• Supplier hosts the Supplier Data
• Supplier receives and processes End User Data in its capacity as data controller
• The Supplier is based in the UK
• The Supplier is a Credit Reference Agency (“CRA”) therefore the End User must include a reference to Credit Reference Agency Information Notice (“CRAIN”) in its fair processing notice

The Supplier Data that GBG uses to provide the UK Credit Bureau Dataset is supplied by GBG’s Data Supplier, Experian Limited ("Experian"). GBG is obliged under the terms of its agreement with Experian to ensure that all End Users agree to comply with the following licensing provisions:

1. DEFINITIONS
1.1. In these Additional Terms the following definitions shall apply, in addition to the definitions set out in the General Terms:
“End User Data” means any data provided to GBG by the End User for processing in accordance with the terms of the Agreement including where relevant any personal data.
“Online Gambling” means gambling services accessed via remote communication whereby players (who are individuals who are potential or actual customers of the End User in connection with online gambling) register, deposit funds and bet and/or play games.
“Permitted Purpose” means the purposes, restrictions and/or conditions for the use of the Dataset outlined by the Supplier as set out in clauses 2.3 to 2.8 below as applicable in addition to the Customer Use Case set out in the Agreement and at clause 2.1.

2. USE OF THE SUPPLIER DATA
2.1. The Supplier Data may only be used for the Customer Use Case detailed in this clause 2.1, provided that such Customer Use Case is selected on the End User’s Order Form and the End User complies with any use case restrictions set out in the Agreement or these Additional Terms:
• ID Verification – Fraud
• ID Verification - Regulatory
2.2. In addition to the Customer Use Case restrictions contained within clause 2.1 (including any conditions that apply to that Customer Use Case) clauses 2.3-2.8 shall also apply
2.3. The End User shall ensure that at the point of collection of the personal data, the relevant individual is informed of the following principles:
a. Their details will be shared with GBG and Experian
b. A search will be carried out with Experian for the purposes of verifying their identity
c. A soft footprint shall be left on their credit file
d. Experian may check the details they supply against any particulars on any database (public or otherwise) to which Experian have access in order to verify their identity.
2.4. The End User acknowledges and accepts that the Data Supplier is a CRA and in utilising the services of a CRA, the End User is required to include a link to the Credit Reference Agency Information Notice (commonly known as “CRAIN”) as set out below within their own fair processing notice or provide an off-line route to access information about CRAIN, such as printed copies A copy of the CRAIN notice link is as follows https://www.experian.co.uk/legal/crain/
2.5. The End User shall provide a copy of the notification in clause 2.4 as required.
2.6. The End User shall fully indemnify GBG against all liabilities, costs, expenses, damages and losses incurred by GBG as a result of the End User’s failure to incorporate the CRAIN notice within their fair processing notice
2.7. Where the End User uses the Supplier Data in connection with Online Gambling, the terms contained in clause 2.8 of these Additional Terms shall apply and take precedence over any other terms and conditions contained within these Additional Terms and the General Terms.
2.8. The End User may only use the Supplier Data in accordance with its Customer Use Case and for the Permitted Purpose in order to comply with its legal and regulatory obligations in respect of its Online Gambling activities.
2.9. The End User warrants that it will not use the Supplier Data for any reason outside of the Customer Use Case and the Permitted Purpose.

3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1. The Supplier Data used to provide this element of the Service is hosted by Experian in the United Kingdom. In order to perform the Services, Experian shall receive and process End User Data in its capacity as an independent data controller for the sole purpose of delivering this element of the Service.
3.2. Experian may, on an occasional and temporary basis transfer End User Data outside of the EEA and UK to third parties appointed as general suppliers of technology and services to Experian in order to support and maintain Experian’s service. In such circumstance, Experian shall ensure that appropriate safeguards are in place with such third-party supplier.