How Mafia Casino Protects Your Personal Data

Privacy Policy and Data Protection at Casino Mafia

When you register with us at Casino Mafia we collect your email address, date of birth, country, phone number, gender, full name, social security number, zip code and username, together with the IP address and location data captured automatically at sign-up. We also gather device information such as IP address, operating system version and device identifiers, plus logs covering content viewed, session dates and times and pages visited.

Where additional data comes from

Beyond what you give us directly, we may draw on public and government databases, commercially available databases, financial and credit institutions, fraud prevention agencies and public authorities, as well as data you have made public yourself, including linked Facebook or Google accounts. This information supports four lawful bases for processing: performance of our contract with you, compliance with legal obligations, our legitimate interests, and your consent for activities such as direct marketing and customised offers.

We rely on legitimate interest for tasks including fraud detection, IT and system security, customer segmentation for responsible gaming, and analysing gaming behaviour with machine learning to recommend games and features.

What Data We Hold and Why

The categories below set out the main types of personal data we process and the purpose behind each one.

Each category is tied to one of our four lawful bases, so the amount of data applied to a given purpose never exceeds what that basis requires.

Who We Share Your Data With and Your Rights

We only pass personal data to recipients that need it for a defined purpose. The main categories are:

• Payment providers and financial institutions, who receive name, date of birth, address and KYC documents for their own anti-money-laundering checks when you use our payment methods
• Fraud prevention agencies and law enforcement, regulatory and licensing authorities where required
• Game providers, data aggregators, analytics providers, marketing partners and cloud hosting or support contractors
• Other brands within the same operator group, affiliates and joint controllers

You hold a defined set of rights over your data: access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent. You may also lodge a complaint with a supervisory authority in your EU member state of residence, place of work or place of alleged infringement. If a dispute about how we have handled your account or your data is not resolved directly, our complaints process sets out the next step.

Data Retention, Security and Cross-Border Transfers

We retain personal data for the duration of your account and for as long as needed to fulfil the purposes described above, including longer retention where anti-money-laundering or other regulatory obligations require it. Once your account is closed and no legal or business need remains, your data is deleted or anonymised.

Where personal data is processed outside the EU/EEA, we rely on adequacy decisions, European Commission Standard Contractual Clauses or other legally recognised safeguards to keep the transfer compliant. We apply administrative, technical and physical safeguards to protect your information, though we do not guarantee absolute security, as no system can be made entirely risk-free.

If a complaint, review or query about our services is submitted to a third-party platform such as a casino review site, a gambling forum or a dispute resolution body, we may respond directly to that platform. In doing so we disclose only the personal data necessary to identify your account and respond, on the basis of our legitimate interest in protecting our business reputation. For a broader look at how our account and service terms fit together, our full overview covers the practical side of signing up and playing, while managing your login details starts at sign in.