RULES ON PROCESSING PERSONAL DATA
DIGITAL REVOLUTION d.o.o. Niš (hereinafter: DIGITAL REVOLUTION d.o.o. or Data Controller, "KING.RS", "we", "us" or "our") processes your personal data (hereinafter: data) lawfully, fairly and transparently. With this information, we want to acquaint you in the simplest way possible with the purpose of processing and the type of your personal data we collect, as well as how we protect your rights and other information related to data processing.
At the beginning, you need to know that according to the Law on Personal Data Protection ("Official Gazette of RS", number 87/2018) (hereinafter: the Law), personal data represents any data relating to a natural person whose identity is determined or determinable, so that data, among other things, can be name, surname, address, identification number, as well as IP address, account number or fixed and/or mobile phone number. Below you can get more detailed information that you need to know before entrusting us with your data.
Section 1 - IDENTITY OF THE DATA CONTROLLER
DIGITAL REVOLUTION d.o.o.
Vojvode Tankosića St. 40/7
18105 Niš
Section 2 - CONTACT INFORMATION
For any questions related to this privacy policy, as well as for all questions concerning the processing of your personal data, or for exercising the rights prescribed by the Law, you can contact us in one of the following ways:
− Email address: [email protected] or [email protected].
− Headquarters address: DIGITAL REVOLUTION d.o.o. Niš (city), Vojvode Tankosića St. 40/7, 18105 Niš
Section 3 - PURPOSE OF PROCESSING AND LEGAL BASIS FOR PROCESSING, TYPES OF PERSONAL DATA PROCESSED
Purpose and legal basis for processing
The purpose and legal basis for processing your data depend on whether you establish a contractual relationship with DIGITAL REVOLUTION d.o.o. and they are processed only to the extent necessary to fulfill the purpose for which they are collected (e.g., for creating a user account and using the services provided by the site, whether you want to receive promotional material and offers/bonuses or informational access to the site). The legal basis for collecting and processing data may be prescribed by law (e.g., the Law on Games of Chance, the Law on Prevention of Money Laundering and Financing of Terrorism) or the collection and processing are carried out for the purpose of protecting the legitimate interests of DIGITAL REVOLUTION d.o.o. or a third party or based on your consent, as detailed below in this information.
(a) Creating a user account and using the services provided by the site
Processing your data is necessary for creating a user account and using the services provided by the KING.RS site. If you refuse to provide the data necessary for this purpose, you will not be able to create a user account and KING.RS will not be able to provide you with the requested service.
(b) Compliance with legally prescribed obligations of DIGITAL REVOLUTION d.o.o.
Your consent is not required for data processing that is necessary to comply with the legally prescribed obligations of DIGITAL REVOLUTION d.o.o. This processing is carried out, for example, for the purpose of applying regulations in the field of prevention of money laundering and financing of terrorism, games of chance, taxation, regulations on prevention of fraud in payment services or fulfilling the requirements of competent authorities (Games of Chance Administration, Administration for Prevention of Money Laundering).
(c) Needs of legitimate interest of DIGITAL REVOLUTION d.o.o. or third parties
In certain cases, DIGITAL REVOLUTION d.o.o. bases the processing of your data on the protection of legitimate interests, either its own or those of third parties, provided that these legitimate interests are stronger than your interests, rights and freedoms and do not harm them. DIGITAL REVOLUTION d.o.o. bases data processing on legitimate interest, for example, in the following situations:
− when the purpose of processing is to ensure the security of IT systems and business operations of DIGITAL REVOLUTION d.o.o., including the security of services offered to clients;
− when processing is carried out to prevent and investigate fraud and other criminal acts and abuses to the detriment of DIGITAL REVOLUTION d.o.o., other users and/or third parties;
− when the purpose of processing is to assess the risks that DIGITAL REVOLUTION d.o.o. is obliged to monitor;
− when processing is carried out for accounting purposes;
− when processing is necessary for initiating and conducting legal proceedings before state bodies to exercise the rights and interests of DIGITAL REVOLUTION d.o.o. or other persons.
Data processing can also be based on the realization of legitimate interests of DIGITAL REVOLUTION d.o.o. or a third party in other cases, if DIGITAL REVOLUTION d.o.o. proves that these interests do not outweigh the interests or fundamental rights and freedoms of the data subjects.
In these cases, your consent for data processing is not required, but you have the right to submit a request for exercising your rights at any time in the manner described in Section 7 of this information.
(d) Consent to data processing
Your consent to the processing of personal data gives DIGITAL REVOLUTION d.o.o. the right to send you commercial information and direct offers of its services, as well as to contact you for market research or satisfaction with services. Processing for these purposes is carried out so that DIGITAL REVOLUTION d.o.o. can further adapt the offer to your wishes and needs, inform you in a timely manner about new services and benefits, receive feedback on provided services, consider suggestions for improvements, include you in research and surveys it conducts and reward your loyalty by participating in prize games or awarding bonuses.
Withholding consent for processing for these purposes does not affect your use of services through the user account, the implementation of prescribed obligations, or processing based on the legitimate interest of DIGITAL REVOLUTION d.o.o. or a third party. You can revoke your given consent at any time by contacting DIGITAL REVOLUTION in the manner specified in Section 2 of this information.
Types of personal data processed
(A) Basic identification data
In order to establish a business relationship, we need your basic identification data, primarily for the implementation of legally prescribed obligations of DIGITAL REVOLUTION d.o.o. (e.g., according to the Law on Games of Chance, the Law on Prevention of Money Laundering and Financing of Terrorism). For this purpose, we collect and process data such as: name and surname, email address, date of birth, personal identification number (JMBG) and the like. A copy of your identification document is kept in accordance with regulations on the prevention of money laundering, but also for the protection of legitimate interests of DIGITAL REVOLUTION d.o.o. in relation to fraud prevention. Refusal to provide this data results in the rejection of your request to create a user account for using our site's services.
(B) Other types of data
DIGITAL REVOLUTION d.o.o. also processes your contact information necessary for mutual communication or investigation of possible abuses, which are: mailing address or fixed and/or mobile phone number. This data may be used for the purpose of fulfilling an obligation (e.g., delivery of prescribed or contracted notifications). If you communicate with the Contact Center of DIGITAL REVOLUTION d.o.o. by telephone, you need to know that telephone conversations are recorded, which we will warn you about at the beginning of the telephone conversation before recording begins, so you have the option to abandon the conversation. If you contact us via the internet, using the contact form on the website www.king.rs and expect feedback from us, we need your basic identification and contact information, such as: name and surname, address, fixed and/or mobile phone number, email address and the like. The data you give us in this way will not be visible to other users.
Below are also the data we collect and process depending on the service you intend to use, which are necessary for using the user account or payment account:
All information regarding the manner of play and funds in the user account -- For the purpose of preventing any fraud, money laundering or other similar illegal behavior, whereby we process your identification data listed under (A).
Type of bank card -- when paying with supported bank cards, we do not collect card data but only record executed and non-executed transactions by card type and payment amount.
Current account -- for the desired payout to be executed, the correct current account number is necessary, i.e., proof of ownership of the current account.
Method of collecting personal data
We collect your data directly from you.
Section 4 - CATEGORIES OF RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE DISCLOSED
In some cases, and in order to achieve the purpose of processing, DIGITAL REVOLUTION d.o.o. discloses your data to the following categories of recipients:
- third parties who process your personal data within:
− banking and financial services and payment system services, tax administrations and treasuries;
− provision and management of procedures and IT systems;
- competent authorities and organizations (Games of Chance Administration, Administration for Prevention of Money Laundering, judicial authorities);
Persons to whom your personal data are disclosed may act as: (1) independent data controllers, i.e., entities that independently determine the purpose and manner of processing personal data or (2) data processors, i.e., entities that process personal data on behalf of DIGITAL REVOLUTION d.o.o. as the controller. These persons are obliged to apply security and protection measures when processing your personal data at a level that ensures DIGITAL REVOLUTION d.o.o.
Section 5 - TRANSFER OF PERSONAL DATA TO ANOTHER COUNTRY
DIGITAL REVOLUTION d.o.o. processes your personal data in the Republic of Serbia, and exceptionally transfers personal data to another country without prior approval if it is determined that the other country ensures an adequate level of protection of personal data. It is considered that an adequate level of protection is provided in countries: (a) that are members of the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data or (b) for which the European Commission has determined that they provide an adequate level of protection or (c) with which an international agreement on the transfer of personal data has been concluded.
The transfer of your data to a country that does not meet these conditions will be carried out only with your explicit consent and if other conditions prescribed by Article 69 of the Law are met.
Section 6 - METHOD OF PROCESSING AND PERIOD OF RETENTION OF PERSONAL DATA
Your personal data will be processed manually and electronically, in a manner that ensures security and confidentiality. Processing for certain purposes is automated. Data processed in accordance with the Law on Prevention of Money Laundering and Financing of Terrorism are kept for 10 years, counting from the end of business cooperation with you as a user of our site. Other data are kept until the moment of cessation of the purpose of processing for which they were collected, unless they are necessary for the realization of our prescribed obligations or legitimate interests.
To protect your personal data, we take reasonable precautions and follow industry best practices to ensure that they are not inappropriately lost, misused, accessed, disclosed, altered or destroyed. We store all personal data we receive directly from you in an encrypted, password-protected database located within our secure network behind state-of-the-art active software.
Section 7 - RIGHTS OF DATA SUBJECTS
In order to protect your rights as a data subject, you can contact us at any time in one of the ways listed in Section 2 of this information. Communication and measures taken by DIGITAL REVOLUTION d.o.o. regarding the exercise of your rights are free of charge. However, for your unfounded or excessive requests, especially if they are repeatedly repeated, DIGITAL REVOLUTION d.o.o. may charge you a fee in the amount of administrative costs it incurs or may not act on your request. As a person whose data DIGITAL REVOLUTION d.o.o. has collected and processes, you have the right to the following:
7.1. Right of access
The right of access means that you can obtain information from DIGITAL REVOLUTION d.o.o. about whether your personal data are being processed and, if so, permission to access your personal data and obtain information such as: purpose of processing, types of personal data, recipients of data, retention period, etc. When personal data are transferred to another country, you have the right to be informed about the protection measures related to the transfer, as stated in Section 5 of this information. DIGITAL REVOLUTION d.o.o. will provide you with a copy of the personal data being processed upon request. For additional requests, DIGITAL REVOLUTION d.o.o. may charge a reasonable fee for administrative costs. If you submit the request electronically and unless otherwise requested, DIGITAL REVOLUTION d.o.o. will provide you with the information in electronic form.
7.2. Right to rectification of data
DIGITAL REVOLUTION d.o.o. will, at your request, correct your personal data that are inaccurate or complete incomplete data.
7.3. Right to erasure of data
DIGITAL REVOLUTION d.o.o. will, at your request, delete your personal data if the conditions from Article 30 of the Law are met (e.g., if the purpose for which they were collected has been fulfilled, if consent for processing has been withdrawn, and there is no legal basis for processing). DIGITAL REVOLUTION d.o.o. cannot delete your personal data: if their processing is prescribed by law or if processing is mandatory for reasons of public interest protection (e.g., acting on the order of a state body) or is necessary for initiating, submitting or defending a legal claim (e.g., filing a lawsuit, conducting court or administrative proceedings, etc.).
7.4. Right to restriction of processing
DIGITAL REVOLUTION d.o.o. will, at your request, restrict the processing of your personal data if one of the conditions from Article 31 of the Law is met (e.g., if you have reasonably disputed the accuracy of your personal data or the lawfulness of processing, etc.).
7.5. Right to data portability
DIGITAL REVOLUTION d.o.o. will, at your request, provide you with personal data in a structured, commonly used and machine-readable format (e.g., on a computer) and allow you to transfer them to another controller without hindrance from DIGITAL REVOLUTION if all of the following conditions are met: (a) the processing is based on consent or is necessary for the performance of a contract, (b) the processing is carried out by automated means, and (c) the transfer does not adversely affect the exercise of the rights and freedoms of others.
This right also includes the possibility to request that DIGITAL REVOLUTION d.o.o. directly transfer personal data to another controller if it is technically feasible.
7.6. Right to object
At any time, you can submit an objection to DIGITAL REVOLUTION d.o.o. regarding the processing of personal data based on legitimate interest or that is necessary for the performance of tasks in the public interest or the exercise of legally prescribed powers of DIGITAL REVOLUTION d.o.o., after which DIGITAL REVOLUTION d.o.o. will suspend further processing of such data, unless there is a legitimate basis for processing that overrides your interests or freedoms or if the processing is carried out for the purpose of initiating, submitting or defending against a legal claim (e.g., filing a lawsuit, counterclaim, etc.).
You can also submit an objection at any time to the processing of your data for direct marketing purposes, including profiling related to direct marketing. In this case, DIGITAL REVOLUTION d.o.o. will cease processing for direct marketing purposes.
We have a deadline of 30 days to respond to your request, with the possibility of extending this period for another 60 days if necessary, taking into account the complexity and number of requests.
7.7. Right to contest a decision made in an automated decision-making process, including profiling
If you believe that your rights have been violated by a decision made in an automated decision-making process, you have the right to object and request that the decision be reviewed with the participation of DIGITAL REVOLUTION d.o.o.
7.8. Right to complaint to the Commissioner for Personal Data Protection and right to administrative and judicial protection
If you believe that the processing of your personal data is carried out contrary to the provisions of the Law or other applicable regulations, you can file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection. If you are not satisfied with the Commissioner's decision, you can initiate an administrative dispute against it by filing a lawsuit within 30 days of receiving the decision. Filing a lawsuit in an administrative dispute does not affect the right to initiate other administrative or judicial protection proceedings.
Section 8 - CHANGES TO THIS POLICY
We reserve the right to change this Privacy Policy at any time, so please revisit this page frequently. We will notify you of significant changes to this Privacy Policy and send you a notification or email regarding such changes. Otherwise, all other changes to this Privacy Policy take effect from the stated "Last Update" date, and your continued use of the Services after the last revision date constitutes acceptance and agreement to those changes.
Section 9 - COOKIE POLICY
9.1. Cookies are text files containing a small amount of information that are downloaded to your device when you visit a website. They are typically used by most websites to improve your online experience and to ensure that content and functions are delivered and used more efficiently.
9.2. Cookies perform different functions. For example, some cookies are session cookies, which are temporarily downloaded to your device during the period while you browse a particular website; these cookies may allow you to navigate between pages more efficiently or allow websites to remember preferred settings. Other cookies are persistent cookies, which can be used to help websites remember you as a returning visitor or to ensure that online ads you receive are more relevant to your specific needs and interests.
9.3. The primary use of cookies on our website, either directly by us or our chosen partner, is to: enable you to save time and facilitate future access to the site; identify how people move through our website to improve our service, content and efficiency of our communication; collect and share device data to detect and prevent device-associated fraud and money laundering; identify account and device irregularities and detect and prevent fraudulent transactions and abuse of our user accounts and our services.
9.4. You agree that KING.rs may, from time to time, place cookies on your device to store information (such as username, other personal data, email address, technical information about the device such as model and its IP address) to facilitate the use of functionalities and services on our website and enable your browser to identify you as a user. This allows you to avoid having to re-enter this information each time you visit the KING.rs site. These cookies cannot be used to run programs or deliver viruses to your computer and are uniquely assigned to you. These cookies can only be read by the web server(s) that placed the cookies on your device.
9.5. At any time, you can modify your browser settings to block some or all cookies from KING.rs. However, if you block cookies from KING.rs, some or all features of the website may not function as intended. For example, you may not be able to place a bet.