PRIVACY POLICY

Introduction

Welcome to our Privacy Policy regarding the use of the website. We respect your privacy and are committed to protecting your personal data and processing it in accordance with applicable laws, including, but not limited to, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) — "GDPR". This Privacy Policy informs you about how we care for your personal data when you visit our website, as well as about your privacy rights and how the law protects you.

Who We Are

The controller of your personal data is PragmaticPlay Limited, a company registered in Malta and having its registered address at Falcon House, Block E, High Street, Sliema, Malta ("Company", "We", "Us", "Our"). The purpose of this Privacy Policy is to inform you about how the Company collects, processes, uses, stores, and protects your personal data, as well as about your rights regarding the processing of your personal data. By visiting our website and participating in the campaign, you thereby confirm that you have read and fully accept the terms set out in this Privacy Policy. The Company acknowledges that in collecting your personal data we are subject to Maltese laws and will process your personal data in accordance with GDPR. For any additional inquiries or requests about how we use your personal data.

Definitions

Terms capitalized in this Policy have the meaning assigned to them in accordance with GDPR or the Terms of Use of this website, and should be interpreted accordingly. In addition, the following definitions apply: User — accesses and views the Website ("You", "Your");

Services — the services provided by the Company through the Site. This Privacy Policy sets out the conditions that the Company adheres to in order to protect the privacy of its users. It describes the conditions under which we collect and process your Personal Data to ensure their security and confidentiality. The Company reserves the right to make amendments and updates to this Privacy Policy as it deems appropriate, and any changes take effect from the moment of their publication on the Website. You will be notified of any significant changes to this Privacy Policy.

Data Processing Principles

We fully respect your fundamental rights and consider the protection of your personal data a priority task. Accordingly, in processing your Personal Data, we are guided by the following basic principles:

We provide your personal data only for lawful and fair processing, and we ensure full transparency regarding how we process your personal data.

We collect and process your personal data only for specific, explicit, and legitimate purposes set out in this Privacy Policy, and we do not process them in any way incompatible with these purposes.

We process your personal data only to the extent necessary and consistent with the purposes for which they are collected.

We make reasonable efforts to ensure the accuracy of, and where necessary, update your Personal Data, taking all reasonable steps to promptly delete or correct them in case of inaccuracies.

We process your personal data in a way that guarantees their security using appropriate technical and organizational measures.

Overall, we comply with all applicable legislative norms as legally established obligations, as the Controller of your personal data.

Types of Personal Data Collected

The Company may collect and process the following Personal Data:

Personal Data when accessing the site:

IP address

Age confirmation

User device data

General communication data

Browsing data

Information about user preferences regarding the Website

Purposes and Legal Basis for Data Processing

The Company may process your personal data to fulfill its obligations in accordance with the Terms, comply with its legal obligations, and for the following purposes:

Administration and development of the Site;

Improving user experience;

Detecting, investigating, and preventing fraudulent and other illegal activities and protecting your rights and the rights of the Company;

Collection, processing, and execution of statistical and other research and analysis of information to improve the Website and Services;

Verification of compliance with the Terms of Use of the Website.

The Company may request and process additional Personal Data only with your lawful consent for the following purposes:

For the purposes of commercial communication, marketing, and advertising of our services or third-party services through SMS, phone, email, the Internet, fax, mail, social networks, and/or any other appropriate communication channels. For personalized market research and/or analysis to better understand your needs, preferences, interests, experience, and/or habits as a consumer.

You have the right to withdraw your consent for us to process your personal data at any time in writing to our contact details specified in this Policy. The withdrawal of your consent does not affect the legality of the processing of your Personal Data prior to its withdrawal.

Data Recipients

The processing of your personal data by our data processors is carried out in accordance with the contract that obliges data processors to the same level of data protection as provided by this Privacy Policy, in accordance with applicable legislation. We will not disclose your Personal Data to third parties outside the European Union. However, in the event of such data transfer, we will take all reasonable steps to ensure that your data is processed as safely as in the European Union, in accordance with this Privacy Policy and applicable law. Furthermore, we will update this Privacy Policy to reflect cross-border data transfers and corresponding measures to protect your privacy. In the event that we are legally obligated to do so by a court or other administrative authority in connection with an investigation into illegal activities such as money laundering and in any other case where we are legally obliged to do so, the Company may transfer your personal data to government authorities within the limits established by applicable law.

Security and Data Confidentiality

To ensure the proper use and integrity of your Personal Data and to prevent unauthorized or accidental access, processing, deletion, alteration, or other use, the Company applies appropriate internal policies and takes all appropriate organizational, technical, and procedural security measures, as well as technical standards in accordance with applicable laws and regulations. The processing of your Personal Data by the Company is carried out in such a way as to ensure confidentiality and security, taking into account the latest developments, implementation costs, the nature, scope, context, and purposes of processing, as well as the risks to your rights and freedoms, which are applicable in any circumstances. Your Personal Data is processed exclusively by authorized Company personnel who are bound by strict confidentiality obligations.

Storage of Personal Data

We retain your Personal Data for as long as necessary to fulfill the respective processing purposes described in this Policy, in accordance with the principles of data minimization and storage limitation. In addition, the Company may retain your Personal Data after the end of the processing period in the following limited cases:

In the event of a legal obligation under applicable law.

In the event of any claims made against the Company until it is necessary to protect our rights and legitimate interests in any competent court and any other state authority.

After the retention period, your Personal Data will be deleted from our databases and systems. For more information on the terms of data retention regarding specific Personal Data, please contact us at [email protected].

Your Rights

You have the right to:

Request access to your personal data and information related to their processing, and obtain a copy of them.

Request the correction of any inaccuracies or missing personal data.

Request the deletion of your personal data.

Request the restriction of the processing of your personal data in cases explicitly provided by law.

Request the transfer of your personal data to another data controller in a structured, widely used, and machine-readable format.

Object to the processing of your personal data in cases explicitly provided by law.

Object to a decision based solely on automated processing, including profiling, that significantly affects you.

All requests related to this section should be sent in writing to [email protected]. We will respond to any of your requests within one month from the date of receipt. This period may be extended by two months if necessary, considering the complexity of the request and the number of other expected requests. If your request is rejected, we will provide a proper justification. If there are any doubts about the identity of the person who sent the request, we reserve the right to request additional information necessary to confirm their identity. If your rights are violated, you have the right to lodge a complaint with the Information and Data Protection Commissioner.

Your Responsibilities

By using our website and providing your personal data, you acknowledge that you must provide your factual, accurate, and complete data as requested by the Company. Additionally, you must inform us of any changes to your information to ensure its relevance and accuracy. If it is determined that you are in breach of your responsibilities or if we have reasonable suspicions that the information you provided is untrue, incomplete, or in any way contrary to applicable laws or this Privacy Policy, we reserve the right to reject your registration application or immediately suspend or terminate the operation of your account without prior notice. In this case, you have no right to compensation for the rejection of your application, suspension, or termination of your account's operation.