• We protect, according to strict standards of security and confidentiality, all non-public personal information we collect about our customers.
• We maintain physical, electronic and organisational safeguards to protect this information.
• We contractually require any person or organisation providing products or services to customers on our behalf to protect the confidentiality of this information.
• We afford former customers the same protections as existing customers with respect to the use and sharing of their information.
• We permit only authorised employees, who are trained in the proper handling of this information, to have access to it.

Personal information is information that can be used to directly or indirectly identify you. Personal information also includes anonymous information that is linked to information that can be used to directly or indirectly identify you. Personal information does not include information that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you.

We will only collect and use information which is necessary to comply with our legal obligations and assist us to administer our business and provide you with the services you request. We may collect personal information about you (or your business) from other sources:

Information that you provide when you use our services and products, including, but not limited to:

• When you complete our application forms. (The types of information we collect can include: your date of birth, first name, last name, address, phone, email address, other information as shown on the form.
• When you talk to us on the phone.
• In email or letters.
• When you use our websites
• When you contact us via messenger services.
• In surveys.

Data we collect when you use our services and products, including, but not limited to:

• Information about your transactions with us, including your payment history.
• We collect information about you when you visit the LegendAffiliates websites using cookies and other internet tracking software, including third-party software (please see our Cookie policy for more information).
• Information about the type of device you use, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, and location information from or about the computers, phones, or other devices on which you install or access our products or services.

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”).

All information you provide to us is stored on secure servers. If you use our site to send personal data to us, your transmission will be protected by Secure Socket Layer (SSL). SSL is a technology that encrypts your information during transmission. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

We will use the information you provide to us for the specific purposes for which you provided the information, as stated at the time of collection, and as otherwise permitted by law.

The following are some ways in which we may use your information to administer our business and provide you with the products and services you request or may be of interest to you:

• To operate the Legend Affiliate Program.
• To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
• To carry out our obligations arising from agreement or contract (including our obligations to you as a customer of our program) entered into between you and us.
• To notify you about changes to our policies, procedures and terms and conditions.
• To create a more accurate and complete customer profile to better understand the products and services you want to use.
• To improve the products and services we provide to you and develop new products and services.
• To process monies in relation to your earnings as an affiliate.
• To detect, investigate, report, and seek to prevent financial crime and problem gambling to comply with the regulations that apply to us (see paragraph 5 below).
• To protect and defend our rights or property or enforce our agreements with you.
• Otherwise with your consent or as permitted or required by law.

We may also use your data to provide you with information about promotions, goods and services which may be of interest to you and we may contact you about these by telephone.

We may also use your data to contact you by electronic means (e-mail, messenger or SMS) with information about promotions, goods and services which we believe will be of interest to you but only if you have consented to be contacted in this way. If you want us to use your data in this way, please tick the relevant box situated on the form on which we collect your data.

Legend Affiliates will not sell or rent to any third party any of the personal information or data that you provide to us.

Legal Basis for the Processing of Personal Information

If you are located in the European Economic Area (“EEA”), our processing of your personal information will be based on the following: To the extent that we obtain your consent for the processing of your personal information such processing will be justified pursuant to Article 6(1) lit. (a) of the General Data Protection Regulation (EU) 2016/679 (“GDPR”). If the processing of your personal information is necessary for the performance of a contract between you and us or for taking pre-contractual steps upon your request, such processing will be based on GDPR Article 6(1) lit. (b). Where the processing is necessary for us to comply with a legal obligation, we will process your personal information on the basis of GDPR Article 6(1) lit. (c), and where the processing is necessary for the purposes of our legitimate interests, such processing will be made in accordance with GDPR Article 6(1) lit. (f).

Please note that where you have given your consent to the processing of your personal information you may withdraw your consent at any time which withdrawal will not affect the lawfulness of any processing previously made on basis of your consent.

Why we have to ask...

Sometimes we must ask for more information about you to ensure that we comply with the law. It’s as simple as that – it’s a legal and regulatory requirement. The kinds of questions we ask aren’t particular to you or to Legend Affiliates; you can expect similar questions wherever you choose to promote.

Is my personal information secure?

Yes, your personal information is secure – and respected. All information you give us is treated in the strictest confidence and used only to meet our legal obligations. Legend Affiliates complies strictly with the requirements of Data Protection legislation.

What happens if I don’t tell you?

We hope we’ve put to rest any concerns you may have about sharing information with us and reassured you about the reasons. If you still feel that you don’t want to provide the information we need, then, by law, we may have no choice but to stop the provision of our services and products to you, which also prevents you from gaming with us.

We trust that this information is sufficient for you to be assured that we treat customer information with the utmost confidentiality.

We may disclose and transfer your personal information to any entity, affiliate and subsidiary of Legend Affiliates, including those based outside of the EEA including our parent company, Entertainment Software Group, based in Curacao. Where your personal information is transferred to a country outside the EEA, we will enter into model contractual clauses as adopted by the European Commission, or rely on alternative legal bases such as the Privacy Shield, where applicable, or binding corporate rules where our service providers have adopted such internal policies approved by European data protection authorities.

We may also disclose information that we collect from or about you with non-affiliated third parties as permitted or required by law, including those based outside of the EEA:

• Third-Party Service Providers - We work with many different service providers and other third-parties who process your personal information on our behalf. We only do business with companies that meet our standards on the processing of data and security, and we only share information that is necessary for the service;
• Business Transfers; Bankruptcy - If Legend Affiliates or substantially all of its assets are acquired by a third party or in the event of a merger, reorganization, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal information to the relevant third party;
• Compliance with legal obligations - If we are under a duty to disclose or share your personal data in order to comply with any legal obligation or process; or to comply with any legal requirements of any governmental authority, including but not limited to gaming regulators; or in order to enforce the terms of affiliate program membership with you and other agreements;
• Protection of our business and customers – We may disclose personal information to protect the rights, property, or safety of Legend Affiliates, our customers, or others. This includes exchanging information with other companies and organisations for the prevention and detection of crime and fraud;
• Fraud Prevention - As part of our registration ID and verification process, we may conduct identity verification using a recognised fraud prevention agency.

Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. We do not expressly or impliedly endorse the materials disseminated at those websites, nor does the existence of a link to another site expressly or impliedly mean that the organisation or person publishing at that site endorses any of the materials on our site. Links to other websites are provided only as a convenience to our users and for information only. We have no control over the contents of those sites or resources, and accept no responsibility for them or for any loss or damage that may arise from your use of them.

If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Last Updated: May 2018

Legend Affiliates, its affiliates and subsidiaries (collectively “we”, “us” or “our”) use cookies on their website to help, provide, protect and improve their services. Legend Affiliates is a trading name of Entertainment Software Group.

This Cookie Policy describes the cookies we use and explains how we deal with the collected information. It also explains how cookies enable our website to function properly and why you may not be able to experience the full functionality of the website if you disable the use of cookies. This Cookie Policy should be read alongside, and in addition to, our Privacy Policy.

By visiting our website without changing your settings, you agree to receive cookies. If you do not accept the use of cookies, you can change your cookie settings at any time by following the instructions below.

What are cookies?

Cookies are text files containing small amounts of information which are downloaded to your computer or mobile device when you visit a certain webpage. Cookies are then sent back to the originating webpage on each subsequent visit, or to another webpage that recognises that cookie. Cookies are widely used in order to make websites work, or to work more efficiently.

Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improving the user experience. Cookies may tell us, for example, whether you have visited our website before or whether you are a new visitor. They can also help to ensure that adverts you see online are more relevant to you and your interests.

There are two broad categories of cookies:

• first party cookies, served directly by us to your computer or mobile device
• third party cookies, which are served by a third party on our behalf. We may use third party cookies for functionality, performance/analytics, advertising/tracking and social media purposes

Cookies can remain on your computer or mobile device for different periods of time. Some cookies are session cookies, meaning that they are stored only temporarily during a browsing session and expire when you close your browser. Other cookies are persistent cookies, meaning that they are saved on your computer or mobile device for a fixed period and are not deleted when the browser is closed. They can be used by our website to recognise your computer or mobile device when you open your browser and browse the Internet again.

Why do we use cookies?

We use cookies for a variety of reasons, including:

• to enable, facilitate and streamline the functioning of and your access to our website;
• to track traffic flow and patterns of travel in connection with our website;
• to understand the total number of visitors to our website on an ongoing basis and the types of Internet browsers and operating systems used by our visitors;
• to monitor the performance of our website and continually improve them; and
• to customise and enhance your online experience.

What types of cookies do we use?

The types of cookies used by us and our partners in connection with our website can be classified into one of five categories, namely “cookies necessary for essential services”, “functionality cookies”, “performance and analytics cookies”, “advertising and tracking cookies”, and “social media cookies”. In the following, we have set out some further information about each category and the purposes of the cookies used:

• Cookies necessary for essential services

These cookies are essential to provide you with our website and any services available through the website and to use some of their features, such as access to our Total Rewards program. Without these cookies, services you have asked for might not be possible.

• Functionality Cookies

Functionality cookies record information about choices you have made and allow us to tailor our websites to you. These cookies mean that when you continue to use or come back to the websites, we can provide you with our services as you have asked for them to be provided.

• Performance and Analytics Cookies

We use performance/analytics cookies to analyse how our website is accessed, used, or is performing in order to provide you with a better user experience and to maintain, operate and continually improve the website. For example, these cookies allow us:

• to better understand our website visitors so that we can improve how we present our content.
• to test different design ideas for particular pages, such as our homepage.
• to determine the number of unique users of the website.
• to improve our websites by measuring any errors that occur; and
• to conduct research and diagnostics to improve product offerings.

To help us understand how users engage with our website we use Google Analytics, a web analytics service provided by Google, Inc. (“Google”) which uses cookies. Google Analytics collects information on the usage of our website. This information is used to compile reports and create services to help us improve our website and the services associated with it. The reports disclose website trends without identifying individual visitors. The information generated by the Google cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. For more information on Google Analytics and how to opt out from Google Analytics please visit this https://www.google.com/analytics/learn/privacy.html

• Advertising and Tracking Cookies

We may allow third party companies to place cookies on our website. These cookies enable such companies to track your activity across various sites where they display ads and record your activities so they can show ads that they consider relevant to you as you browse the Internet. These Cookies store information about the content you are browsing together with an identifier linked to your device or IP address.

These Cookies also allow us and third parties to know whether you have seen an ad or a type of ad, and how long it has been since you have last seen it. This information is used for frequency capping purposes, to help tailor the ads you see, and to measure the effectiveness of ads.

• Social Media Cookies

On some pages of our website, third parties that provide applications through our website may set their own cookies in order to track the success of their applications or customize applications for you. For example, when you share content using a social media sharing button on our website (e.g., Facebook, Twitter, or Google Plus), the social network that has created the button will record that you have done this. Because of how cookies work, we cannot access these cookies, nor can the third parties access the data in cookies used by us.

How to control or delete cookies

You have the right to accept or stop cookies from being stored on your device by modifying the settings in your web browser to reflect your cookie preferences.

You may refuse the use of cookies at any time by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website. Unless you have adjusted your browser setting so that it will refuse cookies, cookies will be issued when you log on to our site and you will have been deemed to consent to the processing of data about you in the manner and for the purposes set out above. Again, please note that the data does include any personally identifiable information such as name or address.

Changes to this Cookie Policy

We will occasionally update this Cookie Policy to reflect changes in our practices and services. When we post changes to this Cookie Policy, we will revise the "Last updated" date at the top of this Cookie Policy. If we make any material changes in the way we collect, use, and/or share information held in cookies, we will notify you by prominently posting notice of the changes on our website. We recommend that you check this page from time to time to inform yourself of any changes in this Cookie Policy or any of our other policies.

Cookies that have been set in the past

If you have disabled one or more cookies, we may still use information collected from cookies prior to your disabled preference being set, however, we will stop using the disabled cookie to collect any further information.

Contact us

Over time, it may be necessary to modify or supplement our Privacy Policy. If we make any material changes, we will post those changes on this site and update the date shown.

You have the right to ask us not to use your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes. You can exercise your right to prevent such processing by leaving certain boxes unticked on the forms we use to collect your data. You can also exercise the right at any time by contacting us to opt out of marketing communications at managers@legendaffiliates.com. You will need to indicate whether you wish to opt out of marketing communications from Legend Affiliates (this is the default choice).

If you prefer not to receive emails from Legend Affiliates, you may contact us at managers@legendaffiliates.com or click on the "unsubscribe" option found on the bottom of all our email marketing communications.

You also have the right to object to us processing your other personal information, to have your information deleted and its processing restricted. You also have the right to access or correct the personal information that we collect. You have the right to receive your personal information in a structured and standard format. You may lodge a complaint with the competent data protection authority regarding the processing of your personal information.

To protect the privacy and the security of your personal information, we may request information from you to enable us to confirm your identity and right to access such information, as well as to search for and provide you with the personal information we maintain. There are instances where applicable laws or regulatory requirements allow or require us to refuse to provide or delete some or all of the personal information that we maintain.

We will take all reasonable steps to ensure that your personal data is correct and up to date.

We will retain your personal information for as long as it is necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.