Candidate Privacy Notice

Candidate Privacy Notice

Introduction

iGamingRecruitment.io (“we”, “us”, or “our”) is a recruitment agency based in Gibraltar, specialising in placing candidates in the iGaming industry. We are committed to protecting the privacy and security of your personal information.

This Candidate Privacy Policy explains how we collect, use, store, and share your personal data when you apply for roles through us, in accordance with the Gibraltar General Data Protection Regulation (Gibraltar GDPR) and the Data Protection Act 2004 (DPA).

We act as a “data controller” for the personal data we process in the context of our recruitment services. This means we determine the purposes and means of processing your data.

This policy applies to all candidates who submit applications, resumes, or other information to us, whether directly or via third parties.

If you are successfully placed in a role, additional privacy information may be provided by your employer. We may update this policy from time to time and will notify you of significant changes by posting the updated version on our website.

Data Protection Principles

We comply with data protection laws, which require that your personal data is:

  • Processed lawfully, fairly, and transparently.
  • Collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
  • Adequate, relevant, and limited to what is necessary.
  • Accurate and kept up to date.
  • Retained only for as long as necessary.
  • Processed securely, with appropriate measures to protect against unauthorised access, loss, or damage.

Types of Personal Data We Collect

In connection with your application or our recruitment services, we may collect and process the following categories of personal data:

  • Contact information (e.g., name, address, email, phone number).
  • Professional details (e.g., resume/CV, employment history, qualifications, skills, experience, references, salary expectations).
  • Identification details (e.g., date of birth, nationality, right to work documentation).
  • Other information you provide (e.g., cover letters, interview responses, assessment results).

We may also collect special categories of personal data (sensitive data) where relevant, such as:

  • Health information (e.g., to make reasonable adjustments during recruitment).
  • Diversity information (e.g., race, ethnicity, gender, disability, sexual orientation) for equal opportunities monitoring (provided anonymously and voluntarily).
  • Criminal conviction data (e.g., for background checks in regulated iGaming roles).

How We Collect Your Personal Data

We collect your personal data from:

  • You directly (e.g., via applications, resumes, forms, emails, interviews, or our website).
  • Third parties (e.g., recruitment platforms, job boards, referees, background check providers).
  • Public sources (e.g., LinkedIn or professional networks, where lawful).

Purposes and Legal Bases for Processing

We process your personal data for the following purposes:

  • To assess your suitability for roles in the iGaming industry and match you with opportunities.
  • To communicate with you about applications, interviews, and placements.
  • To conduct reference checks, background verifications, and assessments.
  • To comply with legal obligations (e.g., right-to-work checks).
  • To manage our recruitment processes and maintain records.
  • For equal opportunities monitoring (anonymised).
  • To defend against potential legal claims (e.g., discrimination).

Our legal basis for processing include:

  • Legitimate interests (e.g., to run an efficient recruitment agency, share your data with clients for placement – balanced against your rights).
  • Contractual necessity (e.g., to take steps prior to entering a placement agreement).
  • Legal obligations (e.g., immigration checks).
  • Consent (where you explicitly agree, e.g., for retaining your data in our talent pool – you can withdraw this at any time).

For sensitive data, we rely on additional bases such as employment-related obligations or your explicit consent. For criminal data, we process it only where necessary for regulated roles, with appropriate safeguards.

If you fail to provide required data (e.g., qualifications proof), we may not be able to process your application.

Sharing Your Personal Data

We may share your personal data with:

  • iGaming clients (potential employers) for role consideration – we will inform you before sharing and only share necessary details.
  • Service providers (e.g., background check firms, IT providers) acting as processors on our behalf, bound by contracts ensuring data protection.
  • Regulatory authorities (e.g., Gibraltar Financial Services Commission for regulated roles).
  • Professional advisors (e.g., lawyers) if needed for legal compliance.

We do not transfer data outside Gibraltar or the EU/EEA without adequate safeguards (e.g., adequacy decisions or standard contractual clauses). All sharing is limited to what is necessary and compliant with data protection laws.

Data Security

We implement appropriate technical and organisational measures to protect your data, including:

  • Encryption and access controls.
  • Secure storage and transmission.
  • Staff training on data protection.
  • Procedures for handling data breaches (notifying you and the Gibraltar Regulatory Authority where required).

Access to your data is restricted to those who need it for recruitment purposes.

Data Retention

We retain your personal data only as long as necessary:

  • For unsuccessful applications: Up to 12 months after the process ends, to defend against claims or consider you for future roles (with your consent for talent pooling).
  • For successful placements: Transferred to the client; we retain basic records for up to 12 months.
  • Anonymised data may be kept longer for statistical purposes.

After retention periods, data is securely deleted or anonymised. If we wish to keep your data longer (e.g., for future opportunities), we will seek your consent.

Your Rights

Under the Gibraltar GDPR, you have rights including:

  • Access: Request a copy of your data.
  • Rectification: Correct inaccurate data.
  • Erasure: Request deletion where no longer necessary (subject to exceptions).
  • Restriction: Limit processing in certain cases.
  • Objection: Object to processing based on legitimate interests.
  • Portability: Receive your data in a transferable format.
  • Withdraw consent: Where processing relies on consent.

To exercise rights, contact us (details below). We respond within one month, free of charge (extensions/fees may apply for complex requests). 

You can complain to the Gibraltar Regulatory Authority (info@gra.gi or +350 20074636) if unsatisfied.

Automated Decision-Making

We do not use automated decision-making that significantly affects you.

Contact Us

For questions or to exercise rights, contact our Data Protection Officer at:
  

Email: privacy@igamingrecruitment.io  

Address: iGamingRecruitment.io, Suite 11, Victoria House, Main Street, Gibraltar, GX11 1AA.  

 

Last updated: January 12th, 2026.