Privacy Policy

STANLEYBET GROUP PRIVACY POLICY

Version: 4.0

Last updated: June 2026

Introduction

This privacy notice explains how Stanleybet (’we’, ’us’) uses and protects any information that you give us. We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified, then you can be assured that it will only be used in accordance with this privacy notice.

Who this privacy notice is for

This notice applies to you if we process your personal information and you are:

For example, you may be an individual that is:

an individual that works at a supplier or another organisation that we deal with;
you are interested in becoming part of our network of franchised shops (CTDs);
a job applicant
a visitor to one of our offices or websites;
named by one of our employees as an emergency contact, next of kin or beneficiary
someone who is otherwise affected by our activities.

If you use our retail/land-based or online betting products or services, kindly refer to the applicable privacy notices elsewhere on our website, as we have made available specific notices for you. If you are an employee, kindly refer to our Employee Privacy Notice.

About Stanleybet

We are made up of different legal entities in the Stanleybet group of companies. The ultimate parent company is Stanleybet Holdings Limited (registered in England & Wales with company number 06076739). Other entities in the Stanleybet group, located in various countries in the UK and the EU provide the particular services described below.

Stanleybet Belgium N.V., registered in Belgium with company number BE 0480.316.383 (Retail and online gaming operator in Belgium).
Stanleybet Malta Limited, registered in Malta with company number C.25866, (Retail gaming operator in Italy).
Magellan Robotech Limited, registered in England & Wales with company number 03357517 (IT solutions and services operating from the UK).
Stanleybet Services Limited, registered in England & Wales with company number 09061264 (Support services provider operating from the UK).
Stanleybet Compliance Services Limited, registered in Alderney with company number 1977 (Compliance services provider operating from the Bailiwick of Guernsey).
RSC Servicii Suport Srl, registered in Romania with company number RO29117794 (Helpdesk and support services provider operating from Romania).
Total Gaming Solutions (TGS), registered in Malta with company number C80548 (online gaming operator).

Who is the data controller?

A ‘controller’ is the entity that decides what personal information to collect from you and what purpose it is used for.

When we mention ‘Stanleybet’ or ‘we’, ’us’ we are referring to the relevant company in the Stanleybet group responsible for processing your personal data and therefore acting as ‘controller’. Who that is, will depend on the type of interaction you have with us. For example, if you are a visitor to this website and you are based in the UK, then your controller will be Stanleybet Services. If you work for one of Magellan’s suppliers, your controller will be Magellan Robotech.

This privacy notice applies to each of the above Stanleybet companies that acts as controller. Each company incorporates any specific privacy standards local to the country in which it is incorporated and/or operates.

Data Protection Officer

We have appointed a Data Protection Officer to oversee our compliance with data protection laws. Contact details are set out in the “Contacting us” section at the end of this privacy notice.

What personal data do we collect?

The personal data we collect from you will vary depending on your interaction with us. It may include the following:

Contact details: information that allows us to identify and contact you directly such as your name, address email address, telephone number and addresses.
Identification information (for potential new shops): passport and other official identification details, information from a third-party money laundering check provider, other unique identifier (for example, a fiscal code or national insurance number), membership of relevant schemes.
Financial information (for potential new shops): bank account details including sort code.
Responses to surveys, competitions and promotions: we keep records of any surveys you respond to or your entry into any competition or promotion we run.
How you use our website: we collect information about the pages you look at and how you use them.
Details of your interactions with us: for example, any information you disclose to us. This includes via communication you have with us and may in some cases include audio recording of telephone conversations.
Subscription information: for example, if you subscribe to one of our blogs, newsletters or other materials or services.
Creditworthiness: We may undertake investigations into your creditworthiness in order to establish whether to enter into or continue a business relationship with you or the organisation you work for.
IP address information: your computer’s IP address allows us to track your usage of our websites.
Videos, photographs and audio recordings: which you or other people take and provide to us or we take ourselves (for example, if you visit one of our offices).
CCTV images: if you visit any of our office premises covered by our CCTV system.
Details of your work history (if you are a job applicant): this may include positions, roles, responsibilities, professional qualifications, provided by you via a CV or similar document, submitted when you apply for a job with us.

Special categories of personal data

We do not generally collect the more sensitive types of “special categories” of more sensitive personal data. However, we may collect the following:

Information collected incidentally if we process an image or video of you (e.g. on our office CCTV system) which may reveal information about your race, ethnicity or religious beliefs.
Information that you choose to disclose to us (for example, if you are a job applicant and choose to disclose information about your health).
Information about you that has been provided by one of our employees which may reveal information about your sexual orientation (for example, if an employee lists you as a next of kin/emergency contact or beneficiary and chooses to disclose the nature of your relationship).

We do not generally collect, store and use the following more sensitive types of personal information such as:

Information about political opinions;
Trade union membership; or
Genetic information and biometric data.

Whilst we may not collect all of the above types of special category information about you, in relation to the special category personal data that we do process, we do so on the basis that:

the processing is necessary for reasons of substantial public interest, on a lawful basis;
it is necessary for the establishment, exercise or defence of legal claims;
it is necessary for the purposes of carrying out the obligations and exercising our or your rights in the field of employment and social security and social protection law; or
based on your explicit consent.

Criminal records data

We do not generally collect criminal records information about you. However, we may collect it if:

you willingly choose to disclose this information to us during the recruitment process.
you work for one of our suppliers and are a person with powers of control, representation and/or decision-making within that organisation and have any convictions relating to specific offences, for example, fraud, money-laundering and/or terrorist financing. We request this information as part of our due diligence process, to ensure we operate ethically and engage with suitable suppliers, and to ensure we meet our legal obligations relating to these types of crime.

Closed-Circuit television (CCTV) cameras

Some of our offices operate CCTV cameras and will collect footage of you if you visit their premises. Please refer to our specific CCTV Privacy Notice for full details.

We do not have access to any CCTV cameras that may be operated by CTDs or franchises, and are not the controller of this information. Please ask these companies for sight of their CCTV policies, to understand how they process your personal information.

When we collect your information

We will collect personal information from a number of sources. These may include the following:

Directly from you: when you apply for a job with us, indicate that you may wish to attend an event, complete forms we provide to you, visit our websites, enter our competitions and promotions, make a complaint, email or communicate with us in some other way.
From your next of kin, family member or friend: where they work for us and have identified you as their emergency contact, next of kin or beneficiary.
From referrals and recommendations: usually given by other people who know you or have a working relationship with you or where you are a job applicant.
Providers of information: which may include LinkedIn and other web platforms, for example where you apply for a job with us or attend one of our events.
Our websites: provide us with information about how you use them and the devices that you use to connect to our websites.
Your employer or the organisation you work for: they may provide us with your name, position, contact details and background information about you.
Other companies in the Stanleybet Group: for the purpose of providing services to you or obtaining them from you.
Our professional advisors: such as lawyers, accountants, financial advisors, consultants and other advisors.
Your professional advisors: such as lawyers, accountants, financial advisors, consultants and other advisors.
The Government, local authorities or relevant regulators: to assist with investigations, for example the Information Commissioner’s Office or HMRC.

If you are providing information regarding other individuals to us (e.g. your referees, where you are a job applicant), it is your responsibility to ensure that you have the right to provide the information to us. They have a right to know and to be aware of what personal information we hold about them, how we collect it and how we use and may share that information. Please share this privacy notice with them. They also have the same rights as set out in the “Your rights in relation to personal information” section below.

What we use your personal information for

The table below describes the main purposes for which we process your personal information, the categories of your information involved and our lawful basis for being able to do this. Which will apply will depend upon the nature of your relationship and interactions with us.

Purpose	Personal information used	Lawful basis
Carrying out any relevant checks and verifications	Contact details and payment information	We may have a legal obligation to undertake identification We also have a legitimate interest in knowing your identity and carrying out money laundering checks and ensuring that we are likely to be paid
Recruitment, including assessing qualifications for a particular job including decisions about your fitness to work, education, training and development requirements	All the personal information we receive in the course of your application excluding ‘special categories’ of personal information and criminal records information	We may be legally obliged to do so To be able to manage and perform our contract with you We have a legitimate interest in recruiting for our business
Recruitment, including making a decision about your appointment, managing the appointment process and determining the terms on which you work for us	All the personal information we collect for the purposes of appointing you excluding ‘special categories’ of personal information and any criminal records information	We have a legitimate interest to be able to perform and administer the appointment process for us to consider engaging you This is necessary to enter into a contract with you. We may have a legal obligation to do so
Where you are a potential customer, franchisee or supplier, or other third party, entering into and performing contracts	All the personal information we collect	To enter into and perform contracts either with you or the organisation that you represent We have a legitimate interest to perform contracts with you and third parties
If we have received your personal information as a result of you being identified as an emergency contact, next of kin or beneficiary of an employee, worker or contractor of ours, to manage our relationship with that worker, employee or contractor and to contact you in the circumstances required	Contact details	To perform contracts with the person that gave us your information. We have a legitimate interest to perform contracts with that person
Deal with your queries or complaints, claims, legal disputes or raise queries, claims, legal disputes or complaints with you or the organisation you work for	All the personal information we collect	This may be necessary to perform a contract with you or the organisation that you represent We have a legitimate interest to improve the services and/or products we provide To defend, bring or establish legal claims
Maintain and improve our services and/or products	All the personal information we collect	We have a legitimate interest to improve the services and/or products we provide
Security of our IT systems	All the personal information we collect	We have a legitimate interest in ensuring the security of our IT systems
Staff training	All the personal information we collect	We have a legitimate interest to improve the services we provide
Direct marketing (where you have consented/opted-in to direct marketing)	Contact details and services and products that we have determined may be of interest to you or your organisation and/or which you or your organisation has purchased in the past	We may ask for your consent to process your data for this purpose, you may revoke your consent at any point. Alternatively if you or your organisation has purchased similar services from us previously, we may market similar services as a legitimate interest in developing our business. You have the right to opt out from such marketing at any time
Holding events or attending industry-wide/similar events (such as Enada, ICE, etc)	Your contact details, details of attendance, your comments in response forms, any applicable images, video and audio recordings	We have a legitimate interest in holding events and tracking attendance We may also have a legal obligation to comply with health and safety requirements
To comply with our legal and regulatory obligations	All the personal information we collect	To comply with any legal and regulatory obligations or requirements
To manage our relationship with you or the organisation you work for and to operate and manage our business and internal reporting	All the personal information we collect	We have a legitimate interest to operate our business in an efficient way and to expand our business To enter into and perform contracts either with you or the organisation you represent
Storage of records relating to you and also records relating to our business	All the personal information we collect	To be able to manage and fulfil any contract with you, we may have a legal obligation to do so and we also have a legitimate interest to keep proper records
‘Special categories’ of Personal Information or criminal records data
Making a decision about your appointment and managing the appointment process and determining the terms on which you work for us We will process any information about criminal convictions which you have provided to us to comply with law and to determine your eligibility to undertake particular types of work	Information about your criminal convictions and offences	We process special category personal data on the basis of the “special category reasons for processing of your personal data” referred to above We have a legitimate interest to vet prospective employees and suppliers to ensure they are suitable for the proposed role and to ensure the safety and security of our customers and staff It is necessary to enter into a contract with you (completion of supplier questionnaire) We may have a legal obligation to do so We may have your explicit consent/you may have chosen to disclose
Storage of records relating to you and also records relating to our business	All ‘special categories’ of personal information and criminal records data	We process special category personal data on the basis of the “special category reasons for processing of your personal data” referred to above For criminal records information we process it on the basis of legal obligations, based on your explicit consent and/or because we have a legitimate interest in managing our business

You may have a legal, contractual or other requirement or obligation to provide us with some of your personal information. If you do not provide us with the requested personal information we may not be able to properly perform our contract with you or the organisation you represent or comply with legal obligations, and we may have to terminate our relationship. For other personal information you may not be under an obligation to provide it to us, but if you do not provide it then we may not be able to properly perform our arrangements with you or the organisation you represent.

Where you have given us your consent to use your personal information in a particular manner, you have the right to withdraw this consent at any time, which you may do by contacting us as described in the “Contacting us” section below. We will generally only ask for your consent for direct marketing.

Please note however that the withdrawal of your consent will not affect any use of the data made before you withdrew your consent, and we may still be entitled to hold and process the relevant personal information to the extent that we are entitled to do so on bases other than your consent. Withdrawing consent may also have the same effect as not providing the information in the first place, for example we may no longer be able to carry out certain activities.

We may anonymise and aggregate any of the personal information we hold (so that it does not directly identify you). We may use anonymised and aggregated information for purposes that include testing our IT systems, research, data analysis, improving our site and developing new services.

Direct marketing

Email, post and SMS marketing: if you have chosen to receive marketing messages from us, then we may from time to time, contact you by email, post or SMS with information about services we believe you may be interested in.

We will only send marketing messages to you in accordance with the marketing preferences you set when you consent to receive such messages, or otherwise in accordance with applicable law.

You can let us know at any time that you do not wish to receive marketing messages by sending an email to us at privacy@stanleybet.com or by using by using the details set out in the “Contacting us” section below. You can also unsubscribe from our marketing by clicking on the unsubscribe link in any marketing messages we send to you.

Use of automated processing

We do not use any form of automated means when processing your personal data. This includes any type of artificial intelligence, machine learning or profiling.

Should that change, we will update this privacy notice and notify you without undue delay.

Who we share your personal data with

Where appropriate, we may share personal information with the following parties:

Organisations in the same group as us: for example, in relation to joint events or joint work.
Other companies in our supply chain: so that they can contact you about any issues in the supply chain or where your personal information is relevant to a subcontractor or party above us in the supply chain.
Other service providers and advisors to us: including companies that support our IT, help us analyse the data we hold, process payments, send communications to our customers, provide our employees, workers and contractors with benefits, provide us with legal, property or financial advice and generally help us deliver our services to you or the organisation that you represent or for us to purchase them from you or the organisation you represent. These services will only be carried out under contract which will contain our instructions and expectations in respect of how your data will be protected and processed.
Other franchisees or CTDS: where this is necessary in order to collaborate for the purpose of furthering our and your business.
Information providers: which may include credit reference agencies, money laundering check provider, Companies House, the Land Registry.
Third parties who ask for or want referrals: we may provide your details to a third party who is seeking services/products which are the same or similar to those that you provide.
Marketing and public relations companies: to help us to develop, carry out and assess marketing and PR campaigns.
Purchasers of our business: buyers or perspective buyers to whom we sell or negotiate to sell our business.
The Government, local authorities, planning authorities or relevant regulators: where we are required to do so by law or to assist with their investigations.
Police, law enforcement agencies and security services: where we are required to do so by law, to assist with the investigation and prevention of crime and the protection of national security.

We also use Google Analytics which sets cookies to collect information about how visitors use our websites. We use the information to compile reports and to help us improve the websites. The cookies collect information in an anonymous form, including the number of visitors to the websites , where visitors have come to the websites from and the pages they visited. To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.

We may provide third parties with aggregate statistical information and analytics about users of our products and services, but we will make sure no one can be identified from this information before we disclose it.

We do not disclose personal information to anyone else except as set out above unless we have your consent, or we are legally obliged to do so. We do not sell, rent or trade your data.

Transferring your personal data internationally

The personal information we collect is not transferred to and stored in countries outside of the UK and the European Union except as set out in this section.

Our directors and other individuals working for us may in limited circumstances access personal information outside of the UK and European Union if they are working abroad outside of the UK or European Union. If they do so they will be using our security measures and will be subject to the same legal protections that would apply to accessing personal data within the UK.

In limited circumstances the people to whom we may disclose personal information as mentioned in the “Who we share your personal information with” section above may be located outside of the UK and European Union. In these cases we will impose protections to the personal information as required by law before it is disclosed.

If you require more details on the arrangements for any of the above then please contact us using the details in the “Contacting us” section below.

How long do we keep personal data for?

We will keep your personal information for as long as is necessary for the purpose for which it has been obtained and then for as long as there is any risk of a potential claim, which will be dependent upon the limitation period for the particular type of claim.

We have set out below some of the retention periods which apply.

For individuals who applied for a job, any information collected as part of the recruitment process (such as CVs) will be retained until you ask us to delete it, and in any event, for no longer than 12 months.
For individuals who are listed as a Stanleybet employee’s next-of-kin or emergency contact (or similar), information will be retained for up to 7 years after the employee terminates their employment with us.
For any kind of direct marketing, information will be retained until you ask us to delete it, and in any event, no longer than 6 months.
All footage captured on any of our CCTV may be kept for up to 90 days, after which time the footage is overwritten. However, this retention period varies depending on the jurisdiction. Please contact us at the details below for further information.
For individuals who have raised a complaint, query or other types of correspondence not detailed elsewhere, information will be generally be retained for up to 10 years, however this varies depending on the jurisdiction (for example, any complaint which may be related to our legal obligations relating to money-laundering must be retained for 10 years). Please contact us at the details below for further information.

If you are interested in how long your data is retained, please contact us using the details set out in the “Contacting us” section below.

Security

We have numerous security measures in place to protect the loss, misuse and alteration of information under our control, such as passwords and firewalls. We cannot, however, guarantee that these measures are, or will remain, adequate. We do, however, take data security very seriously and will use all reasonable endeavours to protect the integrity and security of the personal information we collect about you.

Accuracy of your information

It is important to ensure that the personal information we hold about you is accurate and up-to-date, and you should let us know if anything changes, for example if you move position or work for a different organisation or change your phone number or email address. you can contact us by using the details set out in the “Contacting us” section below.

Your rights in relation to your personal information

You have the following rights in relation to your personal information:

the right to be informed about how your personal information is being used;
the right to access the personal information we hold about you;
the right to request the correction of inaccurate personal information we hold about you;
the right to request the erasure of your personal information in certain limited circumstances;
the right to restrict processing of your personal information where certain requirements are met;
the right to object to the processing of your personal information;
the right to request that we transfer elements of your data either to you or another service provider; and
the right to object to certain automated decision-making processes using your personal information.
The right to complain to us if you are unhappy with how we have processed your personal data.
The right to complain to the relevant data protection authority if you are unhappy with how we have processed your personal data or how we have handled your complaint.

You should note that some of these rights, for example the right to require us to transfer your data to another service provider or the right to object to automated decision making, have specific requirements and exemptions which apply to them and they may not apply to personal information recorded and stored by us. For example, we do not use automated decision making in relation to your personal data. However some have no conditions attached, so your right to withdraw consent or object to processing for direct marketing are absolute rights.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

This privacy notice sets out a general summary of your legal rights in respect of personal information, and you can find out more information about your legal rights on:

the Information Commissioner’s website at https://ico.org.uk/for-the-public/ if you are based in the UK;
Information and Data Protection Commissioner’s website at https://www.idpc.gov.mt/ if you are based in Malta;
The Italian Data Protection Authority’s website at https://www.garanteprivacy.it/ if you are based in Italy;
The Belgian Data Protection Authority’s website at https://www.dataprotectionauthority.be/ if you are based in Belgium; or
The Romanian Data Protection Authority’s website at https://www.dataprotection.ro if you are based in Romania; or
The Bailiwick’s Data Protection Authority’s website at https://www.odpa.gg if you are based in Guernsey or
From your local data protection regulator if you are based elsewhere.

To exercise any of the above rights, or if you have any questions relating to your rights, please contact us by using the details set out in the “Contacting us” section below.

Complaints

As noted above, you have the right to complain, if you are unhappy with the way we are using your personal information. All complaints should be directed to the Data Protection Officer via the details below (“Contacting us”). We will respond to and resolve your complaint within 30 days of receipt of the complaint.

You can also complain to your local data protection regulator (as identified above). However, we are here to help and encourage you to contact us to resolve your complaint first.

Changes to this notice

We may update this privacy notice from time to time. When we change this notice in a material way, we will update the version date at the bottom of this notice. For significant changes to this notice we will try to give you reasonable notice unless we are prevented from doing so. Where required by law we will seek your consent to changes in the way we use your personal information.