• Supplier hosts the Supplier Data
• Supplier receives and processes End User Data in its capacity as an independent controller
• End User Data includes personal data
• The Supplier is based in the United Kingdom
• The United Kingdom is deemed to offer an adequate level of data protection by the European Commission
• The Supplier is a Credit Reference Agency (“CRA”) therefore the End User must include a reference to Credit Reference Agency Information Notice (“CRAIN”) in its fair processing notice

The Supplier Data used to provide the UK Credit Header is provided by GBG’s Supplier, Experian. GBG is obliged under the terms of its agreement with its Supplier to ensure that all End Users agree to comply with the following licensing provisions. These Additional Terms apply to all UK Credit Bureau (Basic & Advanced). Individual UK Credit Bureau (Basic & Advanced) Datasets are identified on the End User’s Order Form or Agreement.

1. DEFINITIONS
1.1. In these Additional Terms the following definitions shall apply, in addition to the definitions set out in the General Terms and Product Terms:
“End User Data” means any data provided to GBG by the End User for processing in accordance with the terms of the Agreement including where relevant any personal data.
“Online Gambling” means gambling services accessed via remote communication whereby players (who are individuals who are potential or actual customers of the End User in connection with online gambling) register, deposit funds and bet and/or play games.
“Permitted Purpose” means the purposes, restrictions and/or conditions for the use of the Dataset outlined by the Supplier as set out in clauses 2.3 to 2.7 below in addition to the Customer Use Case set out in the Agreement and at clause 2.1.

2. USE OF THE SUPPLIER DATA
2.1. This Dataset may only be used for the Customer Use Case detailed in this clause 2.1, provided that such Customer Use Case is selected on the End User’s Order Form and the End User complies with any use case restrictions set out in the Agreement or these Additional Terms:
• ID Verification – Fraud
• ID Verification - Regulatory
2.2. In addition to the Customer Use Case restrictions contained within clause 2.1 (including any conditions that apply to that Customer Use Case) clauses 2.3 -2.7 shall also apply
2.3. The End User shall ensure that at the point of collection of the personal data, the relevant individual is informed of the following principles:
a. Their details will be shared with GBG and Experian
b. A search will be carried out with Experian for the purposes of verifying their identity
c. A soft footprint shall be left on their credit file
d. Experian may check the details they supply against any particulars on any database (public or otherwise) to which Experian have access in order to verify their identity.
2.4. The End User acknowledges and accepts that Experian is a CRA and in utilising the services of a CRA, the End User is required to include a link to the Credit Reference Agency Information Notice (commonly known as “CRAIN”) as set out below within their own fair processing notice or provide an off-line route to access information about CRAIN, such as printed copies A copy of the CRAIN notice link is as follows https://www.experian.co.uk/legal/crain/
2.5. The End User shall provide a copy of the notification in clause 2.4 above as required.
2.6. The End User shall fully indemnify GBG against all liabilities, costs, expenses, damages and losses incurred by GBG as a result of the End User’s failure to incorporate the CRAIN notice within their fair processing notice.
2.7. Where the End User uses this Dataset in connection with Online Gambling, the terms contained in clause 3.1 shall apply and take precedence over any other terms and conditions contained within these Additional Terms and the Agreement.
2.8. The End User warrants that it will not use this Dataset for any reason outside of the Customer Use Case and the Permitted Purpose.

3. SPECIAL TERMS AND CONIDITIONS FOR USE OF THE SUPPLIER DATA IN CONNECTION WITH ONLING GAMBLING
3.1. The End User may only use the Dataset for the Permitted Purpose and to comply with its legal and regulatory obligations in respect of its Online Gambling activities.

4. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
4.1 The Supplier Data used to provide you with this Dataset is hosted by Experian in the United Kingdom. In order to deliver the Dataset, Experian shall receive and process End User Data in its capacity as an independent controller. In addition, the Supplier may retain copies of End User Data for audit and compliance purposes.
4.2. The Supplier is based in the United Kingdom. The United Kingdom is deemed to offer an adequate level of data protection for personal data by the European Commission, therefore End User Data can be safely transferred to Experian without further data export safeguards.
4.3. Notwithstanding clause 4.2, Experian may, on an occasional and temporary basis transfer End User Data outside of the EEA to third parties appointed as general suppliers of technology and services to Experian in order to support and maintain Experian’s service. In such circumstance, Experian shall ensure that appropriate safeguards are in place with such third party supplier.