• Supplier hosts the Supplier Data
• Supplier receives and processes Client Information in its capacity as Controller
• Client Information includes Personal Data
• The Supplier is based in the UK
• The Supplier is located within the EEA
• The Supplier is a Credit Reference Agency (“CRA”) therefore the End User must include a reference to Credit Reference Agency Information Notice (“CRAIN”) in its fair processing notice

The Supplier Data that GBG uses to provide the UK Credit Bureau Dataset is supplied by GBG’s Data Supplier, Experian. GBG is obliged under the terms of its agreement with Experian to ensure that all End Users agree to comply with the following provisions:

1. DEFINITIONS
1.1. In these Additional Terms the following definitions shall apply, in addition to the definitions set out in the General Terms:
“Online Gambling” means gambling services accessed via remote communication whereby players (who are individuals who are potential or actual customers of the End User in connection with online gambling) register, deposit funds and bet and/or play games.
“Permitted Purpose” means identity and/or age verification purposes only in connection with individuals who are potential customers and/or customers of the End User.

2. USE OF THE SUPPLIER DATA
2.1 The End User may only use the Supplier Data for the Permitted Purpose in accordance with these terms and not for any other purpose.
2.2 The End User shall ensure that at the point of collection of the Personal Data, the relevant individual is informed of the following principles:
a. Their details will be shared with GBG and Experian
b. A search will be carried out with Experian for the purposes of verifying their identity
c. A soft footprint shall be left on their credit file
d. Experian may check the details they supply against any particulars on any database (public or otherwise) to which Experian have access in order to verify their identity.
2.3 The End User acknowledges and accepts that the Data Supplier is a CRA and in utilising the services of a CRA, the End User is required to include a link to the Credit Reference Agency Information Notice (commonly known as “CRAIN”) as set out below within their own fair processing notice or provide an off-line route to access information about CRAIN, such as printed copies A copy of the CRAIN notice link is as follows https://www.experian.co.uk/legal/crain/
2.4 The End User shall provide a copy of the notification in clause 2.3 as required.
2.5 The End User shall fully indemnify GBG against all liabilities, costs, expenses, damages and losses incurred by GBG as a result of the End User’s failure to incorporate the CRAIN notice within their fair processing notice and notify individuals of such notice in the provision of the End User’s products and services.

3. SPECIAL TERMS AND CONDITIONS FOR USE OF THE SUPPLIER DATA IN CONNECTION WITH ONLINE GAMBLING
3.1 Where the End User uses the Supplier Data in connection with Online Gambling, the terms contained in this clause 3 shall apply and take precedence over any other terms and conditions contained within these Additional Terms and the General Terms.
3.2 The End User may only use the Supplier Data for the Permitted Purpose and to comply with its legal and regulatory obligations in respect of its Online Gambling activities.

4. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
4.1. The End User acknowledges and accepts that the nature of this Service requires disclosure of Client Information to Experian who processes Client Information in its capacity as Controller and not Sub-processor. The End User’s request for this Service will be deemed to be the End User’s instruction to GBG to disclose Client Information to Experian as necessary to perform this Service.
4.2. Experian is based in the United Kingdom, which is located within the EEA. On this basis, Personal Data is not transferred outside of the EEA in order to provide End Users with access to this element of the Service.
4.3. Notwithstanding clause 4.2, Experian may, on an occasional and temporary basis transfer Client Information outside of the EEA to third parties appointed as general suppliers of technology and services to Experian in order to support and maintain Experian’s service. In such circumstance, Experian shall ensure that appropriate safeguards are in place with such third party supplier.