Table of Content
Our Identity
The entity running this site acts as the Data Controller for your personal information. As the data controller, we determine the methods and reasons for processing your data in line with our interactions, as detailed in this policy. In collaboration with our joint controller, we oversee the possession and protection of the information you share with us.
For inquiries regarding this policy, such as requests to exercise your data protection rights, reach out to our Data Protection Officer via email at dpo@malina-casino.uk.
Types of Personal Data We Gather
Information You Supply Directly
Depending on your engagement with our offerings, we might collect these types of personal data:
Registration Details: Setting up an account requires details like your email, birth date, nationality, contact number, gender, complete name, social security ID, postal code, and username. We also capture your IP address and geolocation automatically during signup.
Verification Information: To meet our verification, Know Your Customer (KYC), age confirmation, Anti-Money Laundering (AML), and licensing duties, we gather items such as ID card, driver's licence or passport number, address verification, social security details, wealth or fund sources, bank identification, and financial records or statements.
Payment Details: For handling deposits and withdrawals, we may obtain banking information including Bank ID, CPR or CPF numbers, IBAN, and payment processor specifics. This data could also support KYC and AML efforts.
Data Collected Automatically
Device Details: We obtain data on the hardware and programs you employ to reach our services, such as IP address, OS version, and device codes.
Activity and Log Data: To better comprehend your service usage and refine them, we automatically log your engagements. Servers record actions like content views, ad clicks, searches, and social shares on our site, along with session timestamps, viewed pages, links used, and duration. Some data comes via cookies and comparable tools.
Geolocation Data: We may derive or collect approximate location info during your service use.
Data Obtained from External Sources
To enhance and tailor our services or meet legal duties, we might acquire your personal data from others. Sources include:
- Openly accessible resources like government records, online platforms, social networks, digital and print media.
- Paid databases and external providers, including banks, credit firms, anti-fraud services, and official bodies, aiding in data validation and probing unusual activities for fraud and AML prevention.
- Derived Insights: We could deduce further details from the data mentioned, such as your preferences or favored games based on browsed pages and played titles.
- Publicly shared personal data, including content from social media, connected profiles (e.g., Facebook or Google), and other open online sources.
Reasons for Data Collection
We utilize your personal data to:
- Deliver our services effectively.
- Address your inquiries or concerns.
- Conduct testing, analysis, debugging, and research to enhance and innovate our offerings.
- Identify, prevent, and address risks from fraudulent, harmful, or unlawful actions.
- Deliver promotional materials, updates, and customized communications.
- Handle conflicts, including probes by authorities or regulators.
- Adhere to laws and regulations.
- Secure the service's operation and safety, including maintaining site availability, defending systems and assets from threats, and blocking unauthorized entry.
Legal Grounds for Handling Your Data
Under GDPR and relevant privacy laws, we process data only with valid justification. Multiple bases might apply in some cases. Key grounds include:
Contract Fulfilment
We handle data to execute or prepare agreements with you, such as managing your account, responding under our Terms, and similar.
Regulatory Compliance
Data processing might be essential for legal adherence, including:
- Confirming age and identity for KYC/AML.
- Using IP to assess location and legal needs.
- Overseeing risks like promoting safe gaming and curbing excessive play.
- Upholding IT security.
- Responding to legal demands like warrants or orders.
- Countering crimes involving laundering, terrorism funding, scams, or cyber issues.
- Submitting routine reports for financial, legal, and technical compliance.
- Addressing your data rights requests.
Valid Interests
Where needed, we process data to protect our, a third party's, or a business interest, provided it doesn't override your rights. Examples:
- Pursuing or defending claims in legal or administrative actions.
- Implementing security protocols to avert crimes, secure assets and IP, and guarantee site functionality.
- Overseeing relationships and improving offerings.
- Performing analytics, grouping data, and studies for service/marketing advancement.
- Segmenting users for risk control, spotting problematic behaviors, and fostering responsible play.
- Examining play patterns via algorithms to suggest appealing games/features.
- Spotting and halting actions undermining service integrity, like fraud or cheating.
Your Approval
With consent, we might:
- Send targeted marketing through email, text, calls, or notifications.
- Adapt promotions based on your history and tastes.
- Leverage browsing data for relevant ads.
- Customize and evaluate marketing for better relevance.
- Manage your involvement in events, rewards, or promotions.
Data Sharing Practices
We could disclose your data to these recipient types:
- Within our organization to approved staff, related brands, contractors, agents, joint controllers, affiliates, or subsidiaries in our group or parent structure.
- Banks and payment processors. For transactions, we share essentials like name, birth date, email, address, phone, alias, and may include KYC docs for their compliance.
- External vendors aiding service delivery, management, or enhancement, e.g., support teams, messaging providers, tech firms, hosting services.
- Advertising collaborators.
- Anti-fraud organizations.
- Parties in business deals like mergers, sales, or restructurings involving our assets.
- Software suppliers for games.
- Analytics firms for research, data review, and service optimization.
- Officials, regulators, and enforcers.
If you file a complaint or raise issues on external sites (e.g., review platforms, forums, or mediators), we might need to reply, sharing minimal data to verify your account and address the concern. This stems from our interest in upholding reputation and resolving matters fairly. We limit shares to essentials and act only post your initiation.
Data Retention Period
We hold your data while your account is active and to achieve policy goals.
We might retain it longer for legal needs, like AML rules.
Post-account closure and absent legal/business rationale, data is deleted or anonymized, removing links to you.
Your Privacy Rights
You possess rights over your held data, including:
- Accessing your data and details on its use.
- Correcting inaccuracies or gaps.
- Deleting data absent strong legal/business grounds.
- Limiting processing under specific conditions.
- Porting data in standard, readable format to others.
- Opposing processing, especially for interests or marketing.
- Revoking consent anytime, not impacting prior actions.
- Complaining to a regulator in your residence, work, or infringement location.
Contact support@malina-casino.uk or dpo@malina-casino.uk to invoke rights.
Tracking Tools Like Cookies
We employ cookies, pixels, beacons, and akin tech to improve your site/app experience. On initial visits, we seek consent for optional cookies; essential ones (for site function) need none. See our Cookie Policy for details on cookies, uses, and preference management.
Protecting Your Data
Safeguarding your information is key; we apply strong administrative, tech, and physical protections against unauthorized access, loss, theft, or alteration. Despite efforts, no online system is foolproof. We can't assure total security but continually refine practices.
International Data Transfers
Your data might be handled outside EU/EEA. Transfers to affiliates/third parties include safeguards like adequacy decisions, EU-approved clauses, or other protections for high-level security.
Ownership Changes
Should our company undergo sale, merger, or control shift, your data could be shared in the process or prep. New entities may use it per this policy unless you consent otherwise.
Reaching Us
For questions on this policy or practices, email support@malina-casino.uk or dpo@malina-casino.uk.
Policy Revisions
We might revise this policy for tech/legal updates. Check periodically for changes, effective from site-posted date.
Effective Date: October 2024