1. Introduction and Scope

This Policy applies to all visitors, registered customers, and applicants of the Platform, regardless of the channel through which the Platform is accessed (web, mobile web, native mobile applications, customer support).

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal obligations, or other factors. Material amendments will be communicated through the Platform with reasonable advance notice. We encourage you to review the current version regularly. Your continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

2. Categories of Personal Data We Collect

We collect and process the following categories of personal data:

2.1 Identity and contact data

First and last name, date of birth, gender, nationality, country of residence, residential address, email address, mobile and landline telephone numbers, and login (username).

2.2 Account credentials and preferences

Password (stored exclusively in hashed form), security questions, two-factor-authentication identifiers, language and communication preferences, marketing-consent status.

2.3 Verification and Know-Your-Customer (KYC) data

Copy of passport, national identity card or driving licence; proof of address (utility bill, bank statement); selfie or live-photo verification; source-of-funds and source-of-wealth documentation where required by anti-money-laundering (“AML”) legislation.

2.4 Financial and payment data

Billing address, tokenised debit/credit card details, e-wallet identifiers, bank-account details, and a full history of deposits, withdrawals, wagers, and winnings.

2.5 Technical and device data

IP address, device identifiers, browser type and version, operating system, time-zone setting, screen resolution, approximate geolocation derived from IP, and server-log data.

2.6 Behavioural and gameplay data

Games played, bets placed, frequency and duration of sessions, in-game preferences, bonus history, and responsible-gambling settings such as deposit limits, loss limits, time-out and self-exclusion status.

2.7 Communications data

Content of email, live-chat, and SMS exchanges with our customer-support team; recordings of telephone calls with support specialists (recorded for quality, training, security, and dispute-resolution purposes); messages you post in chat rooms, community functions, and other interactive areas of the Platform.

2.8 Marketing data

Your consent status, preferred channels, response to marketing communications, and segmentation attributes used for personalisation.

3. How We Collect Your Data

• Directly from you — when you register an account, complete KYC verification, deposit or withdraw funds, contact customer support, participate in promotions, subscribe to newsletters, or otherwise interact with us.
• Automatically — through cookies, pixel tags, software-development kits, server logs, and similar technologies when you visit the Platform. See Section 12 and our separate Cookies Policy for details.
• From third parties — identity-verification and KYC providers, anti-fraud and AML databases, payment service providers, affiliates and marketing partners (where you have consented), publicly available sources such as sanctions and politically-exposed-person (“PEP”) lists, and credit-reference agencies where permitted by law.

4. Legal Bases for Processing

We rely on the following legal bases under the GDPR and equivalent legislation:

• Performance of a contract — to register your account, process bets and payments, deliver gameplay, and provide customer support pursuant to our Terms and Conditions.
• Compliance with a legal obligation — to satisfy AML, counter-terrorism-financing, tax, gambling-licensing, responsible-gambling, age-verification, and other regulatory requirements.
• Legitimate interests — to detect and prevent fraud, ensure the security of our systems, analyse and improve the Platform, defend legal claims, and conduct limited direct marketing to existing customers. Where we rely on legitimate interests we conduct a balancing assessment, and you have the right to object (see Section 9).
• Consent — for marketing communications by email, SMS, push notifications, and similar channels; for non-essential cookies; and for any processing of special-category data where explicit consent is required. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Purposes of Processing

We use your personal data to:

• open and administer your account, verify your identity, and carry out ongoing customer due diligence;
• provide the gambling services you request, including processing deposits, wagers, and withdrawals;
• comply with AML, counter-terrorism-financing, tax, gambling-licensing, and other legal obligations;
• detect, investigate, and prevent fraud, multiple accounts, bonus abuse, collusion, and other prohibited conduct;
• monitor play patterns to identify problem-gambling indicators and apply responsible-gambling tools (limits, reality checks, self-exclusion);
• provide customer support and resolve disputes;
• record telephone calls for quality assurance, training, security, and evidential purposes;
• operate chat rooms, community functions, and other interactive features;
• send transactional communications relating to your account, payments, and security;
• send marketing communications with your consent, and personalise offers and promotions;
• analyse Platform performance, optimise the user experience, and develop new features;
• enforce our Terms and Conditions and defend or pursue legal claims.

6. Sharing and Disclosure to Third Parties

We share personal data only where necessary and only with the following categories of recipients:

• Service providers acting as processors on our behalf — cloud hosting and infrastructure providers, KYC and identity-verification vendors, AML and sanctions-screening providers, payment service providers and acquirers, fraud-detection vendors, email and SMS delivery providers, customer-support platforms, and analytics providers (including Google Analytics).
• Group companies and affiliates of MCW where required for operational, security, or compliance purposes, under appropriate intra-group agreements.
• Regulators and competent authorities — gambling regulators, financial-intelligence units, tax authorities, and law-enforcement or judicial authorities, where required by law or binding order.
• Professional advisers — auditors, accountants, lawyers, and insurers, under appropriate confidentiality obligations.
• Successors in interest — in the event of a merger, acquisition, sale of assets, or reorganisation, subject to equivalent protection of your data.
• Marketing and affiliate partners — only with your explicit consent and strictly limited to the data needed for the agreed activity.

We do not sell your personal data.

7. International Data Transfers

Mega Casino World operates internationally. Your personal data may be transferred to, stored in, and processed in countries other than your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction. Where we transfer personal data outside the European Economic Area or the United Kingdom, we rely on one or more of the following safeguards:

• an adequacy decision adopted by the European Commission or the UK government;
• the European Commission’s Standard Contractual Clauses (SCCs) or the UK International Data Transfer Addendum;
• binding corporate rules; or
• another lawful transfer mechanism permitted by applicable law.

You may request a copy of the safeguard applied to a specific transfer by contacting us at [email protected].

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected and to comply with our legal, regulatory, accounting, and reporting obligations. Indicative retention periods:

• Account, KYC, transaction, and AML data — retained for the duration of the account and for at least five (5) years after closure of the account or completion of the last transaction, in line with AML and counter-terrorism-financing legislation. Longer retention may apply where required by competent authorities.
• Telephone-call recordings and customer-support communications — retained for up to twenty-four (24) months for quality-assurance, training, and dispute-resolution purposes.
• Self-exclusion records — retained for the period required by the applicable gambling regulator (typically the duration of the self-exclusion plus the minimum statutory retention period thereafter).
• Marketing data — retained until you withdraw consent or object, and for a short additional period to demonstrate the lawfulness of past processing.
• Technical and analytics data — retained for the periods specified in our Cookies Policy.

After the applicable retention period, data is securely deleted, destroyed, or irreversibly anonymised.

9. Your Rights

Subject to the conditions and exceptions provided by applicable law, you have the following rights in relation to your personal data:

• Right of access — obtain confirmation of whether we process your personal data and request a copy.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) — request deletion of your data where there is no overriding legal basis for further processing. This right is not absolute and may be overridden by AML, regulatory, or other legal-retention obligations.
• Right to restriction of processing — request that we limit how we use your data in certain circumstances.
• Right to data portability — receive the data you provided to us in a structured, commonly-used, machine-readable format, and request its transmission to another controller where technically feasible.
• Right to object — object to processing based on legitimate interests, including direct marketing, profiling, and analytics.
• Right to withdraw consent — withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right not to be subject to solely automated decisions producing legal or similarly significant effects, except where permitted by law with appropriate safeguards.
• Right to lodge a complaint with [REGULATOR / SUPERVISORY AUTHORITY] or with the data-protection supervisory authority of your country of residence.

To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before responding. We will reply within the timeframes set by applicable law (generally one month under the GDPR, extendable by two further months for complex requests, with notice to you).

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include encryption of data in transit using industry-standard transport-layer security, encryption of sensitive data at rest, access controls based on the principle of least privilege, segregation of production and non-production environments, security monitoring, vulnerability management, regular backups, staff training, and confidentiality obligations on all personnel and processors. No transmission or storage system is one hundred per cent secure; we cannot guarantee absolute security, but we continuously work to maintain a level of protection appropriate to the risks involved.

11. Minors (Age Restriction)

Mega Casino World is intended exclusively for adults. You must be at least 18 years old (or the higher minimum legal gambling age in your jurisdiction of residence) to register an account or use any part of the Platform. We do not knowingly collect or process personal data of minors. If we become aware that we have inadvertently collected personal data of a person below the legal age, we will close the account, refund any remaining balance in accordance with applicable rules, and delete the data subject to our legal-retention obligations. If you believe a minor has provided us with personal data, please contact us immediately at [email protected].

12. Cookies and Similar Technologies

We use cookies, pixel tags, and similar technologies for essential Platform functionality, security, performance, analytics (including Google Analytics) and — with your consent — for marketing and personalisation. For full details, including the categories of cookies used, their purposes, third-party recipients, retention periods, and instructions on how to manage your preferences, please refer to our separate Cookies Policy.

13. Changes to This Privacy Policy

We may amend this Privacy Policy from time to time to reflect changes in our practices, technology, legal obligations, or other factors. The “Last updated” date at the top indicates when the most recent revision took effect. Where changes are material, we will provide reasonable advance notice through the Platform or by other appropriate means before they take effect. Your continued use of the Platform after the changes become effective constitutes acceptance of the revised Policy.

14. Contact and Complaints

For any question, request, or complaint relating to your personal data or this Privacy Policy, you may contact Mega Casino through the communication channels available on the official website.

Players can use customer support to request information about personal data processing, account details, verification documents, privacy rights, data correction, or account-related privacy concerns.

Mega Casino may ask you to confirm your identity before processing any privacy-related request. This helps ensure that personal data is disclosed or changed only for the rightful account holder.

If you are not satisfied with the response, you may submit a further complaint through the available support channels or contact the relevant data-protection authority in your country of residence, where applicable.

Players should always check the official Mega Casino website for the latest co