Candidate Privacy Notice
Candidate Privacy Notice
Dated July 8, 2026
Introduction
We respect your privacy rights and are committed to protecting your privacy and handling your personal data responsibly and in accordance with applicable law.
It is important that you read this Candidate Privacy Notice (“Notice”) carefully as it sets out how Papaya Gaming Ltd. and its subsidiaries (collectively, “Papaya”, the “Company”, “we”, “our” or “us”) handle your personal data when you apply for a job or other role with us, or otherwise consider a position with us - and your rights in connection with such information.
The precise data controller in respect of your personal data will typically be the Papaya legal entity incorporated in the territory in which the position to which you are applying is based, although other entities in the Papaya group may access and process your personal data for the purposes set out in this Notice. If you are a resident in Israel, the database controller responsible for the collection and processing of candidates’ personal data is Papaya Gaming Ltd.
The term “candidate” is used to refer to anyone who applies for a job or a role, or who otherwise seeks to carry out work for us (whether on a permanent or non-permanent basis, and whether as an employee, a freelancer or a contractor).
If you have any question about this Notice, please contact us using the contact details set out in Section 10 below.
- Types of Personal Data We Collect When You Apply
- Purposes for Processing Personal Data
- Who We Share Your Personal Data With
- Data Transfers
- Legal Basis for Processing Personal Data (for EEA Candidates)
- Your Privacy Rights
- Data Retention
- Data Protection Officer
- Changes to This Notice
- Contact Us
1. Information We Collect Automatically
You can visit the Careers section of our website at: https://www.papaya.com/careers (“Website”) and search for jobs without providing personal data. However, we do collect certain information automatically from your device when you visit the Website. For more information about such collected information, please review our Cookie Policy.
Certain candidates may be requested to undergo a professional assessment via a test administered by a third-party. In such cases, we may also automatically collect and process your assessment information and input information (including written communications), information about your interactions with the assessment platform, information about your device and browser (such as your device type, browser type and IP address), and video recordings of your assessment and/or yourself. Such information will be collected solely to ensure the exam is conducted fairly, and to prevent any fraudulent activity or attempts to compromise the integrity of the assessment.
- Personal Data Collected From You
To process your application, we ask you to provide personal data about yourself. All personal data is provided on a voluntary basis, and you determine the extent of information you provide to Papaya.
You are not obliged to provide us any personal data, and you may choose not to do so. However, some personal data may be necessary to complete an evaluation of your application, and if it is not provided, our ability to consider you as a candidate may be limited.
The types of personal data we may collect and process when you apply for a role with us include (but are not limited to):
As a general rule, during the recruitment process, we try not to collect any information that reveals your racial or ethnic origin, religious, political or philosophical beliefs or trade union membership, genetic data, biometric data for the purposes of unique identification or information concerning your health/ sex life (“Sensitive Personal Data”), unless authorized by law or where necessary to comply with the applicable law. However, in some circumstances we may need to collect, or request on a voluntary basis, some Sensitive Personal Data for recruitment-related purposes only. For example: Information about your disabilities for the purposes of ensuring compliance with disability laws. You also may provide, on a voluntary basis, other Sensitive Personal Data during the recruitment process.
- Personal Data Collected From Other Sources
To the extent allowed under applicable law, we may collect some information from sources other than you in the course of our recruitment process, including, without limitation:
- Information provided by recruitment or executive search agencies;
- Information collected from publicly available sources, such as social media platforms you use or a personal website;
- Information provided by your referees and/ or academic institutions.
We collect and use this personal data primarily for recruitment purposes – in particular, to determine your qualifications and suitability for employment / engagement with us and to reach a hiring decision. This includes assessing your skills, qualifications and background for particular roles, verifying your information, carrying out reference checks and to generally manage the hiring process and communicate with you about it. We may also process your personal data in order to comply with corporate governance and other legal and regulatory requirements.
As part of our recruitment process, we may utilize unstructured artificial intelligence technologies (“AI”) to support and improve our hiring process. For example, we may (with prior notice to you) record the interview and use AI-based tools to generate transcripts and summaries of the session (no automated decisions regarding your application will be made based solely on AI outputs). We use these tools to provide candidates with better and more consistent feedback, to help ensure our hiring process is conducted fairly and objectively, and to assist our Recruitment team in reviewing and evaluating applications. Where we intend to record an interview, we will inform you in advance, and you may decline to have your session recorded, in which case the interview will not be recorded and we will offer you with an alternative process that does not involve recording or AI tools. We process any recordings, transcripts and summaries in accordance with this Notice and applicable laws, including the retention, security and data-sharing practices described herein.
We allow access to your personal data only to members of our staff who need to access such information to perform their tasks and duties, and to third parties who have a legitimate purpose for accessing it, and who have committed to keep such information confidential and secure, and to process it in accordance with this Notice. Such third parties include:
- Recruitment or executive search agencies involved in your recruitment;
- Background checking and other screening providers (where applicable and permissible);
- Our recruitment platform provider, and other software and hosting providers that provide and operate the software and services used by our Recruitment team and other teams involved in your recruitment process;
- Other third parties who provide support and advice to our Recruitment team and other teams involved in your recruitment process.
We may also disclose personal data to third parties on other lawful grounds, including, without limitation:
- Where you have provided your consent;
- To comply with our legal obligations, such as when necessary to abide by law, regulation or contract or to respond to a court order;
- In response to lawful requests by public authorities (such as for tax purposes);
- As necessary to establish, exercise or defend against potential, threatened or actual legal claims;
- Where necessary to protect your vital interests or those of another person; and
- In connection with the sale, assignment or other transfer of all or part of our business.
- For Israeli candidates: Personal data of candidates in Israel may be transferred to and processed in countries outside of Israel, including countries that may not provide the same level of data protection as Israel. Such transfers will only occur where appropriate safeguards are implemented to protect the personal data, in accordance with applicable data protection legislation.
- For EEA candidates: Personal data of candidates in the EEA may be transferred internationally, including to countries outside the EEA. These countries may have data protection laws that are different from the laws that apply to the EEA (and, in some cases, may not be as protective). However, we have taken appropriate safeguards to require that your personal data will remain protected in accordance with this Notice, including by implementing, the European Commission’s Standard Contractual Clauses with third parties based outside the EEA who may receive your personal data.
Under EEA (European Economic Area) data protection laws, our legal basis for processing your personal data as part of the recruitment process is:
- Our legitimate interests (as summarized in Section 2 of the Notice), where those interests are not overridden by your data protection interests or fundamental rights and freedoms, particularly taking into consideration the safeguards that we put in place;
- To comply with applicable immigration and/ or employment laws and regulations;
- To take steps prior to entering a contract with you, where you are considered for employment / engagement;
- Where we have your consent to do so. You have the right to withdraw your consent at any time;
- To protect the rights and interests of the Company, our staff members, applicants and others, as required and permitted by applicable law.
If we ask you to provide personal data to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal data is mandatory or not (as well as of the possible consequences if you do not provide your personal data).
If you have questions about or need further information concerning the legal basis on which we collect and use your personal data, please contact us using the contact details provided in Section 10 of the Notice.
You may exercise the rights available to you under the data protection laws that apply to you. These may include:
- The right to access, correct, update or request deletion of your personal data.
- The right to object to processing of your personal data, the right to ask us to restrict processing of your personal data and/ or the right to request portability of your personal data.
- If we have collected and processed your personal data with your consent – the right to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.
- The right to complain to your local data protection authority about our collection and use of your personal data. For more information, please contact your local data protection authority.
You can exercise your applicable rights at any time by contacting us via the contact details available in Section 10. To protect your privacy and security, we may take reasonable steps to verify your identity before granting access or making corrections. We respond to all requests we receive from individuals wishing to exercise their data privacy rights in accordance with applicable data protection laws.
Personal data will be stored in accordance with applicable laws and kept as long as needed to carry out the purposes described in this Notice, unless a longer retention period is permitted or required by applicable law. We also retain personal data to comply with legal obligations and to protect or exercise legal claims. Personal data may be retained for consideration for future job opportunities only if you have explicitly consented. You may withdraw your consent at any time. If your application is successful, personal data collected during the recruitment process will become part of your record and be handled as further described in the Company’s applicable privacy notice for staff members.
The Company has a “Data Protection Officer” who is responsible for matters relating to privacy and data protection. If you have any questions about this Notice, please contact our Data Protection Officer using the contact details available in Section 10 below.
We may update this Notice from time to time in response to changing legal or technological developments and/ or our business needs. When we update this Notice, we will note the date of its most recent revision above. If we make material changes to this Notice, we may take appropriate measures to inform you in a manner that is consistent with the significance of the changes we make. We encourage you to review this Notice frequently to be informed of how we are protecting your personal data.
If you have any questions about our use of your personal data, please contact us at support@papaya.com.
If you are located in the EEA, you may contact our appointed Article 27 Representative, European Data Protection Office, using this form, or by mail to Avenue Huart Hamoir 71, 1030 Brussels, Belgium.