Careers Privacy Notice

1.0 Who are we?

Videoslots Ltd (referred to as “We”, “Us”, “Our”, “the Company”) is registered at The Space Level 2 & 3, Alfred Craig Street, Pieta, PTA 1320 Malta and acts as the data controller for the purpose of the General Data Protection Regulation 2016/679 (GDPR).

The Group operates several popular online casino brands, including Videoslots.com, Mr Vegas, Kungaslottet, Mega Riches, and DBET. With a portfolio boasting over 12,000 games from top-tier providers, Immense Group continues to innovate in the online gaming industry.

2.0 What is the Purpose of this Notice

This Candidate Privacy Notice applies to individuals whose personal data is processed by Immense Group in the context of recruitment activities.

This Notice delineates the principles and procedures governing the collection, processing, and protection of personal information obtained during recruitment activities. It is essential to consult this notice alongside any supplementary privacy statements provided at specific instances of data collection or processing, to ensure comprehensive understanding of our data handling practices and compliance with applicable data protection laws.

3.0 Your Personal Data

3.1 What is Personal Data

For the purposes of this Notice, “Personal Data” refers to any information relating to an identified or identifiable natural person. This encompasses data such as names, contact details, identification numbers, and other information that can directly or indirectly identify an individual. In the context of recruitment, this includes information necessary to assess a candidate’s suitability for employment and to manage the recruitment process effectively and lawfully.

3.2 Categories of Personal Data Processed

To facilitate the effective processing of your application, we collect specific personal data relevant to the position you are applying for. The categories and types of personal data we collect may vary depending on the role. Below is a comprehensive overview of the personal data categories and the types of information we may collect during the recruitment process:

Category of Personal Data	Types of Personal Data Collected
Contact Information	Name, surname, residential address, postal code, date of birth, email address, telephone number.
Personal Details	Gender, nationality, civil/marital status, national identification number, languages spoken.
Employment Information	Employment history, curriculum vitae (CV), cover letter, references (including details on positions held and performance in previous employment), educational background, professional qualifications and skills, salary expectations, and other relevant documentation supporting the recruitment process.
Eligibility Details	Willingness to relocate, applicable notice period, preferred start date, current and/or future work eligibility status, nationality/visa/work permit information (e.g., copies of identity card and/or passport, certifications requested by local authorities, housing lease agreement, housing authority approvals), police conduct certificate.
Financial Information	Remuneration details, including salary expectations. Previous Salary information when voluntarily disclosed by the candidate.
Recruitment Process Data	Skills and experience, qualifications, referrals, CV and application details, interview and assessment data, right to work verification (including passport, visas, or identity cards), information related to the outcome of your application, details of any offer made, relevant professional and educational qualifications, references, background and verification information (e.g., credit reference check, tenure, financial sanction check where carried out and permitted by applicable laws).
Training and Development	Data relating to training and development needs, or training received, assessments completed.
Special Category Data	Where permitted by law or provided voluntarily: information regarding race, health, ethnicity, religious beliefs, and sexual orientation.
Sensitive Data	Criminal data relating to criminal convictions and offences; financial data that may be used for fraud prevention (e.g., debit/credit card details); location data; information linked to private activities (e.g., family relationships, occupation).
Online/Publicly Available Data	Personal information which is publicly available, such as LinkedIn profile information, social media channels, or media and news outlets, including phone number, email, social website links, skills, education history, job history.
Other	Any other personal information which you choose to disclose during the recruitment process, whether verbally or in written form.

Note: When providing referral details, such as names and contact information of referees, it is important to ensure that you have obtained their consent beforehand, as this will fall under your responsibility.

3.3 Processing of Special Category Personal Data

We may process special category of personal data—such as information pertaining to health, racial or ethnic origin, religious beliefs, or sexual orientation—only when a lawful basis exists. This includes situations where processing is necessary to fulfill our obligations as a prospective employer, to comply with legal requirements, to protect vital interests, or where there is a substantial public interest, in accordance with applicable data protection laws.

In limited circumstances, we may seek your explicit consent to process certain sensitive data. Should we do so, we will provide detailed information regarding the specific data we wish to process and the reasons for its processing, enabling you to make an informed decision. Please note that providing such consent is entirely voluntary and not a condition of your potential employment with us. Choosing not to consent will not result in any adverse consequences for you.

3.4 Criminal Convictions Data

As part of our recruitment process, we may process information related to criminal convictions and offences when it is necessary and lawful to do so. This typically applies to specific roles where such checks are required to assess suitability or to comply with legal obligations. The data processed is considered sensitive personal data and is handled in accordance with applicable data protection laws. Our lawful basis for processing this information includes fulfilling our legal obligations as an employer and our legitimate interest in protecting the organization against risks such as financial crimes, including money laundering, terrorism, and bribery. Where permitted, we may also conduct adverse media checks, Politically Exposed Persons (PEPs) screening, and sanctions screening to further safeguard our operations. All processing activities are carried out with appropriate safeguards to ensure the confidentiality and security of your personal data.

3.5 Automatically Collected Data

To enhance the functionality and user experience of our career’s website, we automatically collect certain data from your device when you access our site. This information assists us in understanding how our website is used and in improving our services. Below is a summary of the types of data collected automatically:

Category	Description
Device Information	Includes details such as your IP address, browser type and version, operating system, device model, and other technical information about the device you use to access our website.
Cookies	Small text files stored on your device that collect information about your browsing behaviour. Cookies help us recognize your device, remember your preferences, and improve your user experience on our website. For more detailed information, please refer to our Cookie Policy.
Usage Data	Information about how you interact with our website, including pages visited, links clicked, time spent on pages, and other browsing actions. This data helps us understand user engagement and improve site performance.

3.6 Source of Personal data

In the course of our recruitment process, we collect personal data about you from various sources to assess your suitability for employment. These sources include:

Directly from You: Information you provide through your application, CV, cover letter, interviews, assessments, and any other communications.
Recruitment Agencies: Details submitted on your behalf by third-party recruitment agencies, if applicable. These third parties are responsible for ensuring they have obtained the necessary consent or have a lawful basis to share your personal data with us. Once received, your data will be processed in accordance with this privacy notice.
Outsourcing Companies: Details submitted on your behalf by outsourcing companies. These third parties are responsible for ensuring they have obtained the necessary consent or have a lawful basis to share your personal data with us. Once received, your data will be processed in accordance with this privacy notice.
Referees: Personal and professional references from individuals you have authorized us to contact.
Background Check Providers: Data obtained from third-party services conducting background screenings, identity verification, or criminal records checks, as permitted by law.
Publicly Available Sources: Information from public platforms such as LinkedIn or other professional directories.
Internal Sources: Information from internal referees or employees involved in the recruitment process.

3.7 Use of your Personal Data

Purpose	Purpose for Processing	Categories of Personal Data	Lawful Basis for Processing
Application Review and Candidate Assessment	To evaluate your suitability for the position you have applied for.	Personal details (e.g., name, contact information), CV, cover letter, qualifications, employment history.	Legitimate interests in identifying and assessing potential candidates for open roles.
Pre-Employment Verification and Background Screening	To undertake appropriate pre-employment screening, including reference checks and background verification, where permitted by law.	Personal details, references, background check information.	Legitimate interests in ensuring suitable candidates are placed in roles; Compliance with legal obligations for certain positions.
Contract Preparation	To draft and prepare an employment contract based on the agreement made and entered into with you.	Personal details, employment terms, agreed-upon conditions.	Necessary steps to enter into a contract with you.
Legal and Regulatory Compliance	To comply with legal or regulatory obligations, such as verifying the right to work.	Identification documents, work authorization details.	Compliance with legal obligations.
Retention for Future Opportunities	To retain your CV in our database for a period of one year (1 year) to identify exceptional talent and inform you about future relevant roles.	CV, contact information.	Your Consent; Legitimate interests in identifying and contacting potential candidates for future opportunities.
Website Management and Cookies	To ensure our career websites function properly, identify errors, understand how users reach our site, and assess effectiveness.	Online identifiers, usage data.	Legitimate interests in running effective career websites; consent where required for cookies and tracking technologies.

4.0 Data Sharing

In the course of our recruitment process, your personal information is accessed internally by our Talent Acquisition team and the Hiring Manager responsible for the position you have applied for. This access is strictly limited to individuals directly involved in the recruitment process.

We may also share your personal data with external parties under specific circumstances:

Recruitment Agencies & Outsourcing Companies: Engaged to assist in the recruitment process, bound by contractual obligations to handle your data responsibly.
Background Verification Entities: Including credit reference agencies, regulatory bodies, and former employers, to validate the information provided during your application.
Service Providers: Third-party vendors supplying recruitment platforms or assessment tools, operating under strict data processing agreements to ensure the confidentiality and security of your information.
Regulatory and Government Authorities: As required for identity verification and compliance with legal obligations.

Additionally, your data may be transferred within the Immense Group to affiliated companies, governed by intra-group data sharing agreements that uphold data protection standards. All third-party engagements are subject to rigorous data protection agreements, ensuring your personal information is handled with the utmost care and in compliance with applicable laws.

4.1 Transferring Information Outside the EU/EEA

We may transfer personal information we collect about you outside the European Economic Area (EEA), the United Kingdom, to third parties, in accordance with our lawful basis for processing that information.

When transferring personal data internationally, we ensure that appropriate safeguards are in place to protect your information. These safeguards include:

Standard Contractual Clauses (SCCs): We utilize the European Commission’s approved SCCs, which establish binding commitments between parties to ensure an adequate level of data protection when transferring personal data to non-EEA countries.
Binding Corporate Rules (BCRs): For intra-organizational transfers within multinational groups, we may implement BCRs, which are internal policies approved by data protection authorities to govern cross-border data flows within the same corporate group.
Additional Safeguards: Where necessary, we assess the legal environment of the destination country and implement supplementary measures to ensure that the level of protection afforded to your personal data is not undermined.

We are committed to ensuring that your personal data remains protected when transferred internationally and will continue to monitor and update our practices to comply with applicable data protection laws.

5.0 Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, or reporting obligations.

If your application is unsuccessful, we will retain your personal data, including your resume, for 12 months from the end of the recruitment process, unless you instruct us otherwise. This retention period allows us to consider you for future opportunities and to comply with legal obligations. If you prefer that we do not retain your data for future recruitment purposes, please inform us, and we will delete your information promptly.

In cases where we are required to retain your data for legal reasons, such as defending against potential legal claims, we will retain your information for the necessary duration and delete it once these obligations no longer apply.

6.0 Safeguarding Your Personal Data

We are committed to safeguarding your personal information with the highest standards of security. Our comprehensive technical and physical measures, coupled with robust policies and guidelines, ensure that your data is protected against accidental loss, unauthorized access, alteration, or disclosure.

Access to your personal data is strictly limited to employees, contractors, and third parties who have a legitimate business need to know, as outlined in our Privacy Notice. These individuals are authorized to process your data solely under our instructions and are bound by confidentiality obligations to maintain its security and privacy.

7.0 Automated Decision Making

Automated Decision-Making refers to decisions made solely by automated means without any human involvement. These decisions can have legal or similarly significant effects on individuals, such as determining eligibility for employment.

We do not routinely make decisions based solely on automated processing that produce legal effects or similarly significant impacts on individuals. Should we engage in such processing in the future, we will inform you at the time and provide all relevant information, including your rights under applicable data protection laws.

Under the General Data Protection Regulation (GDPR), you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. If such processing occurs, you are entitled to obtain human intervention, express your point of view, and contest the decision.

8.0 Data Subjects Rights

As an applicant, you have specific rights concerning your personal data under the General Data Protection Regulation (GDPR). These rights include:

Right of Access: You can request a copy of the personal data we hold about you, along with information on its processing purposes, categories of recipients, and retention periods. We aim to respond to such requests within one month.
Right to Rectification: If you believe the personal data we hold is inaccurate or incomplete, you have the right to request corrections.
Right to Erasure: You may request the deletion of your personal data when it’s no longer necessary for the purposes for which it was collected, or if you withdraw your consent on which the processing is based.
Right to Restriction of Processing: You can request the suspension of processing your personal data in certain circumstances, such as when contesting its accuracy or objecting to its processing.
Right to Data Portability: In specific cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller.
Right to Object: You may object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Right Not to Be Subject to Automated Decisions: You have the right not to be subject to decisions based solely on automated processing, including profiling, that significantly affect you.

If you believe your rights under the GDPR have been violated, you have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC) in Malta.

Please note that exercising these rights is generally free of charge. However, if your requests are manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request.

9.0 Contact

Should you have any inquiries or concerns regarding our data processing practices, or if you wish to exercise your rights under applicable data protection laws, please feel free to contact our Data Protection Officer (DPO). You can reach the DPO by emailing [email protected]

10.0 Changes to Our careers Privacy Notice We may periodically update this Privacy Notice to reflect changes in our practices, legal requirements, or technological advancements. When significant modifications occur, we will post the revised notice on our website to ensure transparency and keep you informed. We encourage you to review this notice regularly to stay informed about how we protect your personal data.