Additional information on Data Protection in the Inspection and Supervision of the Gambling Market

Pursuant to  Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, regarding the protection of natural persons with regard to the processing of personal data and on the free movement of such data, the Directorate-General for the Regulation of Gambling commits to fulfilling its obligation of privacy with respect to personal data and the duty to treat it confidentially. To this end, it will take any necessary action to prevent its alteration, loss, unauthorised handling or access.

Furthermore, the following additional information is provided in relation to the protection of personal data for the supervision, inspection and monitoring of the gambling market:

Who is responsible for the processing of your data?

Directorate-General for the Regulation of Gambling
c/ Atocha 3, 28012 MADRID, Spain

Data Protection Officer: Sub-Directorate General for Information on Transparency and Web Content.
C/ Alcala 9, 28071 MADRID.

For what purpose will the DGOJ process your data and for how long will it be retained.

The DGOJ will process the data provided to us through this form and its attached information to monitor, investigate, supervise, control and inspect online gambling activities. Additionally, for statistical, historical and scientific purposes related to gambling, as well as its impact on society.

This data will be kept on our systems for 10 years after the expiry of the licences according to that provided for in Article 9.5 of Law 13/2011 on Gambling Regulation and whenever there are no procedures currently under investigation.

What allows the DGOJ to process your data for the stated purposes?

The processing of your data is necessary to fulfil a mission carried out in the public interest or in exercising the public powers conferred on the DGOJ through Articles 21 and 22 of Law 13/2011 on gambling regulation.

The data provided through this form is the minimum required to be able to deal with your request. Therefore, all data is considered mandatory. Otherwise, we would not be able to progress further.

To whom will your data be communicated?

Your personal data will be communicated to the State Security and Police Forces and the Executive Service of the Commission for the Prevention of Money Laundering and Monetary Offences (Article 24 of Law 13/2011, of 27 May on gambling regulation), as well as to Courts and Tribunals, and AEAT.

Additionally, in gambling offered using international liquidity, to the online gambling regulatory authorities of the different Member States (Articles 21 and 24 of Law 13/2011).

 What are your rights when you provide us with your data?

  • Anyone has the right to obtain confirmation of whether we are processing personal data concerning them in the DGOJ, or not.
  • Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data. They may exercise these rights via a  request addressed to the DGOJ  or through the network of assistance offices for registries (
  • Likewise, you can file a claim with the Spanish Data Protection Agency should you consider that no satisfaction has been obtained when exercising your rights, either through its web form  (Claim Form of the Spanish Agency for Data Protection), or in-person at c/ Jorge Juan 6, 28001 MADRID.