Privacy Policy

This privacy policy covers collection and processing on happytiger.co.uk, spinking.co.uk and bingoburst.co.uk.

1. Who are we?

This website is operated by Happytiger ApS. Happytiger ApS and Magnet Gaming ApS share a joint data controllership for the data collected and processed for your use of the services. The joint data controllership means that two data controllers jointly determine the purposes and means of processing your personal data. This privacy policy covers both entities and enables you to contact each entity separately.

Happytiger ApS and Magnet Gaming ApS (hereinafter "we" or "us") process personal data about our private customers ("players") and about our visitors (hereinafter "you"). We always process your personal data securely and confidentially in accordance with applicable data protection laws, and we have implemented appropriate security measures to protect your personal data.

2. The personal data we collect and how we use it

The table below sets out the personal data we collect about you, the source of and purpose for using that personal data and our ‘lawful basis’ under the General Data Protection Regulation (GDPR) for processing it.

We may collect, use, store and transfer different kinds of personal data about you:

• Identity Data includes first name, last name, any previous names, username or similar identifier, title, date of birth and gender.
• Contact Data includes billing address, delivery address, email address and telephone numbers.
• Financial Data includes bank account and payment card details.
• Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website.
• Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses and your customer service communications.
• Usage Data includes information about how you interact with and use our website, products and services, including information about your gameplay and game activity.
• Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
• Special Category Data includes sensitive personal data such as information about your health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, or sexual orientation, which require additional protection under data protection laws.
• Criminal Offence Data includes personal data relating to criminal convictions and offences or related security measures in the context criminal activity, allegations, investigations and proceedings.

We also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) identify you. For example, we may aggregate individuals' Usage Data to calculate the percentage of users accessing a specific website feature in order to analyse general trends in how users are interacting with our website to help improve the website and our service offering.

We use cookies and other automated web technologies to enhance your experience, analyse site usage, and improve our services. For more information about how we use these technologies and to set your preferences, please refer to our cookie banner.

3. Retention period

As a general rule, your personal data will be stored for so long as they are relevant to our customer relationship with you.

Personal data submitted via correspondence and inquiries are stored for up to three years after the last point of contact unless a longer retention period is required pursuant to legislation or, if relevant, in relation to ongoing claims or potential claims, disputes or other issues arising between you and us.

Personal data which must also be stored pursuant to bookkeeping acts are deleted five years after the end of the relevant financial year. In addition, information on your identity which is collected pursuant to the anti-money laundering rules is stored for a minimum period of five years.

Personal data contained in backup copies are routinely deleted by overwriting (gradually) and cannot be accessed via normal means.

4. Recipients and Data Transfers

We may share your personal data within the CEGO Group, which we are part of, in accordance with applicable data protections laws and the terms of this privacy policy, for the purposes set out in section 2 above (e.g. to set up your account, to provide you with customer support services, to manage any risks to our website and to our business, to comply with any applicable legal and regulatory obligations, to send you marketing communications, and to prevent irresponsible gaming).

Some of your personal data will be shared with the following third parties where required for the purposes outlined in section 2 above:

• Fraud prevention agencies. We may share your personal data with fraud prevention agencies to help detect and prevent fraudulent activities. These agencies may store and use your data to assess risk and ensure the security of your transactions. We rely on legal obligation for this data sharing activity.
• Background checks providers. Your personal data may be shared with background check providers to verify your identity, assess your affordability, and ensure compliance with anti-money laundering regulations. This helps maintain a secure and compliant service. We have partnered with Department of Trust to deliver these background checks. You can find out more about Department of Trust here. We rely on legal obligation for this data sharing activity.
• Regulatory bodies. We may share your personal data with relevant regulatory bodies to comply with legal requirements and regulatory obligations. We rely on legal obligation to share this data lawfully.
• Professional advisors. We may share your personal data with professional advisors, such as lawyers, accountants, or consultants, to obtain expert advice and ensure compliance with legal or financial matters related to our services. We rely on our legitimate interests or processing to establish, exercise or defend legal claims, where applicable.
• Social media companies. We may share your personal data collected via cookies with third party social media sites (e.g. Facebook, Google and Instagram) to show you relevant advertising. lf you want to stop all personalized services from us, including targeted advertising on third party sites you can turn off cookie tracking through our cookie preference center. We rely on your consent for this data sharing. We may also use contact details for targeted advertising on social media platforms subject to your direct marketing permissions.
• Other Companies. We may share your personal data where applicable to provide you with prizes won in our competitions. In these instances, we will rely on performance of contract as our legal basis.

In addition, we use data processors in our processing of personal data who, in compliance with specific instructions provided by us, will have access to your personal data. If we send your personal data to external parties outside the UK or European Economic Area, we will only do so where there are adequate safeguards in place to protect your personal data as required under law such as the EU/UK adequacy decisions or including the EU/UK Commission’s Standard Contractual Clauses and in our agreements with the third parties who have access to your personal data.

5. Your rights

As a data subject, you have a number of rights that you can exercise by contacting us via the contact information listed in section 8 below. You have the right to:

• Object: You have the right to object to certain types of processing of your personal data, such as when processing is based on legitimate interests. Please note that in some cases, we may demonstrate that we have legitimate grounds to process your information which override your rights and freedoms.
• Access: You can request a copy of the personal data we hold about you, along with details on how we use it and who we share it with.
• Rectification: If your personal data is inaccurate or incomplete, you can ask us to correct or update it.
• Deletion: Also known as the "right to be forgotten," you can request that we delete your personal data in certain cases, such as when it’s no longer needed or if you withdraw your consent.
• Restriction: You can ask us to temporarily stop processing your personal data, for example, while we verify its accuracy or review an objection you’ve raised.
• Portability: You can request to receive your personal data in a structured, machine-readable format or ask us to transfer it directly to another organization if technically feasible.
• Withdraw consent: If you have given consent for us to process your personal data, you can withdraw it at any time, and we will stop processing unless we have another legal basis to continue.

Please be aware that the exercising of certain rights, such as deletion, for example, is contingent upon the fulfilment of specific conditions under relevant legislation and the rights are not absolute.

Response time and fees

You can typically exercise your rights under GDPR free of charge, and we will respond within one month. However, if your request is excessive, repetitive, or unfounded, we may charge a reasonable fee or refuse to act on it as permitted by law. If we need more time to respond, we will inform you of the reason and any extension required.

Additional documents

In some cases, to protect your personal data, we may also ask you to verify your identity before proceeding with your request. We will let you know if that is the case.

6. Security measures

We take the security of your personal data seriously and have implemented a variety of technical and organizational measures to protect it from unauthorized access, loss, or alteration. These include encryption, secure servers, regular security audits, and restricted access to personal data on a need-to-know basis.

7. Changes to our Privacy Statement

We may update this policy from time to time, so please review it frequently.

If any material changes are made to this Privacy Policy, we will use reasonable endeavours to inform you in advance by email, notice on the Website or other agreed communications channels. We will communicate the changes to you in advance, giving an appropriate amount of time for you to consider and understand the changes before they become effective.

We will not enforce material changes in processing purposes without your express consent. If you decline to accept the changes to the Privacy Policy, or otherwise do not accept the changes within the time period, we may not be able to continue to provide some or all products and services.

8. Contact us

If you have any questions about the processing of your personal data, if you wish to exercise your rights as described below or if you wish to make a complaint, you are welcome to contact both entities by sending an email to [email protected]. Inquiries sent to this email address which are not related to the above will not receive a response and will be deleted as quickly as possible.

We have appointed a representative pursuant to Article 27 UK GDPR, who can be contacted at [email protected].

9. How to complain

If you disagree or are dissatisfied with the manner in which we process your personal data, you can submit a complaint to both entities by using the contact information above. If you disagree or are dissatisfied with the decision that we make on such a complaint (or if you do not wish to submit a complaint to us), then you can also submit a complaint to Information Commissioners Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

Joint data controllers:

Happytiger ApS

Lauritzens Pl. 1, 9000 Aalborg, Denmark

+44 800 102 6335

[email protected]

Magnet Gaming ApS

Lauritzens Pl. 1, 9000 Aalborg, Denmark

+44 800 102 6335

[email protected]

10. Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.