"KING SERBIA strives to protect the personal data of affiliates participating in our affiliate program (hereinafter referred to as "Affiliates"). This Privacy Policy outlines how we collect, use, and protect the personal information of Affiliates who participate in our affiliate program through the website kingaffiliate.rs (hereinafter referred to as "the Site").

Users will find below the provisions regarding the processing of personal data which apply during any visit to or use of the Site by the Users (hereinafter referred to as the “Privacy policy”).

1.Background

KING® AFFILIATES processes personal data belonging to Users of the Site for the purposes and within the limits of the Privacy policy, during any visit to or use of the Site.

When processing personal data, KING® AFFILIATES takes care to comply with current laws and regulations, first and foremost with the Law on Personal Data Protection ("Sl. glasnik RS", nr. 87/2018 from 13.11.2018.), hereinafter “the Law” and Regulation (EU) 2016/679 of 27.04.2016. on the protection of persons with regard to the processing of personal data, hereinafter “the Regulation”.

In this respect, and pursuant to this Regulation, KING® AFFILIATES:

-Is legally bound to process the personal data of Users. This processing is explained in Article 2.1 of the Privacy policy;

-Also processes personal data to enable Users to use the Site and for the necessary and legitimate purposes set out in Article 2.2 of the Privacy policy;

-Processes the personal data set out and for the purposes given in Article 3, further to the prior, free and express consent of Users.

 By accessing and using the Site, Users are deemed to have read and accepted the Privacy policy. Furthermore, they guarantee that the data and information provided to KING® AFFILIATES is accurate. 

2.Processing of personal data that does not require the consent of Users

2.1.Legal obligations of KING® AFFILIATES and data processing required for use of the Site

KING® AFFILIATES is bound by the legal and regulatory obligations to which all online gaming and betting operators are subject to, on the one hand, and for the purposes of authenticating Users and enabling them to use the Site, on the other hand, to process the following personal data for the reasons set out below. This processing of personal data carried out by KING® AFFILIATES does not require the consent of Users under Article 6.1.b) and c) of the Regulation.

Personal data provided by the User is held in a record which is controlled by and remains the responsibility of KING® AFFILIATES at all times, as set out in Article 7.1.

a.What personal data is processed?

The following personal data is processed:

-name, email address, phone number, payment details, and contact information on Skype, Telegram, and Viber for affiliates participating in the KING® AFFILIATE program;

-bank details for payments made to affiliates;

-the User’s browsing history and activities on the Site, visits (browser data, IP address), particularly through the use of cookies;

-any other information that may be exchanged between KING® AFFILIATES and the User, namely by email or live chat, during the User’s registration or use of online gaming and betting offered on the Site.

b.What data processing does KING® AFFILIATES carry out?

The data processing consists of collecting, recording, retaining, consulting, organising, using, cross-referencing or any other transaction that becomes necessary or useful under the legal and regulatory provisions set out in Article 2.1.c). Processing may also consist of transferring personal data:

-- Legal and administrative authorities, including specifically, the Directorate for Games of Chance of the Republic of Serbia or the Ministry of Finance of the Republic of Serbia;

-to KING® AFFILIATES’s suppliers, whose services are required for use of the Site and who are cited on a list that may be requested from the contact person detailed in Article 7.5;

c.What are the purposes of this data processing?

1°) KING® AFFILIATES is required to process personal data as per Articles 2.1.a) and b) in order to comply with the legal and regulatory obligations by which it is bound, namely the following legal provisions:

- Law on Prevention of Money Laundering and Financing of Terrorism ("Sl. glasnik RS", No. 113/2017 of 17 December 2017);

- The Law on Personal Data Protection ("Sl. glasnik RS", No. 87/2018 of November 13, 2018).

- Law on Games of Chance ("Sl. glasnik RS", No. 88/2011, 93/2012-Law, 30/2018 and 95/2018).

2°) KING® AFFILIATES also processes personal data set out in Article 2.1.a) to authenticate Users and allow them to access and use the Site. This processing is then carried out in order to:

-registering and managing Affiliates in the affiliate program;

-communication with Affiliates regarding the affiliate program, including support and dispute resolution;

-processing payments and payouts to Affiliates based on the generated traffic and commissions.

2.2.Other data processing that does not require the consent of Users

KING® AFFILIATES also processes the following personal data for the legitimate purposes set out below. This processing of personal data carried out by KING® AFFILIATES does not require the consent of Users under Article 6.1.f) of the Regulation.

Personal data provided by the User is held in a record which is controlled by and remains the responsibility of KING® AFFILIATES at all times, as set out in Article 7.1.

a.What personal data is processed?

The following personal data is processed:

-name, email address, phone number, payment details, and contact information on Skype, Telegram, and Viber for affiliates participating in the KING® AFFILIATES program;

-bank details for payments made to affiliates;

-the User’s browsing history and activities on the Site, visits (browser data, IP address), particularly through the use of cookies;

-any other information that may be exchanged between KING® AFFILIATES and the User, namely by email or live chat, during the User’s registration or use of online gaming and betting offered on the Site.

b.What data processing does KING® AFFILIATES carry out?

The processing consists of collecting, recording, retaining, consulting, organising, using, cross-referencing of personal data set out in Article 2.2.a). It also consists of transferring this personal data to third parties, a list of whom may be accessed on request from the contact person detailed in Article 7.5.

c.What are the legitimate purposes of the data processing?

KING® AFFILIATES processes personal data set out in Article 2.2.a) for the following legitimate purposes:

-to promote, advertise and market its offering of new online gaming and betting services, which includes sending text messages, telephone calls, paper or electronic newsletters;

-to conduct satisfaction surveys, statistical studies, trend analyses, and market research in order to improve online gaming and betting services or to inform or protect Users and prevent gambling addiction.

3.Processing of personal data that requires the consent of Users

 By using the KING® AFFILIATES Site, for any reason whatsoever, the User expresses their free, individual, informed and unambiguous consent to expressly authorise KING® AFFILIATES to process personal data pursuant to the Regulation, within the limits of and for the purposes set out below and without prejudice to the data processing stipulated in Article 2.

Personal data provided by the User is held in a record which is controlled by and remains the responsibility of KING® AFFILIATES at all times, as set out in Article 7.1.

The User shall also have certain rights, including the right to withdraw their consent at any time, according to the terms of Article 3.4.

3.1.Nature of the personal data processed

KING® AFFILIATES processes the following personal data:

-name, email address, phone number, payment details, and contact information on Skype, Telegram, and Viber for affiliates participating in the KING® AFFILIATES program;

-bank details for payments made to Affiliates;

-the User’s browsing history and activities on the Site, visits (browser data, IP address), particularly through the use of cookies;

-any other information that may be exchanged between KING® AFFILIATES and the User, namely by email or live chat, during the User’s registration or use of online gaming and betting offered on the Site.

Personal data provided by the User is held in a record which is controlled by and remains the responsibility of KING® AFFILIATES at all times, as set out in Article 7.1.

3.2.The data processing

The processing consists of collecting, recording, retaining, consulting, organising, using, cross-referencing of personal data set out in Article 3.1. It also consists of transferring this personal data to third parties, a list of whom may be accessed on request from the contact person detailed in Article 7.5.

3.3.Purposes of the personal data processing

The personal data is collected and processed by KING® AFFILIATES for the following purposes:

-registration of affiliates in the affiliate program;

-communication with affiliates regarding the affiliate program;

-processing payments and payouts to affiliates based on the generated traffic;

-Conducting satisfaction surveys, statistical studies, trend analyses, and market research for management, marketing and reporting purposes, including profiling that does not fit

within the framework of the provision described in article 2.2.c);

-Analysing Affiliate performance and traffic generation;

-improving and optimizing the affiliate program;

4.Rights of the User

Without prejudice to Article 2 and 5, Users may exercise their rights to request that their data be rectified, to object to it being processed and to limit the processing, according to the terms and within the limits set out below.

4.1.Right of access

a.KING® AFFILIATES can provide Users with the following information:

-the name and contact details of the data controller:

-the contact details of data protection officer;

-the personal data processed;

-the purposes for which the personal data is being processed and the legal basis for this processing;

-the recipients or categories of recipients of personal data, as appropriate;

-and, if relevant, the fact that the data controller intends to transfer personal data to a country outside the European Union and: either the fact that the European Commission has adopted an adequacy decision (or not), and if such a decision has not been adopted, the guarantees offered by the non-EU country and the resources in place for obtaining copies of the personal data.

-The option to object to the automated processing of their data, including profiling, unless there are justified grounds requiring KING® AFFILIATES to process this data, as well as the option to object to any processing of their personal data for marketing purposes.

b.Users have the right to request to see the information referred to in this Article and in Article 3.1. at any time via the contact person detailed in Article 7.5. KING® AFFILIATES shall respond to such requests for information within one month.

c.Users may obtain a copy of personal data that is processed. KING® AFFILIATES reserves the right to claim payment for any expenses incurred in this request. These expenses shall be calculated on the basis of administrative costs incurred in the request and shall not exceed 20 euros.

d.Users shall have the right to access the information or a copy thereof in a structured format, such that the personal data is provided to them in a format that meets technical standards in place when the request for access was made. This format shall therefore allow for automatic readability.

4.2.Right to request rectification

KING® AFFILIATES guarantees and compels Users to update and rectify their personal data if this data becomes incorrect or incomplete.

The right to rectify data may be exercised by contacting the person detailed in Article 7.5.

4.3.Right to object to the processing of data

KING® AFFILIATES allows Users to object to their personal data being processed in full or in part on the following grounds:

-The data is inaccurate;

-The processing is no longer required for the purposes for which the data was collected;

-The User has withdrawn consent;

-The data has been processed illegally.

In addition, KING® AFFILIATES allows Users to object to:

-The automatic processing of their data, including profiling, unless there are justified grounds requiring KING® AFFILIATES to perform this processing.

-Any processing of their personal data for marketing purposes, including profiling if it is linked to this marketing.

The right to object to the processing of data may be exercised by contacting the person detailed in Article 7.5.

4.4.Right to be forgotten

KING® AFFILIATES also undertakes to follow up any request to erase personal data at the earliest opportunity (right to be forgotten), when:

-the processing is no longer required for the purposes for which the data was collected;

-the User has withdrawn consent;

-the data has been processed illegally or must be erased pursuant to a legal obligation.

-The User objects to the automatic processing of their data, such as profiling, and there are no justified grounds requiring KING® AFFILIATES to perform this processing.

-The User objects to the processing of their personal data for marketing purposes, such as profiling, if it is linked to this marketing.

4.5.Right to limit the processing of data

Users also have the right to limit KING® AFFILIATES’s processing of their personal data when:

-the User believes the personal data to be inaccurate, whilst KING® AFFILIATES checks the accuracy of the information;

-the processing is illegal and the User does not wish for their data to be erased but requests to limit the processing thereof;

-the User objects to automatic processing, including profiling or to the processing of their personal data for marketing purposes and it is necessary to verify the legitimacy of KING@SRBIJA’s reasons for seeking to continue this processing;

-KING® AFFILIATES no longer requires the personal data processed but the data subject would like it to be held to establish, exercise or defend legal claims;

The right to limit the processing of data may be exercised by contacting the person detailed in Article 7.5.

4.6.Transferring data to a data controller

Users may transfer their personal data to another data controller without objection from KING® AFFILIATES.

For such a transfer to be technically possible, Users may ask KING® AFFILIATES that it be performed directly by its data controller.

4.7.Modalities

The rights recognized by KING® AFFILIATES to the User must be exercised in accordance with the modalities defined by article 7.5.

4.8.Notification

KING® AFFILIATES shall notify the User of any data that is erased or rectified in accordance with Articles 4.2 and 4.4, unless such notification proves impossible or involves disproportionate efforts.

This notification shall be sent by letter or email, using the contact details provided by the User.

5.Location, retention and retention period of personal data

5.1.KING® AFFILIATES retains Users’ personal data appropriately and securely in a form which enables it to be identified and made available.

The data is retained and hosted in Serbia at the Data Center. KING® AFFILIATES provides all of the required or useful security assurances with regard to current technical standards.

5.2.Users’ personal data is retained by KING® AFFILIATES for the purposes set out in Articles 2 and 3. It is retained for a period of 10 years for all of the purposes governed by Article 2.a); KING® AFFILIATES therefore reserves the right to retain Users’ personal data for any reasons imposed by law due to the fact that its business is that of online gaming and betting. Users declare that they have been informed of this and agree that, in relation to the Law on the Prevention of Money Laundering and Financing of Terrorism ("Sl. glasnik RS", No. 113/2017 of 17 December 2017) KING® AFFILIATES is required to retain a photocopy of the User’s identity card or the document used for identification for at least ten years from the date of the player’s last activity on the Site.

For all of the cases governed by Article 2.2. and 3., personal data is only retained for the period required for the purpose of the processing. The data is then erased from KING® AFFILIATES’s files on the User’s request sent to the contact person referred to in Article 7.5.

After an Affiliate's participation in the affiliate program ends, their personal data will be stored for a period of 24 moths for legal and accounting purposes, after which it will be securely deleted

6.Liability of KING® AFFILIATES – Data processor

6.1.KING® AFFILIATES undertakes to ensure that the processing of personal data is carried out in a lawful, loyal and transparent manner with regard to the User concerned. Any data processing operation performed by KING® AFFILIATES shall comply with the Personal Data Protection Act ("Sl. glasnik RS", No. 87/2018 of November 13, 2018) and with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and this Privacy policy.

KING® AFFILIATES shall implement all reasonable and appropriate means to ensure the confidentiality, integrity and availability of the personal data it processes. These namely technical and organisational measures are explained in the data protection manual which may be obtained from the contact person detailed in Article 7.5.

Technical measures include the anonymisation and encryption of personal data, depending on the purpose.

Organisational measures include carrying out internal audits, in addition to audits to which KING® AFFILIATES may be subject by the Commission des jeux de hasard in particular.

If necessary, KING® AFFILIATES and the data protection officer shall carry out an impact assessment when the data processing is likely to pose a high risk for Users.

6.2.Users’ personal data is not sent to any third parties other than suppliers and partners of KING® AFFILIATES, except for the purposes set out in Articles 2.1, 2.2 and 3 and, consequently, if:

•The data transfer is made mandatory by a law or regulation or when ordered by an administrative or judicial authority;

•The data transfer proves necessary for the supply of online gaming and betting services, or maintenance services;

•The User has consented to such a transfer;

The partner shall not be deemed a data processor unless they process Users’ personal data on behalf of KING® AFFILIATES. KING® AFFILIATES shall not be held liable for the processing of User’s personal data by partners who supply their own services in their own name on their own behalf or if it proves that it is not responsible for the event that gave rise to the damage.

 It is understood that in the event that KING® AFFILIATES acts in the capacity of the processor’s partner, KING® AFFILIATES shall be liable for damage caused by processing personal data contrary to the Regulation or this Privacy policy only where it has not complied with obligations of the Regulation or this Privacy policy directed to processors, or where it has acted outside or contrary to lawful instructions of the partner. Similarly, KING® AFFILIATES shall not be held liable if it proves that it is not responsible for the event that gave rise to the damage.

6.3.KING® AFFILIATES shall ensure that when the processing is carried out by a processor on behalf of KING® AFFILIATES, the processor shall provide sufficient assurances that appropriate technical and organisational measures have been implemented and, more generally, that the Regulation has been complied with. In particular, the processor is required to comply with the Regulation and, therefore, keep a record of processing activities.

6.4.KING® AFFILIATES undertakes to ensure that in the event of a security problem related to data processed which may affect the confidentiality thereof, KING® AFFILIATES shall report the incident at the earliest opportunity to the data protection authority stipulated in Article 7.4.

 KING® AFFILIATES shall also inform the Users concerned, insofar as the personal data breach poses a high risk to the rights and freedoms of the User; the User shall be informed by letter or email using the contact details that they have provided.

7.Miscellaneous

7.1.Record of personal data and data protection manual

As a personal data controller, KING® AFFILIATES keeps a record of all of its data processing activities. This record contains all of the information about the type of data processed, data subjects, potential data recipients, the purposes of the data processing and how long the data shall be retained for, as well as a general description of technical and organisational security measures in place.

Personal data provided by the User, any processing of this data and the purposes of such processing are held in a record which is controlled by and remains the responsibility of KING® AFFILIATES at all times. In addition to the information above, this record includes:

e.a description of the purposes of the processing;

f.a description of the categories of data subjects and categories of personal data;

g.the categories of recipients to whom the personal data has been or shall be sent, including recipients in non-EU countries or international organisations;

h.the deadlines for erasing various categories of data;

i.a general description of technical security measures.

7.2.Entire agreement - modification of the Privacy policy

The Privacy policy contains all of the contractual provisions binding Users, without prejudice to the general provisions in the Terms and Conditions of Use of the Site of which they form an integral part. The Terms and Conditions of Use of the Site shall remain applicable for any matters that do not relate to the protection of personal data.

In addition, KING® AFFILIATES reserves the right to modify the Privacy policy. Any updates are enforceable against Users once published on the Site. KING® AFFILIATES undertakes to state the date on which the Privacy policy that appears on the Site was placed online.

7.3.Probative value

The User acknowledges that the electronic documents exchanged and electronic data collected during their registration or use of the Site have the same probative value as if these documents and data had been sent or communicated on paper. They therefore undertake to not dispute their force or probative value due to the fact that they are in electronic form.

7.4.Data protection authority

Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and the Law of 8 December 1992, the User has the right to request additional information or lodge a complaint with the data protection authority. The Independent State Data Protection Authority is the Commissioner for Information of Public Importance and Personal Data Protection. Contact details are as follows:

 Address: Bulevar Kralja Aleksandra 15, 11120 Beograd

 Telephone: +381 11 3408 900

 Fax: +381 11 3343 379

 Email: [email protected]

7.5.Contact – Information on the identity of the data controller and data protection officer

KING® AFFILIATES may be contacted for any questions regarding the protection of Users’ personal data via the following:

-Letter: Digital Revolution d.o.o. Niš – Medijana, Vojvode Tankosica 40/7, 18105 Niš

-Email: [email protected]

-Telephone: +381 60 0474 410

The data controller within KING® AFFILIATES is Dragan Đorđević.

 KING® AFFILIATES has also appointed a data protection officer under Article 37 of the Regulation cited above. This person may be contacted by email: [email protected]. They are responsible for ensuring that processing of Users’ personal data by KING® AFFILIATES is monitored and complies with legal requirements.