Privacy Policy

Table of Contents

1. When does this Privacy Policy apply?
2. Who are we?
3. How to contact us
4. Categories of personal data we process
5. What personal data do we collect and for what purpose?
6. Where do we get your data from?
7. Cookies and tracking technologies
8. When and with whom do we share your data?
9. International transfers of data
10. How long do we retain your data?
11. Your rights and choices
12. Automated decision-making
13. Security of your data
14. Complaints

1. When does this Privacy Policy apply?

This Privacy Policy explains how we process your personal data. It applies to:

• Your use of our Services on our website and any associated mobile applications;
• The personalisation of your experience on our platform;
• The infrastructure we use to deliver our Services to you.

This policy is not:

• Our Terms and Conditions, which are set out in a separate document available here;
• Our Cookie Policy, which describes how we use cookies and how you can manage your preferences.

This Privacy Policy may be updated from time to time to reflect changes in our practices or applicable law. If material changes are made, we will notify you before they take effect.

2. Who are we?

The Rivals Limited is the company responsible for the processing of your personal data in connection with your use of WeRivals. We are the data controller as defined under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The Rivals Limited is a private limited company incorporated in England and Wales under company number 16099467, with its registered office at 128 City Road, London, United Kingdom, EC1V 2NX.

3. How to contact us

There are several ways to get in touch with us:

• General queries: Contact our support team via our contact page or email support@werivals.com.
• Data protection queries: For questions about this Privacy Policy or to exercise your data subject rights, email privacy@werivals.com.

4. Categories of personal data we process

We may collect and process the following categories of personal data:

• Identity data — full name, date of birth, nationality, copies of government-issued ID;
• Contact data — email address, phone number, residential address;
• Financial data — payment method details, transaction history, deposit and withdrawal records, source of funds information;
• Account data — username, password (hashed), account history, preferences;
• Behavioural data — games played, bets placed, session duration, login and logout times, wagering patterns;
• Technical data — IP address, browser type, device type, operating system, cookie identifiers;
• Communications data — records of support tickets, emails and chat messages;
• Geolocation data — country and, where applicable, region of access derived from IP address;
• Special category data — health or wellbeing information where provided in the context of responsible gaming support (see Section 5).

5. What personal data do we collect and for what purpose?

Opening an account

We collect identity and contact data to verify your identity, confirm you meet our eligibility requirements (including age and jurisdiction), and create your account. Legal basis: performance of a contract and legal obligation.

Using the Services

We process account, behavioural and financial data to provide the casino and betting services, process transactions, settle bets and manage your account balance. Legal basis: performance of a contract.

Identity and payment verification

We collect identity and financial data to comply with our legal obligations under anti-money laundering (AML) regulations and to verify that payment methods belong to you. Legal basis: legal obligation.

Responsible gaming

We monitor behavioural and financial data to identify signs of problem gambling and apply protective measures where necessary. In certain circumstances, we may process health-related information you share with us in this context. Legal basis: legal obligation and substantial public interest.

Special category data (such as health information) will only be processed where:

• You have given us your explicit consent;
• It is necessary for the establishment or defence of legal claims;
• Processing is necessary for reasons of substantial public interest under applicable law.

Fraud and security

We process technical, behavioural and financial data to detect, prevent and investigate fraud, money laundering, collusion and other prohibited activity. Legal basis: legal obligation and legitimate interests.

Customer support

We process communications data and account data to respond to your queries and resolve complaints. Telephone and electronic communications may be recorded for training, quality assurance and compliance purposes. Legal basis: performance of a contract and legitimate interests.

Marketing communications

Where you have opted in, we may use your contact and account data to send you promotional offers and information about our Services. You may opt out at any time by contacting us or using the unsubscribe link in any marketing email. Legal basis: consent.

Analytics and service improvement

We use technical and behavioural data to analyse how our platform is used and to improve the Services. Legal basis: legitimate interests.

Legal compliance and defence of rights

We may process any category of data where required to comply with applicable law, respond to regulatory requests or enforce or defend legal claims. Legal basis: legal obligation and legitimate interests.

6. Where do we get your data from?

We collect personal data from the following sources:

Directly from you

• When you register an account or update your profile;
• When you make deposits or withdrawals;
• When you contact our support team;
• When you participate in promotions or surveys;
• When you use our Services.

Automatically

• Technical and behavioural data collected via cookies and similar technologies as you use our platform;
• Device and connection data collected when you access our website.

Third parties

• Identity verification providers, for age and identity checks;
• Payment processors, for transaction verification;
• Fraud prevention services;
• Credit reference agencies, where applicable for affordability assessments;
• Publicly available sources, including sanctions lists and PEP registers.

7. Cookies and tracking technologies

Our website uses cookies and similar tracking technologies. We use cookies for the following purposes, among others:

• To remember your language and regional preferences;
• To keep you logged into your account securely;
• To ensure that bets placed are linked correctly to your account;
• To attribute bonuses and promotions to your account;
• To analyse website traffic and usage patterns so that we can improve the platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Services.

8. When and with whom do we share your data?

We do not sell your personal data to marketing companies or other third parties for their own commercial use.

We may share your data in the following circumstances:

Service providers

We share data with third parties who provide services on our behalf, including:

• Game suppliers (e.g. Pragmatic Play) — limited data necessary to provide gameplay;
• Payment processors (e.g. Trustly, Stripe) — for processing deposits and withdrawals;
• Identity verification providers — for age and KYC verification;
• Cloud infrastructure providers (e.g. Amazon Web Services) — for hosting and data storage;
• Fraud detection and AML screening services.

Regulatory and legal authorities

We may disclose personal data to regulatory bodies, law enforcement agencies or courts where required by law or where we have a good-faith belief that disclosure is necessary to comply with a legal obligation, protect the rights and safety of others, or investigate suspected fraud or other unlawful activity.

Responsible gaming organisations

Where an Account Holder has been self-excluded or flagged for problem gambling, we may share relevant information with recognised responsible gaming organisations or registers in order to fulfil our legal obligations.

Business transfers

In the event of a merger, acquisition or sale of assets, personal data may be transferred to the acquiring entity. You will be notified before any such transfer takes place that affects how your data is used.

9. International transfers of data

The personal data we collect may be transferred to and stored in countries outside the United Kingdom (UK). This may occur, for example, when we use cloud services or third-party service providers based in other jurisdictions.

Where we transfer data outside the UK, we ensure that appropriate safeguards are in place in accordance with the UK GDPR, including:

• UK adequacy decisions confirming equivalent levels of data protection;
• Standard Contractual Clauses (SCCs) adopted by the UK Information Commissioner's Office (ICO);
• Your consent, or another lawful basis permitting the transfer.

If you have questions about international data transfers, contact us at privacy@werivals.com.

10. How long do we retain your data?

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law.

Key retention periods:

• Account and transaction data — retained for up to 7 years after account closure in compliance with anti-money laundering legislation;
• Identity verification documents — retained for 5 years after the end of the business relationship, as required by the UK Money Laundering Regulations;
• Communications and support records — retained for up to 3 years;
• Cookie and analytics data — retained in accordance with our Cookie Policy, typically no more than 24 months.

Where you request deletion of your data, we will action your request promptly. Certain data may be required to be retained to meet our legal obligations, in which case it will be securely archived and not used for any other purpose during that period.

11. Your rights and choices

Under the UK GDPR, you have the following rights in relation to the personal data we hold about you:

• Right to be informed — the right to know how your data is used (this Privacy Policy fulfils that obligation);
• Right of access — the right to request a copy of the personal data we hold about you;
• Right to rectification — the right to have inaccurate data corrected;
• Right to erasure — the right to request deletion of your data, subject to legal retention obligations;
• Right to restrict processing — the right to ask us to limit how we use your data in certain circumstances;
• Right to data portability — the right to receive your data in a structured, machine-readable format;
• Right to object — the right to object to processing based on legitimate interests or for direct marketing;
• Right to withdraw consent — where processing is based on consent, the right to withdraw at any time.

To exercise any of these rights, email us at privacy@werivals.com. We will respond within one month of receipt. This period may be extended by up to two further months where requests are complex or numerous — we will notify you if an extension is required.

We may be unable to fulfil certain requests where doing so would prejudice the rights of others, interfere with ongoing investigations, or conflict with our legal obligations. In such cases we will explain our reasons.

12. Automated decision-making

We may use automated processes, including profiling, to support certain decisions related to your account. Where such decisions have a significant effect on you, you have the right to request human review, express your point of view, and challenge the decision.

We use automated decision-making in the following contexts:

Fraud and AML detection

We analyse transaction patterns, login behaviour and account activity to detect and prevent fraud and money laundering. Where a risk is identified, automated measures may be applied including temporary account suspension pending investigation.

Account eligibility

During registration, automated checks verify that you meet our eligibility criteria such as age, jurisdiction and identity, based on the information you provide.

Responsible gaming

We use automated tools to detect patterns that may indicate problem gambling behaviour, including unusual login times, escalating wager sizes or repeated failed deposits. Where such patterns are flagged, our Player Safety team reviews the account and may apply protective measures.

To request human review of any automated decision, contact us at support@werivals.com.

13. Security of your data

We are committed to protecting the personal data you entrust to us. We implement industry-standard technical and organisational security measures, including:

• SSL/TLS encryption for all data transmitted between your browser and our servers;
• Encrypted storage of sensitive data including payment information and passwords;
• Access controls limiting data access to authorised personnel on a need-to-know basis;
• Regular penetration testing and security assessments by independent third parties;
• 24/7 intrusion detection monitoring of all network traffic;
• Dedicated fraud detection systems and a dedicated fraud response team.

In the event that you notice unusual activity on your account — such as unrecognised transactions or unexpected changes to your balance — please contact us immediately at support@werivals.com.

While we take all reasonable steps to protect your data, no transmission over the internet is entirely secure. You are responsible for maintaining the confidentiality of your account credentials.

14. Complaints

If you are dissatisfied with how we handle your personal data, or believe we are not processing it in accordance with applicable law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• ICO website: ico.org.uk
• ICO helpline: 0303 123 1113
• ICO address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, welcome the opportunity to address your concerns directly before you approach the ICO. Please contact us first at privacy@werivals.com.

This Privacy Policy was last updated on 25 November 2024.