PRIVACY POLICY

1. General Information for Customers. Controller's Identity

In compliance with the provisions of Regulation (EU) 2016/679, General Data Protection Regulation ("GDPR") and its implementing regulations, we are pleased to inform you about the processing of your personal data ("Data"). The Data you provide to us now or in the future, in the context of our business relationship, will be incorporated into a file whose controller is:

• Owner: ENTERTAINMENT INTERNATIONAL MALTA, LTD. (hereinafter referred to as "Controller" or "Owner")
• Company Number: C43747
• Address: 3rd Floor, Standard House, Telghet, STJ 1149 San Giljan, Malta
• Website: https://www.playbay.com
• Email: info@playbay.com

Your Data will be processed by the Controller for the purpose of maintaining, developing, and managing our business relationship, which includes attending to your queries or requests for information or documentation, as well as sending you the requested information.

All the Data we request from you is mandatory, and the failure to provide some of it may make it impossible for us to provide the services we offer. The Data you provide to us must be accurate and up to date at the time you provide the information, and you guarantee its authenticity and truthfulness. By providing us with your data through electronic channels, you guarantee that you are over 14 years old. Additionally, we kindly request that you promptly and diligently notify us of any changes to your Data, solely for the purpose of keeping our file permanently updated and free of any errors regarding your Data.

Legal basis for the Controller's data processing: the consent of the data subject constitutes the legal basis for the Controller to process your data.

The categories of personal data processed by the Controller are: Identifying Data and IP Address.

You expressly consent to your Data being processed by the Controller to send you commercial information about our goods and services, by postal mail, email, SMS, or any other equivalent electronic communication means, as well as for your Data to be processed for segmentation and/or profiling purposes with the same objective.

2. Disclosure of Your Personal Data

In general, the Controller will not share your personal information, except for those disclosures that must be made based on legal obligations. Likewise, your personal information will be made available to Public Administrations, Judges, and Courts for the purpose of addressing any potential liabilities arising from the processing.

You expressly consent to the Controller disclosing your Data to companies within the same group and collaborating companies if necessary to initiate, maintain, or conclude the provision of the services contracted by the user.

We may offer games from third-party game providers on our portal. When playing a third-party game, your personal data may be processed by the third-party game provider (through the use of cookies or similar technology). Please note that if you choose to play a third-party game, you are playing that game within the environment of the external developer of that game, over which we have no control. Therefore, we recommend that you read the privacy statement of that game provider before playing.

There are no international transfers of your data to countries outside the European Economic Area (EEA).

3. Retention of Your Personal Data

Your Data will be retained in our files for as long as our business relationship remains in effect and during the legal or contractually established periods for the exercise of any actions by You or the Controller. Once our business relationship has ended, your Data will be duly blocked, in accordance with the provisions of the applicable regulations. However, even after our relationship has ended, your Data may continue to be used for commercial purposes, under the conditions set forth in the previous provisions, until you revoke the consent you have provided to us.

4. Access to Data by Third Parties

We inform you that certain companies may access your Data solely for the purpose of providing the Controller with a processing service, such as data hosting companies, IT service providers, etc., without these service providers being able to use your Data for other purposes or for their own interest. These companies may be located in countries outside the European Economic Area that do not offer a level of protection equivalent to that of the GDPR.

5. Confidentiality and Security Measures

Finally, we want to inform you that the Controller will treat your Data at all times in absolute confidentiality and in accordance with the uses and purposes expressly stated above.

Likewise, we inform you that the Controller has implemented the necessary technical and organizational measures to guarantee the security of your Data and to prevent its alteration, loss, processing, or unauthorized access, taking into account the state of technology, the nature of the data stored, and the risks they are exposed to.

In addition, all personnel with access to personal data have been trained and are aware of their obligations regarding the processing of your personal data.

All these security measures are periodically reviewed to ensure their adequacy and effectiveness.

However, absolute security cannot be guaranteed, and no security system is impenetrable. Therefore, in the event that any information subject to processing under the control of the Controller is compromised as a result of a security breach, appropriate measures will be taken to investigate the incident and, if necessary, notify the supervisory authority and the affected users so that they can take appropriate measures.

6. Exercise of Rights

You may exercise your right of access, rectification, cancellation, opposition, limitation, and portability of your Data at any time, as provided by law, by contacting the postal address of the Controller indicated above and attaching a copy of the document proving your identity. The Controller will respond to your request within one month, although this period may be extended by an additional two months, taking into account the complexity and number of requests.

For your convenience, you can obtain information about the exercise of these rights by contacting us through the contact form available on our website or via email.

7. Cookies Policy

The purpose of this policy is to inform you clearly and in detail about what a cookie is, its purpose, the types of cookies we use, and how to configure or disable them.

A cookie is a small text file that is stored in your browser when you visit our website and it saves information about your browsing activities. Some cookies are essential for the proper functioning of websites, such as technical cookies or user interface personalization cookies, while others, such as analytics cookies or behavioral advertising cookies, require us to inform you and obtain your consent to use them.

Below, we provide detailed information about the nature and purpose of each type of cookie used by the Controller:

Technical cookies are those that allow users to navigate through a website, platform, or application and use the different options or services available, including the management and operation of the website and enabling its functions and services. For example, they allow for session identification, access to restricted areas, remembering items in a shopping cart, completing the purchasing process, managing payment, etc. The website cannot function properly without these cookies, so they are considered necessary and do not require your consent.

The Controller uses its own technical cookies, as described above, with a lifespan of 24 hours.

If you disable cookies, you will still be able to access the website, but your browsing experience may not be optimal, and some of the offered services may not work correctly.

If, in the future, the Controller were to use types of cookies other than those described in this Cookies Policy to provide new services or if it were necessary to adapt to new legislative requirements, we will notify you.

You can allow, block, or delete cookies installed on your device through the configuration menu of your internet browser, where you can set it to block cookies or alert you when a server wants to save them.

CONTRACTING

To acquire the services provided by ENTERTAINMENT INTERNATIONAL MALTA, LTD., the Customer must:

• Register as a user.
• Accept the privacy policy.
• Accept the terms and conditions.

ENTERTAINMENT INTERNATIONAL MALTA, LTD. makes the general conditions of the contract available to its customers in the English language, which will be accessible through a link included on all web pages of its portal. However, ENTERTAINMENT INTERNATIONAL MALTA, LTD. does not expressly store the contract that you accept.