Your Privacy at Megadice Casino
This policy explains what personal data we collect when you play at Megadice Casino, why we hold it, who sees it and how long we keep it. It applies to every account holder on megadice-casino.co.uk, whether you deposit with GBP, crypto or an e-wallet.
Data We Collect
We collect only the data we need to run your account, meet our licence obligations and keep the site safe. That splits into six categories:
- Identity data: your full name, date of birth, email address, phone number and residential address.
- Verification documents: passport or driving licence, a proof of address dated within three months, and payment method verification.
- Transaction data: deposits, withdrawals, bonuses claimed, wagering history and currency balances (GBP, BTC, ETH, USDT, EUR, USD).
- Technical data: IP address, device type, browser, operating system and approximate location derived from your IP.
- Gameplay behaviour: games played, session times, bet sizes, win and loss history, and any limit you set under responsible gambling tools.
- Marketing preferences: which channels you opted into (email, SMS) and which promotions you opened or ignored.
How We Use Your Data
Every use we make of your data falls into one of seven purposes. Account creation and management comes first: without your name, email and address we cannot open or operate your player account. Second, verification (KYC): before your first withdrawal we check your ID, proof of address and payment method, as required by our Curaçao licence 8048/JAZ2019-042.
Third, payment processing: we pass the minimum necessary details to Visa, Trustly, Skrill or the crypto network you chose so funds move correctly. Fourth, fraud prevention: we compare device fingerprints, IP history and betting patterns against known abuse patterns, because a casino without anti-fraud checks puts every player's balance at risk. Fifth, responsible gambling monitoring: your deposit and loss data feeds the limits, session reminders and GAMSTOP checks we run to catch harm early. Sixth, marketing, but only with your consent. Seventh, legal obligations: tax reporting, regulator requests and court orders.
Our Legal Bases
Contract. Opening an account, processing your deposits and paying out winnings are all parts of the service you sign up for. We process your identity, transaction and gameplay data on this basis because neither party can perform the contract without it.
Legal obligation. Anti-money-laundering law obliges us to verify your identity and retain transaction records for at least five years. We cannot switch this off, and refusing to hand over your ID simply blocks withdrawals rather than the processing itself.
Legitimate interest. We rely on this to detect fraud, secure our platform, analyse aggregated game performance and defend against bonus abuse. We weigh our interest against your rights, and we believe keeping a gambling site free of fraud benefits you directly.
Consent. Marketing emails, SMS and any non-essential cookies run only on your consent. You gave it through an explicit opt-in, and you can withdraw it at any time without touching your account.
How Long We Keep Data
We hold each category of data for the shortest period that satisfies our regulatory duties. Once a retention clock expires, automated deletion removes the record from our active systems, with backups purged within 90 days of that date.
| Data category | Retention period |
|---|---|
| Transaction and wagering records | 5 years after account closure (regulatory minimum) |
| KYC verification documents | 5 years after account closure |
| Identity and account data | Duration of the account, then 5 years |
| Technical and IP logs | 12 months |
| Marketing preferences | Until you withdraw consent, then 30 days for suppression lists |
| Self-exclusion records | Minimum 5 years, or the exclusion term if longer |
Who We Share Data With
We never sell your data. We share it only with processors and authorities who need it for a defined job, under contracts that bind them to the same standards we hold ourselves to. The categories are:
- Payment processors and acquiring banks executing your deposits and withdrawals.
- KYC and AML verification suppliers checking your documents against sanctions and PEP lists.
- The Curaçao regulator and, where applicable, financial intelligence units, on lawful request.
- Analytics and site performance vendors, working on aggregated or pseudonymised data.
- Game providers running the live tables and slots you play, who receive your account ID and in-game activity only.
- Professional advisers (auditors, lawyers) bound by confidentiality, and courts where the law compels disclosure.
Your Rights Over Data
You control your data, not us. Whatever your reason, send one email to [email protected] and our team must respond within one month. The rights you can exercise:
- Access: a copy of the personal data we hold about you.
- Rectification: correction of anything inaccurate or incomplete.
- Erasure: deletion where no legal retention duty applies (AML records are exempt).
- Portability: your account and transaction history in a machine-readable format.
- Objection: objection to processing based on legitimate interest.
- Withdrawal of consent: stop marketing at any time, one click in your account settings or the unsubscribe link.
- Complaint: raise a complaint with your national data protection authority; for players in the United Kingdom that is the Information Commissioner's Office (ICO).
Cookies, Tracking and Security
Cookies
We use strictly necessary cookies to keep you logged in and your session secure, plus optional analytics and marketing cookies that load only after you consent through our cookie banner. The full list of cookies, their purposes and lifespans sits on our dedicated Cookies Policy page, which we keep separate so you can manage your choices without wading through legal text.
Security
All traffic between your device and our servers runs over TLS 1.3 encryption; card and document data in storage is encrypted at rest with AES-256. Access to player records is role-restricted, logged and reviewed quarterly, and no single employee can both view and export full KYC files. We test our defences with regular penetration audits. If a breach ever affects your data, we will notify the relevant supervisory authority within 72 hours and tell you directly without undue delay where the risk to you is high.
Contact Our Data Officer
Our Data Protection Officer answers privacy questions, handles subject access requests and reviews every new data flow on the site. Write to [email protected] and expect a reply within one month, or use the 24/7 live chat and ask for escalation to the privacy team. If you contact us about a rights request, include your registered email so we can verify your identity without asking for more documents than the law requires.
Frequently Asked Questions
Does Megadice Casino sell my personal data?
No. We share data only with payment processors, verification suppliers, regulators and analytics vendors who need it to perform a specific function, always under contract.
How long do you keep my transaction history?
We retain transaction and wagering records for 5 years after account closure, which is the regulatory minimum under anti-money-laundering rules.
Can I stop marketing emails but keep playing?
Yes. Withdraw consent at any time through your account settings or the unsubscribe link; your account, deposits and gameplay stay untouched.
Who do I complain to if I am unhappy with your response?
Contact your national data protection authority. For players in the United Kingdom that is the Information Commissioner's Office (ICO).