Welcome to the Privacy Policy
Introduction
This Policy applies to our website Paddy Power, application, products or services that link to this policy or do not have a separate privacy policy (collectively our “Services”).
This purpose of this privacy policy is to give you a better understanding of:
- Information we collect
- How do we use this information
- How is the information shared
- Your rights
- Other useful privacy & data security related matters
- How to contact us
We hope you take the time to read this policy. It is important to check back often for updates to this policy. If we make changes we consider to be important, we will let you know by placing a notice on the relevant Service and/or contact you using other methods such as email.
Controller details
References in this document to “us”, “our”, “we” or “Betfair” are references to the following data controllers:
- Power Leisure Bookmakers Limited of Belfield Office Park, Beech Hill Road, Clonskeagh, Dublin 4, D04V972, as data controller of personal data processed in respect of customers in the United Kingdom, Isle of Man, Republic of Ireland, Gibraltar and the Channel Islands;
About the Flutter Group
Betfair is a member of the Flutter Group of Companies. Any reference to the “Group” within this Statement includes Flutter Entertainment plc and all or any of its direct or indirect subsidiary undertakings, joint venture partners, and their related companies wherever located in the world as may exist from time to time including, but not limited to, Paddy Power, Tombola, Sportsbet, BetEasy, FanDuel, TVG, Adjarabet, SBG, Full Tilt and PokerStars.
The Flutter Group is split into four regional divisions, namely UK & Ireland (“UK&I”), US, Australia and International, with each one housing a number of the abovementioned Flutter Group brands. Betfair UK&I is within the UK&I division whereas Betfair International (non-UK&I) is within the International division.
Please note that the Flutter Group also operates other gambling companies and your use of those products and services will be subject to privacy statements that may differ to the one contained herein. Any exercise of your privacy or data protection rights in accordance with this Statement will only relate to the personal data being processed by the SBG companies listed in the Controller details section and will not apply in regard to any products or services operated directly by the Flutter Group unless otherwise stated in this Statement.
The Flutter Group operates separate privacy policies for individuals residing in the UK which are available at:
https://www.pokerstars.uk/privacy/
https://www.paddypower.com/aboutUs/Privacy.Policy/
https://support.skybet.com/s/article/Privacy-Policy
https://www.tombola.co.uk/privacy-policy
Contact Us (including contact details for the the Data Protection Officer (‘DPO’)
If you have any concerns about how Paddy Power handles your personal data, you can contact our Paddy Power Data Protection Officer (DPO) and Data Protection Team at:
- [email protected] (for customers based in the United Kingdom, Isle of Man, Republic of Ireland, Gibraltar and the Channel Islands)
If you wish to exercise your Data Protection rights please see ‘Your Rights’ section below.
Information we collect
When you use our Services, we collect the following types of information:
Information you provide us:
We collect information about you during the account registration process for any of our Services. This information may include, but is not limited to your name, postal address, e-mail address, phone number, credit/debit card details and any other details as might be requested from you for the purpose of registration and/or continued use of our Services.
We may also collect information from you if you request information or customer support.
Additional Information collected:
We may also collect the following information:
- name, contact information and message if you contact us or participate in a survey, contest or promotion;
- details such as traffic information, location data and other communication data (including IP address and browser type) collected by your availing of the Services;
- device information including unique device identifier;
- pages visited and content viewed, links and buttons clicked, URLs visited before and after you use our Service. For more information about cookies and how to manage them please see our Cookie Policy;
- information and communications on forums on the websites, including chat rooms and message boards, profile comments, in-game challenges and chat messaging with game operators or other users;
- your betting, gaming, deposits, payments, payment method and other account transactions – these are routinely analysed to assist us in improving the Services we provide to you;
- your telephone or Live Chat conversations – either to place a bet or a customer service call;
- your response to marketing campaigns from us or through our third parties i.e. open/click on such emails;
- your social media profile details (name, profile photo and other information you make available to us) when you connect with or contact us through a social media account;
- information derived based on profiling activity (see below); and
- information from third party databases to comply with our legal and regulatory obligations.
Third Party and Publicly Available Sources
Not all the personal information we hold about you will always come directly from you. We may also collect information from third parties such as our partners, service providers and publicly available websites (i.e. social media platforms), to comply with our legal and regulatory obligations, offer Services we think may be of interest, to help us maintain data accuracy and provide and enhance the Services.
If you log into one of our products through Facebook, Facebook provides us with some of your Facebook user details. We may use these details for the purposes of our registration process and to market our products and Services to you on Facebook.
Cookie Collection
We collect browser and cookie information when you first navigate to our websites. We use cookies to give you a better customer experience and for use of access. Certain cookies will allow you to leave and re-enter our Websites without re-entering your password. This will be monitored by a web server. For more information on the use of cookies, how you can control their use, and information relating to our internet-based and mobile advertising, see our cookies policy here.
How do we use this information
We process personal information for these Services- and business-related purposes:
- Account setup, verification and management: We use personal information such as your name, email address, phone number, and information about your device to set up and administer your account, provide technical and customer support and training, verify your identity, process payment information and send important account and Service information. To allow quicker account registration should you open a betting account with another company within the Group (for example, if you were to open an account with Paddy Power, we use the verification documents submitted to Betfair to comply with our legal and regulatory requirements).
As a condition to using our Services, we will ask you to share your precise geolocation so we can ensure that we are authorised to provide the Services to you in your location. The above processing is required in order for us to provide the Services to you pursuant to our terms and conditions.
To verify your age and accuracy of your registration details, including disclosure of such information to third parties e.g. financial institutions and third party reference agencies. This is required for the purpose of our complying with our legal obligations.
For UK Customers
On the basis of the information you provide us, we may also perform an affordability check, to ensure you have sufficient funds to use our Services. This assessment is performed on our behalf by a trusted third-party, TransUnion. and will leave a search footprint which will not negatively impact your TransUnion credit score. For further information, please refer to TransUnion’s Privacy Policy : http://www.transunion.co.uk/legal-information/bureau-privacy-notice
We may also use personal information to enforce our terms and conditions. - Personalisation:We use personal information to deliver and suggest tailored content to personalise your experience with our Services. This is processing which is necessary for the purpose of our legitimate interests in delivering or presenting relevant content to our customers.
- Safer Gambling: As part of our Safer Gambling framework, we proactive monitor your activity on our sites in real time and retrospectively so as to identify potentially harmful play, and where necessary, take actions to ensure your safety onsite.
- We use a combination of machine learning, automated detection systems and manual review to supervise customer activity for the purpose of identifying Safer Gambling risks, and we also have a dedicated team in Customer Operations to deal with any Safer Gambling concerns that may be flagged to us by you or other individuals connected to you, such as family or friends. Where potentially dangerous activities are flagged, we may take action. This can range from emailing or calling you to ensure you are comfortable with your level of spend to proactively closing your account for a period of time. Where we are unable to interact with you, we may need to take enforced action until such a point where we can communicate with you.
- As part of these processes, we will use a range of data points taken from your behaviour and attributes to identify potentially problematic activity. We use elements of profiling and automated analysis techniques to identify such activity and to apply account limitations as and where appropriate. This is in accordance with our licensing requirements to conduct pro-active engagements to prevent gambling harm. For UK Customers: Paddy Power is a participating operator involved in GamProtect. GamProtect is a project to ensure that people who display high-risk behaviours are protected from gambling related harm to their health. To do this Participating Operators that provide online gambling products will take steps to identify customers who they believe should not be gambling and share some key customer information with the GamProtect system. Participating Operators will use GamProtect to identify whether the same customer has an account with them and proceed to close their account to reduce the potential for harm. Please visit https://www.gamprotect.co.uk/privacy for further information on how your data will be processed in this respect.
- Marketing and events: Subject to any preferences you have expressed (where applicable), we use personal information to deliver marketing and event communications to you across various platforms, such as email, telephone, text messaging, direct mail, online, push notification or otherwise. We will do this during the period of your relationship with us and, unless specifically instructed otherwise by you, for a reasonable period of time after the relationship has ended in order to inform you about products, services, promotions and special offers which we think may be of interest to you.
If we send you a marketing email or SMS, it will include instructions on how to opt out of receiving these marketing communications in the future. You can also manage your information and update your marketing preferences through the “My Account” tab when you login to your account. Please allow up to 48 hours for any changes you make to your marketing preferences to be fully processed. Please remember that even if you opt out of receiving marketing emails, we may still send you important Service information related to your accounts and subscriptions.
Most browsers and applications also allow you to control notifications settings. For example, when you first download our betting application on IOS, you will be asked to allow or block notifications from our application. Please refer to your browser/app settings for full details.
We will, from time to time, send you marketing material which may of particular interest to you based upon your behaviours i.e. your betting and gameplay activity, trends and interests. These marketing messages will provide you with information about the products, services, active promotions or offers available to you by any company within the Group (including, but not limited to, Paddy Power,Timeform, Sportsbet, BetEasy, FanDuel, TVG, Adjarabet, Sky Betting and Gaming, Full Tilt and PokerStars and information about products and services provided by our selected partners and third parties.
Except where we use your personal data for marketing purposes on the basis of your prior written consent and subject to any opt out preferences you notify to us in respect of electronic direct marketing communications, we process personal data for marketing purposes as necessary for the purpose of our legitimate interests in promoting our products and services.
We may publish players’ aliases and/or chat names, along with any winnings and prizes received, on our websites in accordance with our legitimate interests. - Marketing and events: Subject to any preferences you have expressed (where applicable), we use personal information to deliver marketing and event communications to you across various platforms, such as email, telephone, text messaging, direct mail, online, push notification or otherwise. We will do this during the period of your relationship with us and, unless specifically instructed otherwise by you, for a reasonable period of time after the relationship has ended in order to inform you about products, services, promotions and special offers which we think may be of interest to you.
If we send you a marketing email or SMS, it will include instructions on how to opt out of receiving these marketing communications in the future. You can also manage your information and update your marketing preferences through the “My Account†tab when you login to your account. Please allow up to 48 hours for any changes you make to your marketing preferences to be fully processed. Please remember that even if you opt out of receiving marketing emails, we may still send you important Service information related to your accounts and subscriptions.
Most browsers and applications also allow you to control notifications settings. For example, when you first download our betting application on IOS, you will be asked to allow or block notifications from our application. Please refer to your browser/app settings for full details.
We will, from time to time, send you marketing material which may of particular interest to you based upon your behaviours i.e. your betting and gameplay activity, trends and interests. These marketing messages will provide you with information about the products, services, active promotions or offers available to you by any company within the Group (including, but not limited to, Betfair, Timeform, Sportsbet, BetEasy, FanDuel, TVG, Adjarabet, Sky Betting and Gaming, Full Tilt and PokerStars and information about products and services provided by our selected partners and third parties.
Except where we use your personal data for marketing purposes on the basis of your prior written consent and subject to any opt out preferences you notify to us in respect of electronic direct marketing communications, we process personal data for marketing purposes as necessary for the purpose of our legitimate interests in promoting our products and services.
We may publish players’ aliases and/or chat names, along with any winnings and prizes received, on our websites in accordance with our legitimate interests. - Risk Management:In order to provide the Services to you and for our legitimate purposes, we process personal data to evaluate and manage risks to our business.
- Show and measure ads and Services: We use a combination of information including, but not limited to, advertising cookies, your email address, your device identifier, phone number, DOB , address and your onsite activity to show you targeted and relevant advertisements on a selection of whitelisted websites across the world wide web and social media websites. This information can also be used to measure and analyse the effectiveness and reach of these ads, to help us improve and refine our marketing strategy in accordance with our legitimate interests.
- Surveys and polls: If you choose to participate in a survey or poll, any personal information you provide may be used for marketing or market research purposes in accordance with our legitimate interests.
- Diagnostics, research and development: We use personal information for internal research and development purposes, to help diagnose system problems, to administer our websites, to improve and test the features and functions of our Services, to develop new content, products and services. To carry out testing and analysis. This processing is necessary for the purpose of our legitimate interests.
- Chat rooms, messaging, and community forums: A number of our Services provide features including chat rooms, messaging services, and community forums for collaboration, peer connection, games, and information exchange purposes. Depending upon the Service, the personal information you choose to post, share, upload, or make available is public and visible to others who use those Services. You should never post or share any information that is confidential or about others unless you have permission to do so. We may use information you provide in community and event profiles and forums to personalise your experience and to make content and peer connection recommendations. These services may have their own Terms of Use and, where appropriate, their own privacy statements.
- Legal and regulatory obligations: We may be required to use and retain personal information for legal and compliance reasons, such as the prevention, detection, or investigation of a crime; or fraud. We may also use personal information to meet our internal and external audit requirements, information security purposes, and as we otherwise believe to be necessary or appropriate: (a) under applicable law, which may include laws outside your country of residence; and (b) to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include such authorities outside your country of residence.
- Profiling: In accordance with our legitimate interests detailed below or to comply with our legal obligations, we carry out profiling and analysis based upon your location data, age, betting and gameplay activity, interests and behaviours for the following purposes:
- Customer segmentation to offer you tailored products and services, and more relevant marketing. For example, if the majority of your bets are placed on horse racing, we will aim to primarily send you marketing material related to horse racing;
- Risk and trading analysis; and
- Licensing and legal obligations i.e. Safer Gambling, Anti Money Laundering, Age Verification, prevention of fraud and to ensure the integrity of sporting events.
- Other purposes: We may be required to use and retain personal information for; loss prevention; and to protect our rights, privacy, safety, or property, or those of other persons in accordance with our legitimate interests.
How is the information shared
Your personal information may be transferred or disclosed to any company within the Group or, subject to appropriate agreement, to third parties, for the processing of that personal information based on our instructions and in compliance with this policy and any other appropriate confidentially and security measures.
Within the Group:
There are a number of situations where the Flutter Group companies may use your information, in particular where those Group companies provide support services to Betfair in the areas of marketing, customer services, the prevention of crime, helping to reduce gambling related harm, the provision of betting and gaming services, and to meet legal and regulatory obligations.
Specifically in relation to safer gambling, where you apply a Self-Exclusion from Betfair to an account registered in the UK, British Crown Dependencies or Gibraltar, we will also share your information with the other Flutter Group brands that operate in the UK – Paddy Power, Sky Betting & Gaming and Pokerstars. This action is performed by automatically checking whether accounts with your registered details are held on these other brands, and, where accounts are identified, they will be proactively closed. Such processing will always be performed with the highest regard to the privacy and security of your data. For further information, please visit our Responsible Gambling Centre
Additionally, we may share personal data with the Flutter Group as part of our group internal reporting and assurance, in order to facilitate business efficiency and improvements including, but not limited to research across our group, testing of systems and/or suppliers, risk management, the provision of technology, finance or security support, and the development of new products and tools.
We may also in the future share personal data with other members of the Flutter Group for purposes that are related to and compatible with those set out in this Statement. Finally, where we are required by law or regulation to share personal data to members of the Flutter Group for reasons beyond those set out in this Statement, we will be required to do this.
Our third-party service providers & partners:
The Group may, from time to time, retain trusted third parties to process your information to provide us with services globally, including for customer support, information technology, payments, sales, marketing, data analysis, research and surveys. As part our agreements with our partners, we may be required to share your information for the purposes of calculating fees and benefits owed.
Regulatory or Sporting body
Your personal information including, but not limited to, your registration details, betting records, records of payments, device information etc., may also be disclosed to any regulatory or sporting body (with whom the Group has agreements (Memoranda of Understanding or “MOUs”) for the sharing of such data) in connection with policing the integrity or enforcing the rules of a sport or game and/or prevention and detection of crime and where the Group considers that there are reasonable grounds to suspect that you may be involved in a breach of such rules or the law, have knowledge of a breach of such rules or the law or otherwise pose a threat to the integrity of the relevant sport or game based upon our assessment of your betting behaviours or it may be based on information provided to us by a regulatory or sporting body. Those bodies may then use your personal information to investigate and act on any such breaches in accordance with their procedures.
International Transfers
Some of the third-party providers we use, as well as companies within the Flutter Group, are based in, or carry out their activities in, countries outside the European Economic Area (‘EEA’) and/or outside the UK.
Countries outside the EEA and UK do not always have strong data protection laws. This means that, unless your personal data is being transferred to a country where the European Commission or UK has determined there to be an adequate level of protection, we have to put in place additional protections to ensure that your personal data is protected to the same level as it is within Europe or the UK.
We put these additional protections in place by using standardised contractual clauses that have been approved by the European Commission (for transfers outside the EEA) and the Information Commissioner’s Office (for transfers outside the UK). Where necessary, we also put in place any additional contractual measures required by local law in any of the countries in which we operate. As and when required, we will also put additional technical or organisational measures in place to ensure that your data is kept safe.
Other Circumstances in which we share your personal data
Apart from the functions set out in this policy, we do not share your personal information with third parties except where we are compelled or permitted by law to do so. These circumstances are rare, but may require us to share information with the police or other law enforcement agencies, the courts, statutory authorities (e.g. in connection with tax matters) and sporting bodies (in connection with sporting integrity issues) in any of the countries in which we operate.
Where necessary to protect or defend our rights and interests, resolve disputes, respond to what we consider to be incorrect or misleading information provided to a media outlet, or enforce our agreements, we reserve the right to share personal data with regulators, external legal advisors, debt recovery and tracing agencies, and media outlets, although again these circumstances are rare.
If ownership of all or part of our business changes or we undergo a reorganisation or restructure, we will transfer your personal information to the new owner or successor company so we or they can continue to provide the services you have requested.
Whenever we share personal information, and whatever the circumstances, we will always do so legally and with due regard to your privacy. If we receive a request from law enforcement or other statutory bodies, we do not disclose personal information without a warrant, court order or other legally valid proof of authority.
Your rights
Under the General Data Protection Regulation, and any other laws in your country of residence, you, as a data subject have a number of rights which are detailed below. Some of these only apply in specific circumstances and are qualified in several respects by exemptions in data protection legislation. We will advise you in our response to your request if we are relying on any such exemptions.
- Access to personal data: You have a right to request a copy of the personal information that we hold about you. Should you wish to make such a request, please see the Contact Us section for information on how to contact us.
You should include adequate information to identify yourself and such other relevant information that will reasonably assist us in fulfilling your request. Your request will be dealt with as soon as possible. - Correction of personal data: You can request us to rectify and correct any personal data that we are processing about you which is incorrect. We provide you with account settings and tools to access the information associated with your account.
- Right to withdraw consent: Where we have relied upon your consent to process your personal data, you have the right to withdraw that consent.
To opt out of marketing, you can use the unsubscribe link found in the marketing communication you receive from us. For other marketing preferences, you can visit the My Account tab when you log into your account or the “Contact Us” option within the relevant Service. - Right of erasure: You can request us to erase your personal data where there is no compelling reason to continue processing. This right only applies in certain circumstances, it is not a guaranteed or absolute right.
- Right to data portability: This right allows you to obtain your personal data that you have provided to us with your consent or which was necessary for us to provide you with our products and services in a format which enables you to transfer that personal data to another organisation. You may have the right to have your personal data transferred by us directly to the other organisation, if this is technically feasible.
- Right to restrict processing of personal data: You have the right in certain circumstances to request that we suspend our processing of your personal data. Where we suspend our processing of your personal data we will still be permitted to store your personal data, but any other processing of this information will require your consent, subject to certain exemptions.
- Right to object to processing of personal data: You have the right to object to our use of your personal data which is processed on the basis of our legitimate interests. However, we may continue to process your personal data, despite your objection, where there are compelling legitimate grounds to do so or we need to process your personal data in connection with any legal claims.
- You can exercise your right to object to any profiling that takes place in the course of our use of cookies by managing your settings preferences, as outlined in our Cookie Policy. You also have the right to object to any profiling that is carried out for the purpose of direct marketing. You can exercise this right by using the unsubscribe link found in the marketing communication that you receive from us
- Rights relating to automated decision making and profiling: You have the right not to be subject to a decision which is based solely on automated processing (without human involvement) where that decision produces a legal effect or otherwise significantly affects you. This right means you can request that we involve one of our employees or representatives in the decision-making process. We are satisfied that we do not make automated decisions of this nature.
How to contact us
For any requests related to your personal information or any of your rights referenced above, please feel free to contact us in one of the following ways:
https://helpcenter.paddypower.com/app/contact_us/
Post: Paddy Power Customer Services, Belfield Business Park, Clonskeagh, Dublin 4.
Filing a complaint
If you are not satisfied with how we manage your personal data, you have a right to make a complaint to your local Data Protection Authority.
Other useful privacy & data security related matters
Retention
We retain personal information for as long as we reasonably require it for legal or business purposes. For the unregulated jurisdictions in which operate, and subject to us not having a legal or regulatory requirement or a risk management reason for retaining your information for a longer period, your information will not be kept for longer than 7 years post account closure. Please note that we may be required in certain circumstances to retain your information indefinitely (for example under our procedures on safer gambling and self-exclusion). We will take all necessary steps to ensure that the privacy of information is maintained for the period of retention.
Security
We recognise that online security and data protection is an area of vital importance for all our customers, so it is important to us that you have confidence in the security of your personal details before you register an account. We are committed to employing security measures to protect your information from access by unauthorised persons and to prevent accidental or unlawful processing, disclosure, destruction, loss, alteration and damage. Our technological security solutions are very advanced and are governed by a mature framework. Our approach is focused on preventing risks. In order to help us in this regard, we employ pseudonymization and encryption whenever possible to reduce the impact of any potential incidents. As the security of some communications via the internet is not completely secure, we cannot guarantee the security of any information that you disclose using your internet connection. You accept the inherent security implications of using the internet and the Group will accept no liability for any direct, consequential, incidental, indirect, or punitive losses or damages arising out of such an occurrence.