Privacy Notice

The data controller of your personal data is Mr Green Limited, a limited liability company incorporated in Malta, and subject to Maltese law, having its registered address at Tagliaferro Business Centre, Level 7, High Street, Sliema SLM 1549, Malta.

We are a betting and gaming company and generally process personal data on customers to provide access to our product and for regulatory purposes. This notice provides further information about how we process your personal data.

This Privacy Notice is linked to our Terms and Conditions. You must have read and understood both documents. If our practices change, we will update this Privacy Notice. The date this Privacy Notice was last updated can be found at the bottom of the page.

If you have any questions about the information in this statement, please contact us using the details provided in this notice.

Categories of personal data we collect:

We collect the following information when you register an account with us:

• Username & Account Number.
• Name.
• Title.
• Gender.
• Date of birth (DOB).
• Telephone numbers.
• Home address.
• Geolocation.
• Answers to security questions.
• Your marketing preferences.
• E-mail address.

You are required to provide this information in order to register and maintain an account with us.

We collect this information when you use our products:

• Betting and gaming activities.
• Customer services interactions.
• Where chatrooms are provided, we process information that you share in these spaces.
• Telephone calls.
• Audit logs relating to your account.
• Payment methods.
• Market research responses.

We collect some or all of this information to comply with our legal obligations where we are required to, or for fraud detection or other legitimate interests:

• Information required to complete Know Your Customer (“KYC”) checks.
• Information about your source of funds.
• Information about safer gambling including but not limited to behaviour, self-exclusion, operator exclusion, deposit limits and product blocks.
• Information about your deposits and withdrawals.
• Information required to comply with our safer gambling and Anti-Money Laundering (“AML”) obligations.
• Source of funds documents.
• Financial information.
• Social media information.
• Device and other technical information such as IP address communicated over the internet to our services.
• Information collected from publicly available sources.
• Information from other brands within our group.
• Information collected from third parties such as for affordability solutions and ID verification, betting integrity and mediation organisations or friends and family where they contact us.

It is your responsibility to inform us when your details change so that we can keep our records accurate and up-to-date. Some of the listed information is obtained through third-party organisations that provide services to the business. To find out the source of any of the data we process please contact us on the details provided below.

How we use your personal data:

In this section you will learn how and on what legal basis we use your data.

* Marketing - you can withdraw your consent at any time via your account settings. We will also include unsubscribe features in our communications, which you can use to opt out of future marketing communications.

* Please read our Cookie Notice.

Where it is stated that ‘legitimate interests’ is used as a legal basis a three-step process is in place to consider the impact this has on Data Subjects.

• Purpose test: are you pursuing a legitimate interest?
• Necessity test: is the processing necessary for that purpose?
• Balancing test: do the individual’s interests override the legitimate interest?

Further information regarding the balancing test can be provided upon request. You can contact the Data Protection team using the following email: dpo@mrgreen.com

If you provide us with information about health problems relating to yourself or third parties, we will process this information with your consent if it is in your best interests or for reasons of considerable public interest.

Sharing your Personal Information:

We pass on personal data to:

• Analytics companies
• Advertising agencies
• Risk and fraud authorities
• Social Media Companies
• Customer service agencies
• Supervisory authorities
• Companies within the Evoke plc group
• Game Providers
• Payment service providers

We share anonymized data (such as aggregated statistics) about users of our Services to describe our revenues, customers, traffic patterns, and other information to potential partners, advertisers, investors, and other reputable third parties, and for other lawful purposes, but these statistics do not include personally identifiable information.

We may be required by law, court order or governmental order to disclose certain types of personal information.

Transfer of your data abroad:

We transfer personal data to organisations outside the European Economic Area (EEA) in connection with the provision of services and for the purposes set out above.

Where data is transferred outside the EEA to a country that does not have an adequacy decision, it will be done under standard contractual clauses or binding corporate rules or any other acceptable method that ensures the level of protection of your data required in the EEA.

If your personal data is transferred by us outside the EEA in accordance with the paragraph above, we will take all reasonable steps to ensure that appropriate measures are in place to ensure the same security of your personal data as within the EEA and compliance with this Privacy Notice.

Your data protection rights:

Under data protection law, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal information.
• Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at dpo@mrgreen.com if you wish to make a request.

If you make a request regarding your rights, we will need proof of identification. We may also ask you to explain your request to help satisfy the request for you.

If a third party makes a submission on your behalf, we will ask for your authority to act on your behalf and for additional identity confirmation with photo.

Retention of your personal data:

We will retain your personal data for as long as necessary to provide the Services.

When it is no longer necessary to keep your personal data, we will delete it.

We may be subject to legal and regulatory requirements to hold personal data for a longer period. This may affect your right to erasure.

Contacting us:

You can contact our Data Protection Officer for any requests by e-mail at dpo@mrgreen.com. If you wish to exercise any of your rights, you do not need to contact the Data Protection Officer directly, but can address your request to our customer service, who can also help you. Customer service can be contacted via chat.

Should you wish to raise a complaint regarding how your data is being used you can either contact Mr Green directly on dpo@mrgreen.com or reach out to the relevant authority by email (for example, in Malta you may contact the Office of the Information and Data Protection Commissioner using the following email address: idpc.info@idpc.org.mt)

This Privacy Notice is written and executed in English version. In case of any language differences in translated versions, the English version of this Privacy Notice shall prevail.