Privacy policy

1. Introduction and data controller

By applying to the Roll United affiliate programme you agree to be bound by this Privacy Policy. It sets out how we collect, use, process and disclose your information.

The data controller is the company that decides the purposes and means by which your personal data is processed. TTech B.V., registration number 96728639, acts as data controller for the purposes of Regulation (EU) 2016/679 (the GDPR). References to “we”, “us” and “our” mean that company.

Contact details for the data controller are in section 7.

This policy covers applicants to and participants in the affiliate programme, and visitors to this website. It does not cover how Roll United’s consumer gambling brands handle player data — those brands publish their own policies.

2. Information we collect

When you apply to become an affiliate we ask for your name or username, the address of your website or channel, your email address, your country and your preferred payment currency.

Once you are approved we additionally collect your full name, postal address, date of birth, telephone number and any other contact details needed to manage the relationship. At some point during your term we may request identity documents in order to complete a KYC check, carried out to satisfy anti-money-laundering obligations.

We also collect data generated by your participation: clicks, registrations, deposits and revenue attributed to your tracking links, together with technical data such as IP address, browser and device type when you visit this site.

Two things on this website do not send us data. Figures you enter into the revenue calculator are processed entirely in your browser and are never transmitted to or stored by us. The “Partner with us” button opens a pre-filled draft in your own email client — including any calculator figures — and we receive nothing unless you choose to send that message yourself.

3. How we use the information we collect

The information you provide is necessary for the proper performance of the contract between you and us, including enforcing our affiliate terms and conditions and notifying you of changes to them. We also use it to calculate and pay your commission, to detect and investigate fraudulent or artificial traffic, and to meet our legal, tax and regulatory obligations.

In some cases we may also use your data to:

• contact you about promotions, products or services likely to interest you, where you have consented to receive such messages;
• build a limited profile of your activity in order to measure, personalise and improve our marketing, so that what we send you is more relevant.

Where we process personal data for those purposes, we do so on the basis of our legitimate interest in marketing products and services that may be of interest to you, or on the basis of your consent where the law requires it. You can opt out of marketing at any time by following the unsubscribe instructions in any message, by changing your notification settings in your affiliate interface, or by writing to affiliates@rollunited.com.

4. Sharing and disclosure

4.1. Compliance with law, legal requests, preventing harm, and protecting our rights

We may disclose your information, including personal data, to courts, law enforcement, governmental authorities or authorised third parties where we are required or permitted to do so by law, or where disclosure is reasonably necessary to comply with a legal obligation, to respond to legal process or to claims made against us, or to respond to a request concerning a criminal investigation or suspected unlawful activity that could expose us, you or another user to legal liability.

The lawful basis for this processing is our legitimate interest in asserting and defending our legal rights and protecting our business against risk.

4.2. Third-party service providers

We use a range of third-party providers to deliver the affiliate programme — including [AFFILIATE TRACKING PLATFORM] for attribution and reporting, [PAYMENT PROVIDERS] for paying commission, and [HOSTING / INFRASTRUCTURE PROVIDERS] for running our systems. These providers may be located inside or outside the European Economic Area.

Providers receive only the information they need, are contractually required to protect it, and may use it solely on our behalf for the purposes for which it was disclosed and consistently with this policy. We share such information in order to perform our contract with you, to pursue our legitimate interests and to meet our legal obligations, and we will obtain your consent where that is required. You may contact us at any time for the full current list of providers that process your data.

We do not sell personal data.

4.3. Corporate affiliates

We may share your information with any member of our group of companies — meaning our subsidiaries, our ultimate holding company and its subsidiaries — so far as reasonably necessary for the purposes, and on the lawful bases, described in this policy.

4.4. Business transfers

If we are involved in a merger, acquisition, reorganisation, sale of assets, bankruptcy or insolvency, we may sell, transfer or share some or all of our assets, including your information, in connection with or in contemplation of that transaction, such as during due diligence. If your personal data would become subject to a different privacy policy as a result, we will notify you before the transfer takes effect.

5. Your rights

Under the GDPR you have rights to access, rectify, port and delete certain personal data, and to object to or restrict certain processing. Which rights apply in a given case depends on the nature of the data, why it was collected and processed, and any legal or operational reason we must retain it.

To exercise any of these rights, email affiliates@rollunited.com. We may need to verify your identity before acting on a request. We will try to accommodate any request, but these rights are not absolute — we may have to decline a request, or may be able to satisfy it only in part.

5.1. Managing your information

You can view and update parts of your information directly in your affiliate interface settings. Keeping that information accurate and current is your responsibility.

5.2. Correcting inaccurate or incomplete information

You may ask us to correct personal data about you that is inaccurate or incomplete and that you cannot amend yourself in your interface.

5.3. Access and portability

You may ask for a copy of the personal data we hold about you, and may ask to receive certain data in a structured, commonly used, machine-readable format, or to have it transmitted to another provider where that is technically feasible.

5.4. Retention and erasure

We keep your personal data for as long as needed to perform our contract with you and to meet our legal obligations. When it is no longer necessary to process it, it is deleted — though legal and regulatory requirements may oblige us to keep certain records for longer.

You may ask us to erase personal data where it is no longer necessary for us to process it, where you have withdrawn consent under section 5.5, where you have objected under section 5.6, where the data has been processed unlawfully, or where erasure is required by law. If you request erasure, please note that:

• we may retain and use personal data as far as necessary to comply with our legal obligations;
• we may retain personal data where necessary for our legitimate business interests, such as detecting and preventing fraud and maintaining the integrity of the programme;
• information may be accessed and preserved for an extended period where it is subject to a legal request or obligation, a governmental investigation, an investigation into possible breaches of our terms, or is otherwise needed to prevent harm.

5.5. Withdrawing consent and restricting processing

Where we have specifically asked for your consent and have no other lawful basis to rely on, you may withdraw that consent at any time through your interface settings or by writing to us and stating which consent you are withdrawing. Withdrawal does not affect the lawfulness of processing carried out before it.

You may also have the right to limit how we use your personal data, in particular where you contest its accuracy; where the processing is unlawful but you oppose erasure; where we no longer need the data but you require it to establish, exercise or defend a legal claim; or where you have objected under section 5.6 and we are still verifying whether our legitimate grounds override yours.

5.6. Objecting to processing

Where our lawful basis is legitimate interests, you may object to the processing. We may nevertheless continue where another lawful basis applies, or where we have compelling grounds that are not overridden by your rights, interests and freedoms.

You may object to direct marketing at any time, either through your interface settings or by using the opt-out in the message itself. You may also object to profiling to the extent it relates to direct marketing.

5.7. Lodging a complaint

You have the right to complain about our data processing to the competent supervisory authority. Ours is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority). See section 7 for contact details.

6. Overseas transfer of your information

To support our operations we may transfer, store and process your information within our group of companies, or share it with service providers based outside Europe, for the purposes described in this policy.

Where personal data is transferred outside the EEA, we take reasonable steps to ensure it remains as well protected as it would be within the EEA, relying on standard contractual clauses, binding corporate rules, an adequacy decision, or another mechanism that provides an equivalent standard of protection. You may contact us for the list of providers outside the EEA that process your data.

7. Contact us

For questions about this policy or our handling of information, or to exercise any of your rights, contact our data protection officer at affiliates@rollunited.com.

The data controller responsible for your information is TTech B.V., registration number 96728639. You can reach us by email at affiliates@rollunited.com or by post at Kloosterweg 58, 1251 WG, Laren, Noord-Holland, The Netherlands.