Gaming Act (Cap. 583), article 8

8. (1) Without prejudice to the provisions of the Professional Secrecy Act , any confidential information disclosed to the Authority or any member, officer or employee thereof, shall be secret and, when attributable to an identified or identifiable person, shall not be disclosed or produced other than with the consent of the person who has submitt ed that information: Provided that the above is without prejudice to the provisions of article 25(4) of this Act: Provided further that notwithstanding the above, the Authority may disclose such information to the Police for the purposes of any investigation or prosecution of a criminal offence or when requested to do so by a court of law in any criminal proceedings. The Authority may also disclose such information in any civil proceedings involving the Authority. (2) The Authority shall be empowered to share any relevant personal data in its possession with local and, or foreign regu lators entrusted with the governance and regulation of a particular se ctor, when such transfer of data is (i) considered by the Authority a s a necessary measure in the public interest, and (ii) necessary fo r the process of detecting, preventing and investigating activities constituting a criminal offence in Malta, or in accordance with Maltese law, and the law of the country of the relevant foreign regulator: Provided that the public interest requirement shall be deemed ipso jure satisfied where the transfer of data is required in relation to the process of detecting, preventing and investigat ing activities relating to any of the following offences: (a) money laundering; (b) terrorist financing; (c) fraud, identity theft and misappropriation of funds; (d) computer misuse; and GAMING [CAP. 583. 13 (e) manipulation of sports competitions: Provided further that for the purposes of detecting, preventing and investigating the manipulation of sports competi tions, the Authority may also share information, including any relevan t personal data, with sport governing bodies and other platforms whose function includes the detection of suspicious betting activitie s and, or are responsible to take action to prevent such manipulation of sports competitions from taking place, and with whom the Author ity has signed an agreement establishing the necessary safeguards t o protect any personal data being shared: Provided further that all processing operations shall be in accordance with the applicable data protection legislation. Legal personality and representation of the Authority.