BoyleSports Privacy and Cookie Policy

Our Commitment to Your Privacy

Here at BoyleSports, your privacy is paramount. We are committed to protecting your personal information and respecting your privacy rights in accordance with Irish and EU data protection laws, including the General Data Protection Regulation (GDPR).

This Privacy Policy explains how the BoyleSports Group (referred to as “BoyleSports”, “company”, “we”, “us”, or “our”) collects, uses, shares, and protects the information and data you (referred to as “You”, “Your”, “User”, or the “Customer”) provide when you interact with us. This enables us to manage your relationship with BoyleSports effectively and responsibly.

We process personal information provided through:

• Your use of any BoyleSports Group products and services (collectively the “Service”).
• Your access and use of any BoyleSports Group company websites (including boylesports.com, m.boylesports.com, associated sites, mobile, tablet, or other BoyleSports apps – collectively the “Website”).
• The customer application form.
• Any other means by which you provide information to us.

By submitting your information to us and using the Website, you acknowledge the collection and use of your personal information as outlined in this Policy and signify your agreement to its terms. If you do not agree with this Privacy Policy, please refrain from using the Website or providing us with your personal information.

This document details our practices regarding information gathering and usage for our online services accessible in Ireland.

1. Overview

1.1 BoyleSports (Gibraltar) Limited, the primary operator of the services described, is registered with the Gibraltar Data Protection Commissioner (Registration number: DP012036) and adheres to data protection principles aligned with GDPR.

1.2 Our websites (boylesports.com, m.boylesports.com, and related platforms) and the services offered are operated by BoyleSports (Gibraltar) Limited, a company registered in Gibraltar (Number: 112469) with its registered office at Suite 2B, 143 Main Street, GX11 1AA Gibraltar. The Website Terms & Conditions further describe the services provided.

1.3 This Policy, along with our Terms & Conditions and any other referenced documents, forms the basis on which we process your personal data. Please read it carefully to understand how we handle your information.

1.4 Our dedicated Data Protection Officer (DPO) can be contacted at:

BSI Digital Trust Consulting

BSI, Corrig Court, Corrig Road,

Sandyford Industrial Estate, Dublin 18, D18 C6K1, Ireland

Tel: +353 1 210 1711

Email: [email protected]

2. The Information We Collect About You

2.1 We collect, process, and store the following types of data about you:

2.1.1 Identification & Contact Details: Title, gender, first/last name, date of birth, nationality, email address, home/physical address, phone number, account currency, username, and encrypted password.

2.1.2 Financial Details: Payment details, bank account details, card details.

2.1.3 Verification Information: Information provided for Know Your Customer (KYC), Customer Due Diligence (CDD), and Enhanced Due Diligence (EDD) checks, including copies of identification documents (passport, driving license, utility bills, etc.).

2.1.4 Communication Records: Records of correspondence if you contact us via phone, email, live chat, social media, or post.

2.1.5 Call Recordings: Telephone calls to/from our customer service numbers may be recorded for training, quality assurance, account verification, security, and regulatory purposes.

2.1.6 Survey Responses: Personal information submitted in response to surveys or polls (potentially shared with third-party survey platforms like Adobe Campaign or Survicate).

2.1.7 Transactional Data: Details of bets, payments, withdrawals, deposits, and other transactions carried out through the Website and linked to your account number.

2.1.8 Website Usage Data: Details of your visits (traffic data, location data, device information, weblogs, login history, resources accessed) collected via cookies and similar technologies (see Section 7: Cookies Policy).

2.1.9 Visual Data: Photographs or CCTV recordings from visits to our retail shops (where applicable).

2.1.10 Profile Information: Physical descriptions or profiles created for regulatory compliance or business initiatives where specific personal details might initially be unknown.

2.1.11 Special Category Data (Sensitive Information): We may also hold more sensitive data obtained directly from you, third parties, or derived from our interactions:

* Health Information: Data relating to potential gambling addiction, specific vulnerabilities, or disabilities relevant to safer gambling practices.

* Biometric Data (Implicit): Data derived from your image (e.g., photographs, CCTV).

* Offences/Suspected Offences: Information related to known or suspected fraud, theft, cheating, or other criminal activity relevant to our services.

2.2 Information provided to one BoyleSports Group company for registration purposes may be deemed provided to us once you start using the Website to access our Services.

3. How We Use Your Personal Data

3.1 We use your personal data for the following legitimate and necessary purposes:

3.1.1 Account Management: Setting up, operating, and managing your BoyleSports account.

3.1.2 Service Provision: Delivering the betting and gaming services you request and fulfilling our contractual obligations to you.

3.1.3 Eligibility Checks: Reviewing and determining your eligibility to use the Website and open an account.

3.1.4 Analysis: Carrying out statistical, demographic, and market analysis to improve our services (often using aggregated or anonymized data).

3.1.5 Verification: Verify the accuracy of your information (identity, age, address, affordability) and process transactions. This involves sharing necessary data with third-party verification services (financial institutions, software providers, fraud detection, age/identity verification, PEPs/Sanctions checks, and credit reporting agencies). These third parties may retain a record of the check and use it to assist other companies for similar verification purposes.

3.1.6 Payment Verification: Confirming the validity of your payment details and address.

3.1.7 Contact Details Confirmation: Verify the contact information linked to your account.

3.1.8 Betting/Winning Eligibility: Confirming your eligibility to place bets or claim winnings.

3.1.9 Service Communications: Contacting you about important changes to the Website or Services, technical/security issues, policy updates, or terms modifications.

3.1.10 Compliance & Legal Obligations: Meeting our regulatory requirements (including safer gambling, anti-money laundering (AML)), audit needs, information security standards, legal duties, and responding to inquiries/investigations from sports governing bodies, gaming authorities, or law enforcement.

3.1.11 Customer Support: Providing assistance and resolving queries.

3.1.12 Website Optimisation: Ensuring content is presented effectively for you and your device.

3.1.13 Marketing & Promotions (with Consent): Providing information about products or services you request or which we believe may interest you, only where you have consented to receive such communications. This Consent can be managed in your “My Preferences” settings within “My Account” on the Website. Marketing may continue for up to 3 months post-account closure unless you opt-out.

3.1.14 Interactive Features: Allowing participation in interactive elements of the service (e.g., promotions, chat features) when you choose to engage.

3.1.15 Crime Reporting: Reporting crime or suspected criminal activity (including money laundering, cheating, fraud).

3.1.16 Risk Management: Implementing measures to manage financial and operational risks.

3.1.17 Deposit Limit Monitoring: Using automated systems to track deposits against any limits you have set.

3.1.18 Responsible Gambling Monitoring: Analysing gambling patterns to identify potential signs of problematic gambling behavior and enable appropriate intervention.

3.1.19 Profiling & Analysis: Conducting profiling based on location, betting/gameplay activity, interests, and behaviors (see Section 3.2 below).

3.1.20 Enhanced Due Diligence: Using provided information and documentation to fulfil compliance obligations like Source of Funds/Wealth checks, Safer Gambling assessments, vulnerability checks, and affordability assessments.

3.2 Profiling: To pursue legitimate interests, comply with legal obligations, and enhance your experience, we conduct profiling and analysis based on your data (location, betting history, gameplay, stated interests, etc.) for these reasons:

3.2.1 Personalisation & Marketing: Segmenting customers to offer more relevant products, services, and marketing communications (e.g., primarily horse racing offers if that’s your main activity).

3.2.2 Risk & Trading Analysis: Managing betting liabilities and informing our trading decisions.

3.2.3 Licensing & Legal Compliance: Fulfilling obligations related to Responsible Gambling, Anti-Money Laundering (AML), Age Verification, fraud prevention, and maintaining the integrity of sporting events.

3.2.4 Statistical Analysis: Improving our business operations and understanding customer trends.

3.3 Third-Party Data Sharing (Limited): Except as detailed in this Policy, we do not sell, rent, trade, or give away your personal information. We share necessary information only with specific types of third parties for defined purposes:

3.3.1 Payment Processors: Facilitating deposits and withdrawals (e.g., WorldPay, Realex/Global Payments, Skrill, Neteller, PayPal, Paysafecard, Boku).

3.3.2 Verification Services: Confirming identity, age, address, affordability, and conducting fraud/AML checks (e.g., Experian, GBG, HooYu, LexisNexis, Acuant, Accuity, Aristotle, Infinian, Synalogik, Loqate).

3.3.3 Marketing Facilitators (with Consent): Third parties who manage direct mail or contact campaigns on our behalf for customers who have opted-in (e.g., for sending promotional offers or gifts).

3.3.4 Survey Providers: Companies conducting surveys on our behalf (e.g., Adobe Campaign, Survicate).

3.3.5 Affiliates: Confirming commission for third-party affiliates who directed you to the Website.

3.3.6 Technology & Platform Providers: Companies providing essential software or platforms for gaming, poker, bingo, website functionality, customer service (e.g., Zendesk, Livechat), analytics (e.g., Lucky Orange, Xtreme Push, Qubit), and device recognition/fraud prevention (e.g., innovation). Provider details are often visible when loading specific games/features.

3.4 Intra-Group Sharing: You agree we can share your data with other BoyleSports Group companies if you use their services, primarily for consistent account management and service provision across the group.

3.5 Fraud & Credit Checks: We reserve the right to conduct checks with relevant third-party institutions to verify your information or assess your ability to meet contractual obligations.

3.6 Service Updates: We may use your email or postal address for essential service updates or news regarding the Website/Services. Marketing communications require your explicit Consent (opt-in), managed via “My Preferences”.

4. Disclosure of Your Information to Other People

4.1 We will only disclose your personal information to third parties if: (i) we have your explicit permission; (ii) it is required or permitted by law, regulation, or contract; or (iii) our agreement with you allows for such disclosure based on the terms you accepted.

4.2 By providing your personal information, you understand and consent to potential disclosure for the following purposes to these categories of third parties:

4.2.1 Third-Party Marketing (with Opt-In): If you have consented, we may share limited contact information with carefully selected third parties for them to offer relevant goods/services. Named examples may include BCC Marketing Services Ltd, Telsolutions Ltd, and Gifts.i.e., Púca Intelligent Mobile Solutions, Custodian Consultancy, Central Advertising for specific fulfillment purposes. You can opt out or change preferences anytime via Customer Support.

4.2.2 BoyleSports Group Companies: Our subsidiaries, ultimate holding company, and its subsidiaries for operational and administrative purposes.

4.2.3 Business Transfers: Prospective buyers/sellers in the event of a sale, merger, or insolvency involving BoyleSports (Gibraltar) Limited or related assets.

4.2.4 Legal, Regulatory & Compliance: To comply with legal or regulatory obligations, resolve disputes, cooperate with governing body inquiries (sports, gaming), enforce our terms, and protect rights/property/safety (ours, yours, others). This includes sharing information for fraud protection, credit risk reduction, and reporting suspected cheating, fraud, or game manipulation.

4.2.5 Authorities: Law enforcement, sports/gaming governing bodies, Revenue Commissioners, or other tax authorities upon a valid request to facilitate investigations into payment fraud, tax compliance, or suspected unlawful activity.

4.2.6 Essential Service Providers: Operators, payment processors, verification services, and marketing partners essential for delivering the website/service, as outlined in our terms.

4.2.7 Banks & Card Schemes: To verify card/bank details or recover payments made in error.

4.2.8 Payment Collection Agencies: To recover outstanding debts owed to us.

4.2.9/4.2.10 Data Licensors: Parties like Racing UK, AtTheRaces, BHB, etc., providing data feeds, to facilitate their rights or ours under relevant agreements.

4.2.11 Dispute Resolution Bodies: E.g., Independent Betting Adjudication Service (IBAS) for investigating disputes.

4.2.12 Regulators: Our primary regulator, the Gibraltar Gambling Commissioner, and potentially others like the Gambling Commission of Great Britain (relevant to UK operations), require access to regulatory oversight.

4.2.13 – 4.2.23 Specific Third-Party Tools/Services: As listed in section 3.3 above (e.g., Experian, GBG, Worldpay, Zendesk, Livechat, innovation, Lucky Orange, Xtreme Push, Qubit, Synalogik, Loqate) for their specific stated functions (verification, payment, analytics, CRM, fraud prevention, etc.).

4.3 Aggregate Anonymised Data: We do not disclose personally identifiable information to advertisers/marketing companies without Consent. However, we may provide aggregate, anonymized data (e.g., “300 users from Dublin bet on the Irish Grand National,” “Demographic breakdown of website visitors”). This helps advertisers target relevant audiences without revealing individual identities.

4.4 International Data Transfers: To provide our services effectively, we may need to transfer your personal data to companies located outside the European Economic Area (EEA), including countries that may not have equivalent data protection laws. By using our services, you consent to such transfers. We take steps to ensure these transfers are secure and protected, often through standard contractual clauses or other appropriate safeguards, as detailed in Section 5.

5. Security and Control of your Personal Data

5.1 We implement all reasonable technical and organizational measures to ensure your data is treated securely and in line with this Privacy Policy.

5.2 Password Security: You are responsible for keeping your account password confidential. Choose a strong, complex password (e.g., minimum 7 characters, mix of letters, numbers, symbols) and do not share it with anyone.

5.3 Monitoring: While we don’t actively monitor all user activity, we reserve the right to monitor, retain, and disclose information as necessary to comply with laws, regulations, legal processes, regulatory requests, ensure proper service use, enforce our agreements, or investigate suspected breaches.

5.4 Technical Security: We recognize the importance of online security. We use Transport Layer Security (TLS) encryption for data transmission between your browser and our servers. Your personal details, financial information, and passwords are encrypted. We employ firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), and anti-fraud checks throughout our transaction processes.

5.5 Transmission Risk: While we strive to protect your data using these measures, transmitting information over the internet inherently carries risks. Any data you transmit is at your own risk. We cannot guarantee absolute security against interception and are not liable for unauthorized use of intercepted information.

6. Links to Third Party Websites

6.1 Our Website may contain links to partner networks, advertisers, affiliates, or other third-party websites. These sites have their own privacy policies. We do not accept responsibility or liability for their policies or practices. Please check their policies before submitting any personal data.

7. IP Addresses and Cookies

7.1 Device Information: We may collect information about your device (computer, mobile, tablet), including IP address, operating system, and browser type, for system administration, statistical analysis, and fraud detection purposes. This data identifies devices, not individuals, directly.

7.2 Purpose of Cookies: We use cookies (small text files stored on your device) to enhance your experience. They help us estimate user numbers, understand usage patterns, store preferences for personalization (e.g., remembering login details and display preferences), and speed up site functions like searches.

7.3 BOYLESPORTS COOKIE POLICY

7.3.1 What are Cookies? Tiny data files are stored in your browser when visiting websites. They don’t collect info in isolation but help servers provide a user-friendly service (like remembering settings or detecting errors). They don’t harm your computer, and personally identifiable information isn’t stored just from using the site. This Policy explains our cookie usage transparently.

7.3.2 How We Use Cookies: We use “first-party” cookies (set by BoyleSports) and “third-party” cookies (set by other companies, e.g., for analytics or advertising). Our cookies fall into four main types:

7.3.3 Cookie Categories:

* Strictly Necessary Cookies: Essential for website operation (e.g., logging in, processing payments, ensuring security). Consent is not required, but blocking them will likely break site functionality. Examples: session management, secure login, payment processing, fraud prevention.

* Performance Cookies: Help us understand how visitors use the site (e.g., counting visitors, tracking navigation, identifying popular pages, checking site performance). Used to improve the Website. They collect aggregated, anonymous data. Examples: Google Analytics, site performance monitoring.

* Functionality Cookies: Recognise you on return visits, enabling personalization (e.g., greeting you by name, remembering preferences like odds format or favorite sections). Enhance user experience but are not strictly essential for basic betting.

* Targeting Cookies: Record your visits, pages viewed, and links followed. Used by us and third parties to make advertising on our site and other sites more relevant to your interests. May link to social media (e.g., “Like” or “Share” buttons) or be used for geotargeting or retargeting (showing ads based on location or previous browsing/searches). Examples: Advertising network cookies and social media plugins (Facebook, Twitter). Note: Third parties (ad networks, etc.) may also use cookies over which we have no control.

7.4 MANAGING COOKIES

7.4.1 Browser Settings: You can usually enable or disable cookies through your web browser settings. Instructions vary by browser (e.g., Chrome, Firefox, Safari, Edge). Consult your browser’s help section. Blocking certain cookies (especially Strictly Necessary) may significantly impact your ability to use our site and services.

7.4.2 Preference Centre: Use our Cookie Preference Centre (link usually found in site footer or cookie banner) to manage your Consent for different cookie categories (excluding Strictly Necessary). Removing Consent disables the cookie, but it might remain on your device until cleared via browser settings.

7.4.3 Further Information: More about cookies can be found at www.allaboutcookies.org, www.youronlinechoices.eu, and the Irish Data Protection Commission website (www.dataprotection.ie).

8. Your Data Subject Rights

8.1 Under GDPR, you have the following rights regarding your personal data held by BoyleSports:

8.1.1 Right of Access: Request a copy of the personal information we hold about you.

8.1.2 Right of Rectification: Request correction of inaccurate or incomplete data.

8.1.3 Right to Erasure (‘Right to be Forgotten’): Request deletion of your data under certain circumstances (e.g., data no longer necessary). This is subject to legal/regulatory retention requirements and is not absolute.

8.1.4 Right to Restriction of Processing: Request limitation on how we process your data under specific conditions.

8.1.5 Right of Portability: Request transfer of your data to another organization in a structured, commonly used format (where technically feasible).

8.1.6 Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.

8.1.7 Right to Object to Automated Decision-Making/Profiling: Object to decisions based solely on automated processing (including profiling) that produce legal or similarly significant effects under certain conditions.

8.1.8 Right to Lodge a Complaint: Right to complain to a supervisory authority if you believe your rights have been infringed.

8.2 Exercising Your Rights:

* Submit requests in writing to our Data Protection Officer (DPO):

* Post: Data Protection Officer, Compliance Department, BoyleSports, Finnabair Industrial Estate, Dundalk, Co Louth, A91 HF99, Ireland.

* Email: [email protected]

* Proof of Identity: We may request suitable identification to verify your identity before processing your request.

* Timescale: We aim to respond within one calendar month. This may be extended by up to two further months for complex requests, for which we will inform you of the extension and reasons. We will endeavor to provide information electronically if requested electronically.

8.3 Complaints Procedure: We aim to resolve queries directly. If you remain unsatisfied after contacting us, you have the right to lodge a complaint with the relevant Data Protection Authority:

* For Irish Residents: The Data Protection Commission (DPC)

* Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland.

* Telephone: +353 (0)1 7650100 / Lo Call: 1890 252 231

* Website/Email: www.dataprotection.ie / [email protected]

* Licensing Regulator: Gibraltar Regulatory Authority (GRA), www.gra.gi/data-protection.

* (UK ICO contact omitted as this Policy focuses on Irish users)

9. Retaining Your Personal Data

9.1 We retain your personal information only for as long as reasonably necessary for legal, regulatory, accounting, or legitimate business purposes. Generally, unless a longer period is required by law (e.g., AML regulations) or for risk management (e.g., responsible gambling/self-exclusion records, which may need indefinite retention), your information will not be kept for longer than 7 years after your account is closed. We maintain data privacy throughout the retention period.

10. Updating Your Information

10.1 Maintaining accurate information is vital for compliance and service quality. Please ensure your personal details are current. You can update most information via the ‘My Account/Update Account Details’ section on the Website or by contacting Customer Services.

11. Changes to Our Privacy Policy

11.1 Any future changes to this Privacy Policy will be posted on this page and become effective immediately upon posting. We recommend checking this page periodically for updates. Continued use of the Website/Service after changes constitute acceptance of the revised Policy.

12. Contact Us

12.1 Questions, comments, and requests regarding this Privacy Policy are welcome. Please contact our Customer Support team using the methods listed on the Website. For formal data rights requests or DPO contact, please use the details in Section 8.