Data Privacy Statement

WHO WE ARE

The Betting Gaming & Lotteries Commission (collectively referred to as “BGLC”, “the
Commission”, “we”, “us” or “our” in this privacy notice) was set up under the Betting Gaming
and Lotteries Act (“the BGLA”) to regulate and control the operation of betting and gaming
and the conduct of lotteries in Jamaica. To carry out our regulatory functions and fulfil our legal
responsibilities, we need to collect your personal data. When we do, we act as the data
controller for that information for the purposes of the Data Protection Act (“The DPA”).
This Privacy Notice informs you about the ways your personal data is collected, stored and
used by BGLC, and how you can exercise your rights. This notice applies to:
a) Licence and Permit Applicants
b) Lottery Organisers
c) Lottery Winners
d) Gaming Consumers
e) Participants on the Voluntary Exclusion List
f) People we Investigate

WHAT PERSONAL DATA DO WE COLLECT, FOR WHAT PURPOSE AND WHAT IS
THE LEGAL BASIS FOR DOING SO?

We collect and process your personal data based on one or more of the following legal bases:
a) Legal Obligations and Regulatory Functions: As a regulatory body, most of the personal
data we collect and process, including sensitive personal data, is necessary to exercise
our regulatory functions under the BGLA.
b) Contract: the processing is necessary for a contract we have with you or your
organisation, or to take specific steps before entering into a contract.
c) Administration of Justice & Fraud Prevention: It may be necessary for us to process
your data to conduct investigations and exercise our powers of enforcement as well as
to assist other regulators or law enforcement agencies for the purposes of preventing
fraud.
d) Legitimate Interests: the processing is necessary for pursuing our legitimate interests or
the legitimate interests of a third party to whom we may disclose your personal data
provided that your rights, freedoms or legitimate interests are not prejudiced.
e) Public Interest: Similar to our regulatory functions, we may process your personal data
in the exercise of our functions which are of a public nature and are in the interests of
the public.
We may process different categories of personal data for the above purposes, which we have
grouped together as follows:
a) Identity Data which includes your full name, aliases, your photograph and/or
government ID, marital status, title, date of birth and gender.
b) Contact Data which includes your home address, email address and telephone
number(s).
c) Financial Data which includes your bank account information.
d) Background (Fit and Proper) Data which includes educational background,
employment history, criminal history, personal history and financial history or source
of funds.

SPECIFIC DATA SUBJECTS

We have set out below how and why we process personal data for specific categories of data
subjects as follows:

Licence and Permit Applicants and Bookmakers

When you submit an application for a licence or permit, for example, a licence to operate
gaming machines and premises, to be a lottery promoter or to be a technical service provider
or when you apply for a Bookmakers Permit, we use your personal data to decide whether to
approve the application and issue the licence or permit. We will collect and process your
Identity, Contact Data and Background (Fit and Proper) Data for this purpose.
As part of the licensing procedure, the Commission must satisfy itself that an applicant is a fit
and proper person. Therefore, it is necessary for us to investigate all Companies and Individuals
that have applied in order to protect consumers from fraudulent operators and persons. For this,
purpose, we may engage the services of third-party due diligence consultants such as Refinitiv
US LLC and Spectrum Gaming Group FL, LLC to undertake Fit and Proper Checks. You are
required by law to submit this personal data for the purpose of licence applications.

Lottery Organizers and Prize Competition Applicants

For Lottery Organisers who submit an application for permission to hold a Bingo/Raffle and
Applicants seeking authorisation to host a Prize Competition, we use your personal data to
decide whether to approve the application. We will collect and process your Identity Data and
Contact Data for this purpose.

Lottery and Prize Competition Winners

We may collect and process the Identity Data, Contact Data and Financial Data of lottery
winners and prize competition winners for identity verification purposes. Verification is
necessary to ensure the integrity and legitimacy of the lottery system.

Gaming Consumers

In order to oversee and regulate gambling activities in Jamaica, the Commission may process
the personal data of gambling consumers. Your Identity and Contact Data is shared with us by
Gaming Lounge Operators who directly collect that data. We also collect this personal data to
comply with our legal obligations as the designated competent authority for the gambling
industry under the Proceeds of Crime Act (“POCA”). As the Competent Authority, the
Commission supervises gaming lounge operators to ensure the detection and prevention of
money laundering, terrorism financing and proliferation financing.

Participants of the Voluntary Exclusion List

We collect and process the Identity Data of individuals who have chosen to participate in the
Voluntary Self Exclusion Programme supervised by Rise Life Management Services in order
to assist in the enforcement of their exclusion from gambling activities.

People we Investigate.

The Commission is given investigative and enforcement functions under the BGLA. To
exercise these functions, we will undertake such activities as are necessary to determine
whether any offences have been committed under the BGLA and to institute criminal
proceedings.
We will use personal data when conducting investigations into the activities of licensees and
stakeholders in the gaming industry.

TARGETED COMMUNICATION MESSAGES

You may receive communications from the Commission if you are a Licensee or
Premises/Gaming Machine Operator. You can ask us to stop sending you targeted
communication messages at any time by following the opt-out links on any targeted
communication message sent to you OR by contacting us at info@bglc.gov.jm.

DISCLOSURE OF YOUR PERSONAL DATA

We may disclose your data to third parties who provide services on our behalf, following our
explicit instructions. Additionally, it may be shared with other entities when deemed necessary
and in compliance with legal obligations. This may include:
a) Relevant public authorities
b) Other regulators
c) Law enforcement agencies (including overseas)
As explained above, we may share personal data with third parties for the purpose of due
diligence or fit and proper assessment/investigations. Such third parties include Refinitiv US
LLC and Spectrum Gaming Group FL, LLC.

YOUR LEGAL RIGHTS

You have the following rights under the Data Protection Act:
• The right to request a copy of the personal data that we hold about you.
• The right to ask us to rectify any inaccuracies in the personal data we hold about you.
• The right to object or to prevent the processing (or further processing) of your personal
data in certain circumstances.
• The right to withdraw consent to targeted communication messages.
• The right related to solely automated decision-making including profiling. We do not
use automated decision-making processes that would significantly affect you. But, if
we did, you have the right to human intervention, to be informed of the logic of the
decision and to have the decision reconsidered.
• The right to data portability to transfer your data to another controller.
If you wish to exercise any of the rights set out above, please contact us at info@bglc.gov.jm. We
may need to request specific information from you to help us confirm your identity and ensure
your right to access your personal data (or to exercise any of your other rights). This is a security
measure to ensure that personal data is not disclosed to any person who has no right to receive
it. We may also contact you to ask you for further information in relation to your request to
speed up our response.

CHANGES TO THE PRIVACY NOTICE

We keep our privacy notice under regular review. This version was last updated on June 11,
2024. We will contact you if we make significant changes to this NOTICE.

CONTACT US

If you have any questions about this privacy notice or our privacy practices, you may contact
us at info@bglc.gov.jm.