Privacy & Management of Personal Data

Scope and applicability

This Privacy Policy governs the processing of Personal Data by Mrpunter in connection with the operation of its online gambling platforms and related services (the "Sites" and "Services"). "Personal Data" means any information about an identifiable individual, including name, address, email, date of birth, payment details, device identifiers, account activity, documentation provided for verification, and any other information you submit or that a third party provides on your behalf. The Policy applies to all users and covers collection, use, storage, disclosure, and protection of Personal Data in relation to your use of the Sites and Services. It does not apply to data that has been anonymized or aggregated such that you cannot be identified.

Policy updates

We may amend this Policy from time to time. Material changes will be communicated on the Sites or by email to the address associated with your account. Continued use of the Sites or Services after the effective date of changes constitutes your acceptance of the updated Policy.

What personal data we collect

• Information you provide directly
  • Account creation and verification data, including name, address, date of birth, contact details, and government-issued identification documents.
  • Payment profile information and documentation necessary to process transactions and comply with financial regulations.
  • Self-exclusion status, account preferences, correspondence with support, and other information you voluntarily provide in your communications with us.
• Automatically collected information
  • Technical identifiers and usage details such as IP address, device type, operating system, browser type, and the pages you visit.
  • Date and time of visits, error reports, and other diagnostic data to maintain and improve the Security and functioning of the Sites.
  • Information collected via cookies and similar technologies to analyze usage patterns and improve user experience.
• Information about transactions and account activity
  • Transaction history, including deposits, withdrawals, wagers, balances, payment statuses, refunds, and dispute records.
  • Login timestamps, session duration, and other activity relevant to service delivery and fraud prevention.
• Information received from third parties
  • Data from payment providers, identity verification services, and other trusted sources to verify identity, prevent fraud, and comply with applicable laws.
  • Publicly available information or information from regulators or licensing bodies as required by law.

Legal bases for processing your Personal Data

• Contractual Necessity: to perform our contractual obligations such as establishing, maintaining, and servicing your account and processing transactions.
• Legal Obligation: to comply with applicable laws and regulatory requirements (e.g., anti-money laundering, licensing, responsible gaming).
• Legitimate Interests: for purposes including security, fraud prevention, site integrity, and improving our Services, provided such interests are not overridden by your rights.
• Consent: for processing based on your explicit consent, such as direct marketing communications where required by law.

How we use your Personal Data

• Operation and provision of services: to operate, maintain, and provide the Sites and Services and to deliver the features you request (Contractual Necessity, Legitimate Interests).
• Account verification and eligibility: to verify identity, age (to ensure legitimate gambling activity), location, self-exclusion status, and to manage your account (Contractual Necessity, Legitimate Interests).
• Compliance with legal obligations: to comply with regulatory, licensing, AML, and other legal requirements.
• Customer support: to assist with technical, payment, and general inquiries (Contractual Necessity).
• Site and service improvement: to analyze usage, test new features, and enhance user experience (Legitimate Interests).
• Fraud prevention and security: to detect, prevent, and respond to fraudulent or illegal activity and to safeguard user and platform security (Legal Obligation, Legitimate Interests).
• Financial transactions: to process, administer, and confirm deposits and withdrawals, and to analyze fraud risk (Contractual Necessity, Legal Obligation, Legitimate Interests).
• Gaming activity and risk management: to monitor wagering behavior for responsible gaming and risk management purposes (Legal Obligation, Legitimate Interests, Contractual Necessity).
• Communication and relationship management: to inform you about operational updates, security notices, and features, and to manage the customer relationship (Contractual Necessity, Legitimate Interests).
• Internal administration: to share information within the corporate group for administrative purposes, including corporate restructurings (Legitimate Interests).

Sharing your Personal Data

• Group companies: with affiliates within our corporate group to operate and improve the Services.
• Service providers and partners: with third-party providers that assist in hosting, payment processing, analytics, security, customer support, KYC/AML services, game providers, and compliance activities.
• Regulators, law enforcement, and licensing authorities: as required by law or to enforce our rights.
• Referral partners: with individuals or entities that have referred you to our Services, where applicable.
• Any other third parties, subject to your consent, where applicable.

International transfer of data

Your Personal Data may be transferred to and processed in countries outside your residence. We implement appropriate safeguards in accordance with applicable data protection laws (for example, standard contractual clauses and other recognized transfer mechanisms) to protect your data in such jurisdictions.

Security

• Data in transit: critical communications between you and our Sites are protected using industry-standard encryption (TLS) with a 256-bit key.
• Data at rest: Personal Data stored on our systems is encrypted and protected by access controls and secure data centers.
• Access controls: access to Personal Data is restricted to employees, contractors, and agents who require it for processing purposes, under formal confidentiality obligations.
• Physical and environmental security: data centers employ robust physical security measures and routine audits.
• Monitoring: continuous security monitoring, anomaly detection, and incident response processes are in place to identify and remediate threats.

Data retention and deletion

• Retention periods: data associated with your account is retained until the account is closed and, after that, for up to five years (or as required by law) following your last contact with us.
• Extended retention: we may retain certain Personal Data beyond the above period to meet fraud prevention, regulatory, tax, dispute-resolution, and service continuity obligations.

Your rights

• Right of access: you may request a copy of the Personal Data we hold about you in machine-readable form.
• Right to rectification: you may request correction of inaccurate or incomplete data.
• Right to erasure: you may request deletion of Personal Data, subject to legal or contractual obligations.
• Right to restriction: you may request suppression of processing under certain circumstances.
• Right to objection: you may object to processing based on legitimate interests, where applicable.
• Right to withdraw consent: you may withdraw consent for processing based on consent; such withdrawal may affect the provision of certain services.
• Right to direct marketing opt-out: you may opt out of marketing communications by following the unsubscribe instructions or contacting us.
• Right to lodge a complaint: you may lodge a complaint with your local data protection authority if you believe your rights have been violated.
• Exercising rights: to exercise any of the above rights, please adjust your account settings or contact [email protected]. Identity verification may be required before fulfilling requests.

Cookies and analytics

We and our analytics and service providers use cookies and similar technologies to analyze site usage, remember preferences, and improve the performance and security of the Sites. You may disable non-essential cookies in your browser settings; some features may require cookies to function. We may maintain anonymized or aggregated data for analytical purposes that does not identify you personally.

Security and encryption overview

All critical communications between you and the Sites utilize encryption protocols designed to protect data in transit. Data at rest is protected through encryption and secure access controls to prevent unauthorized access.

Contact and complaints

If you have questions about this Policy or wish to exercise any data rights, please contact [email protected]. You may also contact the relevant supervisory authority in your jurisdiction if you believe your data protection rights have not been properly addressed.