Mafia Data Protection and Privacy Terms

How Casino Mafia Handles Personal Data

At Casino Mafia, we collect registration data including email address, date of birth, country, phone number, gender, full name, social security number, zip code, username, and IP address and location data captured automatically at sign-up. We also gather device information such as operating system version and device identifiers, along with usage logs covering pages viewed, session times and content interacted with.

We rely on four lawful bases for processing: conclusion and performance of a contract, legal obligation, legitimate interest, and consent. Legitimate interest covers activities such as fraud detection, IT security, analytics and responsible gaming segmentation, while consent is required for direct marketing, customised offers and targeted advertising.

Who Receives This Data

Data may be shared with internal staff, affiliated brands, payment providers and financial institutions, support and technology contractors, fraud prevention agencies, game providers, and law enforcement or regulatory authorities where required. International transfers outside the EU/EEA rely on adequacy decisions or Standard Contractual Clauses.

Retention and Account Verification

We retain personal data for the duration of an account and for as long as needed to fulfil the purposes it was collected for, and longer where anti-money laundering or other regulatory obligations require it. Once an account is closed and no legal or business need remains, we delete or anonymise the stored data.

Verification of identity forms part of our data handling. We may request a certified ID, proof of residence, proof of ownership of payment methods, and transaction histories, and we complete this process described on our verification page within the stated turnaround once documents are submitted in full.

We apply administrative, technical and physical safeguards to protect data, including access to games only through a protected network using encryption technology for sensitive data. We state clearly that absolute security cannot be guaranteed, which is why we encourage players to keep their account login details confidential at all times.

Your Data Protection Rights

We recognise a set of rights available to every player whose data we process. Players may exercise any of the following by contacting us directly:

• Access to the personal data we hold about the player
• Rectification of inaccurate or incomplete data
• Erasure of data once it is no longer required
• Restriction of how we process certain data
• Data portability, allowing data to be transferred elsewhere
• Objection to processing based on legitimate interest
• Withdrawal of consent given for marketing or personalisation
• Lodging a complaint with a supervisory authority in the player's EU member state of residence, place of work or place of alleged infringement

These rights apply alongside our standard account terms, and players can review related account and payment method information through our support channels for day-to-day questions.