1. Introduction
We are committed to protecting your personal data. This privacy policy (“Policy”) will inform you about how, and for what purpose, we collect, process and look after your personal data when you visit our website and tell you about your privacy rights as a subscribed customer and website.
We may change this policy from time to time by updating this page.
The Super Free Bets website is not intended for use by those under the age of 21 years and/or those living outside the US. We do not knowingly collect data relating to children.
2. Contact Details
Little Star Media USA Limited is the data controller and is responsible for your personal data (collectively referred to as the "Company", "we", "us" or "our" in this Policy).This means that we are responsible for deciding how we hold and use personal information about you. We are a company registered in the United Kingdom with company number 11587357. Our registered office is at Suite 478-480, Exchange House, 450 Midsummer Boulevard, Milton Keynes, MK9 2EA, United Kingdom.
We have appointed a data protection officer (“DPO”), Caroline Sugrue. The DPO is responsible for overseeing the implementation of this Policy and for monitoring compliance with applicable law. If you have any questions about this Policy, including any requests to exercise your legal rights, please contact the DPO at: [email protected].
3. Your Rights
Under this Privacy Policy and applicable law, if any, you have rights we need to make you aware of. This Privacy Policy sets out the following rights applicable to you (please refer to the parts of this policy indicated for further details):
1. The right to be informed (Part 9);
2. The right of access (Part 10);
3. The right to rectification (Part 11);
4. The right to erasure (also known as the ‘right to be forgotten’) (Part 12);
5. The right to opt out (Part 13)
6. The right to restrict processing (Part 14);
7. The right to object (Part 15).
If you wish to exercise any of the rights set out above, please contact our DPO.
4. The Data We Collect About You
As used in this Privacy Policy, “personal data” is defined as any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. It does not include data where the identity has been removed. Please see below the personal data we may collect about you.
4.1 Identity Data including: name, user name or similar identifier, title, gender
4.1.1 To identify you as a user so that we can provide services to you and communicate with you in connection with your registration at the Super Free Bets website.
4.2 Contact Data including: Email Address Mobile Phone Number
4.2.1 We email gambling offers and newsletters to users who have consented to receive these.
4.2.2 Users will normally receive emails up to 3 times per week, but on occasion this could be up to 4 times per week.
4.2.3 Users may receive gambling offers and site information by SMS if they have consented to receive these. Users will normally receive SMS up to 2 times per week, but on occasion this could be up to 3 times per week.
4.2.4 We will use contact information to update you about changes to our policies and terms and conditions.
4.2.5 We also share your personal data with Facebook who help us show you relevant content and find similar users who might be interested in our services.
4.3 IP Address
4.3.1 Used as a factor to determine robot behaviour and detect malicious or suspicious software.
4.4 Geographic Location
4.4.1 Used to determine fraudulent robot behaviour and to detect whether you are eligible to use our website.
4.5 Technical Data including: Device Screen size, Device Type Browser Information, Preferred Language
4.5.1 Hotjar
4.5.1.1 We use Hotjar in order to better understand our users’ needs and to optimise this service and experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.). This enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices (in particular, device IP address (captured and stored only in anonymised form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and preferred language on our website).
4.5.1.2 Hotjar stores this information in a pseudonymised user profile. We will not (nor will Hotjar) use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar’s privacy policy by clicking on this link: https://www.hotjar.com/privacy.
4.5.2 Opt-Out:
4.5.2.1 You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this opt-out: https://www.hotjar.com/legal/compliance/opt-out
4.5.3 Cookies and Analytics
4.5.3.1 We use Google Analytics on this website. Therefore, third-party vendors, including Google, may show our ads on sites across the internet. The Google Analytics features that have been implemented are used for Display Advertising (including Google Display Network Impression Reporting, the DoubleClick Campaign Manager integration, or Google Analytics Demographics and Interest Reporting).
4.5.3.2 We (and third-party vendors including Google) use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) together to inform, optimise, and serve ads based on past customer visits to our website. We also use these cookies to report how our ad impressions and other ad services, and interactions with these, relate to visits to our site.
4.5.3.3 We use Google Analytics Demographics and Interest Reporting in order to target users who have a higher probability of being interested in our products. We also may use third party audience data (such as age, gender, and interests) to help guide our website offering to better meet consumer needs, and ultimately improve the user experience.
4.5.3.4 Opt-out: Using the Ads Settings, you can opt-out of Google Analytics for Display Advertising and customise Google Display Network ads. Read more here: https://tools.google.com/dlpage/gaoptout
4.5.4 How we use cookies:
4.5.4.1 A cookie helps us, for example, to analyse web traffic or lets us know when you visit a particular site. This enables us to enhance your user experience when visiting Super Free Bets by placing cookies on your computer.
4.5.4.2 Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
4.5.4.3 We use traffic log cookies to identify which pages are being used. This helps us analyse data about webpage traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
4.5.4.4 To find out more or to change how cookies interact with your computer, click here.
4.6 Analytics Data
4.6.1 We use analytics data to improve our website, products/services, marketing, and user experience.
5. How we use your personal data
We will only use your personal data when the law allows us to do so. Most commonly, we will use your personal data in the following circumstances:
1. You have given consent to the processing of your personal data for one or more specific purposes;
2. Where we need to perform the contract we have entered into with you;
3. For compliance with a legal obligation;
4. To protect your interests (or someone else’s interests); or
5. For our legitimate interests (or those of a third party), except where such interests are overridden by your fundamental rights and freedoms.
We may share your personal data with third parties (as set out below) and the third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Policy.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
We may share your personal data with the following third parties:
1. Service providers (including marketing and digital analytics) including, but not limited to, Hotjar, Reportdash, Mozenda, Microsoft, Google Analytics, Acoustic L.P, AWS, Twilio, Cake, Digital Ocean; Reactful Inc.; Bulk SMS Limited; Accelerize Inc. and Facebook;
2. Advertising networks;
3. Search information providers;
4. Banks and payment providers;
5. Professional advisers; and
6. Law enforcement agencies.
You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time.
Where you opt out of receiving these marketing messages, this will not apply to our processing of your personal data that we process for non-marketing purposes. If you would like us to stop processing that data too, please let us know by exercising your rights summarised in this policy, particularly in parts 11, 12 and 16 below.
6. Accuracy of Data and Keeping Data Up-to-Date
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. You have the right to request the rectification of personal data that we hold about you, as set out in Part 11, below.
7. Data Retention
We shall not keep your personal data for any longer than is necessary in light of the purpose or purposes for which that personal data was originally collected, held, and processed. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
When personal data is no longer required, all reasonable steps will be taken to erase or otherwise dispose of it without delay.
If you are an active user, we will retain your personal data for the entire time that you are actively engaging with our site or products and for a further period of 3 months from the date of your last engagement. After that you will become an inactive user and we will put you onto a soft suppression list for a period of 2 years, following which we erase your details.
If you request to no longer receive direct marketing from us, we will place your details onto a hard suppression list, where it will not be used, and you will be deleted from that hard suppression list at the end of 5 years.
If you require any information or have any data requests, you can contact our DPO, Caroline Sugrue, at: [email protected].
8. Secure Processing
We have put in place appropriate security measures to prevent your personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
9. Keeping You Informed
Where your personal data is collected directly from you, you will be informed of its purpose at the time of collection.
Where your personal data is obtained from a third party, you will be informed of its purpose:
1. If the personal data is used to communicate with you, when the first communication is made;
2. If the personal data is to be transferred to another party, before that transfer is made; or
3. As soon as reasonably possible and in any event not more than one month after the personal data is obtained.
10. Your Access Requests
You may make subject access requests (“SARs”) at any time to find out more about the personal data which we hold about you and to check that we are lawfully processing it.
If you wish to make a SAR, you should do so by emailing our DPO at [email protected].
Responses to SARs shall normally be made within one month of receipt. However, this may be extended by up to two months if the SAR is complex and/or numerous requests are made. If such additional time is required, you shall be informed.
We do not charge a fee for the handling of normal SARs. We reserve the right to charge reasonable fees for additional copies of information that has already been supplied to you, and for requests that are manifestly unfounded or excessive, particularly where such requests are repetitive.
11. Rectification of Personal Data
You have the right to require us to rectify any of your personal data that is inaccurate or incomplete.
Within one month of you making your request, we shall rectify the personal data in question, and inform you of the rectification. The period may be extended by up to two months in the case of complex requests. If such additional time is required, you shall be informed. In the event that any affected personal data has been disclosed to third parties, those parties shall be informed of any rectification that must be made to that personal data.
12. Erasure of Personal Data
You have the right to request that we erase your personal data in the following circumstances:
1. It is no longer necessary for us to process your personal data for the purpose(s) for which it was originally collected;
2. You no longer wish us to process your personal data;
3. Your personal data has been processed unlawfully; or
4. Your personal data needs to be erased in order for us to comply with a particular legal obligation.
Unless we have reasonable grounds to refuse to erase your personal data, we will comply with all requests for erasure and inform you when this has been done within one month of receipt of your request. The period can be extended by up to two months in the case of complex requests. If such additional time is required, we will inform you.
In the event that your personal data to be erased has been disclosed to third parties, we will inform those parties of the erasure (unless it is impossible or would require disproportionate effort to do so).
13. Opting Out - Marketing Communications
You can opt out of receiving marketing communications from us at any time by unsubscribing from our database. If you wish to unsubscribe from this service, please click the ‘Unsubscribe’ link in any email that you have received from us.
Alternatively, you can contact us via the ‘Contact us’ link at the bottom of the site or by emailing [email protected], using the subject line “Unsubscribe” and providing your name, as well as the email address and mobile number that you signed up with. Please allow up to 28 days for your request to be processed.
14. Opting Out - Push Notifications
You can opt out of receiving push notifications via your internet browser notification settings. Please refer to your individual internet browser’s settings for full details.
15. Restriction of Personal Data Processing
You may request that we cease processing the personal data we hold about you. If you make such a request, we shall retain only the amount of your personal data (if any) that is necessary to ensure that the personal data in question is not processed further.
In the event that any affected personal data has been disclosed to third parties, those parties shall be informed of the applicable restrictions on processing it (unless it is impossible or would require disproportionate effort to do so).
16. Objections to Personal Data Processing
You have the right to object to us processing your personal data where we are relying on legitimate interests and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some limited cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
17. California Resident User Privacy Rights
SHINE THE LIGHT LAW
California residents who provide personal data in connection with obtaining products or services for personal, family or household use are entitled to request, and obtain from us once each calendar year, information about the personal data we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information and the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year (e.g. requests made in 2019 will receive information regarding 2018 sharing activities).
To obtain this information, please send an email message to [email protected] with "Request for California Privacy Information" in the subject line and in the body of your message. We will provide the requested information to you at your e-mail address in response. Please be aware that not all data sharing is covered by the "Shine the Light" requirements and only information covered under this law will be included in our response.
CALIFORNIA CONSUMER PRIVACY ACT
This Section supplements the information contained in this Privacy Policy and applies solely to all website visitors, users and others who reside in the State of California. We adapt this section of the Privacy Policy to comply with the California Consumer Privacy Act 2018 (CCPA) and other California privacy laws (together “California Laws”). Any terms defined in the CCPA shall have the same meaning when used in this Section.
Categories of information we collect, how we collect it and to whom we may share
We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household or device. For purposes of this section only, this information is referred to as “personal data.”
Section 4 of this Privacy Policy sets forth the specific information we collect and the sources from which we obtain that information. The below table outlines the Section 4 categories of data collected, the purposes for its collection and the categories of third parties with whom we may share the personal data
17.1 Identity Data including: name, user name or similar identifier, title, gender
17.1.1 To identify you as a user so that we can provide services to you and communicate with you in connection with your registration at the Super Free Bets website.
17.2 Contact Data including: Email Address Mobile Phone Number
17.2.1 We email gambling offers and newsletters to users who have consented to receive these.
17.2.2 Users will normally receive emails up to 3 times per week, but on occasion this could be up to 4 times per week.
17.2.3 Users may receive gambling offers and site information by SMS if they have consented to receive these. Users will normally receive SMS up to 2 times per week, but on occasion this could be up to 3 times per week.
17.2.4 We will use contact information to update you about changes to our policies and terms and conditions.
17.2.5 We also share your personal data with Facebook who help us show you relevant content and find similar users who might be interested in our services.
17.3 IP Address
17.3.1 Used as a factor to determine robot behaviour and detect malicious or suspicious software.
17.4 Geographic Location
17.4.1 Used to determine fraudulent robot behaviour and to detect whether you are eligible to use our website.
17.5 Technical Data including: Device Screen size, Device Type Browser Information, Preferred Language
17.5.1 Hotjar
17.5.1.1 We use Hotjar in order to better understand our users’ needs and to optimise this service and experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.). This enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices (in particular, device IP address (captured and stored only in anonymised form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and preferred language on our website).
17.5.1.2 Hotjar stores this information in a pseudonymised user profile. We will not (nor will Hotjar) use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar’s privacy policy by clicking on this link: https://www.hotjar.com/privacy.
17.5.2 Opt-Out:
17.5.2.1 You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this opt-out: https://www.hotjar.com/legal/compliance/opt-out
17.5.3 Cookies and Analytics
17.5.3.1 We use Google Analytics on this website. Therefore, third-party vendors, including Google, may show our ads on sites across the internet. The Google Analytics features that have been implemented are used for Display Advertising (including Google Display Network Impression Reporting, the DoubleClick Campaign Manager integration, or Google Analytics Demographics and Interest Reporting).
17.5.3.2 We (and third-party vendors including Google) use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick cookie) together to inform, optimise, and serve ads based on past customer visits to our website. We also use these cookies to report how our ad impressions and other ad services, and interactions with these, relate to visits to our site.
17.5.3.3 We use Google Analytics Demographics and Interest Reporting in order to target users who have a higher probability of being interested in our products. We also may use third party audience data (such as age, gender, and interests) to help guide our website offering to better meet consumer needs, and ultimately improve the user experience.
17.5.3.4 Opt-out: Using the Ads Settings, you can opt-out of Google Analytics for Display Advertising and customise Google Display Network ads. Read more here: https://tools.google.com/dlpage/gaoptout
17.5.4 How we use cookies:
17.5.4.1 A cookie helps us, for example, to analyse web traffic or lets us know when you visit a particular site. This enables us to enhance your user experience when visiting Super Free Bets by placing cookies on your computer.
17.5.4.2 Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
17.5.4.3 We use traffic log cookies to identify which pages are being used. This helps us analyse data about webpage traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
17.5.4.4 To find out more or to change how cookies interact with your computer, click here.
17.6 Analytics Data
17.6.1 We use analytics data to improve our website, products/services, marketing, and user experience.
California resident’s rights.
This section describes your CCPA rights and explains how to exercise those rights. The CCPA provides California residents with specific rights regarding their personal data. These rights are not absolute and are subject to certain exceptions. For instance, we cannot disclose or permit access to specific pieces of personal data if the disclosure or access would present a certain level of risk to the security of the personal data, your account with us or the security of the business’s systems of networks. Equally, we cannot respond to your request or provide you with personal data if we cannot verify your identity or authority to make the request and confirm the personal data relates to you. A record concerning the requests may be maintained pursuant to our legal obligations.
Further, we may charge a reasonable fee or refuse to act on a request if such request is excessive, repetitive or manifestly unfounded.
Disclosure and Access to specific Information Request
You have the right to request that we disclose certain information to you about our collection and use of your personal data over the past 12 months. Where we verify your request we must provide the following:
• The categories of personal data we collected about you.
• The categories of sources for the personal data we collected about you.
• Our business or commercial purpose for collecting that personal data.
• The categories of third parties with whom we share that personal data.
• The specific pieces of personal data we collected about you (also called a data portability request).
Please note that we are only required to fulfill Disclosure and Access requests from a consumer twice per every 12-month period. You can submit such a request by sending an e-mail to [email protected] with "Request for California Privacy Information" in the subject line and in the body of your message or calling Customer Service at (844) 737-7615.
Deletion Request
You have the right to request that we delete the personal data we have collected or maintained in connection with our website, subject to certain exceptions as provided for under California Laws. Once we receive and confirm your verifiable request, we will take reasonable measures to delete (and direct our service providers to delete) your personal data from our records, unless an exception applies.
We may deny your deletion request if retaining your personal data is necessary for us or our service providers to:
• Complete the transaction for which we collected the personal data, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
• Comply with a legal obligation.
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
Right to opt out
Under California Laws, California consumers have the right to opt-out of having their personal data sold. For purposes of California Laws, the definition of “sale” includes sharing of personal data with a third party in exchange for anything of value (money or otherwise). We do NOT sell your information to any third parties.
Right to Non-Discrimination
California consumers have the right not to be discriminated against for exercising their rights, unless permitted by the CCPA. We may not:
• Deny the goods or services.
• Charge different prices for goods or services, whether through denying benefits or imposing penalties.
• Provide a different level or quality of goods or services to consumer.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
• Threaten the consumer with any of the above.
18. Children
The Children’s Online Privacy Protection Act of 1998 (“COPPA”), 15 U.S.C. §§6501-6506, protects the online privacy of children under 13 years of age. We do not knowingly collect or maintain personal data from anyone under the age of 13, unless or except as permitted by law. Any person who provides personal data through the website represents to us that he or she is 13 years of age or older. If we learn personal data has been collected from a user under 13 years of age on or through the website, then we will take the appropriate steps to cause this information to be deleted. If you are the parent or legal guardian of a child under 13 who has become a member of the website or has otherwise transferred personal data to the website, please contact the DPO at [email protected] to have that child’s information deleted.