Privacy & Cookie Policy
HiGaming | Effective date: 17 September 2026 | Version 2
Contents
- Privacy Policy
- Who We Are
- What Personal Data We Collect
- How We Collect Your Data
- Why We Process Your Data & Legal Bases
- Who We Share Your Data With
- International Data Transfers
- How Long We Keep Your Data
- Your Rights
- Data Security
- Children's Privacy
- Changes to This Policy
- Cookie Policy
- What Are Cookies
- Cookies We Use
- Third-Party Cookies
- Managing Your Cookie Preferences
- Contact
- Contact & Complaints
Part 1 - Privacy Policy
How we collect, use, and protect your personal data
1. Who We Are
HiGaming ("we", "us", "our") is a talent acquisition and recruitment company specialising in the iGaming and technology sectors. We operate the website at www.higaming.com (the "Website").
HiGaming is the data controller in respect of personal data collected through the Website and in the course of providing our recruitment services. This means we determine the purposes and means by which your personal data is processed.
This Privacy & Cookie Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it. It applies to all users of our Website, including job candidates, client contacts, and general visitors.
GDPR: We are committed to processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and all applicable Cyprus data protection legislation.
2. What Personal Data We Collect
2.1 Candidates & Job Seekers
When you submit your CV, register your interest, or are put forward for a role, we may collect:
- Full name, contact details (email address, phone number)
- Current and previous employment history and job titles
- Educational background and professional qualifications
- CV, cover letter, and any supporting documents you provide
- LinkedIn profile or other professional profile links
- Salary expectations and notice period
- Location and willingness to relocate or work remotely
- References and, where provided, reference contact details
- Right-to-work status and nationality (where relevant to an Assignment)
- Any other information you voluntarily provide to us
We do not request or process special category data (such as health information, religious beliefs, or political opinions) unless you have provided it voluntarily and we have a lawful basis to process it. If you include such information in your CV, please be aware that we will handle it with additional care.
Candidates referred to us by a third party. Where your details are provided to us by a Referrer under our Candidate Referral Programme rather than by you directly, we process your Personal Data on the basis of our legitimate interests in operating our recruitment business and assessing your suitability for an Assignment. We will provide you with the information required by Article 14 of the GDPR when we first make contact with you and, in any event, within one (1) month of receiving the referral. You may object to this processing at any time — see Section 8.
2.2 Client Contacts
When you engage with HiGaming as a representative of a client company, we may collect:
- Your name, job title, and business email address
- Business phone number and company address
- Information about your hiring needs and preferences
- Communications and correspondence with HiGaming
- Invoicing and payment information (processed securely)
2.3 Website Visitors
When you browse our Website, we automatically collect certain technical data, including:
- IP address and approximate location
- Browser type and version
- Pages visited, time spent, and navigation path
- Referring website
- Device type and operating system
This data is collected through cookies and similar technologies — see the Cookie Policy section for full details.
2.4 Referrers
Where you refer a candidate to us under our Candidate Referral Programme, we may collect:
- Your full name and contact details (email address, phone number)
- Payment and bank details, where necessary to pay a referral reward to you
- Records of the referrals you have submitted and any reward paid
We use your payment and bank details only to pay a referral reward and to meet our legal and tax record-keeping obligations.
3. How We Collect Your Data
We collect personal data through the following channels:
- Directly from you — when you submit a CV, fill in an enquiry form, email us, or contact us by phone.
- Through the Website — via contact or application forms, cookie tracking, and analytics tools.
- From third-party sources — including LinkedIn and other professional networking platforms, job boards, referrals from existing candidates or clients, and publicly available professional profiles.
- From client companies — when a client provides us with contact details of individuals within their organisation in the context of an Assignment.
Where we collect data from third-party sources, we will inform you of this at the earliest practical opportunity and ensure we have a lawful basis to process your data.
4. Why We Process Your Data & Legal Bases
We only process your personal data where we have a lawful basis to do so under the GDPR. The table below sets out the main purposes for which we process personal data and the corresponding legal basis.
| Purpose | Who it applies to | Legal basis |
|---|---|---|
| Matching candidates to suitable roles and presenting profiles to clients | Candidates | Consent / Legitimate interests |
| Maintaining a talent database for future opportunities | Candidates | Consent / Legitimate interests |
| Communicating about active or potential assignments | Candidates & Clients | Legitimate interests / Contract |
| Managing and fulfilling client service agreements | Clients | Contract performance |
| Invoicing and payment processing | Clients | Contract performance / Legal obligation |
| Conducting market mapping and salary benchmarking | Candidates | Legitimate interests |
| Sending relevant job alerts or industry news (where opted in) | Candidates | Consent |
| Improving and maintaining the Website | All users | Legitimate interests |
| Complying with legal and regulatory obligations | All users | Legal obligation |
| Preventing fraud and ensuring security | All users | Legitimate interests / Legal obligation |
In addition, where you participate in our Candidate Referral Programme as a Referrer, we process your Personal Data in order to administer the Programme and pay any referral reward due to you (contract performance, or our legitimate interests where no contract is in place with you), and to meet our legal and tax obligations in respect of payments made (legal obligation). Where a Candidate is referred to us by a Referrer, we process that Candidate's Personal Data on the basis of our legitimate interests, as described in Section 2.1.
Where we rely on legitimate interests as our legal basis, we have balanced our interests against your rights and concluded that our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests — see Section 8.
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Who We Share Your Data With
HiGaming does not sell your personal data. We share it only in the following circumstances:
5.1 Client Companies
With your consent, we share your profile and CV with client companies for the purpose of evaluating your suitability for a specific role. We will always seek your approval before presenting your profile to any client, and we will not share more information than is necessary for that purpose.
5.2 Service Providers
We share data with trusted third-party service providers who support our operations, including:
- IT infrastructure and cloud hosting providers
- Applicant tracking and CRM systems
- Email and communication platforms
- Analytics providers (e.g. Google Analytics)
- Accounting and invoicing software
All service providers are subject to data processing agreements and are required to handle your data in accordance with GDPR.
5.3 Legal & Regulatory Authorities
We may disclose personal data to regulators, law enforcement agencies, or courts where required to do so by law, or to protect the rights, property, or safety of HiGaming, our clients, candidates, or others.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of all or part of HiGaming's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.
6. International Data Transfers
Given that HiGaming operates across 18+ countries and serves clients and candidates globally, personal data may be transferred to and processed in countries outside the European Economic Area ("EEA").
Where such transfers occur, we ensure they are carried out in compliance with Chapter V of the GDPR, using one or more of the following safeguards:
- An adequacy decision by the European Commission confirming the destination country provides an equivalent level of protection;
- Standard Contractual Clauses (SCCs) approved by the European Commission; or
- Other appropriate safeguards as permitted under applicable data protection law.
You may request further information about our international transfer safeguards by contacting us as set out in Section 16.
7. How Long We Keep Your Data
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention periods are as follows:
| Data type | Retention period |
|---|---|
| Candidate profiles and CVs (active) | 2 years from last contact or activity |
| Candidate profiles (placed candidates) | 3 years from date of placement |
| Client contact and engagement records | 5 years from end of commercial relationship |
| Financial and invoicing records | 7 years (Cyprus tax law requirement) |
| Website analytics data | 26 months (Google Analytics default) |
| Email correspondence | 3 years from date of last communication |
Referral records — including a Referrer's name, contact details and referral history — are retained for 3 years from the date of the referral or, where a reward has been paid, for 7 years in line with the retention period for financial and invoicing records above.
At the end of the applicable retention period, data is securely deleted or anonymised. If you ask us to delete your data before the end of the retention period, we will do so unless we have a legal obligation to retain it.
8. Your Rights
Under the GDPR, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting us as set out in Section 16. We will respond within one month of receiving your request (or within three months for complex requests, with notice).
Right of Access
Request a copy of the personal data we hold about you and information about how we use it.
Right to Rectification
Ask us to correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data where there is no longer a legitimate reason for us to hold it ("right to be forgotten").
Right to Restriction
Ask us to pause the processing of your data in certain circumstances, e.g. while a dispute is resolved.
Right to Data Portability
Receive your personal data in a structured, machine-readable format and transfer it to another controller.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes. We will stop unless we have compelling legitimate grounds.
Right to Withdraw Consent
Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
Right to Complain
Lodge a complaint with the Cyprus Commissioner for Personal Data Protection or your local supervisory authority.
Cyprus Data Protection Authority: Office of the Commissioner for Personal Data Protection — www.dataprotection.gov.cy
9. Data Security
HiGaming takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration, including:
- Encryption of data in transit (TLS/HTTPS) and at rest where appropriate;
- Access controls limiting data access to authorised staff on a need-to-know basis;
- Regular review of our security practices and systems;
- Staff training on data protection and information security; and
- Contractual data security obligations imposed on all third-party service providers.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, inform affected individuals without undue delay.
Please note that no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
10. Children's Privacy
Our Website and Services are intended for adults and are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes, we will update the effective date at the top of this page. Where changes are material, we will provide notice by email or a prominent notice on the Website. We encourage you to review this page periodically.
Your continued use of the Website after the effective date of any update constitutes acceptance of the revised policy.
Part 2 - Cookie Policy
How we use cookies and similar technologies on our website
12. What Are Cookies
Cookies are small text files placed on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites work efficiently, remember your preferences, and provide information to website owners.
Similar technologies — such as web beacons, pixels, and local storage — work in a comparable way and are also covered by this policy. We refer to all of these collectively as "cookies" throughout this section.
Under the EU ePrivacy Directive (as implemented in Cyprus), we are required to obtain your consent before placing non-essential cookies on your device. You will be asked to make a choice via our cookie banner when you first visit the Website.
13. Cookies We Use
We use the following categories of cookies on the Website:
Essential Cookies
These cookies are strictly necessary for the Website to function and cannot be switched off. They do not require your consent. They are typically set in response to actions you take, such as navigating between pages or submitting a form.
| Cookie name | Purpose | Duration |
|---|---|---|
| Session cookie | Maintains your session as you navigate the Website | Session (deleted when browser closes) |
| Cookie consent | Stores your cookie preferences | 12 months |
Analytics Cookies
These cookies help us understand how visitors interact with the Website — which pages are most visited, how long people spend on each page, and where they come from. This helps us improve the Website. These cookies require your consent.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes unique users | 2 years |
| _ga_* | Google Analytics | Maintains session state | 2 years |
| _gid | Google Analytics | Distinguishes users (short-term) | 24 hours |
Functional Cookies
These cookies enable enhanced functionality and personalisation, such as remembering your language preference or previously viewed jobs. They require your consent.
| Cookie name | Purpose | Duration |
|---|---|---|
| lang_pref | Remembers your language or region preference | 12 months |
Marketing & Tracking Cookies
These cookies may be set through our Website by advertising or social media partners to build a profile of your interests and show you relevant content on other platforms. They require your consent and can be declined without affecting your use of the Website.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
| li_fat_id / UserMatchHistory | LinkedIn ad tracking and retargeting | 30 days | |
| _fbp | Meta (Facebook) | Ad delivery and conversion tracking | 3 months |
Note: The specific cookies in use on the Website may change as we update our tools and technology stack. This table is reviewed and updated periodically. If you notice a discrepancy, please contact us.
14. Third-Party Cookies
Some cookies on the Website are set by third parties rather than by HiGaming directly. These third parties — such as Google, LinkedIn, and Meta — may use the data collected through their cookies for their own purposes, including advertising. HiGaming has no direct control over third-party cookies or the data those parties collect.
We encourage you to review the privacy policies of these third parties:
15. Managing Your Cookie Preferences
You can manage your cookie preferences at any time in the following ways:
Cookie Banner
When you first visit the Website, a cookie banner will appear giving you the option to accept or decline non-essential cookies. You can update your preferences at any time by clicking the "Cookie Settings" link in the Website footer.
Browser Settings
Most browsers allow you to refuse or delete cookies through their settings. The links below explain how to do this for the most common browsers:
Please note that disabling cookies may affect the functionality of the Website. Essential cookies cannot be disabled as they are required for the Website to operate.
Opt-Out Tools
You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on. For interest-based advertising more broadly, you can visit Your Online Choices.
Questions & Complaints
How to reach us or escalate a concern
16. Contact & Complaints
If you have any questions about this Privacy & Cookie Policy, wish to exercise any of your data protection rights, or have a concern about how we handle your personal data, please contact us:
HiGaming
Email: legal@higaming.com
Website: www.higaming.com
We will acknowledge your request within 5 business days and aim to resolve all queries within one month.
Right to Complain to a Supervisory Authority
If you are not satisfied with our response, or believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the relevant data protection supervisory authority. In Cyprus, this is:
Office of the Commissioner for Personal Data Protection
Website: www.dataprotection.gov.cy
Email: commissioner@dataprotection.gov.cy
If you are based in another EU member state, you may also contact your local data protection authority.
Last updated: 17 September 2026. This policy replaces all previous versions.
© 2026 HiGaming. All rights reserved. | www.higaming.com