Who are we?

We are Stanleybet Malta Limited, (‘Stanleybet’) a company registered in Malta with company number C.25866 and our offices at Vista Corner, Triq il-ballut, Mosta, MST 4000, Malta, and are the Data Controller for the personal data we collect from you at The Poker One event (meaning Stanleybet determines what personal data should be collected from you, as well as how, why and on what legal basis it should be dealt with).

For The Poker One event, Stanleybet has partnered with the Portomaso Casino in Malta, and with hotels and travel agencies, to provide tournament and accommodation packages to players.

What Personal Data do we collect?

Acting as a Data Controller, we collect and process the following information about you as part of the event. This information will be collected when you book your tournament package:

• Your name.
• Your contact details (email and/or telephone number, depending on your preference).
• Your date of birth.
• Your level of poker proficiency (as determined by you).
• Your chosen start date for the tournament.
• If your event package includes a hotel stay, we will collect the names of any individuals who will accompany you to the poker tournament, and your check-in and check-out dates.

When you take your seat at your assigned poker table, Stanleybet will also seek your consent to collect:

• Still or moving images of you (such as photographs and video).

Acting as a Data Processor (meaning Stanleybet acts on instructions from another Data Controller), we collect and process the following information about you. This information will be collected when you book your tournament tickets and shared with the Portomaso Casino so they can perform their pre-screening checks (which they are legally obliged to carry out under Maltese gambling and anti-money laundering laws and which, if not provided by you, would result in you being unable to participate in The Poker One tournament):

• Your name.
• Your ID document number.
• The city where that ID document was issued.

Why do we collect this information?

Personal data cannot be processed unless there is an explicit and legitimate reason. This is known as the ‘lawful grounds for processing.’ The lawful bases we rely on are:

Consent

We seek your consent to use photographs or videos of you for promotional purposes. This is via our Image Release Form, which we will ask you to sign (indicating your preferences) when you are seated at the poker table. This consent can be revoked at any time by emailing: thepokerone@stanleybet.it.

Contractual obligations

We process your personal data (other than as noted above (Consent) and below (Legitimate Interests)) on this legal basis as part of the contract made with you when you buy one of our event packages. This includes activities such as registering you for the tournament, communicating with you about the tournament, verifying your age (participation is limited to over-eighteens only), and effectively administering your event package. If you were not to provide the personal data requested, we would be unable to fulfil your contractual booking for The Poker One event.

Legitimate interests

Stanleybet processes information about your poker skill level as part of their tournament bookmaking activities. This is optional information requested from you so we may create the right odds for the tournament. Additionally, we publish this information on the Poker One website league table as part of the event marketing activities.

We will retain your name and contact details for the purposes of informing your about future live poker events we may be operating and which we believe may be of interest to you. You can object to this at any time by emailing: thepokerone@stanleybet.it.

With whom do we share this information?

Within the Stanleybet Group

Your information will be processed by Stanleybet Group employees who are responsible for managing the Poker One event, or whose role includes performing essential IT maintenance and support activities on the IT applications and infrastructure where your data is stored. Your personal data will not be processed by any individual who does not have a legitimate reason to process it.

The Portomaso Casino

Stanleybet will share the following information with the Portomaso Casino in Malta:

• Your name.
• Your ID document number.
• The city where your ID document was issued.

We share this information as part of our contractual obligations with the Casino, so they can perform their pre-screening checks prior to the tournament taking place.

Hotels and accommodation providers

Stanleybet has partnered with the Valentina Hotel and the Vallese Viaggi travel agency to provide accommodation to players who have paid for a hotel as part of their event package. To effectively administer your hotel reservation, Stanleybet will share the following information with the hotel and travel agency:

• Your name, and the name of anyone accompanying you.
• Your check-in and check-out dates.

We do not share your information with other organisations, or organisations located in third countries.

How do we store your information?

Your information is secured via appropriate technical and organisational measures to safeguard its confidentiality, integrity, and availability.

For how long do we keep your information?

We will only keep your personal information for as long as is necessary to complete the purpose for which it was originally collected, or if we have a legitimate interest in retaining it.

We will retain information about your hotel reservation for a period of three months after the reservation has been made, so we may effectively address any queries or complaints.

Your name and contact details will be retained for up to 18 months after the last Stanleybet live event you attended.

Still or moving images of you (which you have consented to us using) will be retained for so long as they are being used on our website or marketing materials.

Information relating to pre-screening checks will be deleted by us no later than 14 days after the end of The Poker One Tournament.

All other information will be deleted by us no later than 14 days after the end of The Poker One Tournament.

Once the retention period has passed, your information will be securely deleted.

What are your rights?

Under current data protection law, you have the following rights:

• To request copies of your information (‘the right to access’).
• To ask us to rectify personal information if you think it is inaccurate (‘the right to rectification’).
• To ask us to erase your information, in certain circumstances (‘the right to erasure’).
• To ask us, in certain circumstances, to restrict processing your personal data (‘the right to restrict processing’).
• To ask us, in certain circumstances, to object to us processing your personal data (‘the right to object’).
• To ask, in certain circumstances, that we transfer the personal data that you provided to us to another organisation, or to you (‘the right to data portability’).

If you wish to exercise these rights, you can contact us via dpo@stanleybet.com. There is no charge to exercise your rights (unless the request is manifestly unfounded or excessive). We will reply within one calendar month of receiving your request, unless your request is complex or numerous, in which case we may extend this deadline to three months of receiving your request (provided we notify you of this extension within the original one calendar month deadline).

Where you make any such request personally, we will require proof of identification and may also ask for further clarification of your request (in the case of any ambiguities). If a third party makes any such request on your behalf, we will also ask for appropriate evidence of authority from you for them to act on your behalf together with proof of identification of such third party.

Contacting us

If you have further queries about how Stanleybet processes your personal data, or about this Privacy Notice, you can reach our data protection office via dpo@stanleybet.com.

Further information

You can find further information here:

• Stanleybet’s corporate Privacy Policy.
• Portomaso Casino Privacy Policy.
• Vallese Viaggi website.
• Valentina Hotel Privacy Policy.

If you have any concerns about our use of your personal information, or if you wish to make a complaint, you can contact our Group Data Protection Officer at the email address indicated above, or you can contact the Maltese Office of the Information and Data Protection Commissioner:

Floor 2, Airways House
Triq Il-Kbira
Tas-Sliema SLM 1549
Malta
Idpc.info@idpc.og.mt.

Reviewing this notice

This notice was published and last reviewed on 6 June, 2022. It will be periodically reviewed and amended, as required.

END