Privacy policy
Below you will find our Privacy Policy, which informs you about how we process your personal data and about your data protection rights. We strongly recommend that you familiarise yourself with this Privacy Policy. However, we are aware that people lead busy lives, so we want to give you a quick overview of how we use your personal data; please remember, however, that this first section is only an overview and should not be read in place of reading the full Privacy Policy below.
We process your personal data for the purposes set out below, but the two main purposes are to enable us to provide services to you and to fulfil our regulatory obligations, specifically:
- In the first case, in order to provide services to you, we need you to register a user account and provide us with bank details to deposit money.
- On the regulatory side, we are obliged to monitor our customers and keep records of transactions to ensure that we provide a fair, responsible and safe service, including checking your age and monitoring our customers to ensure that they are playing within their means.
Introduction
This Privacy Policy applies to our websites, applications, goods and services that are linked to this policy or that do not have a separate privacy policy. The purpose of this Privacy Policy is to provide you with information about how we use your personal data. This Privacy Policy may be updated from time to time, so we encourage you to review it regularly. However, whenever we make material changes, we will be sure to notify you.
Who is the data controller?
The data controller for the processing of your personal data is TSG Interactive Services (Ireland) Limited, Belfield Office Park, Beech Hill Road, Clonskeagh, Dublin 4, Ireland. This is the company we refer to in this Privacy Policy when we say TSG, we, us, our and us, etc.
Yes, we have appointed aData ProtectionOfficer(DPO). Although you can contact our
What is meant by Group?
Reference to the Group in this Privacy Policy means Flutter Entertainment plc and all or any of its direct or indirect subsidiaries, joint venture partners, and its related companies, wherever located in the world, including, but not limited to, Paddy Power, Timeform, Sportsbet, BetEasy, FanDuel, TVG, Adjarabet, Sky Betting and Gaming, PokerStars, Junglee, Singular, Sisal and FOX Bet.
How we collect your personal data
In order for us to provide our services to you, you will need to create a user account. When you create this user account, you will need to provide us with certain personal information, such as your name, age, address and e-mail address. You will also be asked for additional information to enable you to use some of our services, such as your bank card details.
We also collect information about the transactions you carry out, including your gambling and betting activities. We may collect personal data through surveys that we, or companies contracted by us for this purpose, conduct. In addition, we collect information about your use of our websites, mobile applications and services. We also collect other information necessary to process your personal data for the purposes set out in this Privacy Policy.
When you contact us, we will process the personal data you provide in those communications.
We may also collect personal data from third party service providers, such as credit reference agencies and fraud prevention companies.
Finally, we also use cookies and similar technologies that may collect certain information about you, such as the IP addresses of your devices and your online activity, some of which will constitute your personal data. You can find out more about the cookies we use in the Cookies section below.
How we will use your personal data
In accordance with data protection laws, we will only process your personal data where we have a lawful basis to do so in relation to your personal data. We process your personal data if
- it is necessary to provide services to you in the performance of the contract we have with you;
- we are obliged to do so in accordance with legal or regulatory obligations;
- you have given your consent; or
- the processing of your personal data is in our legitimate interests, provided that none of these interests would be prejudicial to your rights, freedoms and interests.
Except in limited circumstances, we do not process special categories of personal data about you (such as personal data concerning your health, ethnic origin, religion, political beliefs, trade union membership or sexuality) or personal data relating to criminal offences or convictions. For the limited circumstances in which we process special categories of personal data, we have set out the additional required legal basis in italics below.
Below is a list of the purposes for which we process your personal data and the legal basis on which we process it:
Purpose
Category of data
Legal Basis
To create, administer and manage your user account
Identity and verification data
Necessary for the performance of a contract
To provide our services to you (including to enable you to play our games)
Contacts, web/application activity, device and internet identifier, financial and payment data, location data
Necessary for the performance of a contract
To receive and respond to your communications and requests
Contacts, messages
Necessary for the performance of a contract if the communication is specifically related to our services; otherwise, legitimate interests
To notify you of important updates to our websites, mobile applications and services
Contacts, messages, device identifier and the Internet
Necessary for the performance of a contract
For the purposes of your interaction with us, we will retain your records for as long as you are our member, plus a retention period as specified in our retention policy.
Financial and payment data
Necessary for the performance of a contract
To ensure that we can meet our regulatory obligations in relation to your use of our services, including verifying the accuracy of any information you provide to us, verifying your identity and verifying your age (which may involve disclosing your personal data to third parties or supplementing your personal data with information received from third parties (such as credit reference agencies)).
Identity and Verification Data, Financial and Payment Data, Opt-out Data, Location Data
Necessary to comply with a legal or regulatory obligation
To understand the sources of funds and assets and to determine your ability to pay the amount you spend
Identity and verification data, Financial and payment data, Exclusion data
Necessary to comply with a legal or regulatory obligation
To comply with our obligations under applicable law (including gambling legislation and regulatory and licensing requirements relating to our gambling licences)
Identity and Verification Data, Financial and Payment Data, Opt-out Data, Location Data
Necessary to comply with a legal or regulatory obligation
To identify and disclose any suspected illegal, fraudulent or other improper activity related to our websites, mobile applications and services (including money laundering)
Identity and verification data, Financial and payment data, Opt-out data, Location data, Web/application activity, Device and Internet identifier
Necessary to comply with a legal or regulatory obligation
Substantial public interest: Prevention or detection of illegal acts / protection of the public against dishonesty / regulatory requirements relating to illegal acts and dishonesty / prevention of fraud / suspicion of terrorist financing or money laundering
Monitoring of gambling patterns and identification of potential responsible gambling issues
Financial and payment data, exclusion data, location data, web/application activity, device and internet identifier
Necessary to comply with a legal or regulatory obligation
Substantial public interest: to safeguard persons at risk / to safeguard the economic well-being of certain individuals
To prevent you from using our websites, mobile applications and services if you have requested to do so (such as self-exclusion)
Financial and payment data, opt-out data, location data, web/application activity, device and internet identifiers
Necessary to comply with a legal or regulatory obligation
Substantial public interest: to safeguard persons at risk / to safeguard the economic well-being of certain individuals
To meet any deposit, spending or loss limits that you have set or that have been applied to your user account
Financial and payment data, deletion data, location data, web/application activity, device and Internet identifier
Necessary for the performance of a contract
To support any other purpose necessary for the performance of our contractual obligations or specifically stated at the time you provide your personal data
All categories of data
Necessary for the performance of a contract
To identify any fraudulent use of our services
Financial and payment data, deletion data, location data, web/application activity, device and Internet identifier
Necessary for a legal or regulatory obligation
To identify any breach of our terms of use
Financial and payment data, deletion data, location data, web/application activity, device identifier and the Internet
Necessary for the performance of a contract
To conduct market research campaigns
Contacts, web/application activity, web/application performance and information
Legitimate interests to better understand the products and services our customers like best
To send surveys to better understand our products and services
Contacts, web/app activity, web/app information and performance
Legitimate interests to better understand the products and services our customers like best
To analyse the results of user surveys
Contacts, web/app activity, web/app information and performance
Consent
To compile statistics relating to your and other customers' use of our websites, mobile applications and services
Contacts, web/app activity, web/app information and performance
Legitimate interests to understand usage to improve our products and services
To send you offers and promotions related to our services that may be of interest to you
Location data, web/app activity,
Consent
To record phone calls and live conversations with our customer service representatives for training purposes
Contacts, audio files
Legitimate interests to improve our customer services
To record telephone calls and live conversations with our customer service representatives for security and regulatory purposes.
Contacts, audio files, files and documents
Necessary for a legal or regulatory obligation
To use your name, image, user name or location data in advertising and marketing, but only where you have given your express and informed consent for us to do so
Contacts, audio files, files and documents
Consent
Sharing: To share your personal information with other members of the Group who help provide services to customers.
All categories of data
Legitimate interests to enable us to provide services
Sharing: To share your personal data with our professional advisers, such as lawyers and consultants
All categories of data
Legitimate interests to enable us to seek advice
Sharing: To share personal data with other members of the Group to ensure that responsible gambling measures can be implemented across the Group
Identification and verification data, Opt-out data.
Necessary to comply with a legal or regulatory obligation.
Sharing: Sharing your personal data with social media services to provide you with advertisements on social media sites, unless you have requested not to receive such advertisements through your social media account.
Contacts, web/application activity, device and internet identifiers.
Legitimate interest in improving advertising for our products and services.
Sharing: sharing your personal information with third parties to verify identity and geolocation data
Location data, contacts
Necessary to comply with a legal or regulatory obligation
Substantial public interest: Prevention or detection of unlawful acts / protection of the public against dishonesty / regulatory requirements relating to unlawful acts and dishonesty / prevention of fraud / suspicion of terrorist financing or money laundering
Sharing: Sharing your personal information with third parties for fraud detection and money laundering purposes
Identification and verification data, Opt-out data, Financial and payment data, Web/App activity,
Necessary to comply with a legal or regulatory obligation
Substantial public interest: Prevention or detection of illegal acts / protection of the public against dishonesty / regulatory requirements relating to illegal acts and dishonesty / prevention of fraud / suspicion of terrorist financing or money laundering
Sharing: sharing of your personal data with law enforcement authorities for the prevention and detection of crime
Identification and verification data, Opt-out data, Financial and payment data, Web/App activity,
Legitimate interests to help protect our services and our community.
Substantial public interest: Prevention or detection of illegal acts / protection of the public against dishonesty / regulatory requirements relating to illegal acts and dishonesty / prevention of fraud / suspected terrorist financing or money laundering.
Sharing: Sharing your personal data with national opt-out databases if you have opted out.
Contacts, opt-out data
Necessary to comply with a legal or regulatory obligation.
Substantial public interest: Safeguarding persons at risk / safeguarding the economic well-being of certain individuals.
Sharing: Sharing your personal data with gambling regulators to assist and carry out any investigations.
Contacts, exclusion data
Necessary to comply with a legal or regulatory obligation.
Cookies: For the operation of our websites and mobile applications, including to allow you to interact with our websites and mobile applications and to remember selections as you move through the pages
Website/application performance and information
Legitimate interest to use a website with at least standard functionality to deliver our services.
Cookies: To analyse your use of our website, monitor our web audience and populate certain content on our website in accordance with your usage
Web/App information and performance, Web/App activity
Consent
Cookies: To track your journey to and from our website, to enable us to understand how customers enter and leave our website and to give effect to any commercial agreements
Web/App information and performance
Consent
Cookies: For regulatory compliance, including identification of multiple user accounts, unauthorised user account login attempts or potential fraud.
Web/App information and performance, Web/App activity, device or Internet identifier.
Necessary to comply with a legal or regulatory obligation.
Cookies: To present third party marketing.
Contacts, Web/App activity, device or Internet identifier
Consent
In addition to the purposes set out above, we may also process your personal data for other purposes that we consider to be compatible with those set out above. When we do so, we will update this Privacy Policy accordingly.
Please note that the legal bases set out above are those that apply in the first instance, although it is possible that a change in circumstances may result in a change of legal basis; for example, if you cancel your user account with us, we will no longer process your personal data to perform a contract with you, but will continue to do so to comply with legal requirements.
Intra-Group Sharing
We are part of the Group and there will be instances where your personal data is shared with other members of the Group. This will occur in the following circumstances
- to enable us to identify and replicate responsible gambling measures (such as self-exclusion) to players across the Group (necessary to meet a legal/regulatory requirement);
- to facilitate account management, identification and verification of our customers and other regulatory checks (necessary to comply with a legal/regulatory requirement); and
- to help ensure that customer information is up to date and accurate (necessary to comply with a legal/regulatory obligation)
- identify customers who have committed or are suspected of fraud, money laundering or other criminal acts (necessary to comply with a legal or regulatory obligation)
- to identify customers who have breached our terms and conditions or other terms and conditions relating to our services (legitimate interests);
- to send inter-brand marketing materials where the customer has requested it (consent); and
- to analyse and better understand our business, customers, products and services across the group (legitimate interests).
We may also, in the future, share personal data with other members of our Group for related and compatible purposes. Finally, where we are required by law or regulation to share personal data across our Group for reasons that go beyond the above, we will be obliged to do so.
Please check this Privacy Policy frequently for any updates to our data sharing within the Group.
Disclosure of your personal data
In addition to the purposes involving the sharing of your personal data set out above, we will also disclose your personal data to sub-contractors that we engage. We will have a contract with each of these sub-contractors to ensure that your personal data is kept secure.
We may also disclose your personal data in the following circumstances
- where required by applicable law or regulation (disclosure to a governmental, regulatory or law enforcement authority);
- to defend ourselves legally and/or in connection with legal proceedings; and
- during the negotiation of an acquisition, purchase or merger.
Transfer of your personal data outside the EEA
We store your personal data in Ireland and operate businesses in a number of jurisdictions, some of which are not located in the European Economic Area (EEA). Members of the Group outside the European Union may have access to your personal data and, in such cases, we have implemented standard contractual clauses to ensure adequate protection of your personal data.
We may also share your personal data with third parties located outside the European Union and, in all such cases, we ensure that standard contractual clauses or an Adequacy Decision are in place to protect your personal data.
Security
We will take appropriate technical and organisational security measures to ensure that your personal data is kept secure and to prevent theft, loss or unauthorised access to your personal data. However, it is important to note that security can never be guaranteed and that you will not hold us responsible unless the security of your personal data is compromised due to negligence on our part.
Marketing
If you have subscribed to the services we offer, we may send you direct marketing in relation to other services offered by us or our Group, provided that you have consented to receive such marketing.
You can manage your marketing consents at any time through your user account. You can also unsubscribe using the tools in any marketing communication you receive. Please note that it may take up to five working days to take effect if you unsubscribe.
Social media marketing
We may also use the information you provide to show you relevant advertising and personalised content about our Groups' services on certain third party social media platforms (Social Media Sites) that we make available to you through relevant service providers (e.g. Facebook, Twitter). If you do not wish to see these advertisements, you can change your settings on the Social Media Sites. If you do not want us to share this information with the Social Media Sites, you can contact us directly.
Cookies
In this Privacy Policy, we use the term ‘cookie’ to refer to cookies and similar technologies we use to store information (such as web beacons). A cookie is a simple text file that a website server stores on your computer or mobile (or other) device, and only that server will be able to retrieve or read the contents of that cookie. Each cookie is unique to your web browser. It contains certain anonymous information, such as a unique identifier, the name of the website and some digits and characters.
Almost all websites and applications you visit, including our websites, use cookies to enhance your user experience by allowing the website and/or application to remember you, either during your visit (using a session cookie) or on repeat visits (using a persistent cookie).
Cookies are used to enhance your use of a website or application, for example, by enabling you to navigate between pages efficiently and by storing your preferences. Cookies make the interaction between you and the website faster and easier. If a website or application does not use cookies, it will think you are a new visitor each time you go to a new page on the website. Cookies can also be used to enable targeted advertising and to analyse your browsing on a website.
You can find out more about cookies in general and how to disable them in your browser .
You can learn more about advertising cookies on your device and you can disable them directly by clicking.
Storage of your personal data
We store your personal data for six years. The six-year period is calculated from the closure of your user account or if your user account has been inactive during this period. There are some exceptions to this retention period, namely:
- If you self-exclude yourself from any of our services, we will retain this information indefinitely.
- If you are under investigation or if we have detected possible fraud, money laundering or criminal activity, we may retain your personal information for a longer period.
- In the event of litigation, we will retain your personal information for the duration of the litigation and for six years thereafter.
Updating your personal data
You can update some of your personal data at any time via your user account. Please update your user account as soon as possible when your personal data changes. If you are unable to change your details via your user account, please contact Customer Service.
User rights
You have the following rights in relation to your personal data:
- right to access your personal data held by us (also known as a subject access request);
- the right to receive certain personal data in a machine-readable format;
- the right to rectify inaccurate or out-of-date personal data;
- if we have specifically requested your consent to process your personal data and we have no other legal conditions on which to rely, you have the right to withdraw such consent;
- the right to obtain the erasure of certain personal data when they are no longer necessary for processing, if you have withdrawn your consent in accordance with the previous paragraph, if you have objected in accordance with the following paragraph, if your personal data have been processed unlawfully or if the erasure of your personal data is required by a legal obligation;
- the right to object to processing if the legal basis is that the processing of your personal data is in our legitimate interest, but note that we may continue to process your personal data if there are other relevant legal bases or if we have compelling reasons to continue processing your personal data in our interest which do not override your rights, interests or freedoms;
- the right to request an explanation of the logic applied if we make decisions about you solely by automated means; and
- the right to object to direct marketing, which you can do by opting out of direct marketing through your user account or through the communication itself. You also have the right to object to profiling to the extent that it relates solely to direct marketing.
If you are unsure about your rights or are concerned about how your personal data may be processed, please contact our helpdesk or thedata protection supervisory authority in your country.
If you wish to exercise any of your rights, you may do so by contacting our Customer Services. Please note that, although we will try to accommodate any request you make in relation to your rights, your rights are not absolute rights. This means that we may have to refuse your request or may only be able to comply with it in part.
When you make a request relating to your rights, we will ask you for proof of identification. We may also ask you to clarify your request. We aim to respond to any request within one month of verifying your identity, but we may take longer (in which case we will notify you). If we receive repeated requests or have reason to believe that unreasonable requests are being made, we reserve the right not to respond.
Supervisory authorities
If you have a complaint, you have the right to contact the data protection supervisory authority in your country, but we ask that you contact us first to give us the opportunity to respond to your concerns.
How to contact us
If you have any questions about our use of your personal data, or if you wish to exercise any of your rights, please contact our CustomerServices in the first instance.
Privacy Policy Last revised: 12/04/2024