information about our Services via their platforms.
Where these third parties accept information from advertisers like us and where you are not on a safer gambling related exclusion list, we may share limited personal data with those companies to enable us to send you information via their platforms or their partners, or market to audiences within their platforms who share similar characteristics to you. The third parties may also obtain information about you from cookies placed on our domains, if you have opted-in to third party advertising cookies.
You can opt-out of personalised marketing and cookies at any time if you do not wish to receive targeted marketing like this online. An opt-out of personalised marketing means you will be excluded in the audience lists we share with social media platforms or trusted online advertising partners. An opt-out of cookies means you will be excluded from the information derived from cookies placed on our sites and apps by social media platforms or advertising partners. See the Personalised Marketing section for information on opting-out of personalised marketing. You can control the use of cookies via our onsite Cookie Banner or our onsite Privacy Preference centre (located at the bottom of our websites). For further information, please visit our Cookie Policy.
Please note that you may still see adverts from us online, even if you are opted-out of personalised marketing and opted-out of cookies. This type of display, non-targeted marketing is not based on any personal data held or controlled by Betfair UKI. If you do not wish to see these adverts, you can control this easily by disabling preference-based marketing in the privacy and ad settings on each individual online platform, such as Facebook, Google, Bing or YouTube. Further information is provided in our Cookie Policy.
(iii) Onsite or In-App Marketing
We use our marketing audience information to provide you with personalised banner advertisements, bespoke offers and bonuses, and other forms of marketing while you are using our websites or apps. To remove yourself from such marketing audiences, you can opt-out of personalised marketing – see Personalised Marketing section for details. Some personalised banner adverts on our sites and apps are controlled separately through cookies, so you will need to adjust your cookie settings if you do not want to see them. You can control the use of cookies via our onsite Cookie Banner or our onsite Privacy Preference centre (located at the bottom of our websites). For further information, please visit our Cookie Policy
Other Marketing & Communication Information
Personalised Marketing
At Betfair UKI we want to make betting and gaming better for you, so we want to be able to tell you about products, Services and features that you will find exciting and relevant, and we tailor the offers and information we send to suit you.To do this, we look at what we know about you - such as your, age, location, your interactions with our Services, the domain you arrived from if you clicked a link to our site, your betting and gaming history and patterns with us, your social media usage and how you interact with us - and we use it to build up a picture of you that helps us decide what you`re most likely to want to hear about. For example, if the majority of your bets are placed on horse racing, we will aim to primarily send you marketing material related to horse racing. We also combine this with information we`ve obtained from publicly or commercially available sources about the things people with similar characteristics to you (in terms of age, gender, location etc.) tend to be interested in so we can fine-tune the offers we present to you.
This data is used to build our marketing audiences, which are then used for the above targeted marketing purposes, enabling us to provide you with more personal and relevant marketing, including tailored offers and bonuses. We think this makes our marketing better both for you and for us. However, if you would prefer us not to use your profiled data to deliver personalised marketing to you, you can opt out at any time via your ‘My Account’ by opting out of Personalised Marketing. If you choose to opt out, you won’t be included in our audiences for direct marketing or for personalised online, social media or onsite marketing, and you won’t get to hear about bespoke offers and bonuses, but don’t worry – we will continue to personalise those aspects of your online experience that are not marketing related. So, for example, you will still see games you recently played. Please also note that the following activities are not impacted by an opt-out of personalised marketing:
iOS Users
For iOS Users, every iOS device is assigned an Identifier for Advertisers (IDFA) which enables app owners and advertisers to track campaigns and deliver personalised advertising. If you are an iOS user and have opted into tracking for Betfair UKI, your IDFA (Identifier for Advertisers) is used to deliver you personalised advertising that is relevant to you (based on information we have about you, including browsing history, transactional information, demographic information and behavioural information, predictive information we create about you in each case in relation to our Services and advertising and information about what other people with similar interests, demographics and behaviours are looking at) and is used for attribution and analytics purposes to tell us when and how you have interacted with advertisements, including those that have been placed on a third party site or app, and so we can assess the effectiveness of our campaigns. You can opt-out of this at any time by visiting your mobile settings (by going to Settings > Privacy > Advertising and turning on Limit Ad Tracking).
Promotional Content and Events
We may publish players aliases and/or chat names, along with any winnings and prizes received, on our websites in accordance with our legitimate interests. Similarly, where you attend an event that is organised or sponsored by us, we may, at our discretion, use footage recorded at such events as part of future promotional content.
Surveys and polls
If you choose to participate in a survey or poll, any personal data you provide may be used for marketing or market research purposes in accordance with our legitimate interests.
|
Purpose |
Categories of PD |
Legal basis |
|---|---|---|
|
Direct Marketing Tailored marketing communications to you via email, SMS, post, phone or push based on the contact preferences you have selected. |
Registration Information Betting and Transactional Information Device Information Cookie and Tracking Information Information derived from profiling and analysis Safer Gambling Information (used only to prevent marketing to vulnerable individuals) |
Consent |
|
Online and Social Marketing Advertising our Services through social media, online advertising platforms and other trusted third parties and websites across the world wide web. |
Registration Information Device Information Cookie and Tracking Information Information derived from profiling and analysis Safer Gambling Information (used only to prevent marketing to vulnerable individuals) |
Legitimate interests Consent (Where targeting is delivered using tracking technologies) |
|
Onsite/In-App Marketing Banner advertisements, offers and bonuses, and other forms of marketing while you are using our websites or apps |
Registration Information Device Information Cookie and Tracking Information Information derived from profiling and analysis Safer Gambling Information (used only to prevent marketing to vulnerable individuals) |
Legitimate interests Consent (Where targeting is delivered using tracking technologies) |
|
Marketing Personalisation Using information we hold on you to predict and offer you the type of content and offers that we believe you will enjoy. |
Registration Information Betting and Transaction Information Device Identifiers Cookie and Tracking Information Betting and Transactional Information Information derived from profiling and analysis Safer Gambling Information (used only to prevent marketing to vulnerable individuals) |
Legitimate interests Consent (Where targeting is delivered using tracking technologies) |
|
Promotional Content Publishing details of your alias and winnings, or footage from promotional events. |
Registration Information Betting and Transactional Information Video Footage |
Performance of a contract (publication of winners) Legitimate interests (events) |
|
Surveys and Polls Using your responses to surveys and requests for feedback to improve the Services we deliver. |
Responses to Surveys and Market Research |
Legitimate interests |
All customers of BF UKI.
In order to protect our customers and the wider public from the harms caused by fraud, we employ a range of processes and tools to identify and prevent improper use of our Services.
These systems help us ensure that customers are genuine, haven`t registered more than once, and are not fraudulently trying to access accounts that don`t belong to them.
Registration, Verification & Payment Process
As detailed in the Registering & Verifying Your Account, Processing Your Payments and Delivery of the Services sections above, when you set up an account with us, place bets or play our games, we carry out identity verification and fraud prevention checks. These checks help us confirm that you are old enough to use our Services and that the details you have provided are genuine.
Detection and Prevention
We review your use of the Services, including chargeback, card fraud, account takeover, and use of promotional offers and bonuses, to ensure they are in accordance with our customer Terms & Conditions.
We may share your personal data with organisations that verify details and transactions and identify potential indicators of illegal activity, which they make available to other organisations using their Services.Where necessary, we share your data with credit reference agencies or fraud prevention agencies, which keep a record of that information and make it available to other organisations for use in credit decisions, identification checks and fraud detection and prevention.
While using our Services, we monitor your activity to validate the authenticity of transactions and to ensure no fraudulent behaviours are occurring on our platform. For example, if a login is detected from a device or location other than that normally used on your account, we may conduct a further review or request further information.
Escalations, Investigations and Restrictions
Where a suspected or actual incidence of fraud or account takeover ('ATO') has been identified or reported to us, we may apply withdrawal restrictions to your account(s) to prevent further fraudulent activity while we perform further investigations, including, where necessary, escalation to our fraud reporting teams, or we may suspend your account(s) and activity entirely. In such cases, we may request further information from you to validate the activity on your account. We may also use information such as your KYC information, device information, information sourced from third parties and publically available sources to support these investigations.
If you notice any suspicious activity in relation to your account, or wish to query or challenge a suspension or restriction on your account, please contact our Customer Operations team.
Cooperation with Regulators, Law Enforcement Agencies and similar bodies
Where required to do so, we will pass information to the police and other law enforcement agencies, regulators and other similar bodies.
Reporting and Analysis
Our fraud team perform regular reporting and analysis to identify trends in fraud activity on our Services, in order to provide the highest degree of protection to our customers. This helps ensure that our fraud prevention processes are performing as efficiently as possible.
All customers of Befair UKI.
At Betfair UKI, our customers are at the heart of everything we do. We specifically design our products and Services with this in mind to facilitate a great customer experience, whilst also ensuring customers are protected.
Customer Monitoring and Interaction
As part of our Safer Gambling framework, we proactive monitor your activity on our sites in real time and retrospectively so as to identify potentially harmful play, and where necessary, take actions to ensure your safety onsite.
We use a combination of machine learning, automated detection systems and manual review to supervise customer activity for the purpose of identifying Safer Gambling risks, and we also have a dedicated team in Customer Operations to deal with any Safer Gambling concerns that may be flagged to us by you or other individuals connected to you, such as family or friends. Where potentially dangerous activities are flagged, we may take action. This can range from emailing or calling you to ensure you are comfortable with your level of spend to proactively closing your account for a period of time. Where we are unable to interact with you, we may need to take enforced action until such a point where we can communicate with you.
As part of these processes, we will use a range of data points taken from your behaviour and attributes to identify potentially problematic activity. We use elements of profiling and automated analysis techniques to identify such activity and to apply account limitations as and where appropriate. This is in accordance with our licensing requirements to conduct pro-active engagements to prevent gambling harm.
You can get in touch with our Customer Operations team at any stage if you have concerns about your gambling, concerns about another customer`s gambling or if you wish to challenge any restrictions that have been placed on your account, including those that may have been applied as a result of our automated Safer Gambling processes. All Safer Gamling related matters are dealt with by a dedicated Safer Gambling team with our Customer Operations units. Please see the Contacting Customer Operations section above for information on how we use your data in this regard.
Requesting Supporting Information
While using our Services, you may be asked for additional information about yourself or the source of your account funding from our Safer Gambling team. This process assists us to ensure that we can get to know you and provide you with a safe customer experience, as well as helping us fulfil our licencing requirements.
We may ask for supporting evidence where a request is made to challenge Spend Limits` (limits applied by us to cap the maximum spend on some accounts for certain customers), Global Deposit Limits` (limits placed by us to cap the maximum amount that can be spent on all customer accounts) and as part of our standard Enhanced Due Diligence` ('EDD') processes. Documents that may be requested include, but are not limited to; proof of identity, proof of earnings, bank statements and evidence of business ownership. If You are unable to provide any of these documents, then we may suspend or restrict your account until you provide the requested information.
Vulnerability
If any specific vulnerabilities are identified throughout our standard interaction process, we may take extra steps to enhance protection for our customers. We will seek consent before we take such steps, and if obtained, we will ask the appropriate questions necessary to understand any vulnerabilities and impacts. Reasonable adjustments and protections may be agreed with you, to help best protect you from any potential harm caused by your specific vulnerabilities.
Such processing will always be performed with the highest regard to the privacy and security of your data, Any vulnerability assessment will be subject to customer`s consent. Customers will be clearly and specifically informed of the process and will have the choice to provide freely given consent. Customers may also withdraw any given consent at any time. If consent is obtained, the personal data will only be retained for as long as is necessary to meet our legal, regulatory or legitimate business requirements, or until such time as you withdraw your consent.
Customers are also free to withhold consent, at which point the assessment will not go ahead. However, in the event that specific vulnerabilities may fall under a wider scope within Safer Gambling concerns, the business may restrict your account. In other words, where consent is withheld but we still have Safer Gambling concerns, we may restrict your account.
Exclusions
Betfair UKI offers you the facility toSelf-Exclude`from us as part of our Safer Gambling control tools. This feature allows you to block yourself from all or part of our Services for varying periods of time depending on your needs.
In certain circumstances, our staff may also make the decision to pro-actively exclude you from our Services, in order to ensure your safety.
Where youapply a Self-Exclusionwith Betfair UKI or where we decide to exclude you from our Services for Safer Gambling reasons, we will also share your exclusion information with the other Flutter Group brands that operate in the UK - Paddy Power, Sky Betting and Gaming and PokerStars .This action is performed by automatically checking whether accounts with your registered details are held on these other brands, and, whereaccounts areidentified, they will beproactivelyclosed. Such processing will always be performed with the highest regard to the privacy and security of your data, and you have the right to challenge if you wish to dispute the match. For further information, please visit our Safer Gambling Hub.
NB: Please note that in circumstances where you apply a permanent Self-Exclusion, your information will be retained indefinitely, in order to prevent you from accessing the Services.
GamStop
Upon registration, login and at regular intervals we perform checks against the database of the UK`s national self-exclusion scheme, GamStop`. Where a UK customer self-excludes through the GamStop scheme, our checks will pick this up and we use this to ensure their wish to self-exclude is applied across our sites and apps. To find out more, you can visit the GamStop website at https://www.gamstop.co.uk/ . We may in future subscribe to similar national self-exclusion schemes in any of the countries in which we operate, and we will update this Statement to let you know.
GamProtect
GamProtect is a trial project to ensure that people who display high-risk behaviours are protected from gambling related harm to their health. To do this, participating operators (which include Paddy Power and Betfair UKI from the Flutter Group) that provide online gambling products will take steps to identify customers who they believe should not be gambling and share some key customer information with the GamProtect system. Participating operators are the joint data controllers of the initiative and will use GamProtect to identify whether the same customer has an account with them and proceed to close their account to reduce the potential for harm. For more information, please visit the full privacy statement on the GamProtect website: https://www.gamprotect.co.uk/privacy
|
Purpose |
Categories of PD |
Legal basis |
|---|---|---|
|
SG Monitoring and Interactions Manual and automated monitoring of customer activity to prevent potentially problematic play. Proactive communications with you to ensure you are comfortable with current activity levels, and to make any required adjustments to your account. Managing inbound contacts to our Customer Operations team in relation to safer gambling. |
Registration Information Verification and KYC Information Betting and Transactional Information Information derived from profiling and analysis Customer Operations Interactions Safer Gambling Information Posts, Comments and Messages Special Category Data Information from family, friends or contacts |
Legal and regulatory obligations Performance of a contract For Special Category Data, consent and, in limited circumstances, vital interests or public interests. |
|
Requesting Supporting Information We may ask for supporting information to help keep you safe and for evidence where a request is made to challenge spend or deposit limits applied by us or as part of our standard Customer Due Diligence processes. |
Registration Information Verification and KYC Information Betting and Transactional Information Customer Operations Interactions Safer Gambling Information |
Legal and regulatory obligations Performance of a contract |
|
Vulnerability: We take extra steps to enhance protection for our customers with specific vulnerabilities. Reasonable adjustments and protections may then be agreed with the customer, or, in some circumstances, restrictions may be placed on the account by us. |
Registration Information Verification and KYC Information Betting and Transactional Information Customer Operations Interactions Safer Gambling Information Special Category Data |
Legal and regulatory obligations For Special Category Data, consent and, in limited circumstances, vital interests or public interests. |
|
Exclusions: Processing your data to ensure that you cannot access our Services where you elect to exclude from your account, or where an exclusion is proactively applied. |
Registration Information Verification and KYC Information Betting and Transactional Information Customer Operations Interactions Safer Gambling Information Special Category Data |
Legal and regulatory obligations Performance of a contract For Special Category Data, consent and, in limited circumstances, vital interests or public interests. |
|
GamStop: Checks against the the GamStop UK national self-exclusion scheme database, and, where a customer has self-excluded through GamStop, use of that data to ensure their wish to self-exclude is applied across our sites and apps. |
Registration Information Betting and Transactional Information Safer Gambling Information |
Legal and regulatory obligations Performance of a contract |
|
GamProtect: A trial initiative between operators in the gambling industry to ensure that people who display high-risk behaviours are protected from gambling related harm to their health. |
Registration Information Safer Gambling Information Special Category Data |
Legitimate interests For Special Category Data, public interests. |
All customers of Betfair UKI.
As a betting and gaming company we have certain legal obligationswe need to abide by.One set of such obligations requires that we do everything we can to prevent money laundering and crime. At Betfair UKI, and in accordance with the terms and conditions of our Services, we will use your personal data to ensure the proceeds of crime are not being used by individuals using our Services, and to identify and tackle such behaviours.
KYC
We are required to gather certain information about you in order to verify your identity, as part of our KYC requirements. For this purpose you may be required to submit documentation establishing your identity and address, and where required, any other information as may be deemed necessary to confirm your identity. These processes are explained in more detail in the Electronic Verification; and Document Verification; within the Registering & Verifying Your Account section
Enhanced Due Diligence
In order to meet requirements under applicable legislation, Betfair UKI adopts a risk-based approach to compliance with its Anti-Money Laundering obligations, and, depending on your personal characteristics and activity levels, we may be required to gather further information on you. We may collect and store financial information in relation to you, as well as information gathered from publicly available sources (as explained in the Data from other sources; section of this Statement). such as the land registry, publicly available company information and social media. We analyse this data, together with existing data we hold on you, to identify any potential risks of criminal activity.
Source of Wealth
In certain circumstances, we may require you to provide additional documents proving your source of wealth and/or source of funds including but not limited to proof of earnings, bank statements, payslips and evidence of business ownership. Such processing will always be conducted with due regard to your privacy.
Screening
As part of our obligations, we also regularly screen our customer base against databases of publically available information. This ensures that we are not offering our Services to individuals who have been the subject of sanctions, and allows us to identify individuals who are 'Politically Exposed Persons'.
Investigations and Taking Action
Where suspicious activities, behaviours or characteristics are identified, further investigation will be conducted, and where necessary, restrictive actions may be taken. Note that in certain circumstances where action has been taken on a customer`s account as a result of suspicious activities, we may need to retain data relating to those actions in order to prevent that customer from using our Services again.
|
Purpose |
Categories of PD |
Legal basis |
|---|---|---|
|
KYC Verfiying your identity upon registration using documentation you submit |
Registration Information Verification and KYC Information Publicly Available Information |
Legal and regulatory obligations Performance of a contract |
|
Enhanced Due Diligence Gathering further information on you and your financial background where higher levels of risk are identified. |
Registration Information Verification and KYC Information Financial Information Betting and Transactional Information Publically Available Information Information derived from profiling and analysis |
Legal and regulatory obligations Performance of a contract |
|
Source of Wealth Collecting information from you evidencing the source of funds used on our site |
Financial Information Registration Information Verification and KYC Information |
Legal and regulatory obligations Performance of a contract |
|
Screening Comparing our customer database against publically available lists of individuals with sanctions or adverse media reports, and to identify politically exposed persons |
Registration Information Verification and KYC Information Publically Available Information |
Legal and regulatory obligations Performance of a contract |
|
Investigations and Taking Action Investigating potential instances of money laundering, and where necessary, taking appropriate actions |
Registration Information Verification and KYC Information Financial Information Betting and Transactional Information Information derived from profiling and analysis Publically Available Information |
Legal and regulatory obligations Performance of a contract |
All customers of Betfair UKI .
Integrity monitoring and investigations
We are committed to helping to maintain the integrity of and prevent corruption or circumvention of rules or laws within the sports and other markets for which it offers our Services.
For these purposes, we routinely monitor customer activity onsite in order to identify unusual or suspicious activity and betting patterns. Where we identify such activity, we may also use your personal data including, but not limited to, your registration details, betting records, records of payments, device information and publically available information, to determine whether there are grounds for establishing whether an infringement has occurred.
Sharing information with relevant bodies
Your personal data may be disclosed, upon request or based on our own initiative, to any regulatory body, law enforcement body or sporting body (with whom the Group has agreements (Memoranda of Understanding or "MOUs") for the sharing of such data). This sharing may be in connection with
Those bodies may then use your personal data to investigate and act on any such breaches in accordance with their procedures.
|
Purpose |
Categories of PD |
Legal basis |
|---|---|---|
|
Integrity Monitoring and Investigations Monitoring and analysing onsite activity to identify and investigate breaches of the rules of any sport or game, or any law. |
Registration Information Verification and KYC Information Payment Information Financial Information Betting and Transaction Information Device Information Publically Available Information |
Legal and regulatory obligations Performance of a contract |
|
Sharing Information with relevant bodies Providing information on request, or on our own initiative, to sports governing bodies, regulatory bodies or law enforcement authorities, where there are reasonable grounds to suspect a breach of the rules or a sport or game, or any relevant law |
Registration Information Verification and KYC Information Payment Information Financial Information Betting and Transaction Information Device Information Publically Available Information |
Legal and regulatory obligations Performance of a contract |
All individuals who engage with Betfair UKI or use its Services.
In addition to the purposes we described above, there are other circumstances in which we are required to process your personal data, as described below:
Information/Disclosure Requests and Regulatory Submissions
Apart from the functions set out in this Statement, we do not share your personal data with third parties except where we are compelled or permitted by law to do so. These circumstances are rare but may require us to share information in response to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include such authorities outside your country of residence.
Whenever we share personal data, and whatever the circumstances, we will always do so legally and with due regard to your privacy. If we receive a request from law enforcement or other statutory bodies, we do not disclose personal data without a warrant, court order or other legally valid proof of authority.
Protecting and defending our rights and interests
We will process your personal data where necessary to protect or defend our rights and interests, defend against legal claims, resolve disputes, respond to what we consider to be incorrect or misleading information provided to a media outlet, or enforce our agreements. For these purposes, we reserve the right to share personal data with regulators, external legal advisors, debt recovery and tracing agencies, and media outlets, although again these circumstances are rare.
Information Security and Loss Prevention
We are required to use personal data as part of our information security practices. These practices are deployed to protect ours and stakeholders` rights, information, privacy, safety, or property, in accordance with our legal obligations (for example, we are legally obliged under data protection law to secure and protect the personal data of customers, employees and all other individuals whose personal data we use) and with the performance of contracts in place with stakeholders (for example, to ensure the security of the Services we provide to you per the terms and conditions in place with you).
Restructuring
If ownership of all or part of our business changes or we undergo a reorganisation or restructure, we will transfer your personal data to the new owner or successor company so we or they can continue to provide the Services you have requested.
Financial Reporting and Analysis
In accordance with our obligations under company law and other similar regulations we are required to keep a record of your transactions in order to maintain proper financial records to meet and to ensure all transactions are being performed in accordance with the Terms and Conditions of our Services.
|
Purpose |
Categories of PD |
Legal basis |
|---|---|---|
|
Information/Disclosure Requests and Regulatory Submissions Responding to valid requests from courts, law enforcement agencies, regulatory agencies, auditors, and other public and government authorities, or submitting information to regulatory agencies. |
Any personal data held, as required to meet the purpose |
Legal and regulatory obligations Performance of a contract |
|
Protecting and defending our rights and interest To protect or defend our rights and interests, defend against legal claims, resolve disputes, respond to what we consider to be incorrect or misleading information provided to a media outlet, or enforce our agreements. |
Any personal data held, as required to meet the purpose |
Legitimate interests Legal and regulatory obligations Performance of a contract |
|
Information Security and Loss Prevention Protecting our rights, privacy, safety, or property, or those of our stakeholders |
Registration Information Betting and Transactional Information Device Information Correspondence with Customer Operations |
Performance of a contract Legal and regulatory obligations |
|
Restructuring Transferring your personal data to the new owner or successor company so we or they can continue to provide the Services you have requested. |
All personal data held |
Performance of a contract |
|
Financial Reporting and Analysis Maintaining financial records in accordance with company law and ensuring transactions are performed in line with the Services &Cs. |
Registration Information Betting and Transactional Information |
Legal and regulatory obligations Performance of a contract |
4.GENERAL PROCESSING INFORMATION |
This section provides you with some other important information you need to be aware of in relation to how we use your personal data, including information on how we share your personal data with the Flutter Group, international transfers of your personal data, how we keep your personal data secure and how long we need to keep your personal data for. Click any of the topics below for more details.
As explained in the About the Flutter Group section above, Betfair UKI is part of the wider Flutter Group and sits within the U &I division.
We have explicitly called out a number of specific situations in this Privacy Statement where the FlutterGroup companies may use your information, including where Paddy Power and/or Sky Betting and Gaming are providing support to Betfair UKI as part of the U &I division`s operations and to other Flutter Group members for marketing purposes, customer services purposes, the prevention of crime, helping to reduce gambling related harm, the provision of betting and gaming services, and to meet legal and regulatory obligations.
Additionally, we may share personal data with the Flutter Group as part of our group internal reporting and assurance .in order to facilitate business efficiency and improvements including, but not limited to research across our group, testing of systems and/or suppliers, risk management, the provision of technology, finance or security support, and the development of new products and tools.
We may also in the future share personal data with other members of the Flutter Group for purposes that are related to and compatible with those set out in this Statement. Finally, where we are required by law or regulation to share personal data to members of the Flutter Group for reasons beyond those set out in this Statement, we will be required to do this.
Some of the third-party providers we use, as well as companies within the Flutter Group, are based in, or carry out their activities in, countries outside the European Economic Area (EEA`) and/or outside the UK.
Countries outside the EEA and UK do not always have strong data protection laws. This means that, unless your personal data is being transferred to a country where the European Commission or UK has determined there to be an adequate level of protection, we have to put in place additional protections to ensure that your personal data is protected to the same level as it is within Europe or the UK.
We put these additional protections in place by using standardised contractual clauses that have been approved by the European Commission (for transfers outside the EEA) and the Information Commissioner`s Office (for transfers outside the UK). Where necessary, we also put in place any additional contractual measures required by local law in any of the countries in which we operate. As and when required, we will also put additional technical or organisational measures in place to ensure that your data is kept safe.
We recognise that online security and data protection is an area of vital importance for all our customers, so it is important to us that you have confidence in the security of your personal details before you register an account. We are committed to employing security measures to protect your information from access by unauthorised persons and to prevent accidental or unlawful processing, disclosure, destruction, loss, alteration and damage. Our technological security solutions are very advanced and are governed by a mature framework. Our approach is focused on preventing risks. In order to help us in this regard, we employ pseudonymisation and encryption whenever possible to reduce the impact of any potential incidents. As the security of some communications via the internet is not completely secure, we cannot guarantee the security of any information that you disclose using your internet connection. You accept the inherent security implications of using the internet and the Group will accept no liability for any direct, consequential, incidental, indirect, or punitive losses or damages arising out of such an occurrence.
A key principle of data protection is storage limitation`, which means that organisations should only hold onto your personal data for as long as is needed.
At Betfair UKI, we have taken steps to ensure that we hold your personal data only as long as we have a valid legal basis or reason to do so, which includes providing you with the Services you have requested, meeting our legal and regulatory obligations, resolving disputes and enforcing our agreements.
The length of time for which we keep different types of personal data can vary, depending on why we originally obtained them, the reason we process them and the legal requirements that apply to them. When setting our data retention and deletion timescales we take into account a range of factors including applicable regulations and standards relating to gambling and gaming, anti-money laundering, taxation, payment processing and complaint handling, the need to prevent or detect crime or other misuses of our Services, and audit requirements.
To fulfil our requirements, some of your personal data will need to be retained for a period of time after you cease to be a customer. When we no longer need it to fulfil the purposes and legal bases set out in this Statement, we delete it securely. Subject to us not having a legal or regulatory requirement or a risk management reason for retaining your information for a longer period, your information will not be kept for longer than 7 years from your last login or expiry of a self-exclusion. This allows us to meet our record-keeping obligations in applicable legislation, as well as allowing us to defend ourselves against potential legal claims.
Please note that if you opt to apply an exclusion to your account, your data will be retained for the period of that exclusion, plus a further seven years from the date of the expiry of that exclusion.
In certain circumstances we may be required to retain your information indefinitely. For example, where you elect to permanently exclude yourself from accessing our Services under our procedures on safer gambling, we are obliged to retain your data indefinitely to prevent you from creating new accounts.
We will take all necessary steps to ensure that the privacy of information is maintained for the period of retention. Where we wish to retain any information for analysis purposes, we first anonymise in accordance with the standards set by our relevant data protection regulators so that it can no longer be linked back to an individual.
5.YOUR DATA SUBJECT RIGHTS |
Under data protection law, you have a number of rights which are detailed below. We want to be clear about what those rights mean in practice and how you can exercise them. Please note that some of these rights only apply in specific circumstances and are qualified in several respects by exemptions in Data Protection legislation. We will advise you in our response to your request if we are relying on any such exemptions.
To exercise any of the rights below, you can contact us at subjectrights@betfair.com
For any other queries related to your personal data, please feel free to contact us at dataprotection@paddypowerbetfair.com .
You have a right to request a copy of the personal data that we hold about you. Should you wish to make such a request, you should submit a request to subjectrights@betfair.com.
You will be asked to provide adequate information to identify yourself such as a copy of your photographic identification (ID Card, Driving License or Passport) and any other relevant information such as your account username and email address that will assist us in fulfilling your request.
We may also ask you to complete and return a form, which is not compulsory but helps us to help you by providing the information you are looking for.
Where you request a copy of your personal data, you will be provided with:
If there is additional information that you believe we hold on you, please let us know and we will gladly investigate further.
We will fulfil requests wherever possible, but there are occasional situations in which the law requires or permits us to withhold some information (such as where it would involve disclosing information about another person or information which is commercially sensitive), If either of these applies, we will explain this to you.
We will provide our response within one month however if your request is unusually complex and likely to take longer than a month, we will inform you of this and how long the request will take to complete.
You can request us to rectify and correct any personal data that we are processing about you that you believe is incorrect. To make things easier, we provide you with account settings and tools to access the information associated with your account.
You can update your personal details at any time by visiting your My Account` section online.
If it is something you cannot correct yourself online, such as your name or date of birth (which, for identity verification, account security and fraud prevention reasons, cannot be changed using self-service methods), you should contact our Customer Operations team here. Alternatively, please contact us on subjectrights@betfair.com .
We`ll update inaccuracies promptly, and within a month if you are requesting a more complex change.If we take the decision not to make a change you have requested, we will explain why and make a note on your account to show that you requested the change.If you disagree with our decision, you have the right to complain to the regulator.
You have the right to request us to erase your personal data where we have no compelling reasons to continue storing or processing your data, and specifically, where one of the following grounds applies:
Please note this right only applies in certain circumstances, it is not a guaranteed or absolute right. Personal data on our customers is retained for as long as is reasonably required for our legitimate legal purposes. These include, but are not limited to;
As is outlined in the How long we keep your personal data for section we have legal obligations and other lawful reasons to retain your data after your account is inactive. Generally, your data will be retained for a period of 7 years, so, if you request your data to be erased during this time, we may not be able to uphold your request.
If you still wish to exercise your right, you should contact us on subjectrights@betfair.com . Alternatively, please contact our Customer Operations team here
We will respond to your request within a month, and if we uphold your request and erase your data we will also notify any third parties to which the data has been passed, where we are able to do so, and tell you who they are. If we do not uphold your request, we will tell you why. If you disagree, you have the right to complain to the regulator.
You have the right in certain circumstances to request that we suspend our processing of your personal data, where one of the following grounds applies:
Where we suspend our processing of your personal data, we will still be permitted to store your personal data, but any other processing of this information will require your consent, subject to certain exemptions.
Where you have obtained the restriction of processing you will be informed by us before the restriction of processing is lifted.
In order to make a request for the restriction of your processing, please contact us on subjectrights@betfair.com. Alternatively, please contact our Customer Operations team here
You will receive a response within one month.
The right of portability allows you to re-use some of your personal data online by making it available in a commonly-used, machine-readable format that can be passed to and used by other organisations. This right applies to data that you have provided to us with your consent, or which was necessary for us to provide you with our products and Services.
You may also have the right to have your personal data transferred by us directly to the other organisation if this is technically feasible.
This is a new initiative, and it is not yet possible to port` data directly between providers in the betting and gaming industry. If you wish to exercise this right, you should submit your requestto subjectrights@betfair.com . Alternatively, please contact our Customer Operations team here and we will provide you with the following information as a CSV file:
Before responding to your request, we will ask you to provide valid proof of identity, and we will provide our response within one month of receiving it.
In future, it may become possible to transfer (or port`) data directly between organisations. In the meanwhile, if you would like to take your BF UKI datatoanother provider you should first check that your chosen provider is able to upload data from a CSV file before making your request as above and passing the file to the provider yourself.
You have the right to object to our use of your personal data which is processed on the basis of our legitimate interests. However, we may continue to process your personal data, despite your objection, where there are compelling legitimate grounds to do so or where we need to process your personal data in connection with any legal claims.
To exercise your right to object please contact us on subjectrights@betfair.com . Alternatively, please contact our Customer Operations team here
We will respond to you within one month. If we refuse to uphold your request and disagree with our decision on this, you have the right to complain to the regulator.
You also have the right to opt-out of having your information used to createa profile` of you for marketing purposes. You may exercise this right by opting out via your My Account`.
You have the right not to be subject to a decision which is based solely on automated processing (without human involvement) where that decision produces a legal effect or has a similarly significant affect on you. This right does not apply where you have provided your explicit consent for us to use your data in this way, where the decisions are needed to enter or perform a contract with us (for example, the terms and conditions of our Services), or where the decision is needed to meet our legal or regulatory obligations.
Where the decisions are made based on your explicit consent, or they are needed to enter or perform a contract with us, you have the right to request human involvement in the decision, to express your point of view or to contest the decision made.
If you have any concerns in relation to automated processing that we may perform you can contact us at any time.
If you believe your data protection or privacy rights have been infringed, or you disagree with a decision we have made about your data protection or privacy rights, you have the right to complain to the data protection regulator.
If you are based in the UK, you should contact the Information Commissioner`s Office, but if you are based in Ireland, you should contact the Data Protection Commissioner. For your convenience, we have provided their contact details below:
Published on 04/16/2018