Once you apply, we carefully review your CV and qualifications, arrange interviews, and assess your suitability for the role, always focusing on merit and ability. If we decide to move forward, we’ll extend an offer and initiate onboarding steps, such as confirming your right to work.
Where required, particularly for roles with regulatory responsibilities or access to sensitive data, we may also conduct background checks. These can include verifying employment history, references, and, where legally permissible, criminal or credit record screening.
This comprehensive process helps us make fair, consistent hiring decisions and ensures we meet our regulatory and contractual responsibilities as an employer in the online gambling industry, while upholding our commitment to equal opportunities. If you are part of our talent pool and haven’t actively applied for a role, you always have the option to request the removal of your details at any time.
- Categories of Personal Data:
- Contact Information
- Personal Biographic Information
- Employment Information
- Immigration and Work Status
- Legal Bases:
- Necessary for the performance of a contract or taking steps prior to entering a contract. If you fail to provide the necessary information, we may be unable to consider you for a role at BVGroup.
- Consent in relation to keeping you in our talent pool. You have the right to withdraw your consent at any time, but this will not affect the lawfulness of the processing before you withdraw it.
- We may engage various processors to assist us in handling personal data, including technology service providers and operational support providers. We may also share your data with other companies within the BVGroup to support our personal data processing activities.
We obtain the data used as part of this processing from:
- You,
- Public sources,
- Background screen tools, or
- We may generated it ourselves
Legitimate Interests
We do not rely on the lawful basis of legitimate interests to process your personal data during the recruitment process. Instead, we primarily process your data because it is necessary to take steps at your request before entering a potential employment contract. Where any additional processing is required, such as retaining your details in a talent pool for future opportunities, we will always seek your explicit consent.
General Processing Information
This section provides key information about how we manage your personal data behind the scenes. It covers aspects such as:
- How we share your data within the BVGroup
- When and why we transfer your data internationally
- What we do to keep your data secure
- How long do we keep your data
Group Sharing
We may share your personal data with other companies within the BVGroup when it is necessary for purposes such as providing our services, ensuring a consistent experience across our platforms, meeting legal or regulatory requirements, or supporting internal operations like analytics, reporting, and customer support.
All BVGroup companies are obligated to handle your personal data in line with this privacy notice and applicable data protection laws, reinforcing our unified approach to data protection and equal opportunities.
Company Reorganisation
Should we ever be involved in a merger, acquisition, reorganisation, or sale of some or all of our business, your personal data may be shared with prospective or actual buyers, their advisers, or other relevant third parties. We assure you that any such sharing will be conducted securely and in compliance with data protection laws. We will only share the necessary information to evaluate or complete the transaction.
International Transfers
Some of the third-party providers we collaborate with are located outside Gibraltar, the European Economic Area (EEA), and the UK. It is important to note that these countries do not always have data protection laws that offer the same level of protection as the GDPR.
When we transfer your personal data to a country not recognised as providing adequate protection, we implement additional safeguards to keep your data safe. This includes utilising standard contractual clauses approved by relevant authorities, along with any supplementary legal or contractual measures required by local laws. Where necessary, we also implement technical and organisational controls, such as encryption or access restrictions, to ensure your personal data remains protected to the standard required under the GDPR.
Data Subject Rights
Under data protection laws such as the UK GDPR, EU GDPR, and other applicable regulations, you are granted a number of rights in relation to your personal data. These rights empower you to stay informed about how your data is used and to exercise control over it, aligning with our commitment to transparency and fairness. These include:
- Right to access – You can request a copy of the personal data we hold about you and information about how we use it.
- Right to rectification – You can ask us to correct or update inaccurate or incomplete personal data.
- Right to erasure – In certain circumstances, you can request that we delete your personal data (also known as the “right to be forgotten”).
- Right to restrict processing – You can ask us to limit how we use your personal data in specific situations, for example, if you contest its accuracy or object to processing.
- Right to data portability – You can request to receive your personal data in a structured, commonly used, and machine-readable format and have it transferred to another provider, where technically feasible.
- Right to object – You can object to our processing of your personal data where it’s based on our legitimate interests, or for direct marketing purposes.
- Rights related to automated decision-making – If we make decisions about you based solely on automated processing, you have the right to request human intervention, express your point of view, and challenge the decision.
To exercise any of these rights, or if you have questions about how we handle your data, please do not hesitate to contact us. We may need to verify your identity before responding to your request, and in some cases, legal or regulatory obligations may limit how we can respond. If you’re not satisfied with our response, you also have the right to lodge a complaint with the applicable data protection authority.
Automated Decisions
Automated decision-making refers to decisions made about you using technology, without any human involvement. This can include using software or algorithms to assess your personal data and make decisions, such as whether your application meets certain criteria. Where these decisions have a legal effect on you, or similarly significant impact (for example, automatically rejecting a candidate without human review), data protection laws grant you specific rights.
These include the right to request human intervention, to express your point of view, and to challenge the decision.
As part of the application process, we may use automated filtering questions to ensure that candidates meet basic legal or eligibility requirements for the role.
For example, we may ask whether you have the legal right to work in the relevant jurisdiction, or whether you are over 18, which is a legal requirement for working in the gambling industry. If you answer “no” to a mandatory requirement, your application may be automatically excluded from progressing further. These filters are used to meet our legal obligations and ensure we only consider candidates who are eligible to work with us. It is important to note that these types of checks do not replace the broader recruitment decision, which always includes human review for candidates who meet the initial criteria.
If you believe that an automated decision we have made about your application is incorrect or unfair, you have the rights described in the section “Data Subject Rights.” This includes the right to request human intervention, to express your point of view, and to challenge the decision.
Retention
We only retain your personal data for as long as necessary to manage our recruitment processes and to comply with legal or regulatory requirements.
- If your application is successful, the information you provided during recruitment will become part of your employee record and will be retained in line with our internal HR and employment policies.
- If your application is not successful, we will retain your personal data for up to 1 year after your application. This allows us to respond to any queries about the decision and demonstrate compliance with legal obligations, reflecting our commitment to fairness and accountability.
- If you join our talent pool, we may keep your data on file as long as you consent, but you can ask us to remove it at any time.
Where we no longer need your personal data, we delete it securely. If we retain any data for analytical purposes, we will anonymise it first so that it can no longer identify you. We take appropriate steps to protect your personal data throughout the entire retention period.
Version
This Notice was last updated 1st August 2025.