This Privacy Policy applies to our websites, competition Services (“Services”).
This Privacy Policy sets out how Fix the Ball Ltd. collects and processes your Personal Data when you visit our websites and enter our competitions.

Who we are

References in this Privacy Policy to “Fixtheball.scot”, “we”, “us” or “our” relate to Fix the Ball Ltd. (Companies House No. SC568033). We control the ways your Personal Data is collected and the purposes for which your Personal Data is used by Fix the Ball Ltd., acting as the “data controller” for the purposes of applicable UK and European data protection legislation.

This Privacy Policy should be read in conjunction with our General Terms and conditions.

Categories of Personal Data

• Identity and Contact Information
• Financial and Transactional Data
• Account and Service Usage Data
• Communication and Interaction Data
• Verification and Compliance Data
• Marketing and Preference Data
• Location Data
• Technical and Performance Data

Why we process your Personal Data

Fix the Ball Ltd. will process your Personal Data to provide our Services to you, conduct marketing, and to comply with our legal and regulatory obligations.

Detailed information on how we process your Personal Data can be found in the table below:

Purpose of Processing Lawfulness of Processing
Account Registration and Verification:
Collecting and processing your Personal Data (name, address, date of birth, ID documents) to create and verify your account, fulfilling our legal obligations for identity verification and age verification.
Processing is necessary for compliance
with a legal obligation to which the controller is subject (e.g., anti-money laundering regulations, age verification laws).Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Providing our Gambling Services: Processing data to facilitate gaming and customer support, which is essential for the performance of the contract with you. Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Payment Processing: Handling financial transactions, which requires processing of your payment information. Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

Processing is necessary for compliance with a legal obligation (e.g., financial regulations).

Regulatory Compliance and Reporting: Processing your Personal Data to comply with our legal and regulatory requirements, gambling regulations, tax laws, and reporting requirements to relevant authorities and industry bodies. Processing is necessary for compliance with a legal obligation to which the controller is subject.
Fraud Prevention and Anti-Money
Laundering (AML): Monitoring your transactions and account activity to detect and prevent crime.
Processing is necessary for compliance with a legal obligation to which the controller is subject.

Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject
prior to entering into a contract.

Responsible Gambling: Processing your Personal Data to identify and support account holders who may be at risk of problem gambling, offering tools and support as required by regulations. Processing is necessary for compliance with a legal obligation to which the controller is subject.

Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject
prior to entering into a contract.

Marketing and Promotions: Sending promotional offers, newsletters, and personalised marketing communications to customers (where consent has been obtained or legitimate interests apply). You have provided your consent to the processing of your Personal Data for one or more specific purposes.

Processing is necessary for the purposes of the legitimate interests pursued by the controller (e.g., direct marketing, provided it is balanced against the data subject’s rights and interests).

Marketing Analytics and Engagement: Collecting marketing analytics, engagement metrics via pixels, trackers, and cookies to evaluate the success of marketing strategy, for more information please review our Cookie Statement. You have provided your consent to the processing of your Personal Data for one or more specific purposes.

Processing is necessary for the purposes of the legitimate interests pursued by the controller (e.g., direct marketing, provided it is balanced against the data subject’s rights and interests).

Customer Support and Communication: Responding to customer queries, providing assistance, and communicating important account information. Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject
prior to entering into a contract.Processing is necessary for the purposes of the legitimate interests pursued by the controller (e.g., providing excellent customer service).
Customer Relationship Management: Creating and implementing strategies, practices, and technologies that we use to manage and analyse our interactions with current and potential account holders. Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

Processing is necessary for the purposes of the legitimate interests pursued by the controller (e.g., providing excellent customer service).

Platform and Service Improvement: Analysing user behaviour and feedback to improve the functionality, user experience, and offerings of our platforms. Processing is necessary for the purposes of the legitimate interests pursued by the controller (e.g., improving Services and user experience).
Legal Claims and Legal Defence: Processing data to establish, exercise, or defend legal claims. Processing is necessary for compliance with a legal obligation.

Processing is necessary for the purposes of the legitimate interests pursued by the controller (e.g., protecting the company’s legal rights).

Processing Special Categories of Data (e.g., health data related to self-exclusion): In rare cases, we might process health-related data if a customer self-excludes due to gambling-related harm. This is handled with extreme care and specific consent. The data subject has given explicit consent to the processing of those Personal Data for one or more specified purposes.

Processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of
employment and social security and social protection law in so far as it is authorised by Union or Member State law or by the collective agreement pursuant to Member State law providing for appropriate safeguards for the fundamental rights and for the interests of the data subject.

Personal Data we share with others.

Fix the Ball Ltd. may share your Personal Data with these other organisations:

• Law enforcement agencies, regulators, and other authorities
• Credit reference agencies (including for affordability checks)
• Fraud prevention agencies
• Identity verification agencies
• Organisations that introduce you to us
• Third parties you ask us (or permit us) to share your data with
• Third parties necessary to provide products or services which you have requested
• Advertising agencies
• Social media platforms
• Ombudsman, or other external complaint bodies
• Payment service providers
• Public registers
• Public authorities (where data is requested)
• Behavioural analytics companies
• Consumer vulnerability Services
• Debt recovery agencies

For UK Account holders, further details on credit reference agencies can be found in the Credit Reference Agency Information Notice.

We disclose anonymised data (such as aggregated statistics) about the users of our Services in order to describe our sales, customers, traffic patterns and other information to prospective partners, advertisers, investors and other reputable third parties and for other lawful purposes, these statistics will not contain your Personal Data.

Fix the Ball Ltd. participates in the GamProtect Single Customer View programme for UK account holders, GamProtect is used to identify account holders that display certain high-risk behaviours and to protect them from gambling related harm.

You can find out more about how your data is processed in the Single Customer View programme by visiting the following website <a href=”https://www.gamprotect.co.uk/privacy”>https://www.gamprotect.co.uk/privacy</a>

Data Transfer Outside the EEA

In some instances, we may be compelled by law to disclose your Personal Data to a third party and may have limited control over how it is protected by that party.

Protecting your Personal Data

Where Fix the Ball Ltd. processes your Personal Data, we will ensure that it is appropriately protected, these methods include but are not limited to:

• Data Protection by Design and Default
• Data Protection Impact Assessments (DPIAs), including risk management and mitigation assessment.
• Legitimate Interest Assessment (where applicable)
• Industry guidelines, or best practice procedures
• Information Security technical and organisational measures
• Information Security Governance Frameworks

Your Rights over your Personal Data

Where you choose to exercise any of your rights over your Personal Data Fix the Ball Ltd. will assist you with accessing those rights, your rights include:

The right to transparent information: You have the right be informed about what Personal Data we process, and how that data is used.

The right to withdraw consent: Where our processing is based on your consent you may withdraw that consent at any time.

The right to lodge a complaint: Where you choose to lodge any complaint with an applicable supervisory authority Fix the Ball Ltd. will respond appropriately.

The right of access: You have the right to request a copy of the Personal Data we process about you.

The right to rectification: You may request the correction of any Personal Data that is incorrect or out of date.

The right to erasure: You may request the deletion of any Personal Data that we process about you.

The right to restrict processing: In certain circumstances you may request that we restrict the processing of your Personal Data.

The right to data portability: You may request that we transfer certain aspects of your Personal Data to another company you nominate.

The right to object to processing: The ability to object to the processing of your Personal Data where we are doing so for the purpose of our legitimate interests.

The right not to be subject to solely automated decision-making including profiling: In certain circumstances you have the right not to be subject to decisions made entirely by automated processing.

The rights described previously are not absolute rights and are subject to limitations or exceptions in certain circumstances.

Retention of your Personal Data

Fix the Ball Ltd. we will retain your Personal Data for the period you are an account holder, and for the minimum period as required by the relevant legal and regulatory requirements when you open your account, or for as long as necessary to fulfil the purposes for which the Personal Data was originally collected, or for any other lawful or legitimate purpose

The retention period for personal data is a minimum of five years, with a minimum of ten years depending on your location, from your last interaction with Fix the Ball Ltd., however, we reserve the right to retain your Personal Data for a longer period where we have a lawful or legitimate purpose to do so, or to comply with our legal and regulatory obligations

Under certain circumstances Fix the Ball Ltd. may retain your Personal Data for longer than the described period, these circumstances include (but are not limited to):

• Responsible gambling, self-exclusion, or similar safer gambling circumstances.
• Anti Money Laundering (AML), Fraud, or crime prevention circumstances.
• Trading restrictions, account restrictions, or accounts subject to betting and gaming restrictions.
• If the account is subject to a specific restrictive status, or any other refusal of service status.

Additionally, where you or Fix the Ball Ltd. apply an exclusion to your account Fix the Ball Ltd. will retain your Personal Data for the Period of that exclusion. Where any permanent exclusion is applied to your account Fix the Ball Ltd. are required to retain your Personal Data for the period of that exclusion in order to prevent access to our Services.

Changes to our Privacy Policy

We may update this Policy from time to time, so please review it frequently.

If any material changes are made to this Privacy Policy we will use reasonable endeavours to inform you in advance by email, Policy on the Website or other agreed communications channels. We will communicate the changes to you in advance, giving an appropriate amount of time for you to consider and understand the changes before they become effective.

We will not enforce material changes to the Privacy Policy without your express consent. If you decline to accept the changes to the Privacy Policy, or otherwise do not accept the changes within the time period, we may not be able to continue to provide our services.

Contacting Fix the Ball Ltd.

For more information on these this Privacy Policy or your rights over your Personal Data you can contact info@fixtheball.scot.