1.2 In Gibraltar, we are a registered Data Controller under the Gibraltar Data Protection Act 2004. Details of our registration can be found in the Gibraltar Regulatory Authority public register of data controllers at http://www.gra.gi/data-protection by searching for "William Hill". Our Gibraltar Gambling Commissioner registration number for the purposes of data protection is DP006623. You may contact Customer Services with any data protection query via https://williamhill-lang.custhelp.com/app/ask
2. WHAT TYPE OF INFORMATION WE COLLECT
2.2. The personal data we collect from you may include the following:
2.2.1. information you provide to us when registering for our Services;
2.2.2. information you provide to us in any correspondence and a record of any correspondence we have with you;
2.2.3. details of transactions you carry out with us as well as information about your bank account and card details;
2.2.4. information about your use of our Services;
2.2.5. information you provide to us through surveys you complete or competitions you enter;
2.2.6. information about your preferences;
2.2.7. information about any possible fraudulent, criminal or anti-money laundering activity which our systems detect; and
2.2.8. information about your betting history and patterns.
2.3. You are not required to provide any information to us, but if you do not, we may not be able to provide you the requested Services.
3. USE OF YOUR PERSONAL DATA
3.1 In accordance with data protection laws, we will only process your personal data where we have a lawful basis for doing so. In respect of your personal data, these bases are where it is necessary to provide Services to you under the performance of the contract we have with you; where we are required to do so in accordance with legal or regulatory obligations; where you have given your consent; and where it is in our legitimate interests to process your personal data provided that these do not prejudice your own rights, freedoms and interests.
3.2. We will process your personal data for the following purposes and in accordance with the following lawful conditions:
3.2.1. To enable us to set up and operate Your Account so that you can make full use of all of the features of the Services, including crediting Your Account with funds, placing bets and playing games (necessary for the performance of a contract).
3.2.2. To provide the Services to you (necessary for the performance of a contract).
3.2.3. To link your online account and retail accounts where you have requested this (necessary for the performance of a contract).
3.2.4. To enable us to receive questions and comments from you through our Online Help Centre, and for us to be able to respond to them (necessary for the performance of a contract).
3.2.5. To record telephone calls and retain communications to and from our Customer Services Department for training purposes to allow us to improve our customer services as well as for security purposes to allow us to identify persons in subsequent communications (legitimate interests).
3.2.6. To comply with relevant regulations regarding your registration and to verify the accuracy of the personal data you provide to us, including disclosure of such information to third parties (including financial institutions, age verification, and credit reference agencies) in connection with such purposes (a record of the search will be retained and the third party may use the information to assist other companies for verification purposes) (necessary to comply with a legal obligation). Credit reference agencies, in conjunction with the relevant privacy regulator(s) and the financial services industry, have developed a common form of notice, called the TransUnion Bureau Privacy Notice. Please refer to https://www.transunion.co.uk/legal-information/bureau-privacy-notice to find out more information about how TransUnion collects and uses credit data in its capacity as a credit reference agency.
3.2.7. To comply with our regulatory duties, obligations and responsibilities: including under the Gibraltar Data Protection Act 2004, Gibraltar Gambling Act 2005, UK Gambling Act 2005 and UK Gambling (Licensing and Advertising) Act 2014; to the Gibraltar Gambling Commissioner and the Gambling Commission; and under any other valid and applicable legislation and to any other competent authority (meaning any authority having any governmental, judicial or regulatory jurisdiction over us or any other company in our company Group) and as more particularly described in paragraph 3.3 (necessary to comply with a legal obligation).
3.2.8. Where you set deposit limits we will use automated means to track your deposit amounts to ensure that we comply with your request (consent).
3.2.9. To monitor your gambling patterns and to identify possible responsible gambling concerns as described in paragraph 3.4 (necessary to comply with a legal obligation).
3.2.10. Preparing statistics, providing analytical reports and analysis relating to the use of the Services by you and other customers (legitimate interests).
3.2.11. To allow us to contact you for research purposes so that we can better understand our services and how they are perceived by our customers. Such communication will be for research only and will not contain any marketing. We will offer you the opportunity to opt-out of future research in any communication we send to you (legitimate interests).
3.2.12. To monitor your (and all our customers') gambling activity and manage our risk and odds (legitimate interests).
3.2.14. To send you offers and promotions which may be of interest to your (but only where you have consented for us to do so) (consent).
3.2.15. To provide you with personalised use of our Services so that we can offer you and other players a better service (legitimate interests).
3.2.16. To profile you so that we can better understand your preferences and which products and offers would be most suitable for you and customers similar to you (legitimate interests).
3.2.17. When you choose to download Software pursuant to our Services, notification software may also be downloaded onto Your Access Device. This allows us to send notifications to you about our Services directly to Your Access Device, for example to inform you about new features, updates, service communications, offers and promotions. By downloading such Software, you consent to receiving notifications. If you would prefer not to receive these notifications, you will need to manually uninstall the notification software from Your Access Device (for example by clicking the "what's this" link on a notification you receive and following the 'how to remove' instructions", or by following the applicable "Settings" and "Notification Centre" uninstall instructions on Your Access Device). Please note that these notifications are distinct from marketing which is addressed below (legitimate interest).
3.3. We are required to implement measures to identify and investigate any suspected unlawful, fraudulent or improper activity connected with the Services, including possible money laundering, the use of proceeds of crime and fraud. We are also obliged to investigate and identify any possible issues related to integrity, dishonesty, malpractice and other seriously improper conduct in sport, such as match-fixing. Where we suspect such activities are taking place, or receive a legitimate request for information regarding such activities from a governing body, we are required to disclose this information to the relevant authorities and/or governing bodies. In order to assist us in carrying out these obligations we will implement various manual and automated checks and balances to process your personal data and to flag any suspicious activity (necessary to comply with a legal obligation).
3.4. In accordance with our responsible gambling and social responsibility obligations and for the benefit of our player, we will monitor gambling / deposit patterns that may indicate concern in respect of responsible gambling. We may use automated decision-making processes to help us to identify such patterns (for example, our systems will automatically prevent you from depositing beyond limits set by you and identification, verification and credit checks carried out by our processors are done so on an automated basis). These decisions enable us to help you gamble responsibly (necessary to comply with a legal obligation).
3.5. For the processing purposes of prevention or detection of crime as well as responsible gambling as described in paragraphs 3.3 and 3.4, we may supplement the information that you provide to us with information that we receive from third parties or collate by accessing third party sources, including (without limitation) information published on the internet about or by you, for example on social media and social networking sites (necessary to comply with a legal obligation).
3.6 When you give us information about any health issue related to yourself or any third party, we will process this information to the extent that it is necessary to protect your vital interests or those of another natural person.
4. SHARING YOUR PERSONAL DATA
4.2. In addition to any sharing listed in paragraph 3, we may disclose anonymized data (such as aggregated statistics) about the users of our Services in order to describe our sales, customers, traffic patterns and other information to prospective partners, advertisers, investors and other reputable third parties and for other lawful purposes, but these statistics will not contain your personal data.
4.3. As listed in paragraph 3, we may occasionally be required by law, court order or governmental authority to disclose certain types of personal data.
4.4. We may also share your information with third parties in the following situations, to the extent permitted by law:
4.4.1. if we think doing so is necessary to protect the rights, property, security, or safety of us, our Service, our users, or the public;
4.4.2. to enforce our General Terms or any other agreements we have in place with you;
4.4.3. to investigate and defend ourselves or others against any third-party claims or allegations; and
4.3.4. while negotiating or in relation to a business transaction, such as a merger, change of control, sale of assets, or bankruptcy.
5. OVERSEAS TRANSFER OF YOUR INFORMATION
5.1. In connection with the provision of Services, we may need to transfer data (including your personal data) to other companies in our company Group and our partners and subcontractors who are based outside the European Economic Area ("EEA"), including the United States of America, the Mohawk Territory of Kahnawake; Canada; Israel; Cyprus; and the Philippines. Where data is transferred outside of the EEA we will do so under standard contractual clauses or binding corporate rules or any other acceptable method that ensures a protection of your data to the standard required within the EEA. Details of the William Hill group of companies can be obtained by emailing firstname.lastname@example.org.
6. UPDATING YOUR INFORMATION
It is important that the information we hold about you is accurate in order for us to comply with our legal and regulatory obligations and also to provide you with the best possible service. We therefore request that you ensure your personal data is up to data at all times. You may update your personal data at any time from within Your Account through 'My Account/Update Account Details' (where available) or by contacting Customer Services.
7. INFORMATION SECURITY
7.1. We strive to protect your personal data and our Services from unauthorised access to or alteration of your personal data. This includes use of various security measures to protect your personal data held by or on behalf of us and ongoing review of our information collection, storage and processing practices.
8. YOUR RIGHTS IN RESPECT OF YOUR PERSONAL DATA
8.1. You have the following rights in relation to your personal data:
8.1.1. a right to access your personal data held by us;
8.1.2. a right to receive certain personal data in machine-readable format such as .csv (readable on Microsoft Excel or equivalent) or .pdf (readable on Adobe Acrobat or equivalent);
8.1.3. a right to object to processing where lawful basis is that it is in our legitimate interests, but please note that we may still process your personal data where there are other relevant lawful bases or where we have compelling grounds to continue processing your personal data in our interests which are not overridden by your rights, interests or freedoms;
8.1.4. a right to have inaccurate personal data rectified;
8.1.5. a right to have certain personal data erased where it is no longer necessary for us to process it, where you have withdrawn your consent pursuant to paragraph 8.1.8, where you have objected pursuant to paragraph 8.1.3, where your personal data has been unlawfully processed, or where erasing your personal data is required in accordance with a legal obligation;
8.1.6. a right to request an explanation of the logic involved where we make decisions about you solely through automated means;
8.1.7. a right to complain to your national data protection regulator;
8.1.8. where we have specifically requested your consent to process your personal data and have no other lawful conditions to rely on you have the right to withdraw this consent by visiting the Preference Centre on our website or software application or by emailing email@example.com; and
8.1.9. a right to object to direct marketing, which can be done by opting-out of direct marketing either through Your Account via the My Account / Your Details section or by opting out via the communication itself. You also have a right to object to any profiling to the extent that it relates to direct marketing only.
8.2. If you are unsure about your rights or are concerned about how your personal data may be processed you should contact your national data protection regulator.
8.3. If you would like to exercise any of your rights then you can do so by emailing us at firstname.lastname@example.org. Please be aware that whilst we will try to accommodate any request you make in respect of your rights they are not absolute rights. This means that we may have to refuse your request or may only be able to comply with it in part.
8.4. Where you make a request in respect of your rights we will require proof of identification. We may also ask that you clarify your request. If we receive repeated requests or have reason to believe requests are being made unreasonably we reserve the right not to respond.
9.1. We may contact you in relation to promotions, products or services that you may be interested in from time to time, but only where you have consented to receive such marketing communications. You can update your marketing preferences and also opt-out at any time via Preferences tab located within the Balance Icon menu. We will also include unsubscribe features in our communications which you can utilise to opt-out of future marketing communications.
9.2. We may also carry out certain profiling of you and your activity in relation to our Services in order to send you more relevant marketing communications. This profiling will be undertaken based on your use of our Services and also through your selections in the Preference Centre. You can update your preferences via Preferences tab.
9.3. Where you have consented to receive direct marketing from us and also our retail business, we may send you direct marketing relating to joint online and retail offers.
10. RETAINING YOUR PERSONAL DATA
We will retain your personal data for the period necessary to provide you with Services. Accordingly, your personal data shall be maintained for up to 7 years following the closure of Your Account (if applicable) or the last contact with us emanating from you. Where it is no longer necessary to process your personal data we will delete it. Please note, however, that we may be subject to legal and regulatory requirements to keep personal data for a longer period, in particular pursuant to any applicable statutory limitation period.
11. IP ADDRESS
Your browser also generates other information, including which language the Website is displayed in, and your Internet Protocol address ("IP address"). An IP address is a set of numbers which is assigned to your computer during a browsing session whenever you log on to the internet via your internet service provider or your network (if you access the internet from, for example, a computer at work). Your IP address is automatically logged by our servers and used to collect traffic data about visitors to our Website. We also use your IP address to help diagnose problems with our server, and to administer our Website.
12.1. A 'cookie' is a small text file that is downloaded onto your Access Device when you visit a website and that enables the website to obtain certain information from your browser, such as your preferences. Cookies allow us to maximise your experience using the Website by increasing its functionality and allowing the Website to remember information and selections as you move from page to page and from visit to visit, depending on the cookie. A cookie does not harm Your Access Device nor does it contain any viruses or other malware.
12.3. You can control your privacy and security settings. To learn more about cookies and how to disable them we recommend you click here. Furthermore, you can learn more about third party marketing cookies generally these and how to delete them here. Whilst preventing certain cookies may affect your use and enjoyment of the Website. For further information on cookies and how to manage them visit our FAQs.
13. CONTACTING US
13.2. In the event that you would like to escalate a data privacy issue or have a question that cannot be resolved by our customer services team you can contact our data protection office by emailing email@example.com.