PRIVACY POLICY

Welcome to our privacy policy!

Jackpotjoy respects your privacy and is committed to protecting your Personal Data when you use our website (www.jackpotjoy.com) including any mobile or device specific version of the website and any related applications (or “apps”) (together the “Website”).

This Website is operated by Profitable Play Limited (“PPL”) on behalf of Jackpotjoy Operations Ltd ("JPJ Operations").

PPL is a Data Controller in respect of your Personal Data as it relates to your use of this site/app. If you want to learn more about how and why PPL processes your Personal Data, please read this privacy policy.

As JPJ Operations owns and markets this Website, it is also an independent Data Controller in respect of your Personal Data. If you want to learn more information about how and why JPJ Operations handles your Personal Data, please read the JPJ Operations privacy policy.

Our Website is not intended for children and we do not knowingly collect information relating to children.

This privacy policy sets out how we collect, use and look after your Personal Data when you access our Website and tells you about your privacy rights.

We know no one likes to read a lengthy document, so we have tried to make your life easier by structuring our privacy policy with different sections, which give you an overview of the entire policy and let you choose the sections you want to read in more detail. We have also added a Glossary at the end of this document to give you more information about the specific terms we use in it.

We have tried our best to make this Privacy Policy as clear as possible but if you have any questions, please feel free to contact our data protection officer.

This privacy policy is dated 24th May 2018. To navigate through our privacy policy just click on the links below.

Our Website is operated by Profitable Play Limited (“PPL”) on behalf of Jackpotjoy Operations Ltd ("JPJ Operations"). PPL is a Data Controller in respect of your Personal Data as it relates to your use of the Website.

As JPJ Operations owns the Website and markets the Website, it is also a Data Controller in respect of your Personal Data.

JPJ Operations and PPL are independent Data Controllers in respect of your Personal Data.

This Privacy Policy explains how PPL handles your Personal Data and references in this document to “we”, “us” or “our” are references to PPL only. If you want to learn more information about how and for what reasons JPJ Operations handles your Personal Data, please read their privacy policy.

Data Controller contact details:

Profitable Play Limited:
Profitable Play Limited is registered as a data controller in Gibraltar under number DP008935 and its registered address is:
Profitable Play Limited
Suite 2 Floor 2 Waterport Place
Gibraltar

Jackpotjoy Operations Ltd:
Jackpotjoy Operations Ltd is registered as a data controller in Malta under number 11918 and its registered address is:
Jackpotjoy Operations Ltd
Albany Financial Center, Suite 304
South Ocean Boulevard
New Providence, The Bahamas

PPL is part of a larger group of companies headed by Gamesys (Holdings) Limited (the “Gamesys Group”). The Gamesys Group has appointed a data protection officer (“DPO”). If you have any questions about this privacy policy and want to know more about how we handle your Personal Data when you use our Website, please contact the Gamesys Group DPO:

By mail to:

The Data Protection Officer
Gamesys Group
10 Piccadilly, London,
W1J 0DD (UK)

By email to: dpo@gamesys.co.uk

If you want to know how to contact us to exercise your legal rights in respect of the information we hold about you, please see section 11 “Your Rights” below.

When you use our Website, we may collect Personal Data about you. We have set out below what data we collect and how we collect it.

You are under no obligation to provide Personal Data to us. However, certain Personal Data is essential for the provision of and the quality of the products and services we offer (for example, enabling you to set up your Member Account or to play the games on our Website) and you might not be able to obtain certain services if you do not provide the information required for those services. In addition, we need certain Personal Data to fulfil our legal and regulatory obligations (including anti-money laundering requirements, responsible gaming requirements and the requirements of the Gambling Commission in the UK and the Gibraltar Gambling Commission to which we are subject as a gambling operator). We are subject to the terms of the Licence Conditions and Codes of Practice (“LCCP”) both in the UK and the Remote Technical and Operating Standards (“RTOS”) for the Gambling Commission in Gibraltar which require us to carry out age and identity verification within 72 hours of receiving your request to access our Website. If you refuse to provide your Personal Data where law or regulation requires us to collect it from you, we cannot allow you to access our Website.

When you use our Website, we collect the following kinds of information from you:

Member Account: We collect the following information from you when you use our Website and register your Member Account: your name, surname, username, password, security question, date of birth, home address, email address, phone number, mobile number, credit/debit card, payment method information and we will allocate you a unique member ID.
Payment Data: Once you register your Member Account and use our Website, we collect information about your transactions, including your deposits, your withdrawals and your payment methods used.
Gaming Data: When you use our Website, we collect information about your gaming activities.
Chat conversations: We collect information about your communications via our Website, including in our chat and messaging facilities (including the content of any messages you send or post).
Telephone conversations: We collect information about your telephone conversations with our customer and operational support staff. We record all telephone conversations (e.g. customer support calls, responsible gaming calls, fraud monitoring calls and regulatory anti-money laundering and verification calls, etc.) for training and monitoring purposes.
Email communications: We collect and store all copies of emails you send to us and our replies to your emails.
Social Media Profile: We collect your social media profile details including your name, profile photo and other information you choose to make available to us when you connect with or contact us through your social media account or use our products and services through your social media account.
Profile Data: We collect information about you based on our profiling activity which may include any Personal Data we hold about you. This information enables us to comply with our legal and regulatory obligations, risk analysis and to offer tailored products and services.
Usage Data: We collect information about how you use the Website, pages visited, and content viewed, links and buttons clicked.
Marketing Data: We collect information in relation to your response to the marketing activities carried out by us and/or JPJ Operations (e.g. marketing campaigns, competitions, offers, etc.) such as information about when you open our email communications etc.

We use these terms throughout this document where we describe how these types of data are used.

We collect the following information from your device when you connect to our Website: information about your device’s hardware and software, use of the Website, traffic information, IP address, time of access, date of access, web page(s) visited, language(s) used, software crash reports, device information including the unique device identifier.

We collect information using cookies to protect our Website, offer you a personalised experience with us, tailor our marketing services and improve our Website. For more information about the cookies we use and how to manage your cookie preferences please see our Cookie Policy.

In order to operate our Website, we collect information about you from third party service providers for various reasons such as making sure our Website is safe, to offer a good level of service and also to comply with our legal and regulatory obligations as per the requirements of the Gambling Commission in the UK and the Gibraltar Gambling Commission. We collect information about you from the following categories of third party service providers:

Identity Verification Service Providers: We collect information about you from third party service providers such as Call Credit, GB Group and DueDil to verify your personal identification details and other information about you when you use our Website in order to comply with our legal and regulatory obligations.
Gamstop We receive information about you when you decide to register with “Gamstop”, the national online self-exclusion scheme in the UK. More information about Gamstop can be found here.
Advertising Services Providers We collect information about you from our network of advertising service providers who advertise our Website to understand our audience’s behaviour.
Hosting providers We collect information about you from our hosting service providers which host our Website.
Analytical providers We collect information about you from our network of analytical providers who provide us tools to understand our audience and improve our Website.
Fraud and anti- Money Laundering We collect information about you from third party service providers to ensure compliance with the requirements of the Gambling Commission in the UK and the Gibraltar Gambling Commission in relation to combatting fraud and money laundering on our Website which includes services such as transaction screening with payment processors, banks and access of third parties’ crime prevention databases and safe payment processing.

We will use Personal Data obtained from these third parties in accordance with this Privacy Policy.

In order to comply with our legal and regulatory obligations (including in respect of anti-money laundering and responsible gaming) and to protect our Website from abuse and fraud, we may look at other information from publicly available resources. Our searches may include collecting information about you from the following sources: social media platforms (e.g. Facebook, LinkedIn), the electoral roll, public databases (e.g. telephone directories), internet search engines (e.g. Zoopla, Google, PayScale) the insolvency registry, companies house register and the UK land registry.

These checks allow us to gather information to make informed decisions and understand if the money transacted through our Website is legitimate to comply with our legal and regulatory obligations and to protect our Website from fraud and abuse.

We collect information about you when you contact us through your account on a social media platform such as Facebook, Twitter, etc. for various purposes (such as to enter a competition, contact us for information).

We also collect information about you if you chose to interact with our content and pages available on a social media platform. When you do this, the provider of the social media platform may provide us with your details such as your account information. You should read the relevant social media platform’s privacy policy and terms and conditions to understand how you share your information when using their services.

The Website is owned by JPJ Operations, which is part of a larger group of companies headed by Jackpotjoy plc (the "JPJ Group"). The JPJ Group owns and/or operates a number of gambling websites (the "JPJ Websites"). If you have an account with more than one JPJ Website, then the JPJ Group may combine the information which it holds in relation to your use of those sites, to the extent that it has a legitimate business interest in doing so (for example to protect the JPJ Websites from fraud and abuse, to understand its customers and their behaviours better, to analyse how customers use the products and services available on the JPJ Websites, to develop the Profile Data which it holds in relation to you, and to provide personalised marketing services as well as tailored products and services). JPJ Operations may share such data with us in appropriate circumstances. If you want to learn more information about how and for what reasons JPJ Operations handles your Personal Data, please read their privacy policy.

We collect Special Categories of Personal Data and information about criminal convictions and offences in specific circumstances to comply with our legal and regulatory obligations (including anti-money laundering requirements, responsible gaming requirements and the requirements of the Gambling Commission in the UK and the Gibraltar Gambling Commission Licence Conditions and Codes of Practice to which we are subject as a gambling operator):

  • To verify your identity and satisfy our legal and regulatory obligations;
  • To understand your gaming behaviour to ensure you gamble responsibly as per our Responsible Gaming Policy;
  • To provide you with the most appropriate tools to enable you to self-exclude from our Website if you need to; and
  • To understand patterns and behaviours to ensure we can detect any unusual activities in connection with your use of our Website.

We will only collect Special Categories of Personal Data as required by the License Conditions and Codes of Practice, the Gibraltar Gambling Commission License Conditions, the Anti-Money Laundering Regulations or the Proceeds of Crime Act, or as otherwise required to fulfil our legal and regulatory obligations as a gambling operator, or (where permitted by law) for reasons of substantial public interest.

We will only use your Personal Data as permitted by law. Most commonly, we will use your Personal Data in the following circumstances:

  • To perform the contract we are about to enter into or have entered into with you.
  • For our legitimate interests (or those of a third party), provided that your interests and fundamental rights do not override those legitimate interests.
  • Where we need to comply with a legal or regulatory obligation, or the processing is authorised by law.
  • Where you have consented to our use of your Personal Data.

Click here to find out more about the types of lawful basis that we will rely on to process your Personal Data.

We have set out below, a description of all the ways we may use your Personal Data, and which legal basis we rely on to do so. We have also identified what our legitimate interests are where appropriate.

We may process your Personal Data for more than one lawful ground depending on the specific purpose for which we are using your information. Please contact our DPO (see section 2) if you need details about the specific legal ground we are relying on to process your Personal Information.

Purpose Type of Data Lawful basis for processing To register you as a new user on our Website. Identity and contact details (Member Account details) Entering into and performing a contract with you. To manage our relationship with you as a user of the Website which includes notifying you about changes to our Website and the products and services we offer, terms and conditions or privacy policy.

Identity and contact details

(Member Account details)

Entering into and performing a contract with you.

To comply with our legal obligations.

As necessary for our legitimate interest (to keep our records updated and to study how customers use our products and services).

For you to provide, and us to receive, feedback and reviews of our products and services.

Identity and contact details

Profile Data Information and opinions provided by you in connection with feedback and surveys

Entering into and performing a contract with you.

As necessary for our legitimate interests (to study how customers use our products and services and to understand the improvements that can be made to our products and services). Your participation in this is entirely voluntary.

To enable you to participate in competitions and promotions and provide you with rewards, such as prizes, gifts and invitations to events.

Identity and contact details

Profile Data

Entering into and performing a contract with you. To provide various supporting customer services to you (such as where you contact us with a question in connection with our Website and/or request certain information from us).

Identity and contact details

Profile Data

As necessary for our legitimate interests (to deal with customer service requests and respond to communications).

If you do not provide us with the Personal Information we request from you for customer services purposes, we may not be able to fully answer your queries.

To administer and protect our business and our Website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).

Identity and contact details

Usage Data

Device Data

As necessary for our legitimate interests (to run our business, administration and IT services, network security, to prevent fraud or abuse and in the context of a business reorganisation or corporate restructuring exercise).

As necessary to comply with a legal obligation.

To improve our Website, products/services, customer relationships and experiences.

Usage Data

Profile Data

As necessary for our legitimate interests (to define categories of customers for our games and services, to keep our Website updated and relevant, to develop our business and to inform our marketing strategy). To comply with our legal and regulatory obligations as a gambling operator (e.g. verifying our Members’ identity and age to ensure they can use our Website, spotting bonus abuses) and to protect our Members (e.g. spotting responsible gaming problems).

Identity and contact details

Device Data

Profile Data

As necessary for our legitimate interests (to run our business, to prevent fraud and illegal activities on our Website).

As necessary to comply with our legal obligations.

To send you marketing communications.

Identity and contact details

Member Account details

Device Data

Payment Data

Gaming Data

Profile Data

As necessary for our legitimate interests (to provide you with personalised experience and improve our Website).

When you give consent to us.

To process your gaming on our Website, including managing payment, deposits and withdrawals into your Member Account.

Identity and contact details

Payment data

Gaming Data

Entering into and performing a contract with you.
To comply with our legal obligations. To deliver relevant content and advertisements to you and measure/understand the effectiveness of the advertising we serve to you.

Identity and contact details

Marketing and communications data

Usage Data

Profile Data

As necessary for our legitimate interests (to study how Members use our Website and to grow our business and to inform our marketing strategy). To use data analytics to improve our Website, marketing, customer relationships and experiences.

Member Account

Gaming Data

Usage Data

Profile Data

As necessary for our legitimate interests (to define categories of members for our products and services, to keep our Website updated and relevant, to develop our business and to inform our marketing strategy). To make suggestions and recommendations to you about our products and services that may be of interest to you.

Identity and contact details

Usage Data

Social Media Profile

Profile Data

As necessary for our legitimate interests (to develop our Website and grow our business). To protect our business from fraud, money laundering and other illegal activities.

Identity and contact details

Usage Data

Social Media Profile

Profile Data

Device Data

As necessary for our legitimate interests (to protect our business from any illegal or abusive use of our Website).

To comply with our legal obligations.

To protect our Members from irresponsible gambling and comply with our responsible gaming policies.

Identity and contact details

Usage Data

Social Media Profile

Profile Data

Device Data

Special Categories of Personal Data

As necessary for our legitimate interests (to protect our Members from irresponsible gambling).

To comply with our legal obligations.

To enable our Members to self-exclude from our Website.

Identity and contact details

Usage Data

Social Media Profile

Profile Data

Device Data

Special Categories of Personal Data

As necessary for our legitimate interests (to protect our Members from irresponsible gambling).

To comply with our legal obligations.

This section of our privacy policy explains how you will be contacted for marketing purposes. We have been engaged by JPJ Operations, the owner of the Website, to carry out certain marketing services on its behalf, and we may process your Personal Data as part of the marketing services we provide to JPJ Operations. JPJ Operations owns the Website and is part of a group of companies headed by Jackpotjoy plc (the “JPJ Group”). If you want to read more information about how JPJ Operations handles your information, please read their privacy policy here.

How to manage the marketing messages you receive:

You can tell us whether or not you wish to be contacted for marketing purposes and, if so, how we can contact you.

Marketing communications may contain details about:

  • New games, jackpots, promotions, competitions and offers available to you on the Website;
  • The loyalty programme (e.g. VIP), your rewards and promotional pay-outs on the Website;
  • Other promotional information about the Website; and
  • Marketing information about other great gambling brands of the JPJ Group.

You can chose to opt-in to receive marketing communications from JPJ Operations about the Website via the following channels:

  • Email Marketing: when you opt-in to receive marketing communications by email;
  • SMS Marketing: when you opt-in to receive marketing communications by SMS;
  • Phone Marketing: when you opt-in to receive marketing communications by telephone; and
  • Push Notifications: when you have installed the app on your device and enable push notifications in your device settings.

Additionally, you may receive marketing communications by post from JPJ Operations about the Website when you provide your contact details and have not opted-out from receiving marketing communications by post.

You can opt-out from receiving marketing communications from JPJ Operations at any time by following the instructions below:

  • Email Marketing: to opt-out from emails, use the unsubscribe link provided within any email you receive or manage your preferences in My Account;
  • SMS Marketing: to opt-out from SMS, you can use the STOP code provided in any SMS you receive or manage your preferences in My Account;
  • Phone Marketing: to opt-out from being contacted by telephone for marketing purposes, you can manage your preferences in My Account;
  • Post Marketing: to opt-out from receiving marketing by post, you can manage your preferences in My Account; and
  • Push Notifications: to opt-out from receiving push notifications, you can disable push notifications in your device settings.

If you choose to opt-out from email, SMS or phone marketing, you will stop receiving marketing communications within 96 hours.

When you choose to opt-out from receiving post marketing, please be aware it may take up to 28 days for your request to take effect.

Marketing communications about the other great gaming websites of the JPJ Group.

As part of the marketing communications sent by or on behalf of JPJ Operations you may receive offers and news about the other great gaming websites in the JPJ Group. Don’t worry, unless you register directly with these other gaming websites, they will not be able to send you marketing messages directly, and JPJ Operations will remain in control of whether marketing messages are sent to you. To know more, read their privacy policy here.

You can always change your contact preferences later in My Account.

Social Media Marketing: JPJ Operations (or, we on their behalf) may also use information you provide to show you relevant advertising and personalised content about JPJ Group gaming websites on certain third party social media platforms made available to JPJ Operations (or to us on their behalf) through those services (e.g. Facebook, Twitter). Neither we nor JPJ Operations control the way these platforms operate and collect your information and you should read their respective privacy policies online to understand how they use your personal information.

About Facebook Ads: If you are a Facebook user, JPJ Operations (or, we on their behalf) may periodically use the Facebook Ads services (including Custom Audiences and Facebook Pixels, click here for more information) to provide you with personalised content about JPJ Group gaming websites. When you are logged into your Facebook account, JPJ Operations (or, we on their behalf) may provide you with personalised content. To provide this personalised content, Facebook may be sharing information with JPJ Operations (or, we on their behalf) that you have chosen to make available pursuant to your Facebook settings, such as your profile information and information collected through the “like button”). You can read more information about how Facebook uses your information in their privacy policy. JPJ Operations (or, we on their behalf) may also show you personalised and targeted advertisements on the news feed of your Facebook account. If you no longer want to receive personalised and targeted advertisements from JPJ Operations on Facebook, you can manage your advertising preferences and decide what you want or do not want to see by using the settings in your Facebook account. You can read more details about how to manage your ad preferences on Facebook here.

Alternatively, you can also opt-out from receiving personalised advertisements on social media platforms in My Account.

Your Personal Data will be disclosed to companies within the Gamesys Group in accordance with applicable data protection laws and the terms of this privacy policy, for the purposes set out in section 5 above (e.g. to set up your Member Account, to provide you with customer support services, to manage any risks to our Website and to our business, to comply with any applicable legal and regulatory obligations, to send you marketing communications, etc.).

We will be sharing your Personal Data with JPJ Operations on a regular basis. JPJ Operations is the owner of the Website, and we operate it on their behalf. JPJ Operations is part of a larger group of companies headed by Jackpotjoy plc (the "JPJ Group"). The JPJ Group owns and/or operates a number of gambling websites (the "JPJ Websites").

We have been appointed to operate the Website on behalf of JPJ Operations. In the event that JPJ appoints someone else to operate the Website (whether another service provider, or another member of the JPJ Group) then we would share your Personal Data with the new operator of the Website.

JPJ Operations uses Personal Data relating to the customers of the Website for a variety of purposes, including:

  • Overseeing the performance of the Website and making strategic decisions regarding the commercial operation of the Website;
  • Obtaining Member consent to undertake direct marketing in relation to the Website, and undertaking other marketing activities in relation to the Website; and
  • If you have an account with more than one JPJ Website, then the JPJ Group may combine the information which it holds in relation to your use of those sites, to the extent that it has a legitimate business interest in doing so - for example to protect the JPJ Websites from fraud and abuse, to understand its Members and their behaviours better, to analyse how Members use the products and services available on the JPJ Websites, to develop the Profile Data which it holds in relation to its Members, and to provide personalised marketing services as well as tailored products and services.

If you want to learn more about how JPJ Operations Ltd handles your information read their privacy policy here.

We use service providers in connection with the operation of our Website to ensure we deliver the best possible services. We enter into contracts with our service providers to ensure they take good care of your Personal Data when we share it with them for those purposes. We are committed to protecting your Personal Data and we oblige our service providers to handle your Personal Data in accordance with applicable data protection laws and the terms of this Privacy Policy.

We engage service providers for the following services:

  • Hosting our Website: we use hosting providers such as Gibtelecom (Gibraltar), Interxion (UK) and BMIT (Malta);
  • Marketing services such as segmentation, analytics, email messaging services and SMS marketing service providers: we use providers such as Adobe;
  • IT services and security services: we use services such as Neustar, Akamai and Digicert
  • Customer support software service providers: we use providers such as Oracle;
  • Data storage services: we use providers such as Google Cloud Platform;
  • Payment service providers: we use service providers such as Worldpay, PayPal, Neteller and Paysafecard;
  • KYC, Anti-fraud and money laundering services: we use service providers such as GB Group, Call Credit and Dow Jones;
  • Data analytics services to measure and understand our audience, tailor our marketing services, improve your website experience and data cleansing services to suppress our marketing lists; and
  • Audit, legal and compliance services.

As a gambling operator, we are subject to strict legal and regulatory obligations to ensure you can use our Website. Because of this, we will share your Personal Data with third party service providers (such as credit reference agencies (e.g. GB Group, Call Credit), fraud prevention agencies, payment service providers, banks, financial institutions and similar third parties) for checking your identity, monitoring your behaviour on our Website, combatting money laundering, protecting our Website against any illegal use and any other activity we consider necessary to meet our obligations.

We enter into contracts with these service providers to comply with our legal and regulatory duties. In addition, these specific kinds of service providers are also “data controllers” under data protection laws as they own their own databases that may include personal information about you. Because of that, when we share your details with them, your Personal Data and privacy rights are protected as these service providers are also subject to data protection laws.

When you set up your Member Account with us, we will proceed to verify your identity and age as required by the Licence Conditions and Codes of Practice to which we are subject as a gambling operator. If we are unable to verify these details, we may proceed to manual verifications to comply with our obligations. In that case, we may contact you and ask you to supply further proof of your identity and we cannot give you access to our Website until you prove your identity to us. We have 72 hours from the registration of your Member Account on our Website to carry out these manual verifications.

We will share your Personal Data when it is required by applicable law in the following cases:

  • To comply with a request for information from a governmental body such as law enforcement (police) or other public authorities (e.g., Insolvency Service);
  • To comply with a court order to disclose your Personal Data; and/or
  • To comply with a regulatory investigation from a relevant gambling authority (e.g. the Gambling Commission in the UK or the Gibraltar Gambling Commission or a relevant data protection authority (e.g. the Information Commissioner’s Office in the UK) or any other applicable regulatory authority.

PPL and JPJ Operations may transfer all your Personal Information to a third party if the operator of the Website changes, or if there is a sale of all or any part of their respective business or its assets. In the event of any of these transfers occurring, the party who acquires the data will assume the rights and obligations described in this Privacy Policy.

What we do to keep your Personal Data safe:

We have appropriate security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Where appropriate, we employ encryption, pseudonymisation (for example, by using your member ID rather than full name where appropriate) and anonymisation solutions to reduce the impact of any security incident to Personal Data. Although, the nature of the internet means that transmission of information may not be totally secured, we have deployed end to end encryption security measures to protect the transmission of your Personal Data when you use our Website.

In addition, we limit access to your Personal Data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your Personal Data on our instructions or otherwise in compliance with applicable laws, and they are subject to a duty of confidentiality.

Managing security incidents relating to Personal Data:

We have procedures to deal with any suspected Personal Data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

If you have any reason to believe that your Member Account information may no longer be safe, please contact our customer support staff here.

Keeping your member account safe:

When you create an account with us, we ask you to choose a password and personal question to retrieve access to your member account. We use password protection to ensure your member account is safe at all times and can only be accessed by you. You must keep your username, password and personal question details private and confidential at all times. Please choose a password that is strong and not easy to guess. Please do not share your password with anyone and please change it on a regular basis. If you suspect your password has been disclosed to anyone, please change it immediately to ensure your Member Account remains safe.

We primarily store and process our Member Account data within the European Economic Area (“EEA”).

However, in the following cases we can transfer your Personal Data outside the EEA:

  • If we have a legal or regulatory reason to do so;
  • If we use third parties service providers located outside of the EEA; or
  • If you have consented to this transfer.

Third parties service providers

To operate our Website, we may use third party service providers which are based outside the EEA, so their processing of your Personal Data will involve a transfer of data outside the EEA.

Whenever we transfer your Personal Data to a service provider outside of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • We will only transfer your Personal Data to countries where the European Commission considers they provide an adequate level of protection for Personal Data. For further details on this safeguard, see European Commission: Adequacy of the protection of Personal Information in non-EU countries.
  • We may contract with the service provider on terms that are approved by the European Commission to aim to give Personal Data the same protection it has in Europe. For further details on this safeguard, see European Commission: Model contracts for the transfer of Personal Information to third countries.
  • Where we use service providers based in the United States of America, we may transfer data to them if they are part of what is known as the "Privacy Shield". This Privacy Shield requires them to provide similar levels of protection to Personal Data shared between the Europe and the US. For further details on this safeguard, see European Commission: EU-US Privacy Shield.

If you want further information on the specific mechanism used by us when transferring your Personal Data outside of the EEA, please contact our DPO (see section 2 of this Privacy Policy).

We will not keep your Personal Data for longer than required. The precise duration for which we keep your Personal Data when you have a live member account with us or for a period after your cease to be a member with us, can vary and depends on various reasons. To determine the appropriate retention period for Personal Data, we consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and what the law requires us to do. For example, we retain a copy of your Member Account’s records of all financial and wagering transactions together with any identification provided for as long as is necessary for the relevant service and for no longer than 7 years after you have closed your Member Account.

When we no longer need to keep your Personal Data, we anonymise it securely and this process cannot be reversed. In certain cases, we need to securely retain certain Personal Data to fulfil our legal and regulatory obligations (including anti-money laundering requirements, responsible gaming requirements and the requirements of the Gambling Commission in the UK and the Gibraltar Gambling Commission to which we are subject as a gambling operator.

Additionally, where we decide to retain your information for analytics purposes, we will fully anonymise it in accordance with applicable security standards, so it can never be linked back to an individual.

Please note that if you decide to opt-out from receiving marketing communications from us (see section 6 above), we will need to retain a copy of your contact details, so we can add them to our suppression list and make sure you do not receive any information about our future marketing activities.

Please contact the DPO (see section 2 above) if you need any further information.

The law gives you legal rights in respect of the Personal Data we hold about you. You can exercise your legal rights for free except where this Privacy Policy states otherwise. We may need to request specific Personal Data from you from time to time to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that your Personal Data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month of receipt. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Below is a summary of the legal rights you have, what we do to protect them and how you can exercise them:

Your rights What we do to protect your rights How to exercise your rights
Your right to access your Personal Data You have the right to access and receive a copy of your Personal Data.

You can request access to your Personal Data by email to sar@jackpotjoy.com. You will not have to pay a fee to access your Personal Data unless your request is unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

You can read more information about how to access your Personal Data here.

Your right to correct your Personal Data You have the right to request correction of the Personal Data we hold about you. You can amend, correct, delete or edit your Personal Data in your Member Account. If you wish to correct other Personal Data, please contact our customer support team. Please see our contact details here.
Your right to erase your Personal Data You have the right to request erasure of your Personal Data. Please note, that we may not always be able to comply with your request for erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. You can request erasure of your Personal Data by contacting our customer support team. Please see our contact details here. This process is not reversible.
Your right to object to processing of your Personal Data You have the right to object to processing of your Personal Data, including for marketing purposes. Please note that in some cases, we may demonstrate that we have legitimate grounds to process your information which override your rights and freedoms.

You can object to processing of your Personal Data by contacting our customer support team. Please see our customer details here. Your objection may take up to 96 hours to take effect.

Once you have objected you can change your mind at any time by contacting us again. Your account will not be accessible while the restriction is in place.

Your right to request a restriction to the processing of your Personal Data You have the right to request a restriction of processing of your Personal Data. but in certain cases, we need to verify whether we have overriding legitimate grounds to use it. You can request the restriction of processing of your Personal Data by contacting our customer support team. Please see our contact details here. Once you have requested this you can change your mind at any time by contacting us again. Your account will not be accessible while the restriction is in place.
Your right to request the transfer of your Personal Data to you or to a third party You have the right to request the transfer of your Personal Data to you or to a third party. We will provide to you your Personal Data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. You can request the transfer of your Personal Data to a third party by email to sar@jackpotjoy.com. The request must include which data you would like to be transferred, to whom it should be transferred and by which method.
Your right to complain to the regulator If you are unhappy with our response to your query, you have the right to contact the Information Commissioner (the data protection authority for the UK). or the Data Protection Commission in Ireland.

To exercise your right to complain to the regulator please use the following contact details:

www.ico.org.uk
www.dataprotection.ie

Your right to withdraw consent You can decide to withdraw your consent to receive marketing communications at any time and for free. To exercise your right to withdraw your consent to receive marketing communications please see section 6 above.

Our Website may contain links to websites where information practices may be different to ours. You should read the other websites' privacy notices, as we are not responsible for and have no control over information that is submitted to, or collected by, these websites when you visit them.

If you have any questions or comments about this privacy policy or want to know more about how we use your Personal Data, please contact our DPO (see section 2).

If you want to exercise your right to access your Personal Data, please email us at sar@jackpotjoy.com as set out in section 11 above.

We may, from time to time, change or update this privacy policy. All changes to this privacy policy will be published on this page of the Website. Each change will become effective on publication. We recommend that you revisit and read this privacy policy regularly to ensure that you are up-to-date with the current terms.

Term What this means
Anonymous Data Data sets that cannot identify an individual.
Data Controller A company (or individual) which decides how personal data will be processed and what it will be used for.
Data Processor A company (or individual) which processes personal data on behalf of a data controller – for example in providing services to them.
Member Registered individuals on the Website with a live or closed account.
Member Account The Member’s user account with the Website.
Personal Data Information relating to an individual who can be identified from that information (even if not directly and even if they are just identified by their device).
Special Category of Personal Data Personal Data which relates to or identifies any of the following sensitive categories of information: race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health and genetic and biometric data.