Note that not all rights listed above are absolute and may be restricted for purposes allowed under the GDPR. You can exercise some of your rights by visiting Olympic Casino reception or by logging into your OlyBet account or, in any case, by contacting us on the contact details below.
Confirmed: 09.08.2021
To contact the company’s data protection officer, an e-mail has to be sent to DataProtectionOfficerEstonia@oc.eu or call the company’s general phone number +3726671250.
The Customer has the right to receive information about whether the company processes their personal data and, if the company does, to obtain a copy of the data.
The Customer has the right to demand the amendment of inaccurate personal data.
The Customer has the right to withdraw their consent at any time if the data processing is based on consent. The withdrawal of consent does not affect the lawfulness of data processing prior to the withdrawalt.
The Customer has the right to withdraw from the direct marketing data processing at any time. The withdrawal of consent does not affect the lawfulness of data processing prior to the withdrawal.
The Customer has the right to request the deletion of their personal data. The company has no absolute obligation to delete the data. The company can delete data that is processed based on consent or legitimate interest, unless the interest of the Company is outweighed by the interest of the Customer. The right to erase does not apply to data processed due to legal obligations or under contract when they are in force
The Customer has the right to object to the processing of their personal data, particularly if it is in their legitimate interest, and to restrict the processing of their personal data if this is justified.
The customer has the right to receive their personal data, which they have provided themselves in a structured and machine-readable form (where technically possible) for the transmission to another service provider.
In the course of data processing the customer data will be shared with third parties if this is necessary for the performance of obligations arising from legislation or contracts. The recipients of the data are governmental supervisory authorities and service providers, such as the mediator of the PEP check and the sanction control database, the provider of software for managing the poker tournament, the service provider for sending the e-mails and messages, the service provider for the registry of customer feedbacks, or the online survey service provider
To provide the service, the company can share customers’ data with other Companies of the Olympic Entertainment Group
The Customer has the right to submit a complaint about the use of data to the Data Protection Inspectorate of the Republic of Estonia by sending an e-mail to info@aki.ee or by going in-person to visit Tatari 39, 10134, Tallinn.
Descriptions of the processing of personal data:
13.1 Verification of client’s personal data from the Tax and Customs Board Register of Self-Exclusion
The basis for the processing: Gambling Act § 39 (8)
If personal data is not provided, the customer will not be allowed to enter the game area or participate in the gaming
Data retention: Queried data is not retained
13.2 Check the customer’s casino ban from the company’s casino ban registry
The basis for processing: Gambling Act § 33(1) and § 35 (4)
If personal data is not provided, the customer will not be allowed to enter the game area or participate in the gaming
Data retention: 5 years from the customer’s last visit
13.3 Registration of customer’s personal data upon entering the casino
The basis for processing: Gambling Act § 37 (8)
If personal data is not provided, the customer will not be allowed to enter the game area or participate in the gaming
Data retention: 5 years from the customer’s last visit
13.4 Registration of the customer’s country of residence upon entering the casino
The basis for processing: Money Laundering and Terrorist Financing Prevention Act § 36 (2) 4)
Data retention: 5 years from the customer’s last visit
13.5 Registration of additional customer personal data, such as gender and language
The basis for processing: Legitimate interest
Data retention: 5 years from the customer’s last visit
13.6 Adding customer’s photo to a customer’s account
The basis for processing: Legitimate interest
Data retention: 5 years from the customer’s last visit
13.7 Identification and registration of politically exposed persons
The basis for processing: Money Laundering and Terrorist Financing Prevention Act § 20 (1) 5)
Data retention: 5 years from the customer’s last visit
13.8 Receiving and sending the customer’s application for the self-exclusion to the Tax and Customs Board
TThe basis for processing: Gambling Act § 39 (3) to (5)
The company refuses to accept the application if the customer fails to provide personal data
Data retention: After the transaction is completed, the data will be deleted
13.9 Checking and analyzing the customer’s background information
The basis for processing: Money Laundering and Terrorist Financing Prevention Act § 20 (1)
Data retention: 5 years from the customer’s last visit
13.10 Registration of transactions starting from 2000€
The basis for processing: Money Laundering and Terrorist Financing Prevention Act § 19 (3)
If personal data is not provided, the customer will not be allowed to participate in the gaming and the company can deny from payouts
Data retention: 5 years from the customer’s last visit
13.11 Reporting the cash transactions beginning 32 000€ to the transactions to the FIU
The basis for processing: Money Laundering and Terrorist Financing Prevention Act §49 (3)
If personal data is not provided, the customer will not be allowed to participate in the gaming and the company can deny or refuse payouts
Data retention: 5 years from the customer’s last visit
13.12 Surveillance cameras recordings to evaluate security in casinos
The basis for processing: Gambling Act § 37 (14)
Data retention: 30 days
13.13 Compiling security reviews based on camera informatipn
The basis for processing: Gambling Act § 33 (1) 1)
Data retention: 3 years
13.14 Surveillance cameras recordings to evaluate service in casinos
The basis for processing: Legitimate interest
Data retention: 30 days
13.15 Compiling service overview based on the camera information
The basis for processing: Legitimate interest
Data retention: 3 years
13.16 Registration of incidents regarding customers in the casino
The basis for processing: Gambling Act § 33 (1) 1)
Data retention: 5 years from the customer’s last visit
13.17 Issuing an Olympic Casino club card
The basis for processing: Club card agreement
Failure to provide personal data will result in the Club card not being issued
Data retention: 5 years from the customer’s last visit
13.18 Dentification of the client when performing bank card transactions without a pin code at the payment terminal
The basis for processing: Money Laundering and Terrorist Financing Prevention Act § 19 (3), § 20 (1) 4), (2) and (3)
Failure to provide personal data, no transaction will occur
Data retention: Personal data will not be retained
13.19 Earning bonus points to club card when playing in casino
The basis for processing: Club card agreement
Data retention: 5 years from the customer’s last visit
13.20 Earning award points to the Club Card from the gaming or from marketing campaigns
The basis for processing: Club card agreement
Data retention: 5 years from the customer’s last visit
13.21 Exchange of bonus points for cash or gaming equipment
The basis for processing: Club card agreement
Data retention: 5 years from the customer’s last visit
13.22 Analysis of the turnover bonus points to determine the Customer Club level
TThe basis for processing: Club card agreement
Data retention: 5 years from the customer’s last visit
13.23 Pay for bar products with bonus points or compliment points
The basis for processing: Club card agreement
Data retention: 5 years from the customer’s last visit
13.24 Discount calculation for bar products for Club card holders
The basis for processing: Club card agreement
Data retention: 5 years from the customer’s last visit
13.25 Giving gifts to customers
The basis for processing: Legitimate interest
Data retention: 5 years from the customer’s last visit
13.26 Issuing the gaming winnings certificate
The basis for processing: Customer’s consent
Data retention: 7 years
13.27 Gaming winnings transfer to customer’s bank account
The basis for processing: Customer’s consent
Data retention: 7 years
13.28 Participation in a paper ticket-based marketing campaign
The basis for processing: Customer’s consent
Data retention: 3 months after the end of the campaign
13.29 Winning the paper ticket-based marketin campaing
The basis for processing: Customer’s consent
Data retention: 7 years
13.30 Customer authorization for another person to participate in a marketing campaign raffle
The basis for processing: Customer’s consent
Data retention: 1 year
13.31 Gather contacts from potential customers at publicevents
The basis for processing: Customer’s consent
Data retention: Until the customer’s consent is withdrawn
13.32 Sending marketing information about gambling to a customer by e-mail or SMS
The basis for processing: Customer’s consent
Data retention: 1 year
13.33 Poker cash game waiting list registration
The basis for processing: For performance of the contract
Data retention: 1 month
13.34 Manage poker tournament participants
The basis for processing: For performance of the contract
Data retention: 10 years
13.35 Recording and ranking of tournament poker results
The basis for processing: Legitimate interest
Data retention: Data will not be deleted
13.36 Buying and using the Casino Entertainment Package
The basis for processing: Purchase and Sales Agreement
Data retention: 5 years from the last visit of the customer
13.37 Submitting, registering and handling of customer
The basis for processing: Gambling Act § 35 (5)
The company does not have the opportunity to respond to feedback if personal data is not provided
Data retention: 1 year
13.38 Conducting a customer satisfaction survey using a web application
The basis for processing: Consent of the data subject
Data retention: Data will be deleted at the end of usage
13.39 Accounting of the customer debts caused by ruining/destroying company property
The basis for processing: Instalments to be paid for damages according to the contract
Data retention: 7 years
13.40 Processing customer personal data in OEG data base for direct marketing offers
The basis for processing: Legitimate interest
Data retention: 5 years from the customer’s last visit
13.41 Information and analysis of big winnings
The basis for processing: Legitimate interest
Data retention: Data will not be deleted
13.42 Registering customer sports bets
The basis for processing: Legitimate interest
Data retention: 5 years from the customer’s last visit
13.43 Transfer a video image of park casino roulette game area to a partner of the streaming service
The basis for processing: Legitimate interest
Data retention: Data is not retained
13.44 COVID certificate checking
The basis for processing: Regulation nr 282 of the Government of the Republic „Measures and restrictions necessary to prevent the spread of COVID-19“ point 20’18 3)
Data retention: Data is not retained
13.45 COVID certificate storing in customer profile
The basis for processing: Customer’s consent
Data retention: 5 years from the customer’s last visit
Teresa Nousiainen
Teresa@olybet.eu
Olympic Park Casino
Fr. R. Kreutzwaldi 23, Tallinn
Cookies
Privacy Policy