This Privacy Notice explains how we use personal data and your rights under data protection laws.
We are Buzz Group Limited, but this notice is also applicable (separately) to our subsidiary, Buzz County Clubs Limited. Each is a separate (sole) controller of your personal information and is referred to in this notice as “we”, “our” “us”, “Buzz Group”, etc.
We operate the buzzbingo.com, buzzcasino.com, buzzbingojobs.com, and badabingo.co.uk websites.
We are registered with the ICO under registration number Z8801135.
We are incorporated and registered in England and Wales as a private limited company with company number 00794943.
Our registered office is Unit 1, Castle Marina Road, Nottingham NG7 1TN.
For any questions, concerns, comments or to exercise any of your data protection rights, please contact our Data Protection Officer at:
Unit 1
Castle Marina Road
Nottingham
NG7 1TN
DPO@buzzbingo.com
0808 169 1459 (please request a call back if required)
We collect personal information when you interact with us and use our services. This information is provided to us by you when you register for the first time and when you make use of our products or get in touch with us. Sometimes third parties or publicly available sources will provide us with additional information about you.
Information you provide to us:
Other sources of personal data
This list of personal data types collected by Buzz Group is not exhaustive and further information may be requested from you when Buzz Group considers it fair and necessary to do so.
Special categories of data
Special categories of personal data are information about you that needs more protection because it is sensitive. Special category personal data that will be collected by Buzz Group includes health data related to responsible gambling, as required by the UK Gambling Commission.
We have in place additional measures to protect your special category personal data and its confidentiality, as detailed in section 4E below.
We recognise the trust our customers place in us as a service provider. It is important to us that we are open about why we collect your data. First and foremost, collecting your information is essential for providing you the services and products you want. In addition, your data is used to personalise and improve your experience using our services, and to contact you from time to time with important information. In some cases, we need to collect and use your information to comply with the law. Under data protection laws, we also need to identify a specified lawful basis upon which we are processing your personal information. We rely on different bases for different processing activities, as detailed below:
A) Under the contract – We will process your personal data when it is necessary to enter into or to perform a contract with you. Our terms and conditions, which you accept upon registration, set out the terms of our contract with our customers and the services we will provide:
To make our services available to you as part of our contract
B) Under legitimate interests – We will process your personal data where it is necessary for the purposes set out below, except where our interests are overridden by the interests, rights or freedoms of affected individuals (such as you). To determine if we can process your data on this basis, we shall consider a number of factors, such as what you were told at the time you provided your data, what your expectations are about the processing of your data, the nature of the data, and the impact of the processing on you.
To personalise your experience
To improve our services and products
To contact and interact with you
To make your game safer and more enjoyable
C) Under the legal obligation – We will process your personal data when it is necessary in order to comply with mandatory legal obligations to which we are subject under UK, EU or other applicable laws:
D) Under your consent
Marketing and market research
We will send you relevant offers and news about our products and services in a number of ways including by email, SMS, phone call, post, social media targeted advertising, but only if you have previously agreed to receive these marketing communications. When you register with us, we will ask if you would like to receive marketing communications, and you can change your marketing choices online, over the phone or in writing at any time.
We may use information which we hold about you to show you relevant advertising on third party sites (e.g. Facebook, Google, Instagram, Snapchat and X). If you don’t want to be shown targeted advertising messages from us, some third-party sites allow you to request not to see messages from specific advertisers on that site in future. If you want to stop all personalised services from us, including targeted advertising messages on third party sites, you can contact our help centre or by email at DPO@buzzbingo.com to disable personalisation.
We also like to hear your views to help us to improve our services, so we may contact you for market research purposes. You always have the choice about whether to take part in our market research.
E) Special categories of data
We will only process your special category personal data if:
Buzz Group’s websites and Apps use cookies for various purposes:
a. to identify the Account Holder's preferred language, so it can be automatically selected when the Account Holder returns to the Website;
b. to ensure that bets placed by the Account Holder are associated with the Account Holder's betting coupon and Account;
c. to ensure that the Account Holder receives any bonuses for which they are eligible; and
d. for analysis of the Website traffic, so as to allow Buzz Group to make suitable improvements to the functionality of the Website.
More information can be found in our Cookie Policy online.
We do not share your personal information with third parties outside the Buzz Group for marketing purposes. However, there are circumstances when we share your personal data with third parties that provide services to you on our behalf, and with other third parties in the course of complying with our legal obligations. Other examples of when we share your personal information include when we enter any kind of merger or business sale. Even when it is shared, we ensure that your personal information will only be used for the purposes outlined in this policy.
With other companies within Buzz Group
We may share the personal data we collect from you with other companies in the Buzz Group for the following purposes:
With third parties
We may share personal data with third parties in the following circumstances:
Furthermore, we reserve the right to disclose the Account Holder’s personal data to relevant parties where Buzz Group has reasonable grounds to suspect irregularities involving a Buzz Group Account, including:
The personal data that we collect from you may be transferred to, and stored at, a destination outside the UK and the European Economic Area ("EEA"). It may also be processed by companies operating outside the EEA who work for us or for one of our service providers. For instance, the computer servers used to host a website could be located outside the EEA – this is not unusual given that the internet is a global environment. Your personal information could be held at a destination which offers a different level of data protection than in the EEA, including Australia, Serbia, India and/or the US. To ensure your personal information remains safe when transferred like this, we will take all reasonable steps to maintain a suitable level of protection in line with this Policy and our obligations under data protection laws.
Where any of our processing activities require your personal data to be transferred outside of the EEA, we will only make that transfer if:
We will only retain your information for as long as is reasonably necessary to carry out the purposes outlined above and to satisfy our legal obligations. While you are a customer, we will usually need to retain your information to meet our legal and contractual requirements. When you cease using Buzz Group services, we will normally retain your personal information for a period of 6 years after you cease being a customer of Buzz Group, beginning at the date your account is closed. There are several reasons why we retain your information, which include:
We appreciate that by law and subject to certain conditions, you have a number of rights concerning the personal information we hold about you. If you wish to exercise these rights, you should contact our Data Protection Officer using the details set out above in Section 3. These rights include the right to access, amend and erase the personal information we hold about you, the right to object to the processing of your data, the right to withdraw consent, and the right to data portability (see additional information below). You also have the right to complain to your data protection authority if you are concerned with how we process your information. In addition, you have certain rights relating to automated decision-making and ‘profiling’. Further information and advice about your rights can be obtained from the UK data protection authority, (the Information Commissioner’s Office or “ICO”) or from your country’s data protection regulator.
Right to access and
rectify the information we hold about you
According to GDPR and DPA 2018, customers are permitted to make Data Subject
Access Requests (DSAR). These requests can be made when you would like to gain
access to all of the information we hold about you. In order to process this
request, we will require a valid form of I.D. This is a safety measure designed
to ensure that personal data is disclosed to the correct individual.
You can make a DSAR via our online form
When you submit this request, all personal data that we hold about you will be shared with you directly.
There are some exceptions and conditions under which DSARs can be refused.
In such cases, you will be notified of the decision and justification.
Right to delete your
data
In some circumstances, you can ask us to erase personal information we hold
about you (‘the right to be forgotten’). This includes when:
This right is subject to mandatory retention periods under EU/local laws.
Right to restrict
processing
You have the right to ask us to restrict (‘block’ or ‘suppress’) the processing
of your personal information. When processing is restricted, we can still store
your information, but will not use it further. We keep lists of people who have
asked for further use of their information to be ‘blocked’ to make sure the
restriction is respected in the future. This right is available to you when:
Right to Data
Portability
You have the right to receive personal information you provide to us, in a
‘commonly used, machine-readable format’. This allows you to obtain and reuse
your information for your own purposes across different services. For example,
if you decide to switch to a different provider, this enables you to move, copy
or transfer your information easily between our IT systems and theirs safely
and securely, without affecting its usability. This is not a general right
however, and only arises when the processing of your information is:
Right to object
Based on your particular situation, you can object to the processing of your
personal information that is:
You also have the right to object to the use of your personal information for direct marketing purposes (including profiling), such as when you receive emails from us notifying you about other Buzz Group services which we think will be of interest to you.
Right to withdraw
consent
When we rely on your consent as the basis to process your personal information
– such as for sales and marketing communications (see section 5D) – you have
the right to withdraw your consent at any time. We’ll always strive to make it
easy for you to withdraw consent by choosing an “unsubscribe” option in every
communication you receive from us. If you find this isn’t the case, then please
get in touch with our Data Protection Officer in the ways outlined above in
Section 3, and we’ll try to fix things ASAP.
Rights related to
automated decision making, including profiling
We sometimes use systems to make automated decisions based on your personal
information. This helps us to make sure our decisions are quick, fair,
efficient and correct, based on what we know. These automated decisions can
affect the products, services or features we may offer you now or in the
future, and may affect your ability to use some of our services.
We may use automated decision making in the following situations:
Data protection laws seek to safeguard individuals against harm that may arise from decision-making - including profiling - that takes place without human intervention. You have the right not to be subject to a decision - including profiling - when it is based on the automated processing of your personal information and it has a legal effect or a similarly significant effect on you.
Please note that the right does not apply when the processing is:
Buzz Group is committed to protecting the personal information you entrust
to us. We take all reasonable steps to ensure that all information collected
through our websites is handled securely and in line with this Policy and
strict data protection standards. Accordingly, we have adopted robust
procedures and technologies to protect your data from unauthorised access and
improper use.
All information sent to and from Buzz Group sites is encrypted using 256 bit
Transport Layer Security (TLS) technology.
Your credit card details are encrypted and sent only to our PCI DSS compliant
Payment Service Provider.
Buzz Group is dedicated to protecting our customers confidential information
and, as part of doing so, Buzz Group is certified towards the Payment Card
Industries Data Security Standard.
The security of Buzz Groups systems and applications are tested several times
per year by third-party security experts. Furthermore, Buzz Group has an
Intrusion Detection System that monitors all network traffic 24/7 for signs of
attacks or intrusions.
Buzz Group has a dedicated fraud department and advanced systems in place to detect and prevent suspicious activity, to ensure that Buzz Groups websites remain a secure playing-field. Any account involved in suspicious activity will be suspended and investigated to the fullest extent. Should you have any doubts about any activity on your account, such as unrecognized transactions in the transaction history or surprising changes in the balance, please contact us immediately using the contact details in section 2.
If you wish to raise a complaint on how we have handled your personal data,
you can contact us to have the matter investigated by contacting our Data
Protection Officer, using the contact details in section 2.
If you are not satisfied with our response or believe we are not processing
your personal data in accordance with the law, you can complain to the UK data
protection authority, the Information Commissioner’s Office, the
“ICO”, or your national data protection regulator.
This Privacy Notice may be updated from time to time to reflect changes in the way we process your information or the way in which our data processing is regulated, so you may wish to check it each time you submit personal information to us. The date of the most recent revisions will appear on this page. If you do not agree to these changes, please do not continue to submit personal information to Buzz Group or use Buzz Group services in any way. Otherwise, by continuing to do this, you will be deemed to have accepted the changes to the Privacy Notice. You can also delete your Buzz Group account at any time.
If significant changes are made to the Privacy Notice, for instance affecting how we would like to use your personal information, we will provide a more prominent notice (including, for certain services, notification of Privacy Notice changes by email).
Last updated: September 2022