Winner Casino Partners respects your privacy and is committed to protecting your Personal Data and to processing it in compliance with applicable laws – notably:
• The Maltese Data Protection Act (Chapter 586 of the Laws of Malta) as well as the various subsidiary legislation issued under the same – the ‘DPA’;
• The ‘GDPR’;
• Any other applicable law.
1. WHO WE ARE
1.2 Winner Casino Partners contact email: Max@Winner Casino.com. Postal address: Winner CasinoNext Galaxy Ltd of 3301 Chetumal Street, Belize City, Belize and its wholly owned subsidiary, Glizzard Ltd Address Agias Anastasias 9, 4156 Lemesos, Cyprus.
2. CHANGES TO THE PRIVACY NOTICE AND YOUR DUTY TO INFORM US OF CHANGES
3. THE DATA WE COLLECT ABOUT YOU
3.1. Data obtained from You when you sign up to our affiliate program:
b) Name and surname
c) Email address
d) Telephone number
g) Social Media Account
h) Bank Account Information
d) Analytics data with respect to your use of our Website and Services such as your IP address, click tracking, number of clicks on a game, number of visits to webpages. Certain information is collected using cookies and/or similar tracking technology – please see further section “Cookies”.
3.2. We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
3.3. If you fail to provide the requested Personal Data, We will not be able to provide you with Our affiliate services.
4. PURPOSE AND LEGAL BASIS FOR THE PROCESSING
4.1. The purpose and legal basis used in the collection of the categories of data set out in the previous clause is described below:
Name, surname, email address, phone, bank account information, Gender, Age, Nationality, and Social Media Account: This data is necessary and relevant for the purposes of performing our contractual relationship with yourselves as our Affiliate. The legal basis is our contractual relationship between ourselves when you sign-up to our Affiliate T&Cs
Age: to make sure you have the legal age to receive direct marketing communications or promotions related to our product and services. The legal basis is Our legal obligation to target only individuals in the legal age.
Age and E-mail address: to send to you any promotions or direct marketing communications about the Winner Casino group products, services and different brands. The legal basis is your consent which you provide upon registration.
Analytic data to have a better understanding of how you use the Website. The legal basis is Our legitimate interest in learning how to offer a better service and user experience.
5. RETENTION PERIOD
5.1. Criteria used to determine retention period: We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
5.2. The criteria We use to determine what is ‘necessary’ depends on the nature of the particular personal data in question. Our normal practice is to determine whether there is/are any specific EU and/or national law(s) (for example license requirement, tax or corporate laws) permitting or even obliging Us to keep certain personal data for a certain period of time (in which case We will keep the personal data for the maximum period indicated by any such law) and if not, whether there are any laws and/or contractual provisions that may be invoked against Us by you and/or third parties and if so, what the prescriptive periods for such actions are. In the latter case, We will keep any relevant personal data that We may need to defend Ourselves against any claim(s), challenge(s) or other such action(s) by you and/or third parties.
5.3. Where Your personal data is no longer required by Us, We will either securely delete or anonymise it.
5.4. Your data will be stored for the duration of the contract and following the termination of the Agreement Your data will be retained for 6 years for the purposes of defending any legal claims that may be brought forward and being performed on the basis of a legitimate interest. In order to comply with our Tax and Accounting legal obligations, Your Personal data pertaining to registration data and transaction and usage data will be retained for 10 years from the date when the transaction was made. In the case of direct marketing we will only retain your contact details for 2 years after you terminate your contract with us, after which we will cease communicating
6. RECIPIENTS OF YOUR PERSONAL DATA
6.1. Your personal data might be shared with our technical service providers, namely Netrefer, Google Analytics, Contentful and Bannerflow
6.2. Authorised disclosure: we will only share your Personal Data with relevant authorities upon request in the unlikely event of a legal investigation.
7. INTERNATIONAL TRANSFERS
7.1. Certain of our suppliers and partners (as highlighted above) are sometimes based outside of the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA.
7.2 Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
Transfer your personal data is performed to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.
Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between Europe and the US.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.
8. YOUR RIGHTS UNDER THE DATA PROTECTION LAWS
8.1. As a Data Subject you have the following rights under the GDPR and applicable data protection laws:
the right to access your data;
the right to have your data erased;
the right to have your data rectified;
the right to object to further processing;
the right to restriction of processing;
the right to data portability;
the right to withdraw your consent at any time without affecting the
lawfulness of processing based on consent before its withdrawal;
the right to lodge a complaint with a supervisory authority