Privacy Notice

This Privacy Notice explains how Astromania and its direct and indirect subsidiaries (collectively, "Astromania", "us", "we", "our") handle your personal data.

This Privacy Notice applies to the personal data collected from registered users ("Players") who have an account on our website, and to visitors to the website.

The operator of this website is the Data Controller of your personal data. We are the data controller because in the context of our business relationship with you, we decide how and why your personal data is processed in the ways explained in this notice.

If you have any questions about this notice - including requests about exercising your privacy and data protection rights - you can contact our Data Protection Officer by sending an email to [email protected].

Data You Provide Directly

Registration Data: To create an account you provide your email address, date of birth, country, phone number, gender, full name, zip code and username. We also automatically receive your IP address and location data upon registration.

Due Diligence Data (KYC): To comply with KYC and AML obligations, we collect your identity card number, driving licence or passport number, proof of address, social security number, source of wealth or funds, bank ID and financial statements.

Financial Information: We may collect your Bank ID, IBAN and payment system details to facilitate withdrawals and deposits, and for AML compliance purposes.

Data We Collect Automatically

Device Information: IP address, operating system version and device identifiers.

Logs and Usage: Records of your activity including pages viewed, links clicked, searches, date and time of sessions, and time spent. Collected via cookies and similar technologies.

Location Information: We may collect or infer your general location when you use our services.

Data We Receive From Third Parties

• Publicly available sources such as government databases, social media platforms and online media
• Commercially available databases, financial and credit institutions, fraud prevention agencies and public authorities
• Inferences based on the data above - for example, inferring your game preferences from your session history
• Data you have made public on social media platforms or linked accounts (e.g. Facebook or Google)

We use the personal data we collect to:

• Provide you with our services and maintain your account
• Respond to your questions and support requests
• Test, research, troubleshoot and analyse data to develop and improve our products and services
• Prevent, detect and manage risk against harmful behaviour, fraud and illegal activities
• Send you marketing content and newsletters, and personalise our marketing to you (with consent)
• Resolve disputes, including investigations by law enforcement or regulatory bodies
• Fulfil regulatory and legal obligations including AML, KYC and responsible gambling requirements
• Maintain the security and functionality of the service, including protection from security threats and unauthorised access

In compliance with GDPR and other applicable data protection laws, we process your personal data only where we have a legal basis to do so. More than one lawful basis may apply to a particular processing activity.

Contract

We process personal data to fulfil or enter into a contract with you - for example to create and maintain your account, and to carry out our obligations under the Terms and Conditions.

Legal Obligation

Some processing is necessary to comply with legal obligations, including: verifying your age and identity for KYC and AML; determining your location; managing responsible gambling risks; ensuring network and information security; complying with legal processes such as court orders; preventing money laundering, terrorism financing and fraud; and regular regulatory reporting.

Legitimate Interest

Where necessary and proportionate, we may process your data to safeguard legitimate interests, including: initiating and defending legal claims; IT and system security; managing business relationships; analytics and research; customer segmentation for risk management; using machine learning to recommend games; detecting and preventing fraud or cheating.

Consent

With your consent, we may: send direct marketing via email, SMS, phone or app notifications; customise offers based on your gaming history; display targeted advertising; personalise and assess the effectiveness of marketing; and administer your participation in tournaments, promotions and loyalty programmes.

We may share your personal data with the following categories of recipients:

• Authorised employees, brands within the same entity, contractors, agents, joint controllers, affiliates and subsidiaries within our business group
• Payment providers and financial institutions (name, DOB, email, address, phone, KYC documents as required)
• Third-party service providers including customer support, email delivery, SMS, technology and cloud hosting providers
• Marketing partners
• Fraud prevention agencies
• Third parties in connection with corporate transactions such as mergers, acquisitions, financing, bankruptcy or sale of assets
• Game providers
• Data aggregators and analytics providers for market research and service improvement
• Law enforcement agencies and regulatory and licensing authorities

If you submit a complaint or review to a third-party platform (such as a casino review site or dispute resolution body), we may respond to such platforms and disclose personal data strictly limited to what is necessary to identify your account and address your complaint. Any such disclosure is made on the basis of our legitimate interest in protecting our reputation and resolving external disputes.

We will retain your personal data only for the duration that you maintain an account with us and to fulfil the purposes outlined in this notice.

We may keep your data for a longer period as required by applicable legal obligations, such as anti-money laundering (AML) regulations or other regulatory requirements.

Once your account is closed and there is no longer a legal or business need to retain your data, your personal data will be either deleted or anonymised so that it can no longer be associated with you.

You have certain rights regarding the personal data we hold about you. To exercise any of these rights, contact us at [email protected] or our Data Protection Officer at [email protected].

We use cookies, tags, pixels, web beacons and other similar technologies to enhance your experience on our website and applications.

Upon your first visit to our website, we will ask for your consent to use non-essential cookies. Strictly necessary cookies - which are required for the operation of the website - do not require your consent.

For more information on the specific cookies we use, their purposes and how to manage your preferences, please refer to our Cookie Notice.

We prioritise the security of your personal data and implement robust measures to protect it from unauthorised access, loss, theft and misuse. Our security strategy includes a combination of administrative, technical and physical safeguards designed to protect your data against unauthorised disclosure, alteration and destruction.

Even though we use advanced security measures, no system is completely safe from security breaches. The internet cannot ensure complete security of data transmission or storage. While we strive to protect your personal information, we cannot guarantee absolute security. We continuously assess and improve our security practices to enhance protection of your data.

We may process your personal data in countries outside of the EU/EEA. When we transfer your personal data to our affiliates or third parties, we ensure that appropriate safeguards have been put in place before such transfer to ensure your personal data is afforded a high standard of protection.

This includes transferring personal data only to countries recognised by the European Commission as providing adequate protection, employing Standard Contractual Clauses approved by the European Commission, or implementing other legally recognised safeguards.

In the event of a sale, merger or any other change in ownership or control of our company, your personal data may be disclosed as part of the transaction or during preparation for such an event.

The new owner or controlling entity will be permitted to use your personal data, but only in accordance with the terms outlined in this Privacy Notice, unless you provide explicit consent for different use.

If you have any questions about this privacy notice or our data collection practices, please contact us:

• General support: [email protected]
• Data Protection Officer: [email protected]

To exercise any of your data rights (access, erasure, portability etc.), contact the DPO directly at [email protected].

We may need to update, modify or amend this Privacy Notice as our technology evolves and as required by law. It is your responsibility to review the amended notice from time to time.

This Privacy Notice applies from the effective date indicated: October 2024. Material changes will be communicated via the website.