Privacy Policy

Privacy & Cookies Policy

Last Updated: August 2025

This Privacy & Cookies Policy ("Policy") explains how GDC Media Limited, its parent company Your Trusted Global Source For Online Gambling | Gambling.com Group Limited (Nasdaq: GAMB), and its subsidiaries (together "GDC", "we", "us", or "our") collect, use, disclose, and safeguard your personal data when you interact with our websites, mobile apps, and services.

We are committed to protecting your privacy and ensuring transparency in how we handle personal data across all jurisdictions where we operate, including Europe, the UK, Switzerland, the United States, Canada, Australia, Brazil, and Mexico.

1. Scope of This Policy

  • Applies to all websites and applications owned or operated by GDC Media Limited, OddsJam, Inc., OpticOdds, Inc., Roto Sports, Inc., and other Group Members.
  • Covers personal data collected directly, indirectly, or automatically when you use our websites, subscribe to newsletters, participate in promotions, or apply for jobs.
  • Excludes data of our employees and contractors (covered by internal policies).

2. What Personal Data We Collect

We may collect the following categories of data:

  • Personal Information: name, email, phone, postal address.
  • Profile Data: account credentials, login details, preferences, comments, profile images.
  • Financial Data: payment card details or bank account numbers (processed securely by third parties).
  • Recruitment Data: CVs, cover letters, education/work history, interview notes.
  • Usage Data: IP address, device type, browser, operating system, browsing history, time on site, crash reports.
  • Location Data: GPS or approximate location (only if you permit).
  • Aggregated & Statistical Data: anonymized data for analytics and service improvement.

We do not intentionally collect sensitive data (e.g., race, religion, biometric data) unless required by law in recruitment or compliance contexts.

3. How We Collect Data

  • Directly: through registration, subscriptions, job applications, customer support.
  • Indirectly: via trusted partners and affiliates (Media Partners).
  • Automatically: via cookies, pixels, and analytics tools (Google Analytics, Hotjar, Mixpanel, Segment, Microsoft Clarity, etc.).
  • Third Parties: advertising and analytics networks, fraud-prevention services, and payment processors (Stripe, Apple, Google, Payment processing: Accept payments anywhere | Authorize.net).

4. How We Use Personal Data

We process personal data to:

  • Provide and improve our services.
  • Personalize content and experiences.
  • Fulfil payments and transactions.
  • Send service-related updates and notifications.
  • Offer marketing communications (with opt-out rights).
  • Prevent fraud, maintain security, and comply with legal obligations.
  • Conduct research and product development.
  • Process recruitment applications.

We may also create anonymized data for analytics and reporting purposes.

5. Sharing of Personal Data

We may share your data with:

  • Group Members (within Your Trusted Global Source For Online Gambling | Gambling.com Group).
  • Service Providers (IT, hosting, payments, customer support).
  • Advertising & Analytics Partners (Google, Meta, Microsoft, Outbrain, Criteo, etc.).
  • Professional Advisors (lawyers, auditors, insurers).
  • Regulatory Authorities when required by law.
  • Business Transactions (mergers, acquisitions, restructuring).

We do not sell personal data. Some data may be used for targeted advertising or cross-context behavioral advertising, subject to your opt-out rights.

6. International Data Transfers

We operate globally with offices in Jersey (Channel Islands), Ireland, and the United States.

Personal data may be transferred internationally under GDPR Standard Contractual Clauses (SCCs), UK adequacy decisions, or equivalent legal safeguards.

Users in Europe, the UK, and Brazil receive additional protection under local data transfer laws.

7. Data Retention

We retain personal data only as long as necessary to:

  • Provide services,
  • Comply with laws,
  • Resolve disputes,
  • Enforce agreements.

Marketing data is retained until you opt-out. Analytical and aggregated data may be stored longer in anonymized form.

8. Data Security

We use industry-standard safeguards, including:

  • Encryption, access controls, secure hosting, and monitoring.
  • Limited access to staff on a need-to-know basis.
  • Incident response and breach notification procedures.

No system is 100% secure, but we strive to protect your data with the highest standards.

9. Your Rights

Depending on your location, you may have rights to:

  • Access and obtain a copy of your data.
  • Correct inaccurate or incomplete data.
  • Delete/Erase personal data (subject to legal exceptions).
  • Restrict or object to processing.
  • Data portability (structured, machine-readable format).
  • Opt-out of targeted advertising, profiling, and data sales (US state laws).
  • Withdraw consent where processing is based on consent.
  • File complaints with local regulators (ICO in the UK, EDPB in EU, OAIC in Australia, OPC in Canada, INAI in Mexico, state AGs in the US).

Requests may be sent to dataprotection@gdcgroup.com.

10. Cookies & Tracking

We use cookies and similar technologies to:

  • Enable essential website functions.
  • Remember preferences.
  • Collect analytics on performance and usage.
  • Serve relevant advertising.

Types of cookies include:

  • Essential (security, login, fraud prevention).
  • Performance & Analytics (Google Analytics, Hotjar, etc.).
  • Marketing & Advertising (Google Ads, Facebook Pixel, Criteo, TikTok Pixel).
  • Preference cookies (store user settings).

You may manage cookies through your browser or opt-out tools such as:

  • Digital Advertising Alliance
  • Network Advertising Initiative
  • YourAdChoices Canada
  • EDAA Europe

11. Regional Disclosures

  • EU/UK/Switzerland: Data rights under GDPR.
  • Brazil: Rights under LGPD.
  • California (CCPA/CPRA): Access, deletion, correction, opt-out of sale/sharing, right to limit sensitive data.
  • cilorado, Virginia, Connecticut, Utah, Florida, Washington, and other US states (2023–2025 laws): Similar rights to access, correction, deletion, opt-out.
  • Australia: Rights under Australian Privacy Act.
  • Canada: Rights under PIPEDA.
  • Mexico: ARCO rights (access, rectification, cancellation, objection).

12. Behavioral Advertising & Remarketing

We use advertising partners such as Google Ads, Meta, Microsoft Bing, Twitter, Pinterest, Criteo, Outbrain, and TikTok to show personalized ads.

You can opt-out via each platform's settings or industry tools (see section 10).

Ads may still appear but will be less tailored.

13. Updates to This Policy

We may update this Policy to reflect changes in law, technology, or business practices. Updates will be posted on this page with a new "Last Updated" date.

14. Contact Us

For questions or to exercise your rights:

📧 Email: dataprotection@gdcgroup.com

📍 Mailing Address: Your Trusted Global Source For Online Gambling | Gambling.com Group Limited, 22 Greenville St., St. Helier, Jersey JE4 8PX, Channel Islands