Categories of personal data
As part of providing our services, we collect certain categories of personal data, including but not limited to:
• Email address;
• Phone number;
• Sports bar preferences;
• Purchase history in the sports bars;
• Location data;
• Your favourite sports and team;
• Your usage statistics of the App;
• Usage data of the app, such as login and logout times, session duration, actions.

Purposes
We use this data for the purposes of operating the App, to improve the App, to offer our services and promotions, and to send you direct marketing offers about our products, services, offers and promotions.

Legal basis
• For any personal data we require you to input for the user account, such as email, name, phone number, and any personal data you generate, such as purchase history and usage data, the legal basis is performance of contract. If you do not provide us with the required data, then you cannot use the App.
• The data that you provide to us voluntarily in order to enable optional extra functionality in the App, which uses data on location, favourite sports team and SportsBar preferences, then the legal basis of the processing is performance of contract. If you do not provide us with this additional optional data for extra features listed herein, then you cannot use those specific features. You can always enable or disable these features by adding or removing this data, and for location data, by allowing or disallowing GPS access to the App on your device.
• If you consent to receive direct marketing offers, then we shall use your contact details you have used to open the account, as well as your preferences and usage statistics, and any other data you have voluntarily provided to us in the App in order to send to you personalised offers. You may withdraw this consent in the App settings or by clicking on the unsubscribe button at the end of each direct marketing message.
• We process your usage statistics of the App based on our legitimate interest.

Automated decision-making and profiling
We do not make automated decisions on the App.
The personal data we hold may also be used for profiling of your personal data for the purpose of to providing you with personalised offers in the App, as well as by direct marketing. You may withdraw your consent or object to the automated processing of your personal data, including profiling, at any time.

Data retention
We shall retain your personal data for as long as you have an account with us. If you choose to close your account, we shall delete your personal data, if there are no other grounds, such as a legal obligation to retain your personal data.

Data transfers
Your data is shared with us internally, as well as with our group companies operating under the OlyBet and Olympic Casino brand for internal administration purposes in order to operate the App groupwide. Following is the list of the group companies with whom personal data is shared who, depending on necessity and processing purposes may act as separate controllers, joint controllers or data processors:
1) OB Holding 1 OÜ, registry code 14975047, located at Pronksi 19, 10124 Tallinn, Estonia.
Contact: OlybetEstoniaDPO@olybet.com;
2) Olympic Entertainment Group AS, registry code 14437516, located at Pronksi 19, 10124 Tallinn, Estonia.
Contact: dataprotectionofficerestonia@olybet.com
3) Olybet Latvia SIA, registry code 44103143645, located at Rīga, Rēzeknes iela 5E, LV-1073.
Contact: dataprotectionofficerlatvia@oc.eu
4) Olympic Casino Latvia SIA registry code 40003264397, located at Rīga, Rēzeknes iela 5E, LV-1073.
Contact: dataprotectionofficerlatvia@oc.eu
5) Olympic Casino Group Baltija UAB, registry code 211733760, Konstitucijos pr. 12, LT-09308 Vilnius.
Contact: dataprotectionofficerlithuania@oc.eu

We may also share your data with public authorities, courts, banks, payment services providers (both for the provision of the service as well as AML cooperation), auditors and legal advisors, insurance companies, analytics service providers, fraud detection and prevention service providers, customer authentication service providers, iinformation transmission and communication service providers.

Your rights under the GDPR
Data subject rights under the GDPR:
• to know (be informed) about the processing of your data (the right of information);
• to access your data and information on how it is processed (the right of access);
• to request the rectification or, taking into account the purposes of the processing, the completion of personal data which is incomplete (the right to rectification). Please note that we may need to verify the correctness of the new data you provide;
• to have your data erased or to suspend the processing of your data (other than storage) (the right to erasure and the right ‘to be forgotten’), where there are reasonable grounds for doing so. Please note that we may not be able to comply with your request to erase your data in all cases due to legal regulation;
• the right to request from the Controller restriction of processing of personal data on one of the legitimate grounds (the right to restriction);
• the right to the portability of the data that you have provided to us (the right to portability);
• the right to object to the processing of personal data or to withdraw your consent where the processing is carried out or intended to be carried out in the interests of the Company. In this case, the Company will stop processing your data unless it has evidence that there are legitimate grounds to continue processing the data. Where the processing relates to direct marketing, you have the right to object at any time and the Company will stop processing your data for the purpose of direct marketing;
• the right to withdraw your consent to the processing of your personal data. We may do so where your consent provides a legal basis for us to process your personal data. You can withdraw your consent to receive marketing communications by using the unsubscribe link contained in any marketing communication we send to you. To withdraw your consent for other purposes, you should email your request to support@olybet.com.
• the right to lodge a complaint with the State Data Protection Inspectorate in your residence jurisdiction. We would be grateful if you contacted us before doing so and gave us the opportunity to resolve the dispute amicably.

You may exercise your rights by submitting a request to your relevant company as follows:

• For residents of Estonia, you can contact dataprotectionofficerestonia@oc.eu
• For residents of Latvia, you can contact dataprotectionofficerlatvia@oc.eu
• For residents of Lithuania, you can contact dataprotectionofficerlithuania@oc.eu