What information does Megaways VIP Casino collect?
Account data comes first: name, date of birth, address, email and phone number are collected at registration to verify identity and to meet anti-money laundering obligations. Payment data covers the methods you use to deposit and withdraw, including card numbers (stored in tokenised form by the processor rather than directly), wallet identifiers and crypto wallet addresses. Activity data tracks logins, sessions, bets, wins, losses and bonus usage for both fraud prevention and your own statement.
Technical data is collected through standard web mechanisms: IP address, device type, browser, operating system, language settings and approximate location based on the IP. This information helps detect suspicious access patterns, format the site correctly for the device and meet licensing requirements that ask operators to know broadly where their players are located.
Why is that data needed?
The legal grounds for processing vary by data type. Account and payment data are needed to perform the contract you enter into when opening an account and to meet legal obligations around player protection and anti money laundering. Activity data supports both contract performance (so we can settle bets) and legitimate interests like fraud prevention. Technical data supports security and legitimate interest in keeping the service operating cleanly.
Marketing communications are sent only with your consent and you can withdraw that consent at any time without affecting the account itself. Personalised offers can be turned off in the notification settings without losing access to the standard promotions visible to all players on the Bonuses page.
How is the data stored and protected?
All data is stored on secured servers within the European Economic Area, with regular backups held in geographically separated facilities. Encryption is applied at rest for sensitive fields and in transit for every connection between your browser and the platform. Access is limited to staff who need it for their role, with logged audit trails for any retrieval of personal data.
Card numbers are never stored in their full form on platform servers; they are passed to PCI DSS certified payment processors that handle the tokenisation. Two factor authentication can be enabled from your account settings to add another layer on top of your password, and we encourage every player to use it.
Who does the data get shared with?
Payment processors receive whatever they need to process a deposit or withdrawal. Identity verification providers receive name, date of birth and identity document images when you submit them for KYC. Game studios receive anonymised session data so the games can be settled correctly. Regulators and law enforcement may receive data when there is a legal obligation to provide it.
Data is not sold to third parties and is not shared with advertising networks for retargeting outside of the consent you give for our own marketing. A full list of processors is available on request to the data protection contact listed at the foot of this page.
What rights do you have over your data?
You can request a copy of the personal data we hold about you, ask for inaccurate data to be corrected, request deletion subject to the limits imposed by anti money laundering record-keeping rules, restrict certain processing activities and withdraw consent for marketing at any time. All requests are handled within 30 days, usually faster.
If a request is refused, the reason is explained in writing and the route to escalate the complaint to the relevant supervisory authority is included in the response. The supervisory authority in your country of residence is generally the right starting point if you remain unhappy with the resolution offered directly.
How long is data kept?
Account, payment and activity data is retained for the duration of the account and for five years afterwards to meet anti money laundering record-keeping obligations. Marketing data is held only as long as your consent is active and is deleted on withdrawal of consent. Technical data is kept for shorter windows that match the security purpose it serves.
Once retention periods have passed, the data is securely deleted or anonymised. Anonymised data may continue to be used for statistical reporting where it can no longer be linked back to an identifiable individual.
How can you contact us about your data?
Email the data protection team at privacy@megawaysvip.org with any question, request or complaint relating to personal data. Live chat support can also help with routine requests and will route anything more complex to the data protection team automatically. Postal correspondence can be sent to the registered address at Hamchako, Mutsamudu, The Autonomous Island of Anjouan, Union of Comoros.
This policy is reviewed annually and updated whenever the underlying processing changes. The version published on this page is always the current version. For related information, see the Cookie Policy and the Terms and Conditions.
Ready to play at Megaways VIP Casino?
Create your account in under a minute and activate the welcome package.
Get started