Online Privacy Notice

---

Date updated: 29th of May 2024

Version number: 14.0

 

To display this page effectively on a mobile device, please enable 'Reader View' on your device (click here for help).

 

• PURPOSE OF THIS PRIVACY NOTICE
• CATEGORIES OF PERSONAL DATA
• PROCESSING YOUR PERSONAL DATA
• CATEGORIES OF RECIPIENTS OF YOUR PERSONAL DATA
• TRANSFERRING YOUR PERSONAL DATA ABROAD
• SAFEGUARDING YOUR DATA
• YOUR RIGHTS
• RETAINING YOUR PERSONAL DATA
• CONTACTING US

---

PURPOSE OF THIS PRIVACY NOTICE

This Privacy Notice sets out the ways we collect and use your personal data when using any of our online Services.

The data controller of your personal data depends on where you are located, as follows:

• if you are located in Great Britain, the data controller is: WHG (International) Limited 6/1 Waterport Place, Gibraltar with company number: 99191 (“WHG(I)”);
• if you are located in the Republic of Ireland, the data controller is: William Hill Malta PLC, Level G, (Office 1/2429), Quantum House, 75, Abate Rigord Street, TA' XBIEX XBX 1120, Malta with company number: C 87591 (“WHM”); and
• if you are located outside either Great Britain or the Republic of Ireland, the data controller is:  William Hill Global PLC, Level 7, Tagliaferro Business Centre, 14 High Street, Sliema SLM 1549, Malta, with company number: C 96298 (“WHG”).

WHG(I), WHM and WHG are referred to as “we” “us” or “our” in this Privacy Notice.

This Privacy Notice is linked to our General Terms. You should read and understand both documents. We update this Privacy Notice as and when our processes change.

Please note that William Hill is a Participating Operator in GamProtect, the Single Customer View, trial in the UK. GamProtect is a project to ensure that people who display high-risk behaviours are protected from gambling related harm to their health. You can find out more about how your data is used in the Single Customer View by visiting www.gamprotect.co.uk/privacy.

Back to top

---

CATEGORIES OF PERSONAL DATA

We collect the following information when you register an account with us:

• Username & Account Number
• Name
• Title
• Gender
• Date of birth (DOB)
• Telephone numbers
• Home address
• Answers to security questions
• Your marketing preferences
• E-mail address

 

You are required to provide this information in order to register and maintain an account with us.

We collect this information when you use our products:

• Betting and gaming activities.
• Customer services interactions.
• Where chatrooms are provided, we process information that you share in these spaces.
• Telephone calls.
• Audit logs relating to your account.
• Payment methods.
• Market research responses.

 

We collect some or all of this information to comply with our legal obligations where we are required to, or for fraud detection or other legitimate interests:

• Information required to complete Know Your Customer (“KYC”) checks.
• Information about your source of funds.
• Information about safer gambling including but not limited to behaviour, self-exclusion, operator exclusion, deposit limits and product blocks.
• Information about your deposits and withdrawals.
• Information required to comply with our safer gambling and Anti-Money Laundering (“AML”) obligations.
• Source of funds documents.
• Financial information.
• Information received from Credit Reference Agencies that does not affect your credit score.
• Social media information.
• Device and other technical information such as IP address communicated over the internet to our services.
• Information collected from publicly available sources.
• Information from other brands within our group.
• Information collected from third parties such as for affordability solutions and ID verification, betting integrity and mediation organisations or friends and family where they contact us.

 

It is your responsibility to inform us when your details change so that we can keep our records accurate and up-to-date. Some of the listed information is obtained through third-party organisations that provide services to the business.

To find out the source of any of the data we process, please contact us on the details provided below.

Back to top

---

PROCESSING YOUR PERSONAL DATA

Generally, we process your personal data to provide our product to you, conduct marketing and comply with our legal and regulatory obligations.

More information about how we use your personal data is provided in the below table:

 

 

When you give us information about any health issue related to yourself or any third party, we will process this information with your consent, when it is in the vital interest or you or the third party or on the grounds of substantial public interest.

Where we are processing your personal data for under the legal basis of “legitimate interest”, you can request further information relating to our use of this legal basis including information on the balancing test by contacting us on the details provided within this privacy notice.

Back to top

---

CATEGORIES OF RECIPIENTS OF YOUR PERSONAL DATA

• Advertising agencies
• Fraud checking companies
• Social media companies
• Regulators, ombudsman, external complaint bodies
• Companies within the evoke plc
• Credit reference agencies
• Game providers
• Payment service providers
• Public registers
• Public authorities (where information is requested by them)
• Law enforcement agencies
• Behavioural analytics companies
• Consumer vulnerability services
• Debt recovery agencies
• Sports betting integrity organisations

 

We disclose anonymized data (such as aggregated statistics) about the users of our Services in order to describe our sales, customers, traffic patterns and other information to prospective partners, advertisers, investors and other reputable third parties and for other lawful purposes, but these statistics will not contain your personal data.

We share your personal data with is TransUnion who provide us with verification services. They use your data for the purposes outlined in their privacy notice which you can find here:

• https://www.transunion.co.uk/legal/privacy-centre
• https://www.iovation.com/privacy
• https://www.transunion.co.uk/legal-information/bureau-privacy-notice

 

We may also use services from other credit reference agencies including:

• Equifax
• Experian

Back to top

---

TRANSFERRING YOUR PERSONAL DATA ABROAD

We transfer personal data with organisations located inside and outside of the UK & European Economic Area (EEA) as part of our service provision and do so in accordance with the stated purposes, above.

Where personal data is transferred outside of the UK or EEA to a country without an adequacy decision, we will use standard contractual clauses or any other approved methods to guarantee your data's protection at the level required in the EEA.

These protections can be made available upon request.

Back to top

---

SAFEGUARDING YOUR DATA

1. Technical security measures

• We adopt security measures to protect personal data.

2. Data Protection Impact Assessments (DPIAs)

• We conduct DPIAs where necessary to identify and mitigate privacy risks associated with our data processing activities, outlined above.
• This helps to ensure the safety and security of your personal data in line with data protection regulations.

3. Industry guidelines

• Where appropriate we adhere to applicable industry-specific guidelines to maintain standards of data protection.
• These codes of conduct can provide additional safeguards to protect your data.

4. Data Protection by Design and Default

• We integrate Data Protection by Design and Default principles into our data processing practices.
• This means that we prioritise data protection throughout the entire lifecycle of our data handling, from account creation to account closure and beyond, ensuring that your data is consistently safeguarded.

5. Legitimate Interest Assessments

• Where we process personal data under the legal basis of ‘Legitimate interest’ we balance our interests with yours.
• You can find out more information on our balancing tests by contacting us through the details on this notice.

Back to top

---

YOUR RIGHTS

• You have the right be informed about how we use your personal data.
• The personal data that we process about you is provided within this notice.

• You have the right to ask us for a copy of the personal information we hold about you.

• You have the right to ask us to rectify personal information you think is inaccurate or incomplete.

The right to erasure:

• You have the right to ask us to erase your personal information in certain circumstances.

The right to restriction of processing:

• You have the right to ask us to restrict the processing of your personal information in certain circumstances.

The right to object to processing:

• You have the right to object to our processing of your personal information in certain circumstances.

The right to data portability:

• You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

The right to remove your consent:

• Where our processing of your personal data is based on your consent, you have the right to remove your consent, at any time, for example where you have provided consent to receive marketing.

The right to lodge a complaint with the supervisory authority:

• You have the right to lodge a complaint with the supervisory authority.

The right not to be subject solely automated decision making and profiling that creates legal or similarly significant affects:

• You have the right not to be subject solely automated decision making and profiling that creates legal or similarly significant affects and an explanation of any logic involved in these automated decisions.
• You can request a person looks over any solely automated decisions that produce a legal or similar affects via customer services.

 

Data subject rights, while generally upheld, are not always absolute and may be subject to limitations or exceptions in specific circumstances.

Example: data protection regulations can contain exemptions for complying in full with the rights listed above.

Back to top

---

RETAINING YOUR PERSONAL DATA

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements that we have as a business.

The general retention period for customer data is set out below however we reserve the right to retain data for longer than the prescribed period for our business needs or to comply with our legal and regulatory obligations.

The retention period starts from the date of account closure or prolonged account in-activity such as last log-in date.

 

There are some circumstances where legal, regulatory or business reasons require us to retain your personal data for longer periods of time. These circumstances can include (but are not limited to):

• If the account is under a self-exclusion of similar safer gambling
• If the account is under a review by AML or fraud teams 
• If the account is restricted as a result of betting and gaming restrictions set by our trading team
• If the account is under a Refusal of Service status

Back to top

---

CONTACTING US

You can contact our Data Protection Officer for any requests by e-mail at dataprotection@williamhill.com.

If you wish to exercise any of your rights, you do not need to contact the Data Protection Officer directly, but can address your request to our customer service, who can also help you.

---

Back to top