Privacy Policy

Version: 1.0  |  Last Updated: 31 July 2025  |  Effective Date: 31 July 2025

At MonsterWin (operating through monsterwin-play.com), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect the personal information you provide to us when you access or use our Services.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. By using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Introduction

1.1. Who We Are

MonsterWin is the operator of the online gaming platform accessible at monsterwin-play.com. We act as the data controller with respect to all personal data collected through the Website and our Services. As data controller, we determine the purposes and means by which your personal data is processed.

1.2. Scope of This Policy

This Privacy Policy applies to all personal data collected from players, Website visitors, and other individuals who interact with us through the Website, email, live chat, or any other communication channel. It covers data collected directly from you and data collected automatically through your use of the Website.

1.3. Our Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our compliance with data protection obligations. If you have any questions or concerns regarding the processing of your personal data, you may contact our DPO at: [email protected].

2. Data We Collect

2.1. Data You Provide Directly

When you register an Account, use our Services, or contact us, we may collect the following categories of personal data:

• Identity Data: Full name, date of birth, gender, nationality, copies of government-issued ID documents (passport, ID card, driver's licence);
• Contact Data: Email address, phone number, postal address;
• Financial Data: Payment method details (card number fragments, e-wallet identifiers), transaction history, deposit and withdrawal records;
• Account Data: Username, password (stored in encrypted form), Account preferences and settings;
• Verification Data: Source-of-funds information, proof-of-address documents, and other KYC-related documentation;
• Communications Data: Records of your correspondence with our customer support team, including emails, live chat transcripts, and feedback submissions.

2.2. Data Collected Automatically

When you access the Website, we automatically collect certain technical and behavioural data, including:

• Device & Technical Data: IP address, browser type and version, device type and operating system, screen resolution, time zone;
• Usage Data: Pages visited, time spent on the Website, links clicked, games played, session duration, login and logout timestamps;
• Cookie Data: Information collected through cookies and similar tracking technologies (see Section 6);
• Geolocation Data: Approximate geographic location derived from your IP address, used to verify eligibility.

2.3. Data from Third Parties

We may receive personal data about you from third parties, including:

• Identity verification and fraud prevention agencies;
• Payment processors and financial institutions;
• Responsible gaming and self-exclusion registries;
• Analytics and marketing technology partners.

3. How We Use Your Data

3.1. Primary Purposes

We use your personal data for the following primary purposes:

• Account Registration & Management: To create, maintain, and manage your player Account;
• Service Delivery: To provide you with access to our games, promotions, and all features of the Website;
• Payment Processing: To process deposits, withdrawals, and resolve any payment disputes;
• Identity Verification (KYC): To verify your identity, age, and eligibility to use the Services, as required by applicable regulations;
• Customer Support: To respond to your enquiries, complaints, and requests;
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct;
• Responsible Gaming: To implement player protection tools, monitor for signs of problem gambling, and enforce self-exclusion measures.

3.2. Secondary Purposes

• Marketing Communications: With your consent, to send you promotional emails, newsletters, and personalised offers related to our Services;
• Website Improvement: To analyse usage patterns and improve the functionality, content, and user experience of the Website;
• Legal Compliance: To comply with applicable laws, regulations, court orders, and regulatory requirements;
• Analytics & Research: To conduct internal research and generate aggregated, anonymised statistics.

4. Legal Bases for Processing

We process your personal data on the following legal grounds in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection legislation:

• Performance of a Contract (Art. 6(1)(b) GDPR): Processing is necessary to fulfil our contractual obligations to you, including Account management, payment processing, and provision of gaming services;
• Legal Obligation (Art. 6(1)(c) GDPR): Processing is required to comply with applicable legal obligations, including KYC/AML regulations and responsible gaming requirements;
• Legitimate Interests (Art. 6(1)(f) GDPR): Processing is necessary for our legitimate interests in fraud prevention, security, business analytics, and improvement of our Services, provided such interests are not overridden by your rights and freedoms;
• Consent (Art. 6(1)(a) GDPR): Where we rely on consent (e.g., for marketing communications or non-essential cookies), you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal;
• Vital Interests (Art. 6(1)(d) GDPR): Processing may be necessary to protect the vital interests of you or another natural person in exceptional circumstances.

5. Data Sharing & Third Parties

5.1. Categories of Recipients

We may share your personal data with the following categories of third parties:

• Payment Service Providers: Including banks, card processors, and e-wallet operators, for the purpose of processing transactions;
• Identity Verification Providers: Third-party KYC and AML screening services used to verify your identity and assess risk;
• Gaming Software Providers: Suppliers of the game software and live dealer technology integrated into our platform, who may process technical data;
• Customer Support Providers: Third-party support platforms used to manage live chat and ticketing systems;
• Analytics Providers: Companies that help us understand Website usage and player behaviour;
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or at the request of competent authorities;
• Responsible Gaming Bodies: Self-exclusion registries and problem gambling organisations, where necessary to protect player welfare.

5.2. Data Processing Agreements

All third-party service providers with whom we share personal data are required to enter into data processing agreements that comply with applicable data protection law. We take reasonable steps to ensure that all such parties maintain appropriate security standards.

5.3. No Sale of Data

We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.

6. Cookies & Tracking Technologies

6.1. What Are Cookies

Cookies are small text files placed on your device by your web browser when you visit a website. We use cookies and similar technologies (including web beacons, pixel tags, and local storage) to enhance your experience, analyse Website usage, and deliver relevant content.

6.2. Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Website to function properly. These include session management, security, and authentication cookies. They cannot be disabled;
• Performance & Analytics Cookies: Collect anonymised information about how visitors use the Website, helping us understand traffic patterns and improve functionality;
• Functional Cookies: Remember your preferences and settings (e.g., language, currency) to personalise your experience;
• Marketing & Targeting Cookies: Used to deliver relevant advertisements and promotions. These are activated only with your consent.

6.3. Managing Cookies

You may manage your cookie preferences at any time through our Cookie Consent Manager, accessible via the banner displayed on your first visit to the Website. You may also configure your browser settings to block or delete cookies; however, doing so may affect the functionality of the Website. For more information on how to manage cookies, please visit www.allaboutcookies.org.

7. Data Security

7.1. Security Measures

We implement a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, disclosure, or destruction. These include:

• Encryption: Transmission of data between your browser and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols;
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis;
• Password Security: Passwords are stored using cryptographic hashing algorithms and are never stored in plain text;
• Regular Security Audits: We conduct periodic reviews, vulnerability assessments, and penetration testing of our systems;
• Employee Training: All staff members who handle personal data receive regular data protection training.

7.2. Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with our obligations under applicable data protection law. We will also notify the competent supervisory authority within 72 hours of becoming aware of the breach where required by law.

8. Data Retention

8.1. Retention Periods

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account & Transaction Records: Retained for a minimum of five (5) years from Account closure, in accordance with AML and financial record-keeping obligations;
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification;
• Customer Support Records: Retained for two (2) years from the date of the last interaction;
• Marketing Data: Retained until you withdraw your consent or for up to three (3) years from the last engagement, whichever is earlier;
• Technical & Log Data: Retained for up to twelve (12) months.

8.2. Deletion & Anonymisation

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an identifiable individual.

9. Your Rights

9.1. Rights Under GDPR

Subject to applicable law, you have the following rights in relation to your personal data:

• Right of Access (Art. 15 GDPR): You may request a copy of the personal data we hold about you;
• Right to Rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete data;
• Right to Erasure (Art. 17 GDPR): You may request deletion of your personal data in certain circumstances;
• Right to Restriction of Processing (Art. 18 GDPR): You may request that we limit the processing of your data in certain situations;
• Right to Data Portability (Art. 20 GDPR): You may request a copy of your data in a machine-readable format for transfer to another controller;
• Right to Object (Art. 21 GDPR): You may object to processing based on legitimate interests or for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

9.2. How to Exercise Your Rights

To exercise any of the above rights, please submit a written request to our DPO at [email protected]. We will respond within one (1) calendar month of receipt of your request. We may require proof of identity before processing your request. In complex cases, the response period may be extended by a further two (2) months, and we will inform you of any such extension.

9.3. Right to Lodge a Complaint

If you believe that your personal data is being processed in a manner that violates applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority in your country of residence. In Greece, this is the Hellenic Data Protection Authority (HDPA), reachable at www.dpa.gr.

10. International Data Transfers

10.1. Transfers Outside the EEA

Some of our third-party service providers may be located outside the European Economic Area (EEA). Where personal data is transferred to countries not recognised as providing an adequate level of data protection, we implement appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Binding Corporate Rules (BCRs) where applicable;
• Other lawful transfer mechanisms in accordance with Chapter V of the GDPR.

10.2. Your Enquiries on Transfers

For more information about international transfers and the safeguards we apply, please contact us at [email protected].

11. Minors

Our Services are intended exclusively for individuals aged 21 years or older. We do not knowingly collect personal data from persons under this age. If we become aware that personal data has been collected from a person below the minimum age, we will take immediate steps to delete such data and close the associated Account. If you believe we may have inadvertently collected data from a minor, please contact us immediately at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or operational changes. When we make material changes, we will notify you via email or a prominent notice on the Website prior to the changes taking effect. The date of the most recent revision is always displayed at the top of this page. We encourage you to review this Policy periodically. Continued use of the Services after any update constitutes your acceptance of the revised Policy.

13. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing activities, please contact us through the following channels:

• General Enquiries: [email protected]
• Data Protection / Privacy Requests: [email protected]
• Website: monsterwin-play.com

We are committed to addressing your data protection queries promptly and transparently.