Privacy Policy

Information we collect

When you open an account we ask for your full name, date of birth, residential address, email address, telephone number, and chosen currency. This set is the minimum required to establish that you are of legal age, to keep your funds separate from those of other customers, and to satisfy anti-money-laundering obligations that apply to us as a gaming operator.

During verification we may additionally request a government-issued identity document, a recent utility bill or bank statement, and a partially masked image of the payment card used to fund the account. Documents supplied for this purpose are used solely for verification and are never passed to marketing partners.

Alongside what you give us directly, our systems record technical and behavioural data: IP address, approximate location derived from it, device type, browser build, referring page, pages viewed, session duration, wager and transaction history, and support ticket contents. Cookies and similar identifiers are used to keep you signed in, remember display preferences, and measure how visitors move through the site.

How and why your information is used

The primary use is contractual: we cannot credit deposits, settle bets, process withdrawals, or answer a query about your balance without processing the data attached to your account. Where processing is necessary to perform the agreement between us, you cannot opt out of it while the account remains open.

A second category covers legal and integrity obligations — age checks, sanctions and politically-exposed-person screening, transaction monitoring for unusual patterns, and the detection of bonus abuse, collusion, or automated play. This work sometimes involves comparing details across accounts, and it may result in a payment being paused while a review is completed.

A third category is optional and rests on your consent: promotional email, SMS, and push notifications about new games and offers. Consent can be withdrawn at any time through the communication preferences in your profile or the unsubscribe link in any message, and withdrawing it has no effect on your ability to play. We also produce aggregated statistics on game popularity and page performance, which no longer identify individual players once compiled.

Sharing with third parties

We disclose information to the service providers who make the platform function: payment processors and acquiring banks, game studios whose titles are embedded in our lobby, identity verification bureaux, cloud hosting and backup providers, email delivery services, and the analytics tooling we use to monitor site health. Each is bound by contract to process data only on our instructions and to apply appropriate security measures.

Disclosure also occurs where we are legally compelled — to a court, a regulator supervising our licence, a law enforcement agency acting under proper authority, or a financial institution investigating a suspected fraudulent transaction. In such cases we release only the material specified in the request.

Golden Mister does not sell personal information, and we do not rent or trade customer lists to advertisers. Should the business be sold or merged, customer records would transfer to the acquiring entity, and affected players would be notified before the transfer takes effect.

Storage, security, and retention

Data is held on servers operated by our hosting partners and may be transferred to or accessed from jurisdictions outside your own, including outside the United Kingdom and the European Economic Area. Where such transfers occur we rely on standard contractual clauses or an equivalent safeguard to keep the level of protection consistent with the standard applied at the point of collection.

Technical measures include TLS encryption of data in transit, encryption at rest for identity documents, segregated database credentials, role-based access limited to staff whose duties require it, and logging of administrative access to customer records. No transmission over the internet can be guaranteed entirely secure, so we ask that you use a unique password and enable two-factor authentication where offered.

Account and transaction records are retained for the period required by our licensing conditions and applicable anti-money-laundering rules — generally a minimum of five years after the account is closed. Verification documents are deleted once the retention period expires, and marketing data is deleted promptly after consent is withdrawn unless a separate legal ground requires us to keep it.

Your rights and how to exercise them

Subject to the law that applies where you live, you may ask us for a copy of the personal data we hold about you, request correction of anything inaccurate, ask for erasure where no legal obligation compels us to keep it, object to processing based on legitimate interests, or request that your data be provided in a portable machine-readable format.

Send requests to the privacy contact listed in our Contact section from the email address registered to your account. We will acknowledge receipt promptly and aim to respond substantively within thirty days. Because a request may itself be an attempt at account takeover, we will verify your identity before releasing anything, and we may decline a request that we cannot authenticate.

Golden Mister is not licensed by the UK Gambling Commission and is not established in the United Kingdom, which affects the practical route available for complaints about data handling. If you are dissatisfied with our response you may raise the matter with the supervisory authority in your own country; UK residents should be aware that the enforcement powers of the Information Commissioner's Office over an operator situated outside the UK are limited in practice.

Where to find support

• Data protection enquiries — write to the privacy address published in the Contact section of golden-mister site pages, quoting your account username
• General account and verification support — live chat from inside your account, available around the clock
• Information Commissioner's Office (ico.org.uk, 0303 123 1113) — the UK supervisory authority for data protection matters

This notice summarises our data practices in plain language and does not create rights beyond those granted by the law applicable to you. Where a translated version of this page differs from the English text, the English version governs. We may revise this notice; material changes will be announced on the site and, where required, notified by email before they take effect.