GDPR Policy

Premierwin Competitions Limited

Last Updated: [28.09.2025]

Effective Date: [28.09.2025]

1. INTRODUCTION

This GDPR Policy explains how PremierWin Competitions Limited ("we," "us," "our") complies with the General Data Protection Regulation (GDPR) and UK GDPR in the processing of your personal data.

Our Commitment: We are committed to protecting your personal data and respecting your privacy rights under GDPR. This policy works alongside our main Privacy Policy to provide specific information about your GDPR rights and how to exercise them.

Contact Details:

  • Company: PremierWin Competitions Limited
  • Registration Number: 0330 311 2936
  • Address: PremierWin Competitions Ltd
    Riddicks Sports Bar
    22a Fowler Street
    South Shields
    Tyne And Wear
    United Kingdom
    NE33 1NA
  • Email: support@premierwincompetitions.co.uk
  • Data Protection Officer: support@premierwincompetitions.co.uk

2. YOUR GDPR RIGHTS EXPLAINED

Under GDPR and UK GDPR, you have the following rights regarding your personal data:

2.1 Right to be Informed

What it means: You have the right to know how we collect, use, and share your personal data.

How we comply:

  • This GDPR Policy and our Privacy Policy explain our data practices
  • We provide clear information at the point of data collection
  • We notify you of any significant changes to our data processing

2.2 Right of Access (Subject Access Request)

What it means: You can request a copy of the personal data we hold about you.

What you'll receive:

  • Confirmation that we process your personal data
  • A copy of your personal data
  • Information about how we use your data
  • Details about who we share your data with
  • How long we keep your data

How to request: Email us at support@premierwincompetitions.co.uk with "Subject Access Request" in the subject line.

2.3 Right to Rectification

What it means: You can ask us to correct inaccurate or incomplete personal data.

Examples:

  • Correcting spelling errors in your name or address
  • Updating outdated contact information
  • Adding missing information to your profile

How to request: Contact us via email or update your information directly in your account settings.

2.4 Right to Erasure ('Right to be Forgotten')

What it means: You can request that we delete your personal data in certain circumstances.

When this applies:

  • Your data is no longer needed for the original purpose
  • You withdraw consent and there's no other legal basis
  • Your data has been processed unlawfully
  • Deletion is required for legal compliance
  • You were a child when we collected your data

Important limitations:

  • We may need to keep some data for legal obligations
  • Financial records must be retained for tax and regulatory purposes
  • Some data is needed for fraud prevention and security

2.5 Right to Restrict Processing

What it means: You can ask us to limit how we use your personal data in certain situations.

When this applies:

  • You're challenging the accuracy of your data
  • Processing is unlawful but you don't want deletion
  • We no longer need the data but you need it for legal claims
  • You've objected to processing and we're considering your request

What restriction means: We can still store your data but won't use it for other purposes without your permission.

2.6 Right to Data Portability

What it means: You can get your personal data in a portable format to transfer to another service provider.

What you'll receive:

  • Your data in a commonly used, machine-readable format (usually CSV or JSON)
  • Data you provided to us based on consent or contract
  • Data generated from your use of our services

Limitations: This doesn't include data derived from analysis or data that affects others' rights.

2.7 Right to Object

What it means: You can object to certain types of data processing.

Direct Marketing: You can always opt out of marketing communications through:

  • Unsubscribe links in emails
  • Reply "STOP" to SMS messages
  • Account preference settings
  • Contacting customer support

Legitimate Interests: You can object to processing based on legitimate interests, including:

  • Profiling for service improvement
  • Fraud prevention measures
  • Some analytics activities

Automated Decision-Making: You can object to decisions made solely by automated systems that significantly affect you.

2.8 Rights Related to Automated Decision-Making

What it means: You have rights regarding automated decisions that significantly affect you.

Our automated systems may:

  • Assess fraud risk during registration
  • Determine prize eligibility based on game rules
  • Personalize marketing content
  • Detect problem gambling indicators

Your rights:

  • Request human intervention in automated decisions
  • Express your point of view about the decision
  • Challenge the decision if you disagree

3. HOW TO EXERCISE YOUR RIGHTS

3.1 Contacting Us

Primary Contact: support@premierwincompetitions.co.uk Data Protection Officer: support@premierwincompetitions.co.uk Phone: 0330 311 2936

3.2 Information We Need

To process your request efficiently, please provide:

Essential Information:

  • Full name associated with your account
  • Email address registered with us
  • Account username (if applicable)
  • Clear description of your request
  • Preferred response method

For Identity Verification:

  • Copy of photo ID (passport or driving license)
  • Proof of address (if requested)
  • Additional verification may be required for sensitive requests

3.3 Response Timeframes

Standard Response: 1 month from receipt of valid request Extension Possible: Up to 2 additional months for complex requests Immediate Confirmation: We'll acknowledge your request within 72 hours Free of Charge: First request is always free; additional copies may incur reasonable costs

3.4 Request Process

  1. Submit Request: Email us with required information
  2. Identity Verification: We verify your identity to protect your data
  3. Request Processing: We locate and prepare your data
  4. Response Delivery: We send your information via secure email or post
  5. Follow-up: We're available for any questions about your data

4. SPECIAL SITUATIONS

4.1 Account Closure and Data Retention

When you close your account:

  • We immediately stop active processing for marketing
  • Some data must be retained for legal compliance (up to 7 years)
  • Financial records are kept for tax and regulatory requirements
  • You can request details of exactly what data we retain and why

4.2 Deceased Users

Family members or legal representatives can request:

  • Account closure for deceased users
  • Information about data processing
  • Data deletion where legally permissible
  • Additional documentation may be required

4.3 Legal Obligations vs. Individual Rights

Sometimes legal requirements conflict with individual rights:

  • Anti-Money Laundering: We must retain financial records for 5-7 years
  • Tax Compliance: Financial data retention is mandatory
  • Regulatory Requirements: Gaming Commission may require certain data retention
  • Court Orders: Legal proceedings may prevent data deletion

We'll always explain any limitations and provide alternatives where possible.

5. COMPLAINTS AND ESCALATION

5.1 Internal Complaints Process

If you're unhappy with how we've handled your request:

Step 1: Contact our Data Protection Officer at support@premierwincompetitions.co.uk Step 2: We'll review your complaint within 10 business days Step 3: We'll provide a detailed response and proposed resolution Step 4: If unsatisfied, you can escalate to external regulators

5.2 Regulatory Complaints

You have the right to complain to supervisory authorities:

UK Users: Information Commissioner's Office (ICO)

  • Website: ico.org.uk
  • Phone: 0303 123 1113
  • Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

EU Users: Contact your local data protection authority. Find details at: edpb.europa.eu

5.3 What to Include in Complaints

  • Description of the issue
  • Steps you've already taken
  • How you'd like the issue resolved
  • Any relevant correspondence with us
  • Your contact information

6. LAWFUL BASIS FOR PROCESSING

We process personal data under the following GDPR lawful bases:

6.1 Consent (Article 6(1)(a))

Used for:

  • Marketing communications
  • Optional data collection
  • Cookies and tracking (non-essential)
  • Newsletter subscriptions

Your control: You can withdraw consent at any time through account settings or by contacting us.

6.2 Contract Performance (Article 6(1)(b))

Used for:

  • Account registration and management
  • Processing competition entries
  • Prize fulfillment and delivery
  • Payment processing
  • Customer support

6.3 Legal Obligation (Article 6(1)(c))

Used for:

  • Age verification and identity checks
  • Anti-money laundering compliance
  • Tax reporting obligations
  • Regulatory reporting to Gaming Commission
  • Court orders and legal proceedings

6.4 Legitimate Interests (Article 6(1)(f))

Used for:

  • Fraud prevention and security
  • System administration and maintenance
  • Business analytics and improvement
  • Direct marketing to existing customers
  • Debt collection

Your rights: You can object to legitimate interests processing at any time.

6.5 Vital Interests (Article 6(1)(d))

Rarely used for:

  • Emergency situations requiring disclosure
  • Life-threatening circumstances
  • Child protection issues

6.6 Public Task (Article 6(1)(e))

Used for:

  • Cooperation with law enforcement
  • Regulatory investigations
  • Public safety matters

7. SPECIAL CATEGORY DATA

We may process special category data under specific circumstances:

7.1 Health Data

Purpose: Responsible gambling and player protection Legal basis:

  • Explicit consent for self-exclusion programs
  • Substantial public interest for addiction support

7.2 Biometric Data

Purpose: Identity verification and fraud prevention Legal basis:

  • Explicit consent for facial recognition
  • Substantial public interest for security measures

7.3 Your Rights

  • You can withdraw consent for special category processing
  • You have enhanced rights regarding automated health-related decisions
  • We implement additional security measures for this sensitive data

8. INTERNATIONAL TRANSFERS

When we transfer your data outside the UK/EEA:

8.1 Transfer Safeguards

  • Adequacy Decisions: To countries with adequate data protection
  • Standard Contractual Clauses: Legal agreements ensuring protection
  • Binding Corporate Rules: For transfers within corporate groups
  • Appropriate Safeguards: Technical and organizational measures

8.2 Your Rights Regarding Transfers

  • Information about where your data is sent
  • Details of the safeguards in place
  • Right to object to transfers in some circumstances
  • Access to copies of transfer agreements (with confidential information removed)

9. DATA BREACH NOTIFICATION

9.1 Our Obligations

High-Risk Breaches: We'll notify you within 72 hours if a breach is likely to result in high risk to your rights and freedoms.

What we'll tell you:

  • Nature of the breach
  • Data types affected
  • Likely consequences
  • Measures taken to address the breach
  • Steps you should take to protect yourself

9.2 Your Actions

If you suspect a data breach:

  1. Contact us immediately at support@premierwincompetitions.co.uk
  2. Provide details of the suspected breach
  3. Follow our guidance on protective measures
  4. Monitor your accounts for suspicious activity

10. GDPR COMPLIANCE MONITORING

10.1 Regular Reviews

We conduct regular assessments of:

  • Data processing activities
  • Security measures and controls
  • Staff training and awareness
  • Third-party compliance
  • Policy effectiveness

10.2 Data Protection Impact Assessments (DPIAs)

We conduct DPIAs for:

  • New data processing activities
  • High-risk processing operations
  • Use of new technologies
  • Large-scale processing of special category data

10.3 Records of Processing

We maintain detailed records of:

  • What personal data we collect
  • Why we collect it
  • Who we share it with
  • How long we keep it
  • Security measures in place

11. UPDATES TO THIS POLICY

11.1 Change Notifications

We'll notify you of significant changes by:

  • Email notification to registered users
  • Prominent website notices
  • Account dashboard alerts
  • Updated "last modified" date

11.2 Your Options

When we update this policy:

  • Review the changes carefully
  • Contact us if you have questions
  • Withdraw consent if you disagree with changes
  • Close your account if necessary

12. CONTACT INFORMATION

12.1 General Data Protection Queries

Email: support@premierwincompetitions.co.uk Subject Line: Include "GDPR" for faster processing

12.2 Data Protection Officer

Email: support@premierwincompetitions.co.uk Response Time: 5 business days for general queries

12.3 Urgent Data Protection Issues

Email: support@premierwincompetitions.co.uk Phone: 0330 311 2936 Available: 24/7 for security-related issues

12.4 Postal Address

PremierWin Competitions Limited

PremierWin Competitions Ltd, Riddicks Sports Bar, 22a Fowler Street, South Shields Tyne And Wear, United Kingdom

NE33 1NA

13. ADDITIONAL RESOURCES

13.1 Related Policies

  • Privacy Policy: Comprehensive data protection information
  • Cookie Policy: Detailed cookie and tracking information
  • Terms & Conditions: Platform usage terms
  • Responsible Gaming Policy: Player protection measures

13.2 External Resources

  • ICO Website: ico.org.uk - UK data protection guidance
  • Your Data Matters: yourdatamatters.org - Consumer data rights information
  • European Data Protection Board: edpb.europa.eu - EU-wide guidance

13.3 Training and Awareness

We provide:

  • Staff training on GDPR compliance
  • Regular updates on data protection law
  • Customer education about data rights
  • Clear privacy notices and consent mechanisms

This GDPR Policy demonstrates our commitment to transparency, accountability, and respect for your fundamental right to data protection.

For immediate assistance with any GDPR-related matter, please contact our Data Protection Officer at support@premierwincompetitions.co.uk

© 2025 PremierWin Competitions Limited. All rights reserved.