Betclic Group

Last update: 23/09/2025

INTRODUCTION

This Policy covers all personal data processing performed in the context of your application for a position and its study as required by the General Data Protection Regulation (GDPR). Within Betclic Group, the legal entity that offers you employment (“the Company”) will collect and process your personal data in accordance with applicable data protection laws.

Please take the time to read our Privacy Policy carefully.

1. What personal data is collected?

Here are the categories of personal data we process when you are applying for a job:

• Identification data (first and last name, etc.); • Contact details (phone number, email address, etc.); • Professional life (education, business ownership, professional occupation, etc.); • Assessment of soft and hard skills (knowledge test, logic and personality tests, etc.); • Other information that you provide in support of your application (cover letter, reasons for your application to the company, etc.).

Your data can be collected:

• Directly (job application, spontaneous application, interview, etc.); • Indirectly (publicly avalaible information, CV database, etc.).

2. For what purposes and on what basis do we collect your personal data?

Your personal data is processed for specific purposes and in accordance with regulations and applicable laws. We process your data for the following purposes:

• Receive and register applications sent to Betclic (Performance of a contract); • Manage recruitment procedures in conjunction with management (Performance of a contract); • Respond to candidates (Performance of a contract); • Assess job suitability (Performance of a contract); • Manage litigation (Legitimate interest); • Perform various background checks (Legitimate interest); • Carry out statistical studies (Legitimate interest); • Carry out checks to meet the Company's legal and regulatory obligations (Legal obligations).

3. Recipients of your data

The data collected are strictly necessary for the purposes above and are then sent to the relevant departments of the Company as well as its service providers and subcontractors.

3.1 Within the Company

When personal data is disclosed within the Company, we take the necessary measures to ensure that such personal data is accessible only to those employees who need it.

Where applicable, we transmit your personal data to the authorized personnel of the Company, particularly the employees in charge of recruitment.

3.2 Outside the Company

In the context of our activity or for the fulfilment of the purposes mentioned above, we may share your data with the following third parties:

• Recruitment platform; • If applicable, recruitment agencies; • Personality test platform; • Other tools or test platforms; • Representatives of law enforcement agencies, judicial or administrative authorities or other authorized third parties in response to a request for information from a competent authority, if the Company considers that the communication of such information is lawful or required by law, an applicable regulation or in the context of a judicial proceeding; • Social network platforms when you transmit your application via those platforms; • Our legal advisers and/or lawyers.

You can obtain further information on these recipients by contacting the Data Protection Officer.

4. Security of your personal data

The Company uses its best endeavours to assure the security and confidentiality of the data that you communicate. We make sure to implement appropriate technical, physical, and organizational control measures to ensure the security and confidentiality of your data. This Policy is reflected in a specific framework for the use of data by our employees, as well as the selection of subcontractors conforming to the standards laid down by the regulations in force.

In this regard, Betclic makes sure to:

• Secure access to its premises and to its IT platforms; • Secure access, sharing and transfer of data; • Implement an IT security policy; • Ensure employee awareness of confidentiality and data protection requirements; • Strictly select its partners and service providers.

5. Retention of your personal data

Your personal data will be kept by the Company for two (2) years from receipt of your application, unless you submit a request for earlier deletion.

Beyond this period your data will be erased regularly unless it is necessary to keep them longer (i) to ensure compliance with legal, accounting and tax retention requirements (ii) for the retention of evidence during applicable limitation periods, (iii) for the exercise of the rights of the Company in the event of contentious or judicial action during the entire period of the proceedings or the investigation.

6. Transfer outside the European Economic Area

Some of Betclic's service providers and subcontractors are located outside the European Economic Area (EEA). We ensure that such data transfers are subject to an adequate level of protection, notably using the European Commission’s Standard Contractual Clauses, Binding Corporate Rules, or, where applicable, under a data protection agreement between the European Union and the third country concerned.

We are committed to ensuring that our service providers and subcontractors comply with the necessary security and confidentiality obligations.

7. Your personal data rights

7.1 What are your rights?

In accordance with the applicable data protection legislation, you have the following rights concerning your personal data:

The right to be informed about the collection and use of your personal data: You have the right to demand clear, transparent, and easily understandable information about how we use your personal data and about your rights.

The right of access: You have the right to obtain a copy of your personal data.

The right to data portability: You have the right, under certain circumstances, to receive personal data about you that you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller.

The right to rectification: You have the right to obtain the rectification of your personal data if it is inaccurate or incomplete.

The right to object to the processing of your personal data: You have the right to oppose certain types of processing (for example, when the processing is based on our legitimate interests).

The right to withdraw your consent: If you have given your consent to the processing of your personal data that we carry out, you have the right to withdraw it at any time.

The right to erasure (the "right to be forgotten"): You have the right to obtain the erasure of your personal data. However, the right to erasure (or the "right to be forgotten") is not absolute and is subject to special conditions. We may retain your personal data to the extent permitted by applicable law, and where the processing of such personal data is still necessary for the fulfilment of a legal obligation to which we are subject or for the purpose of ascertaining, exercising or defending of a right to justice.

The right to restriction of processing: You have the right to obtain the limitation of processing in certain circumstances (for example, when we no longer need your personal data, but these are still necessary for observation, exercising or defending a right to justice).

7.2 How to exercise your rights?

If you wish to exercise your rights regarding your personal data, you may contact our DPO via email at: privacy.team@betclicgroup.com.

We will respond to your request as soon as possible and always within the deadlines provided by the applicable data protection legislation.