SCOPE

This Privacy Policy (hereafter referred to as the “Policy”) outlines the manner in which The Company handles the information and personal data which you have provided to us (or which we have collected) and which enables us to effectively manage the relationship which you have with us.

This Policy applies to our websites, applications, products and/or services that link to this policy or do not have a separate privacy policy (hereinafter referred to as our services). This privacy policy is intended to give you a better understanding of the data we collect, the reason why we collect such data, the manner in which we process these data, the entities with whom we share the said personal data, your rights in relation to the collection, processing and sharing of such data and any other pertinent matter relating to privacy and security.

Any personal data you will provide or which we already hold will be processed in line with and in the manner set out in this Privacy Policy. Any and all information will be provided through any of The Company websites (“The Website”), the designated telephone numbers or any other means which The Company may make available from time to time.

By reading this Policy, you understand and acknowledge that your Personal Data may be processed in the ways set forth in this Policy. If you do not agree with the terms of this Privacy Policy, please do not use the Website or otherwise provide us with your Personal Information.

Any reference in this Policy to "Company", "us" or "our" (and all declensions of those words) refers to the Data Controller referred to as FGS SOFTWARE SOLUTIONS S.R.L. a company registered and established under the laws of Costa Rica.

All processing of Personal Data performed by The Company as envisaged in this Privacy Policy shall be carried out in line with:

The National Ordinance on the Protection of Personal Data (hereafter referred to as the “DPA”) as well as any other subsidiary legislation issued under the DPA, both as may be amended from time to time;

Regulation (EU) 2016/679 of The European Parliament And of The Council of 27 April 2016 On The Protection of Natural Persons With Regard to The Processing of Personal Data And On The Free Movement of Such Data, And Repealing Directive 95/46/EC (General Data Protection Regulation), (hereinafter referred to as “the Regulation” or “GDPR”).

The DPA and the GDPR shall hereafter be collectively referred to as the “Data Protection Laws”.

The Company determines the means and purposes of the processing of Personal Data and therefore acts as the “Data Controller” in terms of the applicable Data Protection Laws.

DEFINITIONS

Data Controller

“The Data Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

The Data Processor

“The Data Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Personal Data

“Personal Data” means any information that identifies you individually or relates to an identified or identifiable natural person which can also be defined as a data subject.

SECURITY

The Company has adopted a secure communication protocol via the Internet TLS 1.2, used to implement the protected remittances. This protocol involves the encryption of your Personal Data during transmission over the internet. Moreover, The Company stores your Personal Data digitally on encrypted hard drives which is an additional guarantee of security of such data.

Our services are registered with the site identification authorities so that your browser can confirm our identity before any personally identifiable information is sent. In addition, our secure servers protect this information using the advanced firewall technology.

PERSONAL DATA PROTECTION

Personal Data held by us are protected using the highest industry standard security processes and systems. Our commitment to protect the personal data is not merely through quality and high standards but also through the best and most efficient application of the law. We are bound to only process the personal data if such processing is based on a genuine and legitimate reason to do so on the basis of one of the legal grounds established in the GDPR.

PROCESSING ON THE BASIS OF OUR LEGITIMATE INTERESTS

Legitimate interests exist when we have a business or commercial reason upon which personal data will be processed. In such a case we undertake to protect any and all of your personal data and the manner in which such data are processed and to ensure that such processing would not be unfair to you or to your interest.

If and when we decide to process your personal data on the basis of our legitimate interests, we will inform you of such, what said legitimate interests are and provide a process whereby you will be able to raise any questions and/or objections which you may have in relation to such processing. It is important to note that The Company is not obliged to stop processing if the grounds for processing override your right to object. An example of this can be in the case where we need to process your data to abide with the anti money laundering purposes. This also applies when we act in accordance with the binding requirements of Costa Rica law, as these are our legitimate interests to operate lawfully.

PROCESSING ON THE BASIS OF YOUR CONSENT

Consent is not the only ground we may be permitted or obliged to rely on to process your personal data. We will only process your personal data on the basis of your consent where we cannot or otherwise choose not to rely on any ulterior legal ground (such as compliance with a legal obligation or legitimate interests). Where we process your personal data on the basis of your consent, you shall have the right to withdraw your consent at any time and in the same manner as it had been previously provided by yourself. In the case that you exercise your right to withdraw your consent, we would then determine whether we are able (or obliged) to process your personal data on the basis of any other legal ground other than the consent. If this is the case we will notify you accordingly. Any such withdrawal of your consent will not invalidate any processing operations carried out prior to you having withdrawn your consent.

DATA RETENTION POLICY

Any and all personal data The Company keeps will be protected in the best way possible and will only be used for the purposes which are compatible with the applicable Data Protection Laws as well as any other applicable laws. The Company will retain your Personal Data only for as long as is necessary (taking into consideration the purpose for which they were originally obtained). The criteria we use to determine what is ‘necessary’ depend on the particular Personal Data in question and the specific relationship we have with you (including its duration).

Generally, our normal practice is to determine whether there is/are any specific law(s) (for example tax or corporate laws) permitting or even obliging us to keep the specific Personal Data for a certain period of time (in which case we will keep the Personal Data for the maximum period indicated by any such law). For example, any data that can be deemed to be “transactional data” must be kept for at least five (5) years.

We would also have to determine whether there are any laws and/or contractual provisions that may be invoked against us by you and/or third parties and if so, what the prescriptive periods for such actions are (usually five (5) years). In the latter case, we will keep any relevant Personal Data that we may need to defend Ourselves against any claim(s), challenge(s) or other such action(s) by you and/or third parties for as long as is necessary.

Where your Personal Data are no longer required by us, we will either securely delete or anonymise the Personal Data in question.

Failure to provide your Personal Data may prevent The Company from meeting its legal and regulatory obligations, fulfilling its contractual obligations and rendering and/or performing the necessary services needed to properly manage and maintain your account. Therefore, failure to provide the necessary personal data may lead to The Company being unable to provide you with certain products and/or services.

PERSONAL DATA WE COLLECT, THE PURPOSE & LEGAL BASIS OF SUCH DATA PROCESSING

The following list outlines the categories of personal data which we process, the purpose for which we process such data as well as the corresponding legal basis used for such processing. It is pertinent to know that the same categories of personal data may be processed for different purposes and therefore on the basis of various legal grounds.

CATEGORIES OF PERSONAL DATA

1.1 Contact data (Ex: Name, Surname, residence mailing address with postcode, telephone/mobile number, email address, a recent utility bill showing your residential address).

1.2 Identity data (Ex: Name, Surname, address, date of birth, identity card/passport number, a photograph, gender, occupation, your marital status and family, hobbies).

1.3 Activity data (your website logins, activity and transactions on our site, ex: all the bets placed, winnings and bonuses received, payments and withdrawals from your account, analytics information, some of your browsing history, your favorite bet types or games, time spent on particular pages, clicks, actions, cookies, communications you have with the customer services by phone, email or live chat, if you are self-excluded from our services, etc.).

1.4 Technical data (traffic data, GeoIP location, information from your browser, computer or mobile device when you access or use our services, ex; device and network information.

1.5 Financial data (currency, credit card and banking information or other payment details, source of funds).

1.6 Data required for marketing and educational purposes (Ex: Name, Surname, mailing address, telephone/mobile number, email address, proof of opt-in consent (where required), proof of objections to marketing, website data and online identifiers (such as IP address, and other information generated by your browser)).

PURPOSE OF DATA PROCESSING

2.1 To set up a record on our system and register you as a new customer. To verify your identity and prevent any possible fraudulent activity such as third parties using your data for impersonation.

2.2 To provide additional security for your credit data and credit card usage. To provide additional security for your personal and credit data.

2.3 To provide support and protection from the gambling addiction problems.

2.4 To manage and monitor our ongoing relationship with you and provide you with our services of sports betting and casino games as well as our full customer care services.

2.5 To subscribe to a newsletter, campaigns and/or to be added to a mailing list.

2.6 To provide you with any information regarding your profile and any requests. To personalize your customer experience. To ensure a responsible gaming environment. To ensure that we have the latest information on any queries, complaints or questions you may have had in the past to enable us to improve our service.

2.7 To monitor your deposits and withdrawals and to prevent any unlawful usage from third parties.

2.8 To provide you with the marketing material that you have requested from us or that we are otherwise authorized to send you. To provide you with the educational materials, upcoming events notifications and other related information that may be useful to you in relation to the received services and for educational purposes.

LEGAL BASIS FOR DATA PROCESSING

3.1 Contractual Necessity.

3.2 Legitimate Interests (ensuring we maintain an accurate record on our system and providing you with information you may have requested as well as developing and providing innovative gaming and betting experiences to our users on a sustained basis).

3.3 Gambling license requirements.

3.4 Anti-money laundering and KYC regulations.

3.5 Your consent (where required or when processed for direct marketing purposes).

3.6 Responsible Gaming regulations.

The Company may also collect personal data from publicly available sources such as web searches, company registers and broadcasts media provided it is reasonable to do so and such conduct is not detrimental to your rights and freedoms.

Some of your data will also be used to carry out checks which will help complete the Profiling of your account. Profiling is a procedure that includes any form of automated processing of personal data required to abide with AML directives and prevent any other Fraudulent activity from happening using your personal details. These could be Tax Evasion or Suspicious betting patterns to name a few.

No automated decision will be made, including for Marketing purposes. Examples of details which are verified automatically by the system are IP address or PEP checks. However, in all such cases the final decision is made by our human staff. Email address is also verified and you will receive an email to confirm your own email address.

DATA PROCESSING ON THE BASIS OF YOUR CONSENT

For the avoidance of all doubt, we would like to point out that in those limited cases where we cannot or choose not to rely on another legal ground (for example, our legitimate interests), we will process your Personal Data on the basis of your consent.

In those cases where we process on the basis of your consent (which we will never presume but which we shall have obtained in a clear and manifest manner from you), YOU HAVE THE RIGHT TO WITHDRAW YOUR CONSENT AT ANY TIME, in the same manner as you shall have provided it to us.

Should you exercise your right to withdraw your consent at any time (by writing to us at the physical or email address below), we will determine whether at that stage an alternative legal basis exists for processing your Personal Data (for example, on the basis of a legal obligation to which we are subject) where we would be legally authorized (or even obliged) to process your Personal Data without needing your consent and if so, notify you accordingly.

When we ask for such Personal Data, you may always decline, however should you decline to provide us with necessary data that we require to provide the requested services, we may not be able to provide you with such services (especially if your consent is the only legal ground that is available to us).

Just to clarify, your consent is not the only ground that permits us to process your Personal Data. In the last preceding section above we pointed out the various grounds that we rely on when processing your Personal Data.

COOKIES

When you visit our Site, we collect certain categories of Personal Data automatically through the use of cookies and similar technologies.

When you use the Website, a cookie will be stored on your computer. Generally, cookies and similar technologies work by assigning to your browser or device a unique number that has no meaning outside of our Site. We use these technologies to personalize your experience, including language and currency preferences and to assist in delivering the content specific to your interests. Additionally, after you’ve entered your email address and password during a session on the Website we save that information so you don’t have to re-enter it repeatedly during that session. This may be extended, where you have agreed to do so, for future automatic logins. Most browsers automatically accept cookies. To manage the collection of information through cookies or other equivalent technology you can use the settings on your browser or mobile device. We are committed to providing you with choices to manage your privacy and sharing. However, we do not recognize or respond to any browser-initiated Do Not Track signals, as the internet industry has not fully developed Do Not Track standards, implementations and solutions.

To learn more about Do Not Track signals, you can visit https://allaboutdnt.com. Not accepting cookies may make certain features of the Website unavailable to you. We may also use your IP address to identify you, to administer the Website and to assist in diagnosing problems with our servers.

OTHER PURPOSES

We may be required to use and retain your personal information for loss prevention and to protect our rights, privacy, safety, or property, or those of other persons in accordance with our legitimate interests.

AUTHORIZED DISCLOSURES OF PERSONAL DATA TO THIRD PARTIES

Without prejudice to anything else contained in this Privacy Policy, the personal data relating to you may be shared with the authorized third parties or any of the relevant competent authorities located in or outside of the EU/EEA where such disclosures are permitted or required pursuant to Data Protection Laws and/or any other applicable legislation.

These authorized third parties may include but are not limited to entities within The Company, other third parties and organizations such as law enforcement agencies, collaborating accounting and auditing firms, regulators, relevant authorities and digital marketing providers. We may also share such personal data with organizations who have introduced you to us, third parties which you have asked us or permitted us to share your data with or any other third party which we must necessarily share your personal data with so as to be able to provide the products and/or services which you have requested. The personal data shared will depend on the product/s and or service/s you choose to use.

When any such personal data have to be transferred outside of the EEA – European Economic Area, we ensure that all the necessary and appropriate safeguards are in place. We may also disclose the personal information to other companies within the associated or subsidiary companies and to our business partners, or successors in title to our business. The manner in which the data transfer is handled outside of the EEA is detailed below. Your Personal Data will never be shared with any third parties for their marketing purposes (unless you give your consent thereto).

SHARING OF PERSONAL DATA WITH OTHER CATEGORIES OF RECIPIENTS

Relevant data will also be disclosed or shared as appropriate (and in all cases in line with the Data Protection Laws) to/with members and staff of The Company, to/with other entities within The Company (for example in compliance with our legal obligations) and/or to/with affiliated entities and/or subcontractors if pertinent to any of the purposes listed in this Privacy Policy (including to/with our services providers who facilitate the functionality of the Site and/or any service you may require). Personal information will only be shared by us to provide the services you request from us or for any other lawful reason (including any authorized disclosures not requiring your consent).

Any such authorized disclosures will be done in accordance with the Data Protection laws (for example, all our processors are contractually bound by the requirements in the said Data Protection Laws, including a strict obligation to keep any information they receive confidential and to ensure that their employees/personnel are also bound by the similar obligations). The said service providers (our processors) are also bound by a number of other obligations (in particular, those established in Article 28 of the GDPR).

Your Personal Data will never be shared with the third parties for their own marketing purposes (unless you give your consent thereto).

INTERNET COMMUNICATIONS

Any data sent via the Internet may be transmitted across the international borders even where the sender and the receiver are located in the same country. We cannot be held responsible for anything done or omitted to be done by you or any third party in connection with any Personal Data prior to our receiving them, including but not limited to, any transfers of such data from you to us via a country having a lower level of data protection than that in place in the European Union, and this, by any technological means whatsoever (for example, WhatsApp, Skype, Dropbox etc.).

Moreover, we shall accept no responsibility or liability whatsoever for the security of your data while in transit through the internet unless our responsibility results explicitly from a law having effect in Costa Rica.

ACCURACY OF YOUR PERSONAL DATA

All reasonable efforts are made to keep any Personal Data we may hold about you up-to-date and as accurate as possible. You can check the information that we keep about you at any time by contacting us in the manner explained below. If you find any inaccuracies, we will correct them upon your request. Please find a detailed list of your legal rights in terms of any applicable data protection law below.

LINKS TO THIRD PARTY SITES

Links that we provide to any third-party websites are clearly marked and we are not in any way responsible for (nor can we be deemed to endorse in any way) the content of such websites (including any applicable privacy policies or data processing operations of any kind). We suggest you read the privacy policies of any such third-party websites.

DATA TRANSFER OUTSIDE OF THE EEA

The security of your data is our top priority. We have taken suitable technical and organizational measures to safeguard and secure the data we collect. All your personal data are stored on the secure servers maintained by certified, reputable service providers.

Your personal data are primarily stored and processed within the EEA. However, we may share your personal data with certain third parties, as described above, and your data may be accessed or stored by them. Some of these third parties may process your personal data as sub-processors outside of the EEA. Your personal data may also be accessed and processed by staff or agents that work for us outside of the EEA.

Whenever such transfer of your personal data occurs, we will ensure that appropriate safeguards are in place, and that your enforceable rights as a data subject and effective legal remedies are available, by relying on the use of standard contractual clauses and/or other appropriate legal grounds. You are entitled to receive a copy of such safeguards by contacting us at wizebets.com. We will contractually bind all our processors to the strict security standards which keep to the same level of personal data protection as within the EEA.

By accepting this Policy, you specifically agree and opt-in for your personal data to be transferred outside of the EEA as outlined in this Policy.

DATA SUBJECT RIGHTS

The Company undertakes to assist you in the best way possible should you choose to exercise any of your rights with respect to your personal data. In certain cases we might need to verify your identity prior to processing your request.

Right of Access

Upon your request we shall provide you with confirmation as to whether or not any personal data concerning you are processed, and where that is the case, to provide you with the right to access that personal data and the following information:

• What Personal Data we have;
• Why we process them;
• Who we disclose them to;
• How long we intend on keeping them for (where possible);
• Whether we transfer them abroad and the safeguards we take to protect them;
• What your rights are;
• How you can make a complaint;
• Where we got your Personal Data from and - Whether we have carried out any automated decision-making (including profiling) as well as related information.

Right to rectification

You have a right to ask us to have any inaccurate or incomplete personal data relating to you rectified and/or completed.

Right of erasure (the “right to be forgotten”).

You have the right to ask us to delete your Personal Data and we shall comply without undue delay where:

• The Personal Data are no longer necessary for the purposes for which they were collected; 
• You have withdrawn your consent (in those instances where we process on the basis of your consent) and we have no other legal ground to process your Personal Data; 
• You shall have successfully exercised your right to object (as explained below);
• Your Personal Data shall have been processed unlawfully;
• There exists a legal obligation to which we are subject;
• Special circumstances exist in connection with certain children’s rights.

In any case, we shall not be legally bound to comply with your erasure request if the processing of your Personal Data is necessary to comply with a legal obligation imposed on us.

Right to Restriction of Processing

You have the right to ask us to restrict the processing of your personal data. However, you are only able to exercise this right where:

• The accuracy of your Personal Data is contested (see the right to data rectification above), for a period enabling us to verify the accuracy of the Personal Data; 
• The processing is unlawful and you oppose the erasure of your Personal Data;
• We no longer need the Personal Data for the purposes for which they were collected but you need the Personal Data for the establishment, exercise or defense of legal claims; 
• You exercised your right to object and verification of our legitimate grounds to override your objection is pending.

Should you successfully exercise this right, we would only be in a position to process your personal data:

• Where we have your consent;
• For the establishment, exercise or defense of legal claims;
• We no longer need the Personal Data for the purposes for which they were collected;
• For the protection of the rights of another natural or legal person; 
• For reasons of important public interest.

Right to Data Portability

You have the right to ask us to provide you with your personal data which you would have previously provided to us. We will provide you such data in a structured, commonly used, machine readable format, or (where technically feasible) we may have the data sent directly to another Data Controller, provided this does not adversely affect the rights and freedoms of others. You may only exercise this right where:

• The processing is based on your consent or on the performance of a contract with you; 
• And the processing is carried out by automated means.

Right to Withdraw Your Consent

You have the right to withdraw your consent at any time. For detailed information on this right, please refer to “DATA PROCESSING ON THE BASIS OF YOUR CONSENT” section which can be found above.

Right to object to the data processing

In certain instances, you have the right to object to the processing of your personal data. We are only processing your personal data on the basis of one of the following purposes:

• The processing is necessary for the performance of a task carried out in the public interest; 
• When processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, the processing shall only cease where the Data Controller has not provided compelling and legitimate grounds which outweigh the objections raised by you in such a request and which require the processing to continue.

Where your data are being processed for direct marketing purposes, you have the right to object to the processing of your personal data at any time.

In all other instances apart from those listed above, this general right to object shall not subsist.

Right to lodge a complaint

As a Data subject you may at any time lodge a complaint with any relevant Data Protection Supervisory Authority should you feel that any of your rights have been impinged by The Company.

Notwithstanding this right, we kindly ask you to please attempt to resolve any issues you may have with us prior to lodging a complaint.

It is important to note that notwithstanding these rights, The Company may still refuse the request if it can reasonably justify such a decision. This refusal does not prohibit you from lodging a complaint with the relevant data protection authority.

OUR CONTACT INFORMATION

If you have any questions or comments about privacy or should you wish to exercise any of your individual rights, please contact us. Should you need to, you can also contact our customer service team who will be happy to provide you with the required assistance.
The Company’s Data Protection Officer can be contacted directly at wizebets.com.