Gaming Act · clause 8(2)

Secrecy and disclosure

The Authority shall be empowered to share any relevant personal data in its possession with local and, or foreign regulators entrusted with the governance and regulation of a particular sector, when such transfer of data is (i) considered by the Authority as a necessary measure in the public interest, and (ii) necessary for the process of detecting, preventing and investigating activities constituting a criminal offence in Malta, or in accordance with Maltese law, and the law of the country of the relevant foreign regulator:

Provided that the public interest requirement shall be deemed ipso jure satisfied where the transfer of data is required in relation to the process of detecting, preventing and investigating activities relating to any of the following offences:

(a) money laundering;

(b) terrorist financing;

(c) fraud, identity theft and misappropriation of funds;

(d) computer misuse; and

(e) manipulation of sports competitions:

Provided further that for the purposes of detecting, preventing and investigating the manipulation of sports competitions, the Authority may also share information, including any relevant personal data, with sport governing bodies and other platforms whose function includes the detection of suspicious betting activities and, or are responsible to take action to prevent such manipulation of sports competitions from taking place, and with whom the Authority has signed an agreement establishing the necessary safeguards to protect any personal data being shared:

Provided further that all processing operations shall be in accordance with the applicable data protection legislation.