GDPR Compliance
Learn about your data protection rights under the General Data Protection Regulation (GDPR). Understand how we process your personal data and how you can exercise your privacy rights.
Table of Contents
1. GDPR Overview
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It gives individuals in the European Union (EU) enhanced rights and protections regarding their personal data.
At Bankrolls, we are committed to protecting your privacy and ensuring compliance with GDPR requirements. This page explains your rights under GDPR and how we handle your personal data in our casino affiliate management platform.
Who Does GDPR Apply To?
GDPR applies to all individuals in the EU, regardless of their nationality. If you're located in the EU when using our services, these rights apply to you.
2. Your Data Protection Rights
Under GDPR, you have the following rights regarding your personal data:
Right of Access
You have the right to obtain confirmation that we process your personal data and, if so, to access that data along with specific information about the processing.
What you can request
- • Copy of your personal data
- • Processing purposes and legal basis
- • Data retention periods
- • Third-party recipients
Right to Rectification
You have the right to request correction of inaccurate personal data and to have incomplete personal data completed.
When you can use this right
- • Personal details are incorrect
- • Account information is outdated
- • Profile data is incomplete
- • Contact information has changed
Right to Erasure
Also known as the 'right to be forgotten,' you can request deletion of your personal data under certain circumstances.
When erasure applies
- • Data no longer necessary for original purpose
- • You withdraw consent
- • Data processed unlawfully
- • Legal obligation requires deletion
Right to Restrict Processing
You can request that we limit the processing of your personal data under specific circumstances.
When restriction applies
- • You contest the accuracy of data
- • Processing is unlawful
- • We no longer need the data
- • You've objected to processing
Right to Data Portability
You can request to receive your personal data in a structured, commonly used, and machine-readable format.
Includes data
- • Account and profile information
- • Transaction history
- • Communication records
- • Preference settings
Right to Object
You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Objection grounds
- • Direct marketing communications
- • Profiling for marketing
- • Legitimate interest processing
- • Research and statistics
Free of Charge
Exercising your GDPR rights is free of charge. We may only charge a reasonable fee for manifestly unfounded or excessive requests, particularly repetitive ones.
3. Legal Basis for Data Processing
Under GDPR, we must have a lawful basis to process your personal data. We rely on the following legal bases:
Contract Performance
Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Examples
- • Account creation and management
- • Affiliate program administration
- • Commission calculations and payments
- • Customer support services
Legal Obligation
Processing necessary for compliance with a legal obligation to which we are subject.
Examples
- • Know Your Customer (KYC) verification
- • Anti-money laundering (AML) compliance
- • Tax reporting and record keeping
- • Regulatory reporting requirements
Legitimate Interests
Processing necessary for the purposes of legitimate interests pursued by us, except where overridden by your interests or rights.
Examples
- • Fraud prevention and security
- • Platform improvement and analytics
- • Business development and marketing
- • Network and information security
Consent
Processing based on your freely given, specific, informed, and unambiguous consent.
Examples
- • Marketing communications and newsletters
- • Non-essential cookies and tracking
- • Optional features and services
- • Research and survey participation
4. Categories of Personal Data
We process the following categories of personal data:
| Data Category | Types of Data | Purpose | Legal Basis |
|---|---|---|---|
| Identity Data |
| Account creation, identity verification, and compliance | Contract, Legal Obligation |
| Financial Data |
| Payment processing, commission calculations, and tax reporting | Contract, Legal Obligation |
| Technical Data |
| Platform security, user experience, and analytics | Legitimate Interests, Consent |
| Usage Data |
| Service improvement, analytics, and performance tracking | Legitimate Interests |
| Marketing Data |
| Marketing communications and promotional activities | Consent |
5. Data Sources and Recipients
Sources of Personal Data
We collect personal data from the following sources:
Directly from You
Registration forms, account updates, support requests, surveys
Automatically Collected
Website usage, cookies, device information, platform interactions
Third Parties
Casino partners, payment processors, verification services, analytics providers
Recipients of Personal Data
We may share your data with the following categories of recipients:
Service Providers
Cloud hosting, payment processing, analytics, customer support
Casino Partners
Affiliate performance data, conversion tracking, commission calculations
Legal Authorities
Regulatory bodies, law enforcement, tax authorities (when required by law)
6. Data Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law:
Account Data
Transaction Data
Usage & Analytics
Communications
Important Note
These retention periods may be extended if required by law or if data is needed to establish, exercise, or defend legal claims. We will review and delete data when it's no longer needed for the original purpose.
7. International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place:
Additional Safeguards
We conduct Transfer Impact Assessments (TIAs) and implement additional technical and organizational measures where necessary to ensure adequate protection.
8. How to Exercise Your Rights
You can exercise your GDPR rights through the following methods:
Contact Methods
Data Request Form
Use our secure online form to submit any GDPR request
• Secure submission
• Tracked request
• Automated confirmation
Email Our DPO
Contact our Data Protection Officer directly
• Email: dpo@bankrolls.com
• Direct communication
• Personal assistance
Phone Support
Call our privacy helpline for assistance
• Phone: +1 (555) 123-4567
• Business hours support
• Immediate assistance
Request Process
Submit Request
Contact us using any of the methods above
Identity Verification
We verify your identity to protect your privacy
Request Processing
We process your request within 30 days
Response Delivery
We provide our response via your preferred method
Response Timeline
We will respond to your GDPR request within 30 days of receipt. For complex requests, this may be extended to 90 days with advance notification.
9. Data Protection Officer
We have appointed a Data Protection Officer (DPO) to oversee our data protection compliance and serve as your point of contact for privacy matters.
Contact Information
Data Protection Officer
Bankrolls Inc.
123 Main Street, Suite 100
San Francisco, CA 94105
United States
DPO Responsibilities
- Monitor GDPR compliance
- Conduct privacy impact assessments
- Serve as contact point for supervisory authorities
- Provide data protection advice and training
- Handle data subject requests and complaints
11. Submit a Data Request
Use the form below to exercise your GDPR rights. We will verify your identity and respond to your request within the required timeframe.
Privacy Notice
Your request data will be processed solely for the purpose of verifying your identity and responding to your GDPR request. Verification documents will be deleted after processing.