Privacy Policy

About This Privacy Policy

This Privacy Policy explains how Mega Riches Casino Online collects, uses, stores and protects personal data relating to visitors and users of https://mega-riches-uk-casino.com/. It also explains the choices and legal rights available to individuals in the United Kingdom.

Personal data means any information that identifies a person directly or can identify them when combined with other information. It does not include information that has been anonymised so that an individual can no longer be identified.

Our handling of personal data is governed by the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 and other applicable UK legislation, including relevant gambling, anti-money laundering and consumer protection requirements.

Who Is Responsible for Your Personal Data

Mega Riches Casino Online is the data controller for personal data collected through this website and determines why and how that information is processed.

You can contact us about privacy or data protection matters using the following details:

• Email: careconnect@mega-riches-uk-casino.com
• Telephone: +44 29 2077 1459
• Postal address: Office 12, 4th Floor, Capital Tower, Greyfriars Road, Cardiff, CF10 3AG, United Kingdom
• Contact page: Mega Riches Casino Contact Centre

Personal Data We May Collect

The information collected depends on how you interact with Mega Riches Casino. It may include:

• Identity information: name, date of birth, age, gender, nationality and copies or details of identity documents.
• Contact information: residential address, email address, telephone number and communication preferences.
• Account information: username, encrypted password, account settings, verification status and account history.
• Financial information: payment method details, deposits, withdrawals, refunds, account balances and transaction records. Complete card details may be processed directly by authorised payment providers rather than stored by us.
• Verification information: proof of identity, proof of address, source of funds, source of wealth and information used for age, affordability, fraud and anti-money laundering checks.
• Gaming information: games accessed, stakes, wins, losses, session duration, bonus use, transaction patterns and responsible gambling settings.
• Technical information: IP address, device identifiers, browser type, operating system, language, approximate location, login records and diagnostic data.
• Communication information: emails, support enquiries, telephone call details, complaints, feedback and other correspondence.
• Marketing information: consent records, preferred communication channels and responses to promotions.
• Security information: suspected fraud indicators, account access attempts and records relating to chargebacks, misuse or prohibited activity.

Special Category and Criminal Offence Data

Information connected with responsible gambling interactions may sometimes reveal details about a person’s health or wellbeing. We process such information only where a lawful condition applies, such as explicit consent, substantial public interest or the protection of a vulnerable individual, and where the safeguards required by UK law are in place.

We may process information about suspected or confirmed fraud, money laundering and other criminal activity where this is authorised by law and necessary to protect users, comply with regulatory duties or establish, exercise or defend legal claims.

How We Collect Personal Data

We may obtain information:

• directly from you when you visit the website, create an account, complete verification, make a payment or contact support;
• automatically through cookies, server logs and similar technologies;
• from payment processors, identity verification providers and fraud prevention services;
• from public registers, sanctions lists, politically exposed persons databases and other lawful public sources;
• from responsible gambling, self-exclusion or regulatory systems where access is permitted or required;
• from business partners and service providers acting under appropriate data protection terms;
• from regulators, law enforcement bodies, courts and other competent authorities.

Where personal data is required by law or needed to provide a service, failure to supply it may prevent us from opening or maintaining an account, processing a transaction or providing access to certain features.

How and Why We Use Personal Data

Providing and Managing Services

We process personal data to create and administer accounts, authenticate users, process transactions, provide requested website functions, maintain account records and respond to support enquiries. This processing is generally necessary to enter into or perform a contract with you.

Identity, Age and Location Checks

Identity and age checks help prevent underage access, impersonation and account misuse. We may also check residential or geographic information where this is necessary to comply with legal, regulatory or service restrictions. These activities may be required by law, necessary for contractual performance or undertaken in our legitimate interests.

Anti-Money Laundering and Fraud Prevention

We may examine identity documents, transactions, payment methods, account links and source of funds information to detect fraud, money laundering, terrorist financing and other unlawful conduct. Processing may be necessary to comply with legal obligations and to protect Mega Riches Casino, its users and payment partners against financial crime.

Responsible Gambling

We may analyse account activity, session length, spending patterns, payment behaviour, limit changes and communications to identify indicators of gambling-related harm. This information may be used to provide safer gambling messages, apply account controls, conduct customer interactions or restrict access where appropriate.

Security and Service Integrity

Technical and behavioural information may be used to secure accounts, investigate suspicious access, prevent abuse, diagnose errors, enforce terms and maintain the availability of the website. We rely on our legitimate interests in operating a safe, reliable and properly managed service, provided those interests do not override your rights.

Customer Support and Complaints

We use contact details, account information and relevant correspondence to answer questions, investigate complaints and keep an accurate record of how an issue was handled. Processing may be necessary for contractual performance, compliance with legal duties or our legitimate interests in resolving disputes.

Legal and Regulatory Compliance

Personal data may be processed to meet obligations imposed by data protection, gambling, tax, accounting, consumer protection, anti-money laundering and other applicable laws. We may also use information to respond to lawful requests, audits, investigations, court orders and regulatory enquiries.

Service Analysis and Improvement

We may use aggregated or limited user information to understand how the website is used, measure performance, correct technical problems and improve content and navigation. Consent is obtained before using non-essential cookies where required.

Marketing

We may send information about promotions or services where you have provided valid consent or where another lawful basis permits the communication. Marketing preferences can be changed at any time. Withdrawing consent does not affect processing that took place before the withdrawal.

Lawful Bases for Processing

Depending on the activity, we rely on one or more of the following lawful bases:

• Contract: processing is required to provide a service you requested or to take steps before entering into a contract.
• Legal obligation: processing is required to comply with applicable UK law or a binding regulatory requirement.
• Legitimate interests: processing is necessary for security, fraud prevention, service management, complaint handling or business protection, after considering your interests and rights.
• Consent: you have made a freely given, specific, informed and unambiguous choice, particularly for certain marketing activities and non-essential cookies.
• Vital interests: processing is necessary in an exceptional situation to protect a person’s life or physical safety.
• Substantial public interest: processing is permitted for an applicable purpose, such as preventing unlawful acts or safeguarding vulnerable individuals, subject to statutory safeguards.

Automated Checks and Profiling

Automated tools may be used to identify unusual transactions, suspected fraud, multiple accounts, security threats, responsible gambling indicators or activity requiring further verification. These tools can assign risk indicators or refer an account for manual review.

If a decision is made solely by automated means and produces legal or similarly significant effects, we will provide the safeguards required by law. Where applicable, you may request human intervention, express your point of view and challenge the decision. Some details about fraud and security models may be restricted where disclosure would undermine their effectiveness or prejudice the rights of others.

Who May Receive Personal Data

We disclose personal data only where there is a valid purpose and an appropriate legal basis. Recipients may include:

• identity, age and address verification providers;
• payment processors, banks and card networks;
• hosting, cybersecurity, analytics and customer support providers;
• fraud prevention and anti-money laundering services;
• professional advisers, auditors, insurers and dispute resolution bodies;
• responsible gambling and self-exclusion services where applicable;
• competent regulators, tax authorities, law enforcement agencies and courts;
• prospective purchasers, investors or professional advisers involved in a legitimate corporate transaction.

Service providers acting as processors may use personal data only on documented instructions, must maintain confidentiality and must apply appropriate technical and organisational security measures. We do not sell personal data.

International Data Transfers

Some service providers may process information outside the United Kingdom. Before making a restricted transfer, we use a lawful transfer mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or another legally recognised safeguard.

We also assess relevant risks and apply supplementary protections where necessary. Further information about safeguards used for a particular transfer may be requested through the Mega Riches Casino Contact Centre.

How Long We Keep Personal Data

Personal data is retained only for as long as it is reasonably required for the purpose for which it was collected and to meet applicable legal, regulatory, accounting and dispute resolution obligations.

Retention periods are determined by considering:

• the duration of the customer relationship;
• the sensitivity and volume of the information;
• fraud, security and responsible gambling risks;
• statutory limitation periods;
• anti-money laundering and regulatory record-keeping requirements;
• open complaints, investigations or legal proceedings.

Identity, transaction and verification records may need to be kept after an account is closed where required for anti-money laundering, regulatory, tax or legal purposes. Marketing suppression records may also be retained so that an opt-out request continues to be respected. When information is no longer required, it is securely deleted, anonymised or rendered inaccessible.

Cookies and Similar Technologies

Mega Riches Casino uses cookies and related technologies to operate essential website functions, remember settings, maintain security, measure performance and, where permitted, support personalised content or marketing.

Strictly necessary technologies may be used without consent where they are essential to provide a requested service or protect the website. Optional analytics, advertising and personalisation cookies are used only after an appropriate choice has been recorded. You can reject optional cookies or change your preferences without losing access to basic website content.

Further details are available in the Mega Riches Casino Cookie Policy.

Direct Marketing Preferences

You can stop direct marketing at any time by using the unsubscribe option provided in the communication or by contacting careconnect@mega-riches-uk-casino.com. Requests to stop marketing do not affect essential service, security, account or legal notices.

We may retain limited information on a suppression list to ensure that the relevant address or telephone number is not added back to future marketing campaigns.

How We Protect Personal Data

We use proportionate technical and organisational measures designed to prevent personal data from being accidentally lost, altered, destroyed, disclosed or accessed without authorisation. These measures may include:

• encryption during transmission and, where appropriate, in storage;
• access controls based on staff roles and operational need;
• authentication, logging and monitoring of sensitive systems;
• secure development, vulnerability management and system maintenance;
• confidentiality obligations and staff data protection training;
• supplier assessments and contractual data protection requirements;
• incident response, backup and recovery procedures.

No internet service can guarantee absolute security. Users should keep their login details confidential, use a strong unique password and contact us promptly if they suspect unauthorised access.

Personal Data Breaches

Suspected security incidents are assessed and managed under our incident response procedures. Where a personal data breach is likely to create a risk to individuals, we will report it to the Information Commissioner’s Office within the period required by law. We will also notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

Your Data Protection Rights

Subject to the conditions and exemptions in UK law, you may have the right to:

1. Request access to your personal data and obtain information about how it is processed.
2. Request correction of inaccurate or incomplete personal data.
3. Request erasure where there is no continuing lawful reason to retain the information.
4. Request restriction of processing in specified circumstances.
5. Object to processing based on legitimate interests or public interest grounds.
6. Object to direct marketing at any time, including related profiling.
7. Request data portability for eligible information processed by automated means on the basis of consent or contract.
8. Withdraw consent where processing relies on consent.
9. Challenge qualifying automated decisions and request human involvement where the law provides this right.
10. Complain about how your personal data has been handled.

To exercise a right, email careconnect@mega-riches-uk-casino.com or use our contact page. We may request sufficient information to confirm your identity and protect personal data against unauthorised disclosure.

Requests are normally handled without charge. A reasonable fee may be charged, or a request may be refused, where UK law permits this because it is manifestly unfounded or excessive. We will explain any lawful restriction or refusal and provide information about available complaint routes.

Children and Underage Users

Mega Riches Casino services are intended only for people aged 18 or over. We do not knowingly permit children to create accounts or use gambling services. Age verification measures may be applied before access is granted.

If personal data has been submitted by or about a person under 18, contact us immediately. We will investigate and take appropriate action, including restricting access and deleting information where retention is not legally required.

Third-Party Websites

The website may contain links to payment services, game providers, social networks or other third-party websites. Those organisations may act as separate data controllers and apply their own privacy policies. Mega Riches Casino is not responsible for the privacy practices or security of an external website, so users should review the relevant notice before submitting personal data.

Complaints and the Information Commissioner’s Office

If you believe your personal data has been handled incorrectly, please contact us first so that the matter can be investigated. We will review privacy complaints fairly and provide a response in accordance with applicable UK requirements.

You also have the right to complain to the Information Commissioner’s Office, the independent UK data protection regulator:

• Website: https://ico.org.uk/make-a-complaint/
• Telephone: 0303 123 1113
• Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom

Changes to This Privacy Policy

We may revise this Privacy Policy to reflect changes in law, regulatory guidance, technology or the way Mega Riches Casino processes personal data. The current version will remain available on this website. Material changes may also be communicated through an account notice, website message or other appropriate channel.