Privacy & Cookie Notice

This website is operated by 501 ENTERTAINMENT LTD. (UK company number: 11674266) ("501", "we" or "us"). 501 is active in the product and game design space and provides social entertainment systems, software and payment systems. In this Privacy Notice (the “Notice”), we describe how 501 handles personal data processed by using this website, any affiliated website hosted by us, as well as through our products and services. We process personal data in accordance with the UK Data Protection Act 2018 and the (UK) GDPR, as will be further explained in this Notice. Please contact legal@501fun.com for any questions with respect to this Notice.

The type of processing that we perform regarding your personal data depends on the purpose for which we process the data. We have divided this Notice into different category sections based on the various purposes for which we process your personal data.

1.1 What personal data do we collect, how is it used, on what legal basis, and for how long?

1.1 Website Use and Contact Forms

1.2 To provide you with a better user experience and personalized scorecard

Some of the personal data we gather from you through our website is done via cookies, tracking pixels and similar technologies. Cookies are small data files that are placed on your computer or mobile device when you visit a website. Website owners widely use cookies to improve the performance of their websites and provide reporting information. Certain third-party cookies enable third-party features or functionality to be provided on or through the website (e.g., advertising, interactive content, and analytics). The parties that set these third-party cookies can recognize your computer both when it visits the website in question and also when it visits certain other websites.

Below, you will find an overview of the cookies placed on our website. Please note You have the right to decide whether to accept or reject cookies that would require your consent:

1.3 To provide you with a better user experience and personalised scorecard

1.4 To send a copy of your scorecard and more, to you and your co-players

2. How have we assessed the balance of interests when we have relied on our legitimate interests as the legal basis for processing your personal data?

For certain purposes, we process your personal data and rely on our legitimate interest as the legal basis for the processing. In assessing the legal basis, we rely on a balance of interests test through which we have determined that our legitimate interests in the processing outweighs your interest and fundamental right not to have your personal data processed. We have stated our legitimate interest in the tables above. Please contact us if you want to read more about how we have conducted this assessment. You can find our contact details in section 9.

3. Who do we share your personal data with?

If we process your personal data in accordance with section 1, some or all of this personal data may be shared with certain recipients (as noted below).

When we share your personal data, we ensure that the recipient processes the data in accordance with the below purpose and legal basis (as and when required) by entering into data transfer agreements or data processing agreements with the recipients. These agreements ensure that your data is processed in accordance with GDPR and this privacy notice.

3.1 Partner Venues – being a physical venue where you interact with our social entertainment technology

Recipients: At the request of a limited number of Partner Venues, we will disclose your personal data to such Partner Venues.

Purpose and legal basis: We transfer personal data to certain of our Partner Venues so that they can use your personal data for marketing purposes. We will only transfer such personal data to the Partner Venues when such relevant Partner Venue has sought and received your consent to the transfer of such personal data for marketing purposes.

3.2 Suppliers and subcontractors

Recipients: We have agreements with other companies that perform certain services on our behalf. These services include, among other things, SMS & email delivery, website hosting, analytics providers, and cloud data storage (such as Microsoft Azure). These companies have access to your personal data to the extent they need it to fulfil their task, but they are not allowed to use or share the data for other purposes. The processing of this data is primarily carried out within the United Kingdom, but data processing may be undertaken outside of the United Kingdom pursuant to appropriate safeguards as described in section 5 below. 

Purpose and legal basis: We sometimes need to access services from other companies in order to provide our services to you, and therefore we rely on our legitimate interest as the legal basis for the processing. However, these companies are not allowed to process or use your personal data for any purposes other than to perform the services under the agreement.

3.3 Authorities

Recipients: Legal authorities and supervisory authorities, such as a police authority.

Purpose and legal basis: By law, we are required to share personal data with certain authorities, such as in compliance laws relating to money laundering and financing of terrorism. The sharing of personal data can also occur in certain circumstances when you have asked us to do so. Therefore, the sharing of personal data with authorities can occur on the grounds of our obligation to fulfil a legal requirement or consent.

3.4 Your fellow players

Recipient: Your personal data may be disclosed to other members of your playing group.

Purpose and legal basis: The purpose of the disclosure is to provide you and your fellow players with scorecards, videos and photos of your game. We rely on our legitimate interest in being able to offer our services and provide a good player experience.

4. Data retention

We will not retain your personal data for longer than is necessary for the purposes for which it was collected. We regularly review our data retention practices and delete data that is no longer required. The specific retention periods for different types of personal data are set out in the tables in section 1 above. These periods are based on the purposes for which we collected the data, legal and regulatory requirements, the need to defend or establish legal claims, and industry best practices.

Once the relevant retention period has expired, we will securely delete or anonymize your personal data, unless we are required by law to retain it for a longer period.

5. Where do we process your personal data?

The personal data processing described above may be done for recipients in the UK and EU/EEA member states as well as in third countries whose legislation may differ from the data protection rules within the UK and/or EU/EEA. For transfers to such third countries, we will take appropriate measures to ensure that your personal data is adequately protected.

When we transfer personal data outside the UK or EU/EEA, we ensure adequate protection through:

• Adequacy decisions where the EU Commission has determined adequate protection exists

• Standard Contractual Clauses approved by the EU Commission

• Other appropriate safeguards as permitted by applicable law

Right to obtain a copy – If you want more information about transfers to countries outside of the UK or the EU/EEA, or if you want to obtain a copy of the safeguard we have used, you can contact us using the contact details provided in section 9 below.

6. Do we collect information from minors?

We do not intentionally collect personal data from minors (those under the age of 18). If it comes to our attention that personal data from users under the age of 18 has been provided to us, we will take reasonable measures to delete such data from our records as soon as we are informed. If you are concerned that we may have collected data from children under the age of 18, please contact us.

7. What rights do you have against us?

According to applicable legislation, you have the right to exercise certain rights when we process your personal data. Below we describe each right and what it means for you in relation to the personal data we process.

If you want to exercise any of these rights, learn more, or have questions, please feel free to contact us using the contact details provided in section 9 below.

7.1 Right to information

You have the right to be informed about how we process your personal data. In this privacy notice, we generally describe which personal data is processed by us in the various contexts. If you want to know more about whether we process your personal data, and to what extent this is done, you can contact us as mentioned below and request information about which personal data we process.

7.2 Right to access your personal data (register extract)

We can also provide you with a copy, a so-called “register extract”, of your personal data processed by us. In the register extract, we provide information about, among other things, the categories of personal data processed, what the personal data is used for, how long the data will be stored, with whom the personal data has been shared, and where the data comes from.

7.3 Right to rectification

We strive to always have accurate personal data about you and update it when necessary. If you discover that we are processing incorrect data about you, you have the right to contact us to have it corrected. You also have the right to ask us to complete incomplete data if this is relevant based on the purposes for which your data is processed, by providing us with additional information.

7.4 Right to erasure (the right to be forgotten)

You have the right to request the erasure of your personal data. This right is not absolute. For us to erase your data, certain conditions must be met. For example, you may have the right to have data erased if it is no longer necessary for the purposes for which it was collected or if you withdraw your consent.

The right to erasure is also limited if any exception applies to the data in question. For example, we have the right to retain the data if it is required to establish, exercise, or defend legal claims.

7.5 Right to object

You always have the right to object to our processing if the legal basis for the processing (as noted in section Error! Reference source not found. above) is that it is necessary for purposes related to our legitimate interest.

If you object, we do not have the right to process the data further unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if it is for the establishment, exercise, or defense of legal claims. If we believe we have such legitimate grounds, or if the data is needed for the establishment, exercise, or defense of legal claims, we will inform you of this and the reasons for our assessment.

7.6 Right to restriction

You can request that the processing of your data be restricted (for example, if you do not believe the data we have about you is correct, or if you consider the processing to be unlawful). You can also request that the processing of personal data be restricted during the time we are verifying whether our legitimate interest outweighs your privacy interest when you object to the processing (as noted above).

7.7 Right to data portability

If the legal basis for our processing is consent or the performance of a contract, you have the right to have the personal data you have provided to us disclosed in a structured, commonly used, and machine-readable format. However, this requires that the processing is automated (i.e., not in physical form on paper). If it is technically possible, and you wish, we can transfer your data to another data controller.

7.8  Right to withdraw your consent

You can withdraw all or part of the consent you have given at any time, with effect from the withdrawal (i.e., the processing of personal data that we have carried out before the withdrawal is not affected). You can do this by contacting us via the contact details in section 9.

7.9 Right to lodge a complaint with the competent supervisory authority

You can lodge a complaint with the relevant data protection regulatory authority in the jurisdiction in which you interact with our social entertainment systems if you believe that our processing of your personal data does not comply with applicable legislation.

For UK matters: Information Commissioner's Office (ICO) - ico.org.uk

For EU matters: Your local data protection authority or the supervisory authority in the EU Member State where you believe the infringement occurred

7.10 Requirements to exercise your rights

To protect your privacy, we may, if necessary, require you to verify your identity when you contact us to exercise your rights.

We will seek to handle your request to exercise your rights promptly. Your request is usually answered within one month from the day the request was received by us. Only in the case of an unusually complicated request, or if we have received a large number of requests, can the response time be extended by up to two months. If an extension of the response time is made, you will be notified of it.

8. US Disclosures

California Residents: We do not sell, rent, or share your personal information for monetary or other valuable consideration. California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information. For more information about your California privacy rights or to exercise these rights, please contact us using the details in section 10.

9. Changes to, and updates of, the Privacy Notice

This Privacy Notice was last updated on 3^rd June 2025. We may change this Privacy Notice from time to time - when we do, we will inform you here. The updated Privacy Notice will also be made available to you for your review when you next use our services.

10. How to easily get in touch with us

If you have any questions or comments regarding the processing of your personal data, or if you wish to exercise any of your rights as described in section 7, please contact us using the details below.

For UK and General Data Protection Inquiries:

Email: legal@501fun.com

For EU Data Protection Matters: Pursuant to Article 27 of the GDPR, 501 Entertainment Ltd has appointed European Data Protection Office (EDPO) as its GDPR Representative in the EU. You can contact EDPO regarding matters pertaining to the GDPR below:

Address: Avenue Huart Hamoir 71, 1030 Brussels, Belgium

EDPO’s online request form: https://edpo.com/gdpr-data-request/