Privacy Policy

This Privacy Policy explains how we collect, use, disclose and protect personal data of people who interact with the Boyle Sports product operated via the website boylesportz.com. It applies to website visitors, registered customers, mobile app users, and people who contact us through any support channel. Please read it carefully so you understand how and why we process your data and the choices you have. This Privacy Policy is effective and up to date as of 6 November 2025.

Who We Are

The Boyle Sports product is part of the wider Boyle Sports brand and is operated for customers in the United Kingdom via boylesportz.com.

Our legal entity and regulatory status

Operator: The services for UK customers are provided by BoyleSports (UK) Limited, a private limited company and part of the Boyle Sports group.
Regulator: BoyleSports (UK) Limited is licensed and regulated by the UK Gambling Commission (UKGC) under licence number 39469 for remote casino and general betting (real events).
Head office: The group's headquarters are located in Dundalk, Ireland. A full registered office address for BoyleSports (UK) Limited is published on the UK Gambling Commission public register and in our Terms & Conditions, and will be provided to you on request.

How to contact us about privacy

Data protection contact: You can contact our data protection team (which performs the role of Data Protection Officer for the purposes of UK data protection law) at: care@boylesportz.com. Please include "Data Protection" in the subject line.
Customer support: For general account or betting queries you can contact our 24/7 support team on 0800 22 00 66 (UK) or via live chat. Support agents can pass privacy requests to the data protection team.
Postal contact: You can also write to our data protection team at our headquarters in Dundalk, Ireland, using the contact details provided on our website and in our Terms & Conditions.

What Personal Data We Collect

We collect different categories of personal data to operate Boyle Sports on boylesportz.com, to comply with our legal obligations and to provide safe and responsible gambling services.

Identification and contact data

Account data: Full name, date of birth, username, password or other credentials, security questions, preferred language, account settings.
Contact data: Email address (for example the address you use to contact us via care@boylesportz.com), telephone number, postal address, and communication preferences (such as marketing opt-ins).
Verification / KYC data: Copies or details of identity documents (passport, driving licence, national ID), proof of address, proof of payment method ownership and any information we reasonably need to verify your identity, age and source of funds.

Financial and transactional data

Payment data: Partial card details (we do not store full card numbers), bank account details, e-wallet identifiers, payment gateway tokens and related technical data supplied by our payment partners.
Transaction records: Deposits, withdrawals, bonuses, refunds, chargebacks, and other financial operations linked to your boylesportz.com account.

Gameplay, behavioural and responsible gambling data

Betting and gaming history: Stakes, bets placed, wins and losses, game types, time spent, session length, promotions used and interactions with particular products on boylesportz.com.
Behavioural data: Clicks, navigation paths, response to offers, interaction with emails and on-site messages, engagement with our retail ecosystem where it is linked to your online account.
Safer gambling data: Self-exclusion details (including any GamStop registrations), deposit limits, reality checks, time-outs, affordability assessments and any information you provide about gambling-related harm.

Technical data and logs

Device and session data: IP address, device identifiers, operating system, browser type and version, screen resolution, approximate location derived from IP, and language settings.
Usage logs: Log-in and log-out times, authentication attempts (including failed attempts), changes to account settings, communication logs, security alerts and error logs.

Cookies and similar technologies

Cookies: Small text files placed on your device that store information about your session and preferences (see the "Cookies & Tracking Technologies" section below).
Similar technologies: Pixel tags, SDKs, local storage and other tracking technologies used for analytics, security, fraud prevention and marketing (where permitted).

Communications and feedback

Customer communications: Records of emails, live chats, phone calls (which may be recorded), messages sent through contact forms and notes of our interactions.
Complaints and dispute data: Information you provide when raising a complaint or dispute (including with ADR providers such as IBAS) and our internal case handling records.

Legal Basis for Processing

Under the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018 we must have a lawful basis to process your personal data. Depending on the context, we rely on the following legal grounds.

Performance of a contract

Account creation and management: We process identification, contact, technical and transactional data to register you as a customer, manage your boylesportz.com account and provide the Boyle Sports services you request.
Providing betting and gaming services: We use your data to accept bets, settle markets, credit winnings, process withdrawals, handle bonuses and manage your participation in promotions.
Customer support: We process communication data to respond to queries, resolve issues and provide information relating to your contract with us.

Compliance with legal obligations

KYC and AML requirements: Gambling, anti-money laundering and counter-terrorist financing laws require us to verify your identity, age, address, source of funds and to monitor transactions for suspicious activity.
Regulatory reporting: We must provide information to the UK Gambling Commission and other competent authorities where required, including reports of suspicious or fraudulent activity and safer gambling concerns.
Record-keeping and tax: We maintain certain records for minimum statutory retention periods for audit, tax and regulatory compliance.

Legitimate interests

Service security and fraud prevention: We process technical, behavioural and transactional data to detect and prevent fraud, unauthorised access, money laundering, bonus abuse, and to protect the integrity of our systems.
Service improvement and analytics: We analyse aggregated usage patterns to improve our website, apps, user interfaces, odds, product offerings and customer experience on boylesportz.com.
Business operations: We use data for internal reporting, risk management, training, quality assurance (including call recordings) and to manage our relationship with suppliers and partners in a proportionate way.
Where we rely on legitimate interests, we balance our interests against your rights and freedoms and implement safeguards (for example, pseudonymisation and opt-outs) where appropriate.

Consent

Marketing communications: We send email, SMS, push or in-app marketing only where you have provided valid consent or where we are otherwise permitted under e-privacy rules. You can withdraw consent at any time (see "Your Rights").
Cookies for analytics and advertising: Non-essential cookies and similar technologies used for detailed analytics and personalised advertising are deployed only where you consent via our cookie tools (where available) or browser settings.
When we rely on consent, you are free to refuse or withdraw consent without affecting the core gambling services that do not rely on that consent.

Purpose of Processing

We use your personal data only for specified, explicit and legitimate purposes.

Providing and managing our gambling services

Operating your account: Creating and maintaining your boylesportz.com account, enabling log-in, password management, account verification and account configuration.
Taking and settling bets: Allowing you to place bets and play games, calculating results and odds, settling markets, crediting winnings and managing promotions linked to Boyle Sports.
Customer care: Contacting you about service messages, changes to our terms, account issues, and responding to your questions through email, phone or live chat.

Legal and regulatory compliance

KYC, AML and safer gambling: Conducting identity checks, affordability assessments, monitoring transactions, analysing play patterns and interacting with you to support responsible gambling and to comply with relevant laws and UKGC requirements.
Dispute handling: Managing complaints and disputes, including those escalated to ADR bodies such as IBAS, and maintaining evidence of our decision-making.

Service improvement, analytics and personalisation

Usage analytics: Analysing how users interact with boylesportz.com to improve navigation, load times, device compatibility, game mix and promotional relevance.
Product development: Using aggregated and pseudonymised data to design new features, offers and safer gambling tools that better meet customer needs.
Personalised content: Where permitted, tailoring on-site messages and offers based on your activity and preferences, while respecting your marketing and safer gambling choices.

Marketing (where permitted)

Direct marketing: Sending information about odds, promotions, competitions, casino games and other products from Boyle Sports that are relevant to Boyle Sports, in line with your preferences and applicable law.
Marketing analytics: Measuring the effectiveness of campaigns, such as whether you opened an email or clicked on an offer, to avoid sending irrelevant communications.

Disclosure & Sharing

We never sell your personal data. We share it only with trusted third parties and only where necessary, subject to appropriate safeguards and contracts.

Service providers and business partners

Payment partners: Banks, card schemes, payment processors and e-wallet providers that process deposits, withdrawals and chargebacks on our behalf.
KYC and verification providers: Identity verification, age verification, address checking and anti-fraud service providers that help us meet legal and regulatory obligations.
IT and hosting providers: Cloud hosting, data storage, security, content delivery network and technical support providers that enable boylesportz.com to operate reliably and securely.
Analytics and marketing partners: Providers of analytics tools, A/B testing services, and, where you have consented, advertising networks and platforms that help us measure and deliver marketing campaigns.

Group companies and affiliates

Group entities: Other companies in the Boyle Sports group (for example entities based in Ireland or Gibraltar) for centralised risk management, compliance, reporting, internal audit and to deliver cross-channel services where applicable.
Affiliates: Selected affiliate partners who refer customers to boylesportz.com. We share limited data needed to calculate commissions and verify the performance of affiliate campaigns, in line with data minimisation principles.

Regulators, authorities and dispute bodies

Regulators: The UK Gambling Commission and other competent regulatory bodies, where we are required to report suspicious activity, safer gambling concerns or other matters.
Law enforcement and government authorities: Where required by law, court order or legal process, or where we reasonably believe disclosure is necessary to protect our rights, customers or the public.
ADR bodies: Alternative dispute resolution providers such as the Independent Betting Adjudication Service (IBAS) when you refer a dispute to them.

Corporate transactions

Business transfers: In the event of a merger, acquisition, restructuring or sale of business assets relating to Boyle Sports, your data may be shared with potential or actual buyers and their advisers, subject to strict confidentiality and only to the extent permitted by law.

International Transfers

As part of operating a modern online gambling service, your personal data may be transferred outside the United Kingdom.

Where we transfer data

Within the Boyle Sports group: Your data may be processed by group entities located in Ireland and Gibraltar, where centralised functions or particular technical systems are hosted.
Service providers: Some of our service providers may process data in the European Economic Area ("EEA") and in other jurisdictions, depending on their infrastructure and support locations.

How we protect international transfers

Adequacy decisions: Where the UK government has recognised a country as providing an adequate level of data protection, transfers may take place on that basis.
Standard contractual clauses: For other countries, we use UK-approved standard contractual clauses or equivalent legal mechanisms, supplemented by risk assessments and technical and organisational safeguards.
Limited access: We limit access to personal data to those who need it to perform their role, apply encryption in transit and at rest where appropriate, and regularly review our suppliers' security measures.

Data Retention

We keep personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy and to comply with legal and regulatory requirements. Retention periods may vary depending on the type of data and the context of processing.

Typical retention periods

Account and identification data: Generally retained for the duration of your relationship with us and normally for up to five (5) years after your account is closed, to comply with anti-money laundering, gambling and record-keeping obligations.
Transactional and betting history: Retained for similar periods to account data, and in some cases longer where required by law, for example to support regulatory reporting and financial audits.
Safer gambling records: Information relating to self-exclusion, limits and interventions is kept for as long as necessary to protect you and meet regulatory requirements, which may extend beyond account closure.
Technical logs and security data: Retained for shorter periods, typically from a few days up to one year, unless needed longer for security investigations or legal proceedings.
Marketing data: Retained for as long as you remain opted in to marketing and generally not longer than necessary to demonstrate consent and manage opt-outs. If you withdraw consent, we keep limited data on the suppression list to ensure we honour your choice.
Complaints and dispute files: Retained for the period necessary to manage and evidence the complaint or dispute and for a reasonable period afterwards (often up to six years) to protect our legal rights.

Deletion and anonymisation

When data is no longer needed for its original purpose and we have no legal obligation to keep it, we will securely delete or anonymise it.
If we anonymise data (so that you can no longer be identified), we may use the resulting information for analytics, reporting and service improvement indefinitely without further notice to you.

Your Rights

Under the UK GDPR and the Data Protection Act 2018, and, where applicable, other data protection laws (including EU and Mexican privacy laws), you have a number of rights in relation to your personal data.

Your core data protection rights

Right of access: You can request confirmation that we process your personal data and obtain a copy of the data, together with information about how we use it.
Right to rectification: You can ask us to correct inaccurate or incomplete personal data. In many cases you can update certain details directly in your boylesportz.com account.
Right to erasure: You can request deletion of your personal data where, for example, it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (where consent was the legal basis). This right is subject to important exceptions, especially where we must retain data for legal or regulatory reasons.
Right to restriction: You can ask us to restrict processing of your data (for example while we verify its accuracy or assess an objection you have raised).
Right to object: You can object at any time to processing based on our legitimate interests, including profiling. We will stop processing unless we demonstrate compelling legitimate grounds or the processing is needed for legal claims. You always have the right to object to direct marketing and we will honour this absolutely.
Right to data portability: In certain circumstances you can receive the personal data you provided to us in a structured, commonly used and machine-readable format and request that we transmit it to another controller where technically feasible.
Right to withdraw consent: Where we rely on consent (for example for certain marketing or cookies), you can withdraw it at any time. This will not affect the lawfulness of processing based on consent before withdrawal.

Additional rights under Mexican privacy law (where applicable)

If Mexican data protection law applies to you (for example, in the unlikely event you interact with our services from Mexico and that law is engaged), you may also benefit from ARCO rights (access, rectification, cancellation and opposition) and other protections under Mexican regulations.
We will handle such requests in line with both UK law and any additional mandatory Mexican requirements, to the extent they apply.

How to exercise your rights

Contact point: To exercise any of your rights, please contact our data protection team at care@boylesportz.com or via the customer support channels listed on boylesportz.com, stating that your request concerns data protection rights.
Verification: We may need to verify your identity before acting on your request, for example by asking you to log in or provide additional information.
Response time: We aim to respond to all valid requests within one month (30 days). If your request is complex or we receive multiple requests, we may extend this by up to a further two months, and we will inform you of any extension and the reasons for it.
Fees: You will not normally have to pay a fee. We may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, in line with the law.

Cookies & Tracking Technologies

Cookies and similar technologies help us provide, protect and improve boylesportz.com and tailor your experience of Boyle Sports.

Types of cookies we use

Strictly necessary cookies: These are essential to operate our website and enable core functions such as logging in, placing bets, maintaining your session and providing security. They cannot be switched off through our cookie tools, though you may be able to block them in your browser (which may affect site functionality).
Functional cookies: These remember your choices (such as language and region) and provide enhanced, more personalised features.
Analytics and performance cookies: These collect information about how visitors use boylesportz.com (for example which pages are most popular, error rates and loading speeds). We use this information to improve our services.
Advertising and marketing cookies: Where permitted, these cookies and similar technologies are used to deliver and measure personalised advertising and to limit how often you see a particular ad.
Third-party cookies: Some cookies are set by third parties (such as analytics or advertising providers) when you use boylesportz.com. These providers may combine information from our site with information from other sites, subject to their own privacy policies.

Managing cookies

You can manage cookies through your browser settings, for example by blocking or deleting cookies or setting alerts before cookies are stored. Each browser is different; please refer to the "Help" section of your browser for more information.
Where available, we may also provide an internal preference panel or cookie banner that allows you to accept or reject non-essential cookies on boylesportz.com.
If you disable or reject certain cookies, parts of the site may not function properly or your experience may be less tailored.

Data Security

We take the security of your personal data very seriously and implement technical and organisational measures designed to protect it against unauthorised or unlawful processing and against accidental loss, destruction or damage.

Technical measures

Encryption: We use modern encryption technologies such as TLS 1.2 or higher to protect data in transit between your device and our servers. Where appropriate, we encrypt data at rest and use tokenisation for sensitive financial information handled by payment partners.
Access controls: Access to systems and data is restricted based on job role and business need, and is protected through strong authentication mechanisms, including multi-factor authentication for sensitive systems.
Network security: We use firewalls, intrusion detection and prevention systems, anti-malware tools and other industry-standard safeguards to protect our infrastructure.

Organisational measures

Policies and training: We maintain data protection and information security policies and provide regular training to staff so they understand their responsibilities when handling personal data.
Vendor oversight: We carefully select and monitor third-party service providers and require them to implement appropriate security measures through contractual commitments.
Testing and audits: We perform security testing and may commission independent assessments of our controls. Our security framework is designed with reference to recognised standards such as ISO 27001 and SOC 2, although this does not necessarily mean we hold formal certification in all cases.
Incident response: We maintain incident response procedures to detect, investigate and respond to potential data breaches. Where required by law, we will notify relevant authorities and affected individuals without undue delay.

While we take appropriate steps to safeguard your data, no system can be guaranteed to be completely secure. You also play an important role in protecting your information by keeping your login credentials confidential and notifying us promptly of any suspected unauthorised access to your account.

Complaints & Contacts

If you have concerns about how we handle your personal data, we encourage you to contact us first so we can try to resolve the issue.

How to contact us with questions or complaints

Email: Contact our data protection team at care@boylesportz.com, clearly marking your message as a privacy or data protection complaint.
Phone: Call our UK support line on 0800 22 00 66. Our support agents will either help you directly or escalate your concern to the data protection team.
Live chat: Use the live chat function on boylesportz.com (where available) and ask for your issue to be referred to the data protection team.
Post: Write to our data protection team at our headquarters in Dundalk, Ireland, using the contact details provided on our website and in our Terms & Conditions.

Our internal complaint handling

We will acknowledge receipt of your privacy complaint and aim to provide a substantive response within one month (30 days).
If your complaint is complex or we receive multiple related complaints, we may need more time. In such cases we will keep you informed of progress and expected timelines.
We will investigate the matter fairly and thoroughly, and we will explain our findings and any steps we intend to take to address your concerns.

Your right to complain to a supervisory authority

United Kingdom: If you are not satisfied with our response, or you prefer not to contact us first, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). Further information is available on https://ico.org.uk.
European Union / EEA: If you are located in the EU/EEA and EU data protection law applies, you may also complain to your local data protection authority.
Mexico: If Mexican data protection law applies to you, you may have the right to file a complaint with the relevant Mexican data protection authority in addition to any rights you have under UK law.

These data protection complaint rights are separate from your ability to refer betting or gaming disputes (for example to ADR bodies such as IBAS). You can pursue both routes where appropriate.

Updates

We may update this Privacy Policy from time to time, for example to reflect changes in law, regulatory guidance, our processing activities or the features of Boyle Sports on boylesportz.com.

How we will inform you

On-site notices: We may display banners or notices on boylesportz.com and in your account dashboard to inform you about significant changes.
Email notifications: Where appropriate, we will notify registered customers by email using the address associated with their account.
Version and date: Each version of this Privacy Policy will be identified by an effective date. This version is effective as of 6 November 2025.

Advance notice and your options

For material changes that significantly affect how we process your personal data, we will, where practicable and legally required, provide at least 30 days' advance notice before the changes take effect.
If you do not agree to the updated Privacy Policy, you may close your account and stop using boylesportz.com before the changes become effective.
Your continued use of Boyle Sports after the effective date of an updated Privacy Policy will constitute your acknowledgement of the changes, to the extent permitted by law.