Privacy Notice

1. Introduction

This privacy notice is for Allwyn Management Services AG (‘we’, ‘us’ or ‘our’) and it describes how and why we collect, store, and use (‘process’) your Personal Data when you:

Visit our website at (https://www.allwyn.com/), including any other domain, mobile version of the website, or website of ours that links to this privacy notice (collectively ‘the site’).
Engage with us in other related ways, including, you apply for potential employment, you are referred to us for potential employment, subscribe to our email alerts, request information, or otherwise interact with us.

By “Personal Data”, we mean any information which, either alone or in combination with other data, identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to any individual or a household.

The privacy notice set out in this document covers the relevant information that we are required to provide to you as per applicable data protection laws. Please read this privacy notice carefully. If you do not agree with our practices, please consider not accessing our site further and cease your engagement with us.

2. Content of this privacy notice

In brief, this privacy notice explains:

The information we process about you
How we use personal data we hold about you
The legal bases we have for processing your personal data
The recipients with whom we may share your personal data
Where we store your personal data and whether we transfer your personal data outside of Europe
How long we keep your personal data
The data protection rights you have
Who to contact if you have a data protection query

3. The information we process about you

We collect, store and use the following categories of Personal Data about you:

(a) Information you voluntarily disclose to us

We collect personal data that you voluntarily provide to us when you express an interest in obtaining information about us, when you engage with us or otherwise contact us.

The Personal Data that we collect will depend on the context of your interactions with us. The Personal Data we may collect about you are as follows:

Your identity data which includes your full name, title, and other similar identifiers
Your personal contact details which include your email address, telephone number, the organisation you work for, the country you are located in, and other similar information
Your communications preferences, including subscription preferences when you sign up to our email alerts
Your job application information when you apply for a position with us via the site or you are referred to us for employment (including your resume/CV, cover letter, and such other information obtained for application purposes)
Questions or feedback you leave when you interact with us.

We collect personal information that may be considered Sensitive Personal Data under state privacy law, including driver’s license, passport, or other government-issued ID. We do not use or disclose Sensitive Personal Data for any business purposes other than as permitted by law, including providing good and services, verifying your identity and eligibility, complying with applicable legal requirements and/or as permitted by further regulations. The potential consequence of not providing the personal data is that we might not be able to confirm you meet the eligibility criteria or we might not be able to fulfil prizes.

(b) Information automatically collected

We automatically collect certain information when you visit, use or navigate the site. This information does not reveal your specific identity (like your name, contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, device name, country, and other technical information. This information is primarily needed to maintain the security and operation of the site and for internal analytics purposes.

We use cookies and other tracking technologies to collect information about how you use the site. For more information on how we use cookies and other tracking technologies, please refer to our Cookie Notice on the site.

(c) Information from other third-party sources

Where you are being considered for employment with us, we may obtain personal data about you from third-party sources, including recruitment agencies, job boards, and background check providers. Where we receive such information from these third parties, we will use it in accordance with this notice.

We may also collect your Personal Data (such as name and email address) from our commercial partners if you have provided them with your consent to be contacted by us, for example, for marketing purposes or to participate in competitions or promotions.

Where we receive such information from these third parties, we will use it in accordance with this notice.

4. How we use personal data we hold about you

Depending on how you engage with us, we process your Personal Data for the below purposes:

To deliver email alerts to you upon your request
To respond to any questions, feedback you send us
To deliver other information regarding us to you
To send you marketing communications based on your consent, where required
To administer promotions and competitions which you have entered including to communicate with participants, administer and deliver prizes and to manage and analyse participant engagement
To analyse information about you to build a profile in order to send you relevant marketing communications
To share your details within the Allwyn Group if you have agreed to receive marketing communications from them. The Allwyn Group entities are listed in Section 11.
To evaluate your candidacy for employment with Allwyn, to manage recruitment related activities which include setting up and conducting interviews, and as is otherwise needed in recruitment and hiring processes, checking your eligibility to work as required by immigration laws, conducting background checks where we have a legal right to do so or reason for doing so - To contact you in the event that any similar jobs/roles become available from time to time where you are happy for us to do so - To defend against possible legal claims
To monitor and analyse usage trends to improve your experience with the site

5. The legal bases we have for processing your Personal Data

We will use your Personal Data in the following circumstances:

As necessary in pursuit of our legitimate interests and the legitimate interests of our users including, improving the site’s performance, solicitation, evaluation, and selection of candidates for employment.
Where you have given us your permission (i.e., consent) to use your Personal Data.
To comply with our legal obligations or exercise legal rights conferred upon us.

You can opt out of email alerts from us by using the ‘unsubscribe’ link or other unsubscribe methods provided within the email alerts.

6. The recipients with whom we may share your Personal Data

We may share information we have collected about you in certain situations, including:

Service providers who perform services on our behalf, including consultancy services, website hosting services, mailing services, data analytics services, background check providers, regulators, and authorities.
Service providers who assist us with the administration of promotions and prize fulfilment partners.
Internally for recruitment exercises – this includes members of the Human Resource department, interviewers, hiring managers involved in the recruitment process.
Internally within the Allwyn Group to enable us to consider you for suitable positions that may arise where they align with your skills and experience and, if you have provided consent, for members of the Alwyn Group to send you marketing communications.
Other third parties, including for investor relations purposes, professional advisers for general business purposes.

In relation to our promotions and competitions, the winner’s name, country, and photograph may be published on Allwyn’s official website or social media channels for competitional purposes.

We do not sell any personal information and has no actual knowledge of any sales or sharing of personal information of minors under 16 years of age. We do not share personal information for targeted advertising as part of our promotions and competitions. Meta (Instagram) may use its own cookies or tags to track your online activities in order to deliver targeted advertising based on your interests as set forth in its Privacy Policy.

7. Storage of your Personal Data and transfers

We may transfer, store, and process your personal data in countries which are outside of Europe. For the purpose of this privacy notice, Europe (EU) and European mean the European Economic Area, the United Kingdom, and Switzerland. When we transfer your data to a country that is not subject to an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (“SCCs”) and the UK Addendum to the SCCs where needed.

8. How long we keep your Personal Data

We will keep your Personal Data for as long as is reasonably necessary to fulfil the purposes set out in this privacy notice.

9. Your data protection rights

Swiss, EU, and UK Privacy Rights

Where applicable, you may have certain rights in relation to the processing of your Personal Data, subject to applicable prerequisites and exceptions, and these are summarised below:

The right to be informed 
The right of access 
The right to withdraw consent  
The right to rectification
The right to erasure 
The right to object to processing 
The right to restriction of processing
The right to data portability
The right to lodge a complaint in relation to data protection matters. A full list of data protection authorities in the EU is available here.

You can exercise your right to withdraw consent at any time (for example by clicking the “unsubscribe” link in a promotional email) though this will not affect the lawfulness of processing carried out before withdrawal.

In the UK, you also have the right to complain directly to us using the contact details below

California Privacy Rights

The California Consumer Privacy Act as amended (“CCPA”) provides consumers who are California residents with specific rights regarding their Personal Data. This section describes your CCPA rights and explains how to exercise those rights.

Right to Know: Once we receive and confirm your verifiable consumer request as described below, you have the right to request, no more than twice in any 12-month period, that we disclose what Personal Data we have collected about you in the immediately preceding 12-month period, including, the categories of Personal Data we collected about you; the categories of the sources from which the Personal Data is collected; our business or commercial purpose(s) for collecting, selling or sharing that Personal Data; the categories of third parties to whom we disclosed that Personal Data; and the specific pieces of Personal information we collected about you.

In addition, if we sold or disclosed your Personal Data for a business or commercial purpose, we will provide you with two separate lists disclosing:

Disclosures for a business purpose, identifying the Personal Data categories disclosed that each category of recipient obtained; and
Sales and/or disclosures for a commercial purpose, identifying the Personal Data categories that each category of each category of recipient obtained.

Right to Delete: You have the right to request that we delete any or all of your Personal Data that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Data from our records, unless an exception applies.

Right to Correct: You have the right to correct inaccurate Personal Data that we maintain about you.

Right to Opt-Out of the Sale/ Sharing: You have the right to opt-out of the sale or sharing of your Personal Data for targeted advertising. We do not sell your Personal Data or share personal data collected in connection with the Competition for targeted advertising.

Right to Limit the Use or Disclosure of Sensitive Personal Data: You have the right to request that we limit the use and disclosure of Sensitive Personal Data to specific business purposes approved by the CCPA. Our use and disclosure is already limited to approved business purposes.

Right to Non-Discrimination. You have the right not to be discriminated against for exercising any of your CCPA rights. Unless permitted by the CCPA, if you exercise any of your California rights, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Provide you a different level or quality of goods or services.
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Other California Privacy Rights. California residents have the right to receive information that identifies any third party companies or individuals that Allwyn has shared your Personal Data for their direct marketing purposes, with in the previous calendar year, as well as a description of the categories of Personal Data disclosed to that third party. You may obtain this information once a year and free of charge by contacting us at [email protected].

Other State Privacy Rights

Depending on your jurisdiction of residence, you have certain rights with respect to your personal information. This section describes your privacy rights and explains how to exercise those rights.

Right of Access: You have the right to confirm whether we are processing your Personal Data and to access such Personal Data we process. You may exercise this right not more than two times per calendar year.

Right to Correct: You have the right to correct inaccurate personal information that we maintain about you, though we may need to verify the accuracy of the new data you provide to us.

Right to Delete: You have the right to request that we delete Personal Data that we collected about you under certain circumstances. Please note, that some information may not be eligible for deletion based upon applicable law or requirements of contracts.

Right to Portability: You have the right, to the extent the data is available in a digital format, to obtain a copy of your Personal Data in a portable, and to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance. You may exercise this right not more than two times per calendar year.

Right to Opt-Out: You have the right to opt out of processing Personal Data for the purposes of: (i) targeted advertising, (ii) the sale of Personal Data, or (iii) profiling in furtherance of a decision that produces a legal or similarly significant effect. We do not sell Personal Data or engage in profiling. Targeted advertising is not applicable to our online Competitions.

Right to Withdraw Consent: You have the right to withdraw your consent at any time where we are relying on consent to process your Personal Data. If you withdraw your consent, we may not be able to provide certain products or services to you.

Right to Non-Discrimination: Unless permitted by applicable law, we will not discriminate against you for exercising any of your privacy rights under applicable law.

Right to Appeal: You have the right to appeal any decision that includes a refusal to take action on a request. If applicable, you can file an appeal by emailing us at [email protected] within fifteen (15) calendar days from receipt of our decision.

Exercising Your Privacy Rights

Requests to know, correct, or delete can be submitted by email to [email protected].

Please note that these rights currently apply only to California, Nebraska and Texas consumers. Only you or a person that you authorize to act on your behalf, may make a verifiable consumer request related to your Personal Data.

Authorizing an Agent to Act on Your Behalf

Where applicable and except where you have provided an agent with a Power of Attorney pursuant to Sections 4000–4465 of the California Probate Code, when using an authorized agent you must provide that person with written permission clearly describing their authority to make a request on your behalf. That agent must also be able to verify their identity with us and provide us with their authority to act on your behalf. An individual to whom you have provided Power of Attorney pursuant to applicable state rules may also make a request on your behalf. We may deny a request from an authorized agent if the agent does not provide us with the signed written permission demonstrating that they have been authorized to act on your behalf.

Verifying your request

The verifiable consumer request initiated by your or your authorized agent must:

Include your full legal name, email and phone number, which we will need to contact you in order to verify that you are the person about whom we collected Personal Data or an authorized representative.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
If you are making the request as an authorized agent you must also provide; the full legal name of the party for which you are making the request and documentation for which your authorization is based.

We cannot respond to your request or provide you with your Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you. Making a verifiable consumer request does not require you to create an account with us. One of our representatives will contact you in order to verify your identity. You may need to provide additional information in order to verify your request. We will only use Personal Data provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Response Timing and Format

We endeavour to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to ninety (90) days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Exceptions. These rights are not absolute and are subject to certain exceptions. For example, we cannot disclose or permit access to specific pieces of Personal Data if granting your request would present a certain level of risk to the security of the Personal Data at issue, your account with us or the security of our systems. We may deny your deletion request if retaining the information under certain circumstances, for example, when it is necessary for us or our service providers to complete a contract or transaction with you or to comply with legal obligations.

10. Contact

If you have any questions in relation to this privacy notice or relevant to the processing of your personal data, please contact our Data Protection Officer at [email protected].

11. Allwyn Group entities

The Allwyn Group stated in Section 4 above are: Österreichische Lotterien GmbH, Allwyn Česko a.s,, Allwyn Hellas, Allwyn North America Inc, Allwyn Cyprus.

12. Allwyn Scratch Car Social Media Promotion and Las Vegas Promotion Privacy Policies

To read the Allwyn Scratch Car Social Media Promotion Privacy Policy, click here.

To read the Allwyn Scratch Car Las Vegas Promotion Privacy Policy, click here.

To read the Allwyn Scratch Wall Miami Physical Competition Privacy Policy, click here.

13. Status of this Privacy Notice

We reserve the right to make changes to this privacy notice at any time and for any reason.

Last Updated May 2026.