Contents

• Privacy policy
• 1.
  General
• 2.
  Financial requirements
• 3.
  Protection of children and other vulnerable persons
• 4.
  ‘Fair and open’ provisions
• 5.
  Marketing
• 6.
  Complaints and disputes
• 7.
  Gambling licensees’ staff
• 8.
  Information requirements
• 9.
  Gaming machines in gambling premises
• 10.
  Assessing local risk
• What is personal data and special category data?
• What personal data do we collect, for what purpose, and what is the basis for doing so?
• Licence applicants and National Lottery vetting
• People who already hold an operating and or personal licence
• People we are investigating/regulatory action
• Complainant data
• Gambling Commission Consultations
• What are cookies?
• Our use of cookies
• How we use information website and digital service users provide us with
• User research
• Links to other websites
• How long we keep the information
• Keeping your personal information secure
• Obtaining data from third parties
• Who we share personal data with
• Your rights
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to object processing
• Law enforcement processing
• Accessing your personal data
• Overseas transfers
• Changes to this privacy statement
• Stakeholder events privacy notice
• How to contact us
• Recruitment privacy notice 2024
• Monitoring social media
• How to complain privacy policy
• Do you need any extra help?
• Regular Feed of Operator Core Data (ROCD) (Pilot Project)

Obtaining data from third parties

In accordance with our statutory functions and powers, we will obtain data from third parties in the following ways (and for the following reasons):

• in order to confirm information supplied to us in the licensing application process and/or for the purposes of suitability assessments. This may include data organisations such as CreditSafe and Experian, as well as public registers, and information from other regulatory bodies. As part of our applications process, we include an authorisation for release of information – which confirms (for the purposes of the third parties we approach) applicants’ agreement to the supply of information from governmental and public bodies, financial institutions, and so on. To the extent the relevant information requested and/or supplied by these third parties constitutes personal data, we do not rely on consent as the lawful basis for processing the same. As explained above, this processing will be for the purposes of exercising our official authority and statutory functions as regulator of the gambling industry.
• from operators, either at our request or when they are required to report information to us (such as in order to meet a LCCP requirement). Obtaining such data from operators is for the purposes of our exercise of our functions, particularly in the context of seeking to achieving our regulatory objects under the Gambling Act. This may include information about problem gamblers, for example
• from complainants, members of the public, other regulatory bodies, witnesses and experts about persons who may be relevant to a regulatory investigation
• data provided by licence applicants identifying people relevant to the application who are not the applicants themselves (for example, funders).

In each case, the information is important to the exercise of our regulatory functions; and, we will not generally notify the relevant individuals when such data is received from third parties. In certain circumstances, particularly where there is a possibility of criminal activity being identified and actioned, notification could obviously hinder this process. In other cases, the information is necessary (and failure to provide it could lead, for example, to a refused application or even an offence being committed under the Gambling Act) and/or notifying individuals would involve disproportionate effort.

Previous page
Keeping your personal information secure Next page
Who we share personal data with