PRIVACY POLICY of PALMS MERKUR CASINO.BG EOOD

This Privacy Policy aims to inform you about the rules we follow when we collect and process your personal data, when you visit our website, and use the services we offer.

Here you can find information about what personal data we collect, how and for what purpose we use it, to whom we provide it, what are your rights as a data subject, as well as how to contact us or the supervisory authority for the protection of personal data.

• Who are we and how to contact us?

PALMS MERKUR CASINO.BG EOOD is a legal entity, entered in the Commercial Register of the Registry Agency, UIC 201710165, having its registered seat and address of management at 7, Kukush Str., Sofia.

PALMS MERKUR CASINO.BG EOOD is a holder of a License for organizing gambling games in a casino No. ………………… approved by a Certificate for issuing a license No. ………… issued by the National Revenue Agency.

PALMS MERKUR CASINO.BG EOOD is an administrator of personal data. Personal data shall be processed during or on the occasion of carrying out the object of business activity of the Company. You can send requests to the Personal Data Protection Officer by mail or submit your requests in person at the Registry Office at the registered seat and address of management of the Company at 7, Kukush Str., Sofia, or send the requests by e-mail to dpo@pmrcasino.com.

In your message, you should indicate your identification data and contact for feedback.

• What data do we collect, for what purposes do we use it, and what are the grounds for processing personal data?

PALMS MERKUR CASINO.BG EOOD processes personal data in connection with the following main activities: Organizing and conducting gambling games in a casino.

When the Company carries out the object of its business activity, it processes the personal data of clients.

When you visit our site, you will be registered in accordance with applicable law. When registering and creating a user profile, the processed data shall be:

Full name, citizenship, date of birth, identification number of the person (personal identification number, alien personal number, other number or identification data, according to the national legislation of a person who is not a Bulgarian citizen), address of temporary or permanent residence, e-mail address, number, date of issue and issuer of an identity document, telephone number, confirmation that you are over 18 years of age, as well as any other information required by law.

When placing a bet, we require your bank account details (IBAN or an account number - IBAN Certificate, name of the bank, country).

Please note that detailed personal data about you is only collected after visiting and registering with us. The reasons for carrying out this activity are based on the requirements of the Gambling Act and other special laws and regulations under which the Company shall verify the identity of participants in gambling games. We use different legislative means to verify your identity and to register you.

Processed personal data when operating your user account:

Before authorizing the first payment, you will need to provide a copy of an official identity document.

Personal data for creation, processing, withdrawals, and payments shall be processed in accordance with the applicable legislation and stored in the database of the Company.

PALMS MERKUR CASINO.BG EOOD processes data based on the subject’s consent. Personal data shall be processed only after people clearly express their consent to personal data processing. When your personal data is processed on the basis of your consent, it may be withdrawn at any time by sending your request to dpo@pmrcasino.com.

The processing of data shall be carried out for the specific purposes defined by law Data shall be processed lawfully and conscientiously and cannot be further processed in a way incompatible with these purposes.

We use your personal data only for the purposes related to the object of business activity carried out by PALMS MERKUR CASINO.BG EOOD.

We shall not perform further analysis or other processing of the data you provided. We shall not use personal information to profile you, extract additional information, categorize you in any way nor shall make automated decisions that have legal consequences for you or otherwise affect you.

• We process data for security purposes, for protection against legal claims and to offer better services to our customers:

Client’s profile/Client’s file: If you have used any of the services we offer, we will continue to keep information about you even after we have already provided you with the relevant service - your name, e-mail address, telephone number, history of your bets and other relevant data related to the services we offer. We do this for two reasons:

First of all, in order to be able to prove circumstances related to the provision of the service, we need this information in case of claims by you or by the user of the service we have provided. The information may also be necessary when we are subject to inspection by a competent state authority, due to the need to prove facts and circumstances related to the provision of the service.

We also maintain your file based on a legitimate interest in tracking the development of our potential clients’ interest in the services we provide and to improve our offerings.

Data we process for our newsletter:

Our Company offers you the opportunity to send you current or upcoming promotions that we offer by subscribing to our newsletter. You can give your consent to receive up-to-date information at the time of registration, or in writing at a later stage. We process the provided category of personal data based on our legitimate interest in keeping our existing and potential clients informed about current and upcoming promotions. We process this data and on the basis of your consent to receive a newsletter, which you have expressed during the registration at our site. You can opt-out at any time by submitting a request expressing your wish not to receive the newsletter.

• Categories of data recipients outside PALMS MERKUR CASINO.BG EOOD

The Company does not disclose personal data to third parties and recipients unless there is a legal basis for receiving the data or the data are already publicly available due to their inclusion in a public register.

Apart from the cases of general availability of the data included in a public register, recipients of data according to the specific case may be:

• State bodies and authorities entrusted with public functions, within their powers (National Revenue Agency, National Social Security Institute, Ministry of Interior, State Agency for National Security, etc.);
• Our trusted partners who observe the highest standards of security and confidentiality of the information provided to them, insofar as this is necessary to provide the services we offer, such as technical support services on our site, chat platforms to contact us, etc.);
• Banks for the needs of remuneration payments, as well as the implementation of electronic payments;
• Other third parties who receive your personal data are legal entities offering the following services for cashless payment: Maestro, MasterCard, VISA - Post terminal.
• Courier companies and postal operators - for the needs of correspondence with natural persons who are data subjects.
• We inform you that in certain cases your personal information may be shared with third parties outside the EU/EEA in accordance with applicable law and in accordance with this Privacy Policy. If we disclose your personal information to third parties outside the EU/EEA, we will ensure that our contractual relationship with such third parties includes adequate safeguards to protect your personal information. We only enter into contractual relations with third parties if they can guarantee a comparable data protection standard such as in EU/EEA countries.

• Data retention period.

In its capacity as a data administrator, PALMS MERKUR CASINO.BG EOOD processes data for a period with a minimum duration according to the processing purposes and provided for in the current legislation in accordance with the principle of retention restriction.

We apply a 5-year retention period for archives containing files of clients, according to the national legislation governing gambling, after the expiration of the limitation period for repayment of public debts.

Rights of data subjects.

The measures that have been taken for the protection of personal data in accordance with the requirements of Regulation (EU) 2016/679 are aimed at ensuring the rights of the subjects whose personal data are processed, namely:

• Right of access;
• Right to correct inaccurate or incomplete data;
• Right of erasure (right to be forgotten), under the conditions of Art. 17 of Regulation (EU) 2016/679;
• Right to limit processing;
• Right to data portability, if the conditions for portability under Art. 20 of Regulation (EU) 2016/679 have been met;
• Right of objection, if the conditions of art. 21 of Regulation (EU) 2016/679.
• Right of the data subject not to be the subject of a decision based solely on automated processing, including profiling.

You can exercise the above rights by submitting a request to PALMS MERKUR CASINO.BG EOOD (in writing on paper or electronically), in which you should specify your request. The request should be signed and sent to the address of the Company and to the Data Protection Officer via: dpo@pmrcasino.com.

Right to appeal to the Commission for Personal Data Protection

If you consider that your rights under Regulation (EU) 2016/679 have been violated, you can file a complaint to the Commission for Personal Data Protection with address: 2, Prof. Tsvetan Lazarov Blvd., 1592 Sofia 1592, www.cpdp.bg, email: kzld@cpdp.bg.

• Transfer of personal data to third parties or international organizations.

The Company does not transfer the processed personal data to third parties or international organizations.

• Measures for personal data protection introduced by PALMS MERKUR CASINO.BG EOOD

PALMS MERKUR CASINO.BG EOOD has introduced measures for effective protection of the processed personal data and the possibility to exercise the rights of data subjects provided for in Regulation (EU) 2016/679, and has approved Internal Rules for Personal Data Protection. The Company has introduced procedures for the means of communication in the event of a complaint, including data portability, transparency of the processing of personal data, management of requests by data subjects, obtaining consent, notifying security breaches, storing and destroying documents, and a number of other technical measures to ensure the security of personal data.

Access to your personal data within our Organization is available only to persons whose employment functions require access to data in order to carry out the activities for which the data have been collected and processed. We include contractual clauses for data confidentiality in all contracts with employees and third parties to whom we assign the processing of your personal data.

• Changes.

The Company reserves the right to make changes and update this Policy. You will be notified of any change by a message on our website www.pmrcasino.com.

The security and protection of all the data we store for you as clients has always been our top priority.

Thank you for being our clients!