Privacy Policy

What data we collect

Mad Casino collects three categories of personal data, account data submitted at signup including name, date of birth, address and email, transaction data generated by deposits and withdrawals including payment method details, and gameplay data generated automatically by use of the platform including session timestamps, wagering history and device identifiers.

Lawful basis for processing

We process personal data on four lawful bases. Contract, for the purpose of providing the gaming service you have signed up for. Legal obligation, for anti-money-laundering checks, age verification and tax reporting. Legitimate interest, for fraud prevention, security and responsible gambling monitoring. Consent, for direct marketing communications, which you can withdraw at any time.

How we use your data

• Verifying your identity at signup and before withdrawal under know-your-customer rules.
• Processing deposits, withdrawals and refunds.
• Operating the responsible gambling tools and the matching of activity against self-exclusion lists.
• Detecting and preventing fraud, bonus abuse and money laundering.
• Responding to player support enquiries and complaints.
• Sending marketing communications where you have given consent.
• Reporting to regulators and tax authorities where required by law.

Third-party processors

We share personal data with a defined set of processors that operate on our behalf. These include payment service providers including Skrill, Neteller and the card scheme acquirers, identity verification providers, customer support platform providers, fraud detection providers, and the game studios for the purpose of fulfilling RTP audit obligations. Each processor is bound by a data processing agreement that limits the use of your data to the agreed purpose.

Retention

Account and transaction data is retained for five years after account closure under anti-money-laundering and tax record-keeping rules. Gameplay logs are retained for two years for fraud and dispute resolution purposes. Marketing consent records are retained until consent is withdrawn or for two years after the last interaction, whichever is shorter.

Your rights

As a UK data subject you have eight rights under the UK GDPR. The right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object and rights related to automated decision-making. To exercise any of these rights, contact privacy@madcasinoofficial.vip. We respond within one calendar month under UK GDPR. You also have the right to lodge a complaint with the Information Commissioner's Office if you believe your data has been mishandled.

International transfers

Some of our processors operate outside the United Kingdom. Where this is the case, we use the UK International Data Transfer Agreement or equivalent safeguards to ensure that data continues to be protected to UK GDPR standards.

Cookies

Cookies are covered separately in the cookie policy. We use cookies for account session management, fraud detection and, where you consent, marketing analytics.