Privacy Policy

The National Betting Authority (“NBA” or “Authority”) is a supervisory authority responsible for the licensing and supervision of betting activity in the Republic of Cyprus. It is governed by the Betting Law of 2019 and was established in 2012 as a Public Law Entity. 

This Policy provides an overview of how the Authority protects the personal data and privacy of users who visit the Professional Skills Academy (the “Academy”) and who register for the purpose of purchasing and accessing the Training Material offered by the NBA. The Authority is committed to protecting and handling your personal data in a lawful, transparent manner and in accordance with the European Regulation 2016/679 and the relevant data protection legislation in force in the Republic of Cyprus.

The Authority takes all reasonable measures to protect your personal data and information obtained through your use of the Academy. However, the Authority is not responsible in any way and to any extent for any leakage of your personal data as a result of illegal actions of third parties, who are not related to the Authority and who gain access to the files of the Academy and/or the Website and/or the Moodle learning management system without the NBA’s authorization.

This Policy applies regardless of whether you access our website via your personal computer, mobile device or any other technology or device.

Contacting the Data Protection Officer

You can contact the Data Protection Officer of the National Betting Authority at [email protected] or at the phone number +357 22881800.

Alternatively, you can send any correspondence to the postal address below: 

Data Protection Officer 

National Betting Authority 

Digeni Akrita 83, 1070 

Nicosia, Cyprus

What is Personal Data and special category data? 

“Personal Data” means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is someone who can be identified, directly or indirectly, in particular by reference to a characteristic such as a name, an identification number, tracking data, a web-based characteristic or one or more factors that determine the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

“Special category data” includes data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic and biometric data, data concerning health or data concerning an individual’s sex life or sexual orientation.

Categories and uses of the data we collect 

The information and data about you that we collect, use and process includes the following types of data: 

• Identifying information: full name, email addresses, employer’s name, phone number, etc.
• Payment details: method of payment and relevant information, VAT number, etc.
• Academy data: information related to your purchases, whether or not you have completed any training, how often you visit the Academy, cancellation of purchase, transfer of training to another user, etc.
• Other: any communication between us and you, complaints, suggestions, etc.

Personal data and special category data may be collected and processed in one or more of the legal situations described below: 

Legal obligation: processing is necessary to comply with our legal obligations.

Public task: processing is necessary to perform a task in the public interest or for official functions of the NBA and the task or function has a clear legal basis.

Legitimate interest: processing is necessary for the purposes of the legitimate interests pursued by the NBA, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.

Consent: the individual has given explicit consent for the Authority to process his or her personal data for a specific purpose. It is understood that the individual may withdraw his or her consent at any time.

Contract: processing is necessary for the performance of a contract entered into by the Authority with a data subject or because it has been requested by such a subject to take specific measures prior to entering into the contract.

Vital interests: processing is necessary to protect a vital interest of an individual.

The NBA may share with or receive personal data about you from EDEX – Educational Excellence Corporation LTD (University of Nicosia) and Moodle Pty Ltd, who are the Authority’s partners in the implementation and operation of the Academy.

What are your Rights?

Any person subject to the processing of personal data by the Platform has the following rights: 

• Right to rectification,
• Right to erasure (“right to be forgotten”),
• Right to restriction of processing,
• Right to object.

The Authority may refuse to examine requests that are manifestly unfounded or excessive. 

The Authority reserves the right to charge a reasonable fee for repeated requests, requests for further copies of the same data or requests that are considered manifestly unfounded or excessive.

You can only submit your request by email to: [email protected]

 The request must include:   

• Name,
• Surname,
• Email address.

Right to rectification: 

You have the right to request the amendment/completion of your relevant personal information if the personal data we hold about you is inaccurate or incomplete.

Right to erasure (“right to be forgotten”):

In limited circumstances, you have the right to request the deletion of information we hold about you. You may exercise this right in the following circumstances:

• when the data are no longer needed for the purposes for which they were collected,
• when you have withdrawn your consent and there is no other legal basis on which we can continue to process your personal data,
• where you object to the processing and there is no legal obligation to continue any processing,
• where the data has been unlawfully processed,
• where the data must be erased to comply with a legal obligation.

Right to restriction of processing:

You have the right to request the restriction of the processing of your data in the following circumstances:

• the accuracy of the data is disputed by you, for a period necessary to enable the Authority to verify the accuracy of the data,
• the processing of data is unlawful, and you object to the erasure of these date; or
• the Authority no longer needs the data for the purposes for which they were collected but you need them for the establishment, exercise, or maintenance of legal claims.

Right to object:

If it is personal data whose processing is not necessary for the execution of this contract and which in the above table do not have as a legal basis for processing the same, you have the right to object to the processing of the NBA unless it can demonstrate that there are compelling legitimate grounds for continuing data processing.

Privacy Policies of other websites

The Platform website contains links to other websites. The Platform’s Privacy Policy applies only to its website, so if you click on a link to another website, you should read the corresponding privacy policy of that website, for which the Authority bears no responsibility.

Where do we store your data?

Your information is mainly stored in electronic form on servers located in Cyprus and on the Moodle learning management system servers we use for the purpose of disseminating the Learning Material and which are located within the EEA.

Transfer of Data outside the EEA 

We will transfer your Personal Data outside the EEA where –

• you have given your express consent, or
• it is necessary for us to create or perform a contract you have entered into with us.

If we transfer your Personal Data outside the EEA to our business partners, we will take steps to ensure that it is protected to the same standards as in the EEA based on one of the following:

• the country receiving your Personal Data has been found by the European Commission to offer the same level of protection as the EEA. More information can be found on the European Commission’s website,
• we will use contracts that require the recipient to protect your Personal Data to the same standards as in the EEA,
• basic contractual clauses or binding corporate rules or any other acceptable method that ensures your Personal Information is protected to the required standards within the EEA.

For how long do we keep your data? 

It is our policy to keep your data only for as long as necessary for the purpose for which it was collected, in accordance with the principles of data minimisation and storage period limitation. Your data will be kept for at least five years from your last purchase or the date you last logged into the Academy.

If you request the termination of the contract between us and the deletion of your account from the Platform in accordance with paragraph F.2 of the Terms of Use, your data will be deleted immediately upon its termination. 

Regardless of the above, data collected during your communication with the NBA, either by email or by telephone, is kept for a period of up to ten years.

Use of cookies

To learn more about how we use cookies, please see our cookies policy.

Amendment of the Policy

The Authority shall evaluate and review this Policy on a regular basis and may unilaterally amend it as necessary. If the Policy is amended, the Authority will only publish the changes on this website.