Uni Bet Casino Privacy Policy

1. When does this privacy notice apply?

This UniBet Privacy Policy explains how we process your personal data. It applies, for example, to

Your use of our services on any Kindred website, including our mobile applications.
Personalizing your experience on our platforms.
The infrastructure we need to provide our services.

Although this Policy forms an integral part of the General Terms and Conditions of Use, which are available on the websites of our various brands, this Policy is different and separate.

Cookie Policy: Our Cookie Policy is also an integral part of the Terms of Use and can be found here. It describes how we use cookies and other tracking technologies and how you can manage your cookie settings.

This Personal Data Management Policy may be updated to reflect changes in how we process personal data. If significant changes are made to the Personal Data Management Policy, we will notify you.

2 Who are we?

Kindred is understood to mean Blankenberge Casino-Kursaal NV, whose registered office is located at Zeedijk 150, 8370 Blankenberge, Belgium. Blankenberge Casino-Kursaal NV holds a Class A license under Belgian law (A505296) for the provision of games of chance in a Class I gaming establishment and an additional Class A+ license under Belgian law (A+505296) for the operation of games of chance via information society tools on the website.

Blankenberg Casino-Kursaal NV is the data controller as defined by the General Data Protection Regulation, hereinafter GDPR.

Blankenberg Casino-Kursaal NV is owned by Kindred Group plc (“Kindred”).

For the purposes of this information notice, “Kindred” refers to any Kindred Group company duly registered under applicable local laws. Kindred Group plc (“Kindred Group”) ensures that all its entities adhere to a consistent level of privacy protection.

This personal data management policy applies to all companies and brands within the Kindred Group. We are committed to ensuring a consistent level of personal data protection across all our entities and brands, ensuring that your personal data is processed in accordance with applicable data protection laws.

You can find more information about who we are at: www.kindredgroup.com

3. How to contact us?

You can contact us in several ways.

For any general questions, please feel free to contact our Customer Service team by phone, email or live chat – please see our Contact Us page.

For any questions about this Personal Data Management Policy, please contact our Data Protection Officer.

You can exercise your rights as a data subject by completing our online form. For more information about these rights, please refer to section 10 of this policy.

4. Definition of categories of personal data

You will find detailed information about the personal data we process in the table below.
Category of personal data:

Location data from your device, collected for example through cookies
Log data (for example, when using our mobile app or visiting our website) IP address
Other related geolocation data

5. What personal data do we collect and for what purpose?

Categories of personal data:

Contact details
Basic data
Behavioral data
Commercial data
Communication data
Financial data
Identification data

Legal basis

Based on the legitimate interest (Article 6, paragraph 1, point f) of the GDPR) in resolving a dispute or litigation.

SPECIAL CATEGORY DATA

We may collect personal data known as “sensitive data,” such as health information. This most often occurs in the context of responsible gambling, which is a legal obligation. This data may be collected from you or, in some cases, from third parties.

We will only process this data if

You have given us your explicit consent;
It concerns personal data that you have made public;
They are necessary for the establishment, exercise or defense of legal rights;
is necessary for reasons of overriding public interest, based on the law of the European Union or of the Member States.

We may also process data relating to criminal activity or suspected criminal activity, particularly in the context of fulfilling our legal obligations under anti-money laundering regulations. We will only process such data to the extent necessary to comply with our legal obligations, or to the extent necessary to pursue our legitimate interest in establishing, exercising, or defending legal claims.

We may process sensitive data such as health data. Because health information is sensitive, we only process the personal data necessary to fulfill our duty of care. If your gambling behavior, financial information, and the health data you provide raise concerns about your well-being, we are obligated to take appropriate action. The collection of this special category data is in the public interest, as defined in Article 6(1)(e) of the GDPR, and in accordance with Article 9(2)(g) of the GDPR, to enable us to process special category data.

6. Where does your data come from?

We collect personal data when you interact with us and use our services. Sometimes, this information is provided directly by you, for example, when you first register, use our products, or contact us. Sometimes, third parties or publicly available sources provide us with information about you.

During registration:

We may collect personal data about you that is publicly available (e.g., social media data) for responsible gaming purposes (data category: publicly available data).
data received from our business partners and other organizations, such as specialist companies providing verification services, credit reference agencies and fraud prevention agencies, as appropriate (background data category);
Furthermore, please note that if you provide us with personal data about another person (for example, as part of a referral program), you must not do so without their permission (data category: contact details). Please also note that when you provide information about someone else, or when someone else discloses information about you, this information may be added to any personal data we already hold and will be used as described in this Personal Data Management Policy.

During registration:

We may collect personal data about you that is publicly available (e.g., social media data) for responsible gaming purposes (data category: publicly available data).
data received from our business partners and other organizations, such as specialist companies providing verification services, credit reference agencies and fraud prevention agencies, as appropriate (background data category);
Furthermore, please note that if you provide us with personal data about another person (for example, as part of a referral program), you must not do so without their permission (data category: contact details). Please also note that when you provide information about someone else, or when someone else discloses information about you, this information may be added to any personal data we already hold and will be used as described in this Personal Data Management Policy.

7. Cookies and similar tracking technologies

Kindred websites and apps use cookies for a variety of purposes. We use cookies for the following reasons, among others:

to identify the account holder’s preferred language (as defined in our Terms and Conditions of Use), so that it can be automatically selected when the account holder returns to the website;
to ensure that bets placed by the account holder are associated with the bet slip and the account holder’s account;
to ensure that the account holder receives all the bonuses to which they are entitled, and
for website traffic analysis, to enable Kindred to make necessary improvements.

For more information, please see our cookie policy.

8. When and with whom do we share your personal data?

In certain circumstances, we share your personal data with other Kindred Group companies (based within the European Union), with third parties who provide services on our behalf, and with other third parties to comply with our legal obligations. These third parties include companies such as Trustly, a payment provider; Oracle, which offers database software; Microsoft; and Amazon Web Services.

We do not sell your personal data to marketing companies. When we use third parties for marketing services, your consent is required before your data can be processed.

Other examples of situations where we might share your personal data include the merger or sale of a business, as customer personal data is likely to be included in the sale/transfer. We will inform you before proceeding with any such transfer of personal data. Even if we do share your data, we ensure that it is used only for the purposes described in this Personal Data Management Policy.

9. Do we transfer your data outside the EEA?

The personal data we collect from you may be transferred to and stored outside the European Economic Area (EEA). It may also be processed by companies located outside the EEA, including in the United States, Australia, or India, that work for us or for one of our service providers. This may occur, for example, when we provide services globally, and your data may be processed in countries where we have operations or suppliers. Furthermore, for reasons of efficiency and reliability, we may use cloud computing services hosted in various countries. Finally, in some cases, data transfer may be necessary to comply with international legal obligations.

To ensure the security of your personal data during its transfer in this manner, we will take all measures to maintain an adequate level of protection, in accordance with this Personal Data Management Policy.

Any transfer of your personal data to a location outside the EEA will be processed/carried out in accordance with applicable data protection laws, including the GDPR, and will be based on:

the standard contractual clauses adopted by the European Commission, which you can consult here, or a competent data protection authority; or
an adequacy decision from the European Commission, confirming that the third country ensures adequate protection of your personal data; or
your consent or another legal basis on which we are authorized to make the transfer.

If you have any questions regarding our transfers of personal data to countries outside the EU/EEA, please contact us using the contact details provided at the beginning of this Personal Data Management Policy.

10. How long will we keep your data?

We retain the personal data collected only for the period necessary for the processing in question and within the time limits defined by applicable data protection laws. As an online gaming operator, we are required to retain certain personal data, particularly data relating to player account management, for a period of 6 years from the date of account closure, in accordance with applicable legal requirements to combat fraud, money laundering, and the financing of terrorism.

When you stop using Kindred’s services, we may still retain your personal data for a certain period, in accordance with our legal obligations. We may retain it for several reasons, including:

For legal reasons, in order to establish, exercise or defend legal claims against Unibet or any entity of Kindred Group Plc, in compliance with applicable legal limitation periods.
To respect our contractual obligations and exercise our rights regarding the information collected.
In the context of our legitimate interests.
Comply with the directives issued by the competent authorities regarding the protection of personal data, as well as the legal obligations imposed on licensed gaming operators.

The categories of data mentioned above are kept for the duration of the applicable legal limitation period.

If you request that your data be erased, we will promptly delete any marketing material you have consented to receive, but we will retain other types of personal data to meet our legal obligations, as detailed above.

11 Your rights and choices regarding your personal data

Under the GDPR, you have a number of rights regarding the personal data we hold about you. If you wish to exercise these rights, you should contact our customer service or use our online GDPR form. You also have the right to lodge a complaint with your local data protection authority if you are concerned about how we process your information.

You can obtain further information and advice about your rights from the Data Protection Authority. We have also designated a lead data protection authority, the Information and Data Protection Commissioner’s Office (“IDPC”) in Malta, which you can also contact for further information. For individuals – IDPC

We will respond to all requests under this section within one (1) month of receipt. With prior notice, this period may be extended by two (2) additional months if necessary, taking into account the complexity of the request and the number of other pending requests. If your request is rejected, we will provide you with a relevant explanation.

Restriction of the rights of the person concerned:

In certain circumstances, your rights as a data subject under the GDPR, in particular your right to access personal data and the right to request erasure of data, may be restricted or limited. These restrictions may be necessary and proportionate for reasons such as compliance with legal obligations or the protection of the rights and freedoms of others.

We will ensure that any restriction of your rights is justified.

12 Automated individual decision-making

Data protection laws aim to protect individuals from potential harm caused by automated decision-making, including profiling, without human intervention. You have the right not to be subject to decisions that have a legal effect or similarly significant effect on you if they are based solely on automated processing of your personal data.

Fraud detection:

Your personal data is used to identify and prevent potential fraud or money laundering activities. If we suspect any risk, we may take measures such as blocking or suspending the account.

Opening an account:

When you create an account, we ensure that the product or service is suitable for you based on our knowledge. We also verify that you meet the necessary requirements, such as age, residency, nationality, or financial situation.

Use of AI technology:

We may use AI technology as part of our processing activities; however, we ensure that the use of these tools complies with applicable regulations, particularly those relating to data protection and security requirements.

13. The security of your data and confidentiality

We are committed to protecting the personal data you entrust to us. We take all reasonable steps to ensure that all information collected on our website is processed securely and in accordance with this Privacy Policy and strict data protection standards. Accordingly, we have adopted robust procedures and technologies to protect your data against unauthorized access and misuse.

After logging in, all information sent to and from the website is encrypted using 128-bit Secure Socket Layer (SSL) technology. The SSL certificate used is issued and verified by Trustwave; click on the image for more information.

Your credit card details are encrypted and sent only once over the internet to Kindred. They are then stored securely in our encrypted systems. We are committed to protecting our customers’ confidential information and, to this end, we are certified to the Payment Card Industries Data Security Standard.

The security of our systems and applications is tested several times a year by third-party security experts. In addition, we have an intrusion detection system that monitors all network traffic 24/7 to detect any signs of attack or intrusion.

We have a dedicated fraud prevention department and advanced systems to detect and prevent suspicious activity, ensuring our websites remain a safe and secure environment. Any account involved in suspicious activity will be suspended and thoroughly investigated. If you, as a user, have any concerns about your account activity, such as unrecognized transactions in your transaction history or unexpected changes in your balance, please contact us immediately.

14 Complaints

If you wish to make a complaint about how we have handled your personal data, you can contact us so that we can look into the matter by sending an email to our data protection team.

If you are not satisfied with our response or if you believe that we are not processing your personal data in accordance with the law, you can lodge a complaint with our lead data protection authority, the Malta Data Protection Authority (IDPC), or with your national data protection regulatory authority, which is the Data Protection Authority (link: https://www.autoriteprotectiondonnees.be/citoyen).