Privacy Statement
WHO WE ARE
The Betting Gaming & Lotteries Commission (collectively referred to as “BGLC”, “the Commission”, “we”, “us” or “our” in this privacy notice) was set up under the Betting Gaming and Lotteries Act (“the BGLA”) to regulate and control the operation of betting and gaming and the conduct of lotteries in Jamaica. To carry out our regulatory functions and fulfil our legal responsibilities, we need to collect your personal data. When we do, we act as the data controller for that information for the purposes of the Data Protection Act (“The DPA”). This Privacy Notice informs you about the ways your personal data is collected, stored and used by BGLC, and how you can exercise your rights. This notice applies to: a) Licence and Permit Applicants b) Lottery Organisers c) Lottery Winners d) Gaming Consumers e) Participants on the Voluntary Exclusion List f) People we Investigate
WHAT PERSONAL DATA DO WE COLLECT, FOR WHAT PURPOSE AND WHAT IS THE LEGAL BASIS FOR DOING SO?
We collect and process your personal data based on one or more of the following legal bases: a) Legal Obligations and Regulatory Functions: As a regulatory body, most of the personal data we collect and process, including sensitive personal data, is necessary to exercise our regulatory functions under the BGLA. b) Contract: the processing is necessary for a contract we have with you or your organisation, or to take specific steps before entering into a contract. c) Administration of Justice & Fraud Prevention: It may be necessary for us to process your data to conduct investigations and exercise our powers of enforcement as well as to assist other regulators or law enforcement agencies for the purposes of preventing fraud. d) Legitimate Interests: the processing is necessary for pursuing our legitimate interests or the legitimate interests of a third party to whom we may disclose your personal data provided that your rights, freedoms or legitimate interests are not prejudiced. e) Public Interest: Similar to our regulatory functions, we may process your personal data in the exercise of our functions which are of a public nature and are in the interests of the public. We may process different categories of personal data for the above purposes, which we have grouped together as follows: a) Identity Data which includes your full name, aliases, your photograph and/or government ID, marital status, title, date of birth and gender. b) Contact Data which includes your home address, email address and telephone number(s). c) Financial Data which includes your bank account information. d) Background (Fit and Proper) Data which includes educational background, employment history, criminal history, personal history and financial history or source of funds.
SPECIFIC DATA SUBJECTS
We have set out below how and why we process personal data for specific categories of data subjects as follows:
Licence and Permit Applicants and Bookmakers
When you submit an application for a licence or permit, for example, a licence to operate gaming machines and premises, to be a lottery promoter or to be a technical service provider or when you apply for a Bookmakers Permit, we use your personal data to decide whether to approve the application and issue the licence or permit. We will collect and process your Identity, Contact Data and Background (Fit and Proper) Data for this purpose. As part of the licensing procedure, the Commission must satisfy itself that an applicant is a fit and proper person. Therefore, it is necessary for us to investigate all Companies and Individuals that have applied in order to protect consumers from fraudulent operators and persons. For this, purpose, we may engage the services of third-party due diligence consultants such as Refinitiv US LLC and Spectrum Gaming Group FL, LLC to undertake Fit and Proper Checks. You are required by law to submit this personal data for the purpose of licence applications.
Lottery Organizers and Prize Competition Applicants
For Lottery Organisers who submit an application for permission to hold a Bingo/Raffle and Applicants seeking authorisation to host a Prize Competition, we use your personal data to decide whether to approve the application. We will collect and process your Identity Data and Contact Data for this purpose.
Lottery and Prize Competition Winners
We may collect and process the Identity Data, Contact Data and Financial Data of lottery winners and prize competition winners for identity verification purposes. Verification is necessary to ensure the integrity and legitimacy of the lottery system.
Gaming Consumers
In order to oversee and regulate gambling activities in Jamaica, the Commission may process the personal data of gambling consumers. Your Identity and Contact Data is shared with us by Gaming Lounge Operators who directly collect that data. We also collect this personal data to comply with our legal obligations as the designated competent authority for the gambling industry under the Proceeds of Crime Act (“POCA”). As the Competent Authority, the Commission supervises gaming lounge operators to ensure the detection and prevention of money laundering, terrorism financing and proliferation financing.
Participants of the Voluntary Exclusion List
We collect and process the Identity Data of individuals who have chosen to participate in the Voluntary Self Exclusion Programme supervised by Rise Life Management Services in order to assist in the enforcement of their exclusion from gambling activities.
People we Investigate.
The Commission is given investigative and enforcement functions under the BGLA. To exercise these functions, we will undertake such activities as are necessary to determine whether any offences have been committed under the BGLA and to institute criminal proceedings. We will use personal data when conducting investigations into the activities of licensees and stakeholders in the gaming industry.
TARGETED COMMUNICATION MESSAGES
You may receive communications from the Commission if you are a Licensee or Premises/Gaming Machine Operator. You can ask us to stop sending you targeted communication messages at any time by following the opt-out links on any targeted communication message sent to you OR by contacting us at info@bglc.gov.jm.
DISCLOSURE OF YOUR PERSONAL DATA
We may disclose your data to third parties who provide services on our behalf, following our explicit instructions. Additionally, it may be shared with other entities when deemed necessary and in compliance with legal obligations. This may include: a) Relevant public authorities b) Other regulators c) Law enforcement agencies (including overseas) As explained above, we may share personal data with third parties for the purpose of due diligence or fit and proper assessment/investigations. Such third parties include Refinitiv US LLC and Spectrum Gaming Group FL, LLC.
YOUR LEGAL RIGHTS
You have the following rights under the Data Protection Act: • The right to request a copy of the personal data that we hold about you. • The right to ask us to rectify any inaccuracies in the personal data we hold about you. • The right to object or to prevent the processing (or further processing) of your personal data in certain circumstances. • The right to withdraw consent to targeted communication messages. • The right related to solely automated decision-making including profiling. We do not use automated decision-making processes that would significantly affect you. But, if we did, you have the right to human intervention, to be informed of the logic of the decision and to have the decision reconsidered. • The right to data portability to transfer your data to another controller. If you wish to exercise any of the rights set out above, please contact us at [contact email]. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
CHANGES TO THE PRIVACY NOTICE
We keep our privacy notice under regular review. This version was last updated on June 11, 2024. We will contact you if we make significant changes to this NOTICE.
CONTACT US
If you have any questions about this privacy notice or our privacy practices, you may contact us at info@bglc.gov.jm.
