GDPR Compliance
Your Data Protection Rights and How We Handle Personal Data
General Data Protection Regulation (GDPR)
At Gametime Game Prime, we are fully committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines our comprehensive GDPR compliance measures and your data protection rights.
Compliance Commitment: We adhere to the highest standards of data protection and regularly review our practices to ensure ongoing compliance with UK data protection laws.
Legal Basis for Processing
We process personal data based on one or more of the following legal grounds under UK GDPR:
- Consent – When you explicitly consent to specific processing activities, such as marketing communications
- Contractual Necessity – To fulfill our contractual obligations and provide our services to you
- Legal Obligation – To comply with UK gambling regulations and data protection laws
- Legitimate Interests – For our business interests, carefully balanced against your rights and freedoms
- Vital Interests – To protect someone's life in emergency situations
- Public Task – When performing official functions or exercising official authority
Your GDPR Rights
Under the UK GDPR, you have comprehensive rights regarding your personal data:
Right to Access
Request copies of your personal data we hold. We provide this information within one month, free of charge, in a commonly used electronic format.
Right to Rectification
Request correction of inaccurate or incomplete personal data we hold about you. We will promptly make the necessary corrections.
Right to Erasure (Right to be Forgotten)
Request deletion of your personal data when it is no longer necessary, consent is withdrawn, or you object to the processing.
Important Note: Some data may be retained for legal compliance under UK gambling regulations, which require minimum retention periods for certain records.
Right to Restrict Processing
Request restriction of processing in specific circumstances, such as when you contest the accuracy of data or object to processing.
Right to Data Portability
Receive your personal data in a structured, commonly used, and machine-readable format to transfer it to another controller where technically feasible.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you.
Right to Withdraw Consent
Withdraw previously given consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
Data Protection Principles
We adhere to the core data protection principles under UK GDPR:
- Lawfulness, Fairness & Transparency – Process data lawfully, fairly, and transparently
- Purpose Limitation – Collect data for specified, explicit, and legitimate purposes
- Data Minimization – Only collect data that is adequate, relevant, and necessary
- Accuracy – Keep personal data accurate and up to date
- Storage Limitation – Retain data only as long as necessary for the purposes
- Integrity & Confidentiality – Process data securely using appropriate technical measures
- Accountability – Demonstrate compliance with all these principles
International Data Transfers
When transferring personal data outside the UK, we ensure adequate protection through:
- Adequacy Decisions – Countries with UK adequacy regulations
- Standard Contractual Clauses – UK-approved data protection clauses
- Binding Corporate Rules – For intra-organizational transfers
- Specific Derogations – Where applicable for specific situations
- Supplementary Measures – Additional safeguards where needed
All international data transfers undergo thorough risk assessments and implement appropriate safeguards to ensure your data protection rights are maintained.
Data Protection Officer
Our dedicated Data Protection Officer (DPO) oversees GDPR compliance and serves as your point of contact for all data protection matters. You can contact our DPO at:
Email: support@gametimegameprime.uk
Postal Address: Data Protection Officer, 63 EDITH GROVE, LONDON, ENGLAND SW10 0LB
Response Time: We aim to respond to all DPO inquiries within 48 hours
Making a GDPR Request
To exercise your GDPR rights, please follow these steps:
- Submit Your Request – Contact us via email or postal address
- Identity Verification – We will verify your identity to protect your data
- Response Time – We respond within one month of receiving your request
- No Charge – Services provided free of charge in most cases
- Complex Requests – May be extended by two months if complex
- Explanation – We explain reasons if we cannot fulfill your request
- Appeals Process – Right to appeal if dissatisfied with our response
Complaints and Regulatory Oversight
If you have concerns about how we handle your personal data, you have multiple avenues for resolution:
Email: support@gametimegameprime.uk
Registered Address: 63 EDITH GROVE, LONDON, ENGLAND SW10 0LB
Information Commissioner's Office (ICO): www.ico.org.uk
ICO Helpline: 0303 123 1113
ICO Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
We encourage you to contact us first to resolve any concerns. However, you have the right to lodge a complaint directly with the ICO, the UK's independent authority for data protection issues.
Record Keeping and Accountability
We maintain comprehensive records to demonstrate our GDPR compliance:
- Records of processing activities
- Data protection impact assessments
- Data breach response procedures
- Staff training records
- Consent management records
- Data transfer documentation
- Third-party processor agreements