Privacy Policy

Version: 1.0  |  Last Updated: 31 July 2026  |  Effective Date: 31 July 2026

MonsterWin ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use the Website at monsterwinplay.com (the "Website").

This Privacy Policy applies to all players, visitors, and any person who interacts with our services. It forms part of our overall legal framework alongside our Terms & Conditions and our Responsible Gaming Policy.

Please read this Privacy Policy carefully. By using the Website, you acknowledge that you have read and understood this Policy. If you do not agree, please discontinue your use of the Website and contact us to request deletion of any data we hold about you.

1. Introduction

1.1. Our Role as Data Controller

For the purposes of applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") and related national implementing laws, MonsterWin acts as the Data Controller in respect of the personal data it processes about you. This means we determine the purposes and means of processing your personal data.

1.2. Scope

This Policy covers personal data collected through:

• Registration and use of your MonsterWin Account;
• Financial transactions processed on the Website;
• Use of our customer support services;
• Cookies, analytics, and tracking technologies used on the Website;
• Marketing communications (where you have consented or where permitted by law);
• Any other interaction with MonsterWin, including correspondence via email or live chat.

2. Data We Collect

2.1. Information You Provide Directly

When you register, use our services, or contact us, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, copies of government-issued identification documents;
• Contact Data: Email address, phone number, residential address;
• Financial Data: Payment method details (credit/debit card numbers are masked and handled by certified payment processors), bank account details, transaction history, withdrawal requests;
• KYC & Verification Data: Copies of identity documents, proof of address, source of funds documentation, and enhanced due diligence materials;
• Account Data: Username, account preferences, responsible gaming settings, self-exclusion status;
• Communications Data: Emails, live chat transcripts, support tickets, and any other correspondence you submit to us.

2.2. Information Collected Automatically

When you visit or use the Website, we automatically collect certain technical and usage data, including:

• Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and hardware identifiers;
• Usage Data: Pages visited, time spent on pages, links clicked, games played, bet amounts, game session data, and navigation patterns;
• Log Data: Server logs, access times, error reports, and crash data;
• Location Data: General geographic location inferred from IP address (country/region level).

2.3. Data from Third Parties

We may receive personal data about you from third parties, including:

• Identity verification and KYC service providers;
• Payment processors and financial institutions;
• Fraud detection and anti-money laundering service providers;
• Self-exclusion databases and responsible gaming registers;
• Marketing analytics and affiliate partners (where applicable and subject to your consent).

3. How We Use Your Data

3.1. Purposes of Processing

We use your personal data for the following purposes:

• Account Registration & Management: To create and maintain your Account, verify your identity and age, and manage your profile;
• Service Delivery: To provide gaming services, process bets, credit winnings, and manage your Account balance;
• Financial Processing: To process deposits and withdrawals, prevent fraudulent transactions, and comply with payment security standards;
• KYC & AML Compliance: To fulfil our legal obligations related to identity verification, anti-money laundering, and counter-terrorism financing;
• Customer Support: To respond to your enquiries, resolve disputes, and improve our service quality;
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, enforce self-exclusion, and apply player protection tools as detailed in our Responsible Gaming Policy;
• Marketing & Promotions: To send you relevant offers, promotions, and news about MonsterWin, subject to your consent or our legitimate interest where applicable;
• Analytics & Improvement: To analyse how players use the Website, identify trends, fix issues, and improve our services and user experience;
• Legal & Regulatory Obligations: To comply with applicable laws, regulatory requirements, court orders, and requests from competent authorities;
• Security & Fraud Prevention: To detect and prevent fraudulent activity, abuse, security breaches, and other harmful conduct.

4. Legal Bases for Processing

4.1. GDPR Legal Bases

We process your personal data only where we have a valid legal basis to do so. The legal bases we rely upon are:

• Performance of a Contract (Art. 6(1)(b) GDPR): Processing is necessary to fulfil our contractual obligations to you, including account management, payment processing, and service delivery;
• Legal Obligation (Art. 6(1)(c) GDPR): Processing is required by applicable law, including KYC verification, AML compliance, data retention obligations, and reporting to regulators;
• Legitimate Interests (Art. 6(1)(f) GDPR): Processing is necessary for our legitimate business interests, such as fraud prevention, security monitoring, analytics, and improving our services, where those interests are not overridden by your rights and freedoms;
• Consent (Art. 6(1)(a) GDPR): Where we rely on your consent, such as for the use of non-essential cookies or direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4.2. Special Categories of Data

We do not intentionally collect special category data (sensitive personal data) as defined under Art. 9 GDPR. However, in certain circumstances related to responsible gaming or AML enhanced due diligence, some sensitive information may be processed where required by law. Where this occurs, we will rely on an appropriate legal basis and implement enhanced safeguards.

5. Data Sharing & Third Parties

5.1. Who We Share Your Data With

We do not sell your personal data to third parties. We may share your data with the following categories of recipients where necessary and in accordance with this Policy:

• KYC & Identity Verification Providers: To verify your identity, age, and address as required for compliance;
• Payment Service Providers: To process deposits, withdrawals, and refunds securely;
• AML & Fraud Prevention Services: To detect, prevent, and investigate suspected financial crime or fraudulent activity;
• Game Software Providers: Game studios and platform providers may receive limited gameplay data necessary to operate their games;
• IT & Hosting Providers: Cloud storage, server, and infrastructure providers who process data on our behalf under data processing agreements;
• Customer Support Tools: CRM and help-desk platform providers used to manage support communications;
• Marketing & Analytics Providers: Where you have consented to marketing, we may share limited data with advertising and analytics platforms;
• Regulatory & Law Enforcement Authorities: We will disclose data to competent authorities where required to do so by applicable law, court order, or regulatory request;
• Professional Advisors: Lawyers, accountants, and auditors acting under duties of confidentiality.

5.2. Data Processing Agreements

All third-party data processors who handle your personal data on our behalf are bound by written data processing agreements ensuring they implement appropriate technical and organisational measures to protect your data and process it only for the purposes we specify.

6. Cookies & Tracking Technologies

6.1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device and remember certain information about your visit. MonsterWin uses cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to enhance your experience on the Website.

6.2. Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of the Website, including maintaining your login session and security features. These cannot be disabled;
• Performance & Analytics Cookies: Collect anonymised information about how visitors use the Website, helping us improve functionality and performance;
• Functional Cookies: Remember your preferences such as language settings, game history, and display options;
• Targeting & Marketing Cookies: Used to deliver personalised advertisements and measure the effectiveness of marketing campaigns. Deployed only with your consent.

6.3. Managing Cookies

You can control and manage cookies through our Cookie Consent Banner displayed upon your first visit to the Website, or by adjusting your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Website. For more information about specific cookies, please consult our Cookie Policy (accessible via the Website footer).

7. Data Security

7.1. Security Measures

MonsterWin implements robust technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of stored sensitive data at rest;
• Access controls and role-based permissions for staff who handle personal data;
• Regular security audits, vulnerability scanning, and penetration testing;
• Firewalls, intrusion detection systems, and DDoS protection;
• Staff training on data protection and information security practices.

7.2. Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, MonsterWin will notify the relevant supervisory authority without undue delay and, where required, will notify affected individuals directly in accordance with GDPR obligations.

8. Data Retention

8.1. Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. Standard retention periods are:

After the applicable retention period, data is securely deleted or anonymised. Where legal proceedings or regulatory investigations are ongoing, data may be retained for longer.

9. Your Rights

9.1. GDPR Rights

Under applicable data protection law, you have the following rights in relation to your personal data:

• Right of Access (Art. 15 GDPR): You have the right to request a copy of the personal data we hold about you;
• Right to Rectification (Art. 16 GDPR): You have the right to request correction of inaccurate or incomplete personal data;
• Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations;
• Right to Restriction of Processing (Art. 18 GDPR): You may request that we restrict the processing of your data in certain circumstances;
• Right to Data Portability (Art. 20 GDPR): You may request that we provide your data in a structured, commonly used, machine-readable format for transfer to another controller;
• Right to Object (Art. 21 GDPR): You have the right to object to processing based on legitimate interests or for direct marketing purposes;
• Rights Related to Automated Decision-Making (Art. 22 GDPR): You have the right not to be subject to solely automated decisions that produce significant effects, unless you have consented or it is necessary for a contract;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

9.2. How to Exercise Your Rights

To exercise any of your rights, please contact our Data Protection Officer (DPO) at [email protected]. We will respond to your request within 30 days. In complex cases, this period may be extended by a further two months, of which we will notify you. We may require proof of identity before processing your request.

9.3. Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the competent data protection supervisory authority in your country of residence or the country where the alleged infringement occurred.

10. International Data Transfers

10.1. Data Transfers Outside the EEA

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where some of our service providers or technology partners are located. Where such transfers occur, we ensure that appropriate safeguards are in place, including:

• Transfer to countries recognised by the European Commission as providing an adequate level of data protection;
• Standard Contractual Clauses (SCCs) approved by the European Commission (Art. 46 GDPR);
• Binding Corporate Rules (BCRs) where applicable;
• Other lawful transfer mechanisms as permitted under GDPR.

For more information about our international transfer mechanisms, please contact us at [email protected].

11. Minors

11.1. Age Restriction

MonsterWin's services are strictly intended for individuals aged 21 years and over. We do not knowingly collect or process personal data of individuals under the age of 21. If we become aware that a minor has registered or provided personal data, we will take immediate steps to delete the data and close the account.

11.2. Parental Responsibilities

We strongly encourage parents and guardians to actively monitor their children's online activities and to use parental control tools to prevent minors from accessing gambling websites. If you believe a minor has accessed the Website or provided their personal data, please contact us immediately at [email protected].

12. Changes to This Policy

12.1. Policy Updates

MonsterWin may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or business operations. Any changes will be posted on this page with an updated revision date. Where changes are material, we will notify you via email or a prominent notice on the Website. Your continued use of the Website after the effective date of any changes constitutes your acceptance of the updated Policy.

13. Contact Information

13.1. Data Protection Officer

For all data protection and privacy-related enquiries, to exercise your rights, or to raise a concern, please contact our Data Protection Officer:

• Email: [email protected]
• Website: monsterwinplay.com

13.2. General Support

For general enquiries not related to data protection:

• Email: [email protected]