The National Supervisory Authority for Personal Data Processing completed, in November 2025, an investigation at the controller Crowd Entertainment Limited and found a violation of the provisions of Article 12 paragraphs (3) and (4) in relation to Article 15 paragraphs (1) and (3) of Regulation (EU) 2016/679.

As such, the controller was fined a fine of 76,333 lei (equivalent to 15,000 euros).

The investigation was initiated following a complaint filed by a data subject dissatisfied with the way in which his request for access to personal data was handled by Crowd Entertainment Limited.

During the investigation, the National Supervisory Authority for Personal Data Processing found that the controller did not present evidence showing that it had communicated, in writing and within the legal deadline, a complete and appropriate response to the petitioner’s request requesting access to his personal data related to the player accounts registered on the platforms owned by the controller, including information regarding his self-exclusion requests.

Therefore, Article 12 paragraphs (3)-(4), in relation to Article 15 paragraphs (1) and (3) of Regulation (EU) 2016/679, were violated.

At the same time, the following corrective measures were ordered against the controller:

to send a complete response to the request of the applicant, by communicating all the information requested by his requests, in relation to the provisions of Article 15 paragraphs (1) and (3) of Regulation (EU) 2016/679;
to ensure compliance with Regulation (EU) 2016/679 of personal data processing operations, by adopting the necessary technical and organizational measures, including in terms of training the personnel designated for this purpose, with the appropriate involvement of the data protection officer, so that the controller is able to analyze, correctly handle and adequately respond to requests by which data subjects exercise their rights, within the time limits according to the conditions provided for in Articles 12-23 of Regulation (EU) 2016/679.

Legal and Communication Department

A.N.S.P.D.C.P