Privacy Policy

1. Data We Collect

We collect the following personal data:

• Registration data: name, email address, date of birth, country of residence
• Financial data: payment method details (processed by payment providers — we don't store card numbers)
• Identity verification documents (KYC): ID copies, address proof
• Technical data: IP address, device type, browser, session data
• Usage data: game history, transaction history, support interactions

2. How We Use Your Data

• Account registration and maintenance
• Processing deposits, withdrawals, and bonus awards
• KYC verification (legal requirement under EU AML directives)
• Fraud prevention and security monitoring
• Responsible gambling monitoring and intervention
• Customer support
• Marketing communications (with your consent — opt-out available at any time)

3. Data Sharing

We share data with:

• Payment processors (to handle transactions)
• KYC verification providers
• The Malta Gaming Authority (as required by our licence)
• Fraud prevention services

We do not sell your personal data to third parties for marketing purposes.

4. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to data processing
• Data portability
• Withdraw marketing consent at any time

To exercise your rights, contact our Data Protection Officer via live chat or email.

5. Cookies

We use essential cookies (required for site functionality), analytics cookies (to understand usage patterns), and marketing cookies (with your consent). You can manage cookie preferences via your browser settings or our cookie consent banner.

6. Data Retention

We retain account data for 5 years after account closure (required by AML regulations). Transaction records are retained for 7 years. KYC documents are retained for 5 years. You may request deletion of data not subject to legal retention requirements.

7. Security

All data is protected by 256-bit SSL encryption in transit. Passwords are stored using bcrypt hashing. We conduct regular security audits as required by our MGA licence. We report data breaches to the relevant supervisory authority within 72 hours where required by GDPR.