Data Processing Agreement

This Data Processing Agreement (“Agreement”) forms part of the contract between LasMeta Platform (“Company,” “we,” “us,” or “our”) and the customer (“Customer” or “Data Controller”) for the use of the “LasMeta” Social Poker Game (“Game”) and associated services, websites, and applications (collectively, the “Services”).

1. Definitions

• • Data Controller: The organization that determines the purposes and means of the processing of Personal Data.
• • Data Processor: The organization that processes Personal Data on behalf of the Data Controller.
• • Personal Data: Any information relating to an identified or identifiable natural person as defined under applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
• • Processing: Any operation or set of operations performed on Personal Data, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, transmission, dissemination, alignment, combination, restriction, erasure, or destruction.

2. Scope of Processing

We, as the Data Processor, will process Personal Data only to the extent necessary to provide our Services to the Customer in accordance with the Customer's documented instructions and applicable data protection laws. We will not process Personal Data for any other purpose, except where required by law; in such cases, we will inform the Customer of that legal requirement before processing, unless prohibited by law on important grounds of public interest.

3. Data Processor Obligations

3.1 Confidentiality

We ensure that all personnel authorized to process Personal Data are subject to strict confidentiality obligations and have received appropriate training on their responsibilities regarding the protection of Personal Data.

3.2 Security

We implement and maintain appropriate technical and organizational measures to protect Personal Data against unauthorized or unlawful processing and against accidental loss, destruction, damage, alteration, or disclosure. These measures include, but are not limited to, encryption, access controls, secure data storage, and regular security audits.

3.3 Sub-processors

We may use sub-processors to process Personal Data on our behalf. We will ensure that any sub-processor we use is subject to data protection obligations equivalent to those set out in this Agreement. We will provide the Customer with a list of sub-processors upon request and inform the Customer of any intended changes concerning the addition or replacement of sub-processors, giving the Customer the opportunity to object to such changes.

3.4 Data Subject Rights

We will assist the Customer, as necessary, in responding to requests from data subjects exercising their rights under applicable data protection laws, including rights of access, rectification, erasure, restriction of processing, data portability, and objection to processing. Any request received directly from a data subject will be promptly forwarded to the Customer.

3.5 Data Breach Notification

In the event of a Personal Data breach, we will notify the Customer without undue delay after becoming aware of the breach. We will provide the Customer with sufficient information to allow the Customer to meet any obligations to report the breach under applicable data protection laws or to inform data subjects. We will cooperate with the Customer and take such reasonable commercial steps as are directed by the Customer to assist in the investigation, mitigation, and remediation of each Personal Data breach.

4. Data Controller Obligations

4.1 Instructions

The Customer will provide us with clear and lawful instructions regarding the processing of Personal Data. The Customer warrants that its instructions comply with applicable data protection laws and that the processing of Personal Data by us in accordance with such instructions will not cause us to be in breach of any applicable data protection law.

4.2 Compliance

The Customer is responsible for ensuring that the processing of Personal Data, including the collection, transfer, and provision of access to us, complies with applicable data protection laws. The Customer warrants that it has obtained all necessary consents or other legal bases for the lawful processing of Personal Data by us as set out in this Agreement.

5. International Transfers

We will transfer Personal Data to countries outside the European Economic Area (EEA) only where appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or other legally authorized transfer mechanisms that provide an adequate level of protection for Personal Data.

6. Term and Termination

This Agreement will remain in effect for the duration of our contract with the Customer. Upon termination of the contract, we will, at the Customer's choice, either return all Personal Data in our possession or securely delete it, except to the extent that we are required by law to retain such data. We will document to the Customer that we have done so, except where this is not possible due to technical or legal constraints.

7. Audits

We will make available to the Customer all information necessary to demonstrate compliance with the obligations set out in this Agreement and allow for and contribute to audits, including inspections, conducted by the Customer or another auditor mandated by the Customer. Such audits will be conducted with reasonable notice and at reasonable times, taking into account the nature of the information and the need to protect the security and confidentiality of our operations.

8. Contact Us

If you have any questions about this Data Processing Agreement or need further information, please contact us:

• General Inquiries: [email protected]
• Legal Inquiries: [email protected]

LasMeta Platform
Global Operations