Information about the Personal Data Protection

Please take some time to read this Privacy Policy and find out how we handle your information and personal data.

By reading the Update regarding the processing of personal data, you confirm you have understood the content of this text. If you do not agree with the terms of this Update, please do not use our Website and do not provide us with your personal data.

About Us

The company named ‘OPAP SPORTS LTD’ whose registered office is at 128-130, Limassol Avenue, 1st floor, 2015 Strovolos -Cyprus (hereinafter referred to as the “Company”) is, per the current legislation in force, responsible for the processing of your personal data in the context of provision of Betting services online (hereinafter referred to as: “Betting”) and namely through the Company’s Online Points and through the use of mobile applications (hereinafter referred to as “Mobile App”) or non-mobile devices as well as any other means which could be raised by modern technologies in the future.

The protection of your personal data is very important to us. The Company has taken all reasonable technical and organizational measures for the protection of your personal data, collected through its Online Points, against any unauthorized access, processing, loss, or erasure.

This Privacy Policy aims at informing you on the type of personal data we collect on you, on the manner and purposes for which we collect them, on the third parties with whom we share such data, as well as on the rights you are entitled to, in order for the Company to comply with the applicable legislation on the protection of personal data and namely the Law 4670/2018, as well as with EU Regulation 2016/679 “on the protection of natural persons with regards to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC”.

Categories of personal data we collect and process

The Company collects your personal data through your browsing in the Company’s Online Points as well as through your registration to the services provided through Online Points, your participation in those bets and payment methods information (e.g. IBAN, cards) used by the player for the deposit of the amount for his/her participation or withdrawal of winnings.

In particular:

• Identity verification details, such as: full name, date of birth, home address, ID or passport number, confirmation that the player’s age is 18 years or older.

• Contact details, such as: valid email address, mobile phone number.
• Information regarding the transactions of the Player Account, such as: available balance, deposits, withdrawals. It should be clarified that this information will be available to the player whom it regards, through their online Player Account.
• Confirmation that players are aware of the terms and procedures of the bet, including the amount they may be required to pay to the company.
• Information relevant to your playing behaviour, your browsing in the website through which the bets are offered and your use of Mobile App, such as: websites preferences, software bugs reports, geo-location data, information collected from cookies, connection date and time, IP addresses.
• Other information which may contain personal data, such as:  complaints or comments regarding the services provided, for which a file of recorded phone calls with our call centre and a file of written communication (emails, chat sessions) is kept.

Why we collect personal data

The information above and the personal data collected by the Company regarding its Players and/or third parties will be saved in the Company’s databases and servers, always in accordance with the provisions of the applicable legislation and, especially, with the provisions on the protection of confidentiality of communications and on the protection of natural persons with regard to the processing of personal data.

The legal basis, as well as the processing purposes are the following:

1. Necessary processing for the implementation of the terms of our contractual relationship and for the provision of the Betting services to you. Within this context, we process your data for the following purposes:

• To create, operate and manage Player Accounts in accordance with the terms and conditions of the Agreement of Accession.
• To manage bets and participations in other websites of the Company and to process transactions effected through Online Points, including payments.
• To communicate with the account holders for information regarding outstanding matters or additional documents required for identifying accounts, for matters regarding the account’s operation or significant changes to the services and the Terms of Use (including the Privacy Policy).

1. Necessary processing for complying with our legal obligations. Within this context, we process your data for the following purposes:

• For the Company to comply with the applicable legislative framework and particularly with the provisions regulating the online betting market in Cyprus, including the provisions for Responsible Betting.
• To conduct the necessary security controls, verification of the identity and age of the Customers through the verification of their identification documents and the use of their contact details to ascertain that they indeed belong to you.

• Necessary processing for the purposes of our legitimate interests, namely:

• To improve the betting services provided through the Website, by using statistics regarding the use of Online Points, as well as for the optimum service of the Company’s Customers, especially by recognizing the players when they call the call centre, so that they are given priority in terms of service, and so that the agent attending to them has the details of their online account readily available.
• To conduct customer satisfaction surveys that will provide us with insight on your experience as a player, enabling us to improve our services based on your answers.
• To provide evidence as to the transactions effected, by processing recorded oral or written communication (in soft or hard copy).
• Specifically, the mobile telephone number provided by the user will also be used for their immediate information in case of detection of transactions from their online account that raise reasonable suspicions of non-authorized use or fraud, without this meaning that the company undertakes to detect any eventual non-authorized use or suspicious transaction.
• To monitor the transactions to prevent or verify any cases of fraud, irregular betting, money laundering, for sports integrity matters etc.

1. Processing based on your specific consent which is provided by selecting the relevant field upon your registration or afterwards. If you so wish, the company will process your personal data for the following purposes:

• To understand your preferences based on your playing behaviour, in order to send you special offers, Bonus/ Free bets that match your preferences, to inform you on the points you have collected from your participation in reward programmes, as well as on the rewards/gifts you are entitled to.
• To send you newsletters and advertising messages regarding the Company and its services. The channels we will use for communicating with you will be the ones you select when giving your consent. Specifically, if you select this field, you will receive commercial communication from the Company.

In any case, you hold the right to revoke such specific consent to the processing of your personal data for all these purposes at any given moment under the ‘Settings’ section of your online account or by selecting the relevant link to stop receiving messages, included in the promotional messages you receive. In such case, the company will stop any processing that is based on your consent, without this affecting the lawfulness of the processing that was based on your consent prior to its withdrawal or of the processing described under points i-iii.  Respectively, you may change your selections regarding the channels we will use for our commercial/ promotional communication (e.g. email, calls, text messages, etc.) at any moment, under the ‘Settings’ section of your online account.

If you select not to file your personal data, this may prevent the Company from fulfilling its legal obligations, from satisfying the contract or the execution of services required for your account’s operation. The non-provision of your personal data may signify our inability to provide our products or services to you.

Regarding the retention period of cookies data, you may refer to the detailed retention periods as described in the Cookies Policy

Recipients

The processing of your personal data in the context of the provision of Betting services will be carried out by the competent company employees who are duly authorized to this end.  Recipients of the personal data are also external partners acting on our behalf (Data Processors) such as call centre services providers, IT systems providers through which the Betting services are provided, authorised agents of the company, to the extent that this is necessary for your optimum service and for the provision of our services.  In this case, our company undertakes that its partners are under its control and act only on its instructions, that they have been specifically authorized for this purpose and that they are fully bound by secrecy and the obligations set forth in the legislation regarding the collection and processing of the aforementioned data.

Finally, we should inform you that our company may disclose your data to the competent administrative or judicial authorities, in so far as this is imposed by the applicable legislative and regulatory framework, following relevant request or when required to submit a report with such data, without giving you any special prior notice.

Retention period

Your personal data regarding your identity verification, as well as the information referring to the transactions effected through Online Points (including messages history) will be kept for five (5) years from the date of the last transaction effected through the player’s online account and, in any case, none of the information regarding the account shall be destroyed unless the period of five (5) years has expired and prior relevant authorisation has been granted by the Authority.

Regarding the retention period of cookies data, you may refer to the detailed retention periods as described in the Cookies Policy.

Your rights

You have the right to access, namely the right to be informed, upon your request, on whether your personal data is being processed or not, as well as to receive further information regarding the processing carried out. Furthermore, you have the right to request the correction of inaccurate personal data of yours or the supplementation thereof, and as long as the conditions set out in the Law are met, to exercise the right to be forgotten, the right of processing limitation, the right of data portability, and the right of opposition to its processing. In case you exercise the rights to correction, to be forgotten and limitation of your data, such requests will also be forwarded to the third parties/ recipients to which the data was disclosed under the provision of betting services. Finally, you shall promptly notify the Company of any change to the information you provided upon registering and opening your online account.

Disclaimer

Our services are not addressed to persons under the age of eighteen (18). Any persons who provide their details to us through any of our services confirm they are over eighteen (18) years of age.

We assume no liability or obligation for the practices, actions or policies that are beyond our control.

This Privacy Policy may be amended. We will make sure to inform you on any amendment thereof but, in any case, we invite you to visit the Company’s Online Points regularly, where the updated Privacy Policy will be posted.

Our commitments

We commit to maintain your data updated and accurate, to securely store and delete them, to not collect and maintain data not necessary to us, to protect your data against loss, misuse, unauthorized access or disclosure thereof and to ensure, in general, that all adequate technical and organization measures for their protection are in place.

Calls

Calls to and from our Customer Call Centre are recorded for the purposes of security and proof of transactions, along with the resolution of any issues arising from the service you receive.

Contact information

For any request regarding the processing of your data within the framework of provision of Betting services through the company’s Online Points, as well as in case you ascertain that we have not observed the principles stipulated in this present Privacy Policy, we kindly ask you to address, the soonest possible, the company’s Personal Data Protection Officer using the following contact details: Address: 128-130, Limassol Avenue, 1st floor, Strovolos 2015, Nicosia, Cyprus |Telephone: +357 77777977 | Email: opapsports_dpo@opap.gr

Data Protection Officer - Contact Details

dpo@opap.gr | +35722394900

Record keeping and period of record keeping

According to article 68 of the Law, the bookmaker should keep records of all the data and information relating to players and authorised agents. More specifically: a) Players’ records are to be kept for a period of five (5) years from the account’s closing date or from the date of a transaction over €2.000. The records may be deleted only after approval by NBA. b) Authorised agents’ records are to be kept for a period of five (5) years from the termination of the business relation.

Regardless of the above provisions, and as provided in article 68 of the Law, the data are not to be deleted if there is sufficient reason to keep them for prevention, detecting or investigation of cases related to money laundering or financing terrorism: It is clear that data and information related to ongoing investigations are kept until MOKAS Unit informs the bookmaker that the investigation has been concluded and the case has been closed.

If you consider that the protection of your personal data is affected in any way, you may appeal to the Office of the Commissioner or Personal Data Protection, using the following details: Website: www.dataprotection.gov.cy | Address: 1 Iasonos street, 1082 Nicosia, Cyprus | Call Centre: +357 22818456| Fax: +357 22304565| Email: commissioner@dataprotection.gov.cy

Version 1

These Terms & Conditions have been approved by the NBA on 03/04/2023.