Privacy Policy at Misterx Casino
This Privacy Policy explains what personal data we collect when you play at Misterx Casino, why we collect it, how long we keep it and the rights you hold over it. We operate under licence MGA/B2C/394/2017 and treat data protection as part of our licence obligations, not an afterthought.
Data We Collect
We collect only the data we need to run your account, meet our regulatory duties and keep the site safe. That data falls into six categories, each described below.
- Identity data: your name, date of birth, email address, phone number and residential address.
- Verification documents: copies of your ID, proof of address and payment method, collected during KYC checks before your first withdrawal.
- Transaction data: deposits, withdrawals, bonuses, bets and winnings, including payment amounts and method.
- Technical data: IP address, device type, browser, operating system and session logs.
- Gameplay behaviour: games played, bet sizes, session duration and win/loss patterns, used for responsible-gambling monitoring.
- Marketing preferences: which channels you opted into, when you consented and how you withdrew consent.
How We Use Your Data
We use your data to create and manage your account, verify your identity under KYC rules, process deposits and withdrawals, and meet the anti-money-laundering obligations attached to our MGA licence. We also monitor play patterns to identify signs of problem gambling and to enforce deposit and loss limits you set yourself.
Where you have consented, we send you promotional offers such as our weekly 15% cashback or monthly free spins by email or SMS. You can withdraw that consent at any time and we will stop marketing messages without affecting your account. Finally, we use data to prevent fraud, detect multi-accounting and comply with legal requests from regulators or law enforcement.
Our Legal Bases
Contract. Processing your identity and transaction data is necessary to perform the agreement you entered when you registered. Without it we cannot open an account or pay out winnings.
Legal obligation. KYC verification, AML monitoring, transaction record-keeping and reporting to the regulator rest on our legal obligations as a licensed operator. We cannot waive these even if you ask us to.
Legitimate interest. Fraud prevention, security monitoring, session logging and aggregated service improvement rely on our legitimate interest in running a safe casino, balanced against your rights.
Consent. Marketing communications and non-essential cookies run only on your explicit consent, which you may withdraw at any time through your account settings or the unsubscribe link in every message.
How Long We Keep It
Retention depends on the type of data. Gambling regulations require us to keep transaction and KYC records for at least 5 years after your last transaction or account closure, whichever is later. Marketing data is deleted as soon as you withdraw consent, and technical logs are kept for a shorter period for security purposes only.
| Data category | Retention period |
|---|---|
| Identity and account data | 5 years after account closure |
| KYC verification documents | 5 years after last transaction |
| Transaction and betting records | Minimum 5 years, as required by MGA rules |
| Technical and IP logs | Up to 12 months, security purposes only |
| Marketing preferences | Until consent is withdrawn, then deleted |
Who We Share Data With
We never sell your personal data. We share it only with parties who need it to deliver the service, each bound by a data processing agreement:
Payment processors handling your Visa Debit, Mastercard, Trustly, Skrill, Neteller or crypto transactions; KYC and AML verification providers checking your documents; the Malta Gaming Authority and other regulators when reporting is required; analytics and hosting providers supporting site performance; and game providers whose titles you play, who receive only your anonymous player ID and session data, never your full identity.
Your Data Rights
You control your data. Under UK GDPR and the Data Protection Act you can exercise any of the rights below at no cost, and we will respond within one month.
If we cannot comply fully, for example where a legal obligation forces us to retain records, we will explain which parts of your request we cannot fulfil and why. If you are unhappy with our response you have the right to complain to the Information Commissioner's Office (ICO).
- Access: get a copy of the personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion where no legal obligation requires retention.
- Portability: receive your data in a machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing processing at any time.
- Complain: escalate to the ICO at ico.org.uk.
Cookies and Tracking
We use strictly necessary cookies to keep you logged in and secure your session, plus optional analytics and marketing cookies that load only after you consent through our cookie banner. You can change or withdraw your cookie choices at any time. Full details, including the cookie categories and their lifespans, are set out in our separate Cookies Policy page.
How We Protect Your Data
All traffic between your device and our servers is encrypted with TLS, and stored verification documents sit in encrypted storage with strict access controls. Only staff who need access for KYC, payments or support can see your data, and every access is logged.
We run regular security testing and maintain an incident response plan. If a personal data breach occurs that poses a risk to your rights, we notify the ICO within 72 hours and inform affected players directly where the risk is high.
Contact Our Data Officer
Our Data Protection Officer answers all privacy questions, data subject requests and complaints. Write to [email protected] and we will acknowledge your message within 72 hours. You can also reach our support team 24/7 via live chat or at [email protected], and we will route your request to the DPO for you.
Frequently Asked Questions
Can I delete my account and all my data?
You can request account closure at any time. Transaction and KYC records must be kept for at least 5 years under our MGA licence, but everything else, including marketing preferences, is deleted once retention expires.
Do you share my data with game providers?
Only an anonymous player ID and session data. Game providers never receive your name, email or payment details.
How do I stop marketing emails?
Use the unsubscribe link in any message or change your preferences in your account settings. Consent withdrawal takes effect immediately for future campaigns.
Who regulates my privacy rights?
The Information Commissioner's Office (ICO) in the UK. You can complain to them directly at ico.org.uk after contacting our DPO.