Effective date: 22/03/2023

Introduction

This privacy policy (hereinafter “Policy”) applies to Evolution Group (hereinafter “Evolution”, “we”, “us”, or “Group”) websites and applications that links to this Policy. The Policy explains how we collect, share and use personal data, and how you can exercise your privacy rights. We recommend that you read this Policy in full to ensure you are fully informed.

Please check relevant section to obtain more detailed information about how we process personal data about:

In case you have any questions regarding your personal data processing, you can contact our Data Protection Team at dataprivacy@evolution.com

How do we collect your personal data?

When you are using Evolution websites and social media accounts, Evolution collects personal data from you either actively or passively.

Personal data is actively collected from you when you voluntarily provide us with your personal data. For example, when you are applying for an open job position, building business relationships with us, communicating with us, or subscribing to newsletters, etc.

Depending on your preferences and/or choices we might collect information from cookies and similar technologies. It might collect certain information about you, for example, IP address or online activity, some of which will constitute your personal data. You can find more information about the use of cookies in Cookies privacy policy.

What personal data do we collect and for what purpose?

The personal data that we collect, and process might differ from the choices you make in the privacy settings while visiting our websites. It also depends upon what services, functionalities, or experiences you use, your location and applicable law.

We will only process your personal data when we have a lawful basis for doing so. The lawful basis might be:

a) you have agreed to data processing by giving your consent.

b) it is necessary to provide services to you under the performance of the contract we have with you.

c) we are required to do so in accordance with legal or regulatory obligations.

d) it is in our legitimate interests to process your personal data, if none of these interests prejudice your own rights, freedoms and interests.

In the table below we indicate the business purposes where we may use your personal data:

PurposePersonal DataLegal basis
To communicate with you and handle your inquiries, requests, comments, and feedback etc.First name, Last name, E-mail address, Feedback and comments made by youLegitimate interests to handle, adequately and in a timely manner, your’ inquiries, complaints, and suggestions regarding the services we provide in our sites.
To provide you with information such as Investor information, Newsletters, Press Releases etc.First name, E-mail address, Phone number, Company name, Language settings.Your freely given consent.
To inform you about our newly released products, events, or other promotional purposes.First name, Last name, E-mail address.Your freely given consent.
To establish, exercise and defend legal claims.First name, Last name, E-mail address, Telephone number, Other information as necessary for the purpose.Legitimate interests to defend ourselves in legal claims.
To permit you to participate in social sharing, including live social media feedsSocial networks including your profile information, User ID associated with your social media account, and any other information you allow the social network to share with third partiesLegitimate interests to provide you better services and permit you to participate in social sharing.
To allow participate in polls, lotteries, promotions, contests and to administer these activitiesFirst name, Last name, E-mail address, Telephone number, Other information as necessary for the purpose.Your freely given consent.
To manage your work applicationsFirst name, Last name, E-mail address, Telephone, Information in your CV and other information related with purpose.Your freely given consent.
To organize brand promotional campaigns, including job fairsFirst name, Last name, E-mail address, Telephone, Photography, and other information related with purposeLegitimate interests to promote Evolution as brand.
To detect, prevent, or investigate potential security incidents or fraud.IP address, Log data, Other data that is necessary for the purposeLegitimate interests to ensure security for our systems and services provided.
To perform analytics, quality control, market research, and determine the effectiveness of our websites, promotional campaigns, and develop new products and servicesIP address, Location, Device information, User activityLegitimate interests to perform marketing and research activities in order to provide you better service
To perform due-diligence checks to fulfill our regulatory obligationsFirst name, Last name, Company name, Company registration number, Other information as necessary for the purpose.Necessary to comply with a legal or regulatory obligations
To comply with our obligations under applicable laws (including gambling legislation, and regulatory and licensing requirements related First name, Last name, Company name, Other information as necessary for the purpose.Necessary to comply with a legal or regulatory obligations
To identify and disclose any suspected unlawful, fraudulent, or other improper activity connected with our websites, and services (including money laundering)First name, Last name, Company name, Other information as necessary for the purpose.Necessary to comply with a legal or regulatory obligations
To share your personal data with other members of the Group entities who assist in providing the First name, Last name, E-mail address, Telephone number, Company name, Other information as necessary for the purpose.Legitimate interests to allow us to provide services
To share your personal data with gambling regulators or other legally required regulators in order to assist and comply with legal requirements and any investigation if applicableFirst name, Last name, Address, Telephone number, Other information as necessary for the purpose.Necessary for a legal or regulatory obligation

Please note that processes and lawful basis set above are those who primarily apply and are not intended to be exhaustive., They may also change and/or be supplemented over time due to business operations and in order to comply with legal requirements.

What rights do you have?

You have several rights towards your personal data. You have rights to request access, rectify, erase, object, restrict personal data processing, withdraw consent if given and transfer your personal data. In addition, you have the right to contact Data Protection Supervisory authority in the country where you are located.

We will respond to all individual requests wishing to exercise their data protection rights. We may request to verify your identity or ask for additional information in order to help us respond efficiently to your request and to protect personal data from unauthorized disclosure.

In case you would like to exercise your rights related to our developed games, we kindly ask you to contact the Casino you played with, as we do not process information of players by which the person can be identified directly. This action is done by online casinos as they are Data Controllers of the players personal data.

If you wish to exercise your data protection rights, please contact our Data Protection Team at dataprivacy@evolution.com.

Please be informed that certain rights might not be fulfilled entirely due to legal or regulatory requirements.

• Right to access your personal data

You may request at any time the confirmation whether we process your personal data. If we process your personal data, you can request to receive a copy of your personal data. For example: if you are Evolution employee, you can request to receive information on your data processed and for what reasons.

• Right to rectify your personal data

You have the right at any time request to correct your personal data that is inaccurate, as well as supplement your personal data that is incomplete. For example: if you ar e Evolution business partner and your contact information such as telephone number or email address have been changed, you can request to edit this data.

• Right to erase your personal data

You may request to erase your personal data under certain circumstances such as when your personal data is no longer needed for the purposes for which it was collected. For example: if you were Evolution employee and you have provided your contact information for employment related communication purposes. When terminating employment relations, you can ask to delete your contact information unless it is requested to be stored otherwise by law.

• Right to object to certain personal data processing

You may object to the processing of your personal data if you have a particular situation, your data are being used for direct marketing purposes and the legal grounds of data processing are legitimate interests. For example: If you receive any marketing related materials that you have not agreed to, you can object and request to stop receiving them.

• Right to restrict the processing of personal data

You may ask us to restrict the processing of your personal data under certain circumstances, such as when the processing is unlawful, but you do not wish your personal data erased. Additionally, in case if you have concerns about your data accuracy, you can ask us to restrict data usage until we verify the accuracy of your data. For example: In you are Evolution employee and you have concerns that your provided bank account data are not accurate, we will stop using this data until we will verify the accuracy of it.

• Right to withdraw your consent

If you have agreed on data processing based on your consent, you have the right at any time withdraw your consent. The consent withdrawal will not affect the legality of the previous processing. For example: In case if you have agreed to receive newsletters from Evolution and you would not like to receive them anymore. You can withdraw your consent at any time, and you won’t receive them in future.

• Right to transfer your personal data

You may ask to provide you the copy of your personal data and if technically possible you can request to transfer this data to another Data Controller (Company or Institution, where possible). This is only applicable if personal data are processed on the legal basis of your consent or on necessity to comply with agreement concluded with you, and only for the data that is provided by you. For example: if you are Evolution employee you could ask to transfer your provided data to Public Revenue Service or any other Public Institution.

• The right to complain to the data protection supervisory authority

You have the right to lodge complaints regarding your personal data processing to the relevant data protection supervisory authority. The list of national supervisory authorities can be found here: https://edpb.europa.eu/about-edpb/board/members_en

Where may we disclose and transfer your personal data?

Since Evolution operates worldwide your personal data might be shared within Evolution Group and/or contracted third parties for various business purposes.
The personal data might be transferred based on legal grounds such as legitimate interests to fulfill the services agreed or based on mutually concluded contractual obligations.

Additionally, there might be situations where Evolution might transfer personal data to Evolution Group entities or external parties located outside the EU/EEA. In such a case Evolution will ensure that the Standard Contractual Clauses or other legally required documentations are concluded to ensure an adequate level of protection before transferring personal data outside EU/EEA.

Please note, that for all personal data transfers an adequate security level is ensured, and all legal requirements are met.

Evolution Group entities

In order to fulfill data processing purposes Evolution may disclose your personal data to other Evolution Group entities. The data transfers between Evolution entities are governed with concluded Intra-Group data processing agreement which includes the Standard Contractual Clauses.

Please note, that other legal safeguards for data transfer might apply in certain cases.

The data transfer purposes may be:

  • To answer various of your requests and questions regarding our provided services (based on necessary to comply with a legal/regulatory requirements)
  • To better understand our business practices, services, and products across the Evolution Group entities (based on legitimate interests)
  • To provide Evolution Group entities with marketing and promotional materials (based on your provided consent)
  • To identify fraud and other criminal activities including anti money-laundering (based on necessary to comply with a legal/regulatory requirement)
  • To provide you with the customer support including the obligation to ensure that information is up-to-date and accurate (based on necessary to comply with a legal/regulatory obligation)
  • To comply with legal requirements towards identification of responsible gaming measures across the Evolution Group entities (based on necessary to comply with a legal/regulatory requirement)
  • To provide you services agreed, ensuring the implementation of security measures (based on necessary to comply with a legal/regulatory requirement).

In case you have any questions regarding data transfer between the Evolution Group entities, please contact our Data Protection Team at dataprivacy@evolution.com.

Data processors acting on behalf of Evolution

Evolution may disclose personal data to external parties, such as vendors and service providers. Third parties might process personal data on behalf of and under the instructions of Evolution.

The Evolution engages with data processors (incl. sub-processors) in order to deliver you the agreed services and to comply with legal and regulatory requirements. The data processors might vary from such as cloud services for data storage purposes, marketing companies in preparing and delivering marketing related materials, until external advisors and auditors. In case of engagement of processors, we inform you as far as it is required by legal and regulatory requirements.

What are the security measures implemented?

We ensure that all necessary appropriate security measures are in place to keep and process your personal data securely. In support of this commitment, we have implemented appropriate technical, physical, and organizational measures to protect your personal data against unauthorized or accidental destruction, alteration or disclosure, misuse, damage, theft or accidental loss, or unauthorized access.

For more details, please contact us at dataprivacy@evolution.com.

What is the data retention period?

The personal data are kept for period that is either required by law and regulatory requirements or for as long as necessary to fulfill the personal data collection purpose. The storage period might differ from the location and services that you are receiving.

What is the Controller and what is our contact information?

If you have any questions or concerns regarding the processing of your personal data regarding of websites or applications, please contact Data Protection Team at dataprivacy@evolution.com.

Data Controller:
Evolution Gaming Ltd.
Registration No. 05944946,
Sackwille House, 40 Picadilly, W1J 0DR, London, United Kingdom.

back to top