Magicwin Casino Privacy Policy – Data Protection in Plain English

This Privacy Policy explains how Magicwin Casino on magicwinbonus.com collects, stores, and protects your personal information. We keep it simple and factual. No jargon, no legal fluff. You’ll know what data we gather, why we use it, who sees it, and how you can control or delete it.

1. Data We Collect

We collect the minimum information needed to operate your account safely and legally:

Identity data: name, surname, date of birth, nationality, and ID verification files.
Contact data: email address, phone (if given), and country.
Account data: username, transaction history, deposits, withdrawals, and bonus activity.
Device data: IP address, browser type, operating system, and screen size – used for security and optimisation.
Cookies: small files storing your login session and preferences (see Cookies Policy).
Communication data: any messages sent through chat or email for support purposes.

2. Why We Use Your Data

We process data to provide a safe, legal, and fair gaming environment. Specifically:

To register and manage your player account.
To verify your identity and prevent fraud or underage play.
To process deposits, withdrawals, and apply bonuses correctly.
To meet anti-money-laundering (AML) and Know-Your-Customer (KYC) obligations.
To personalise your experience – language, currency, device layout.
To send account-related notifications (not marketing unless consented).
To improve site performance and detect technical issues.

3. Legal Basis for Processing

Processing is based on one or more of the following grounds under UK GDPR:

Contract necessity – we need data to deliver casino services.
Legal obligation – compliance with gambling and AML laws.
Legitimate interest – fraud prevention, network security, service improvement.
Consent – for optional marketing or analytics cookies.

We share limited data with verified third parties strictly for operational purposes:

Payment processors: Visa, Mastercard, Centrobill, crypto gateways – to execute transactions.
Identity verification services: used for KYC and AML checks.
Game providers: only anonymised session data for gameplay validation.
Regulatory authorities: when required by law.
Analytics tools: Google Analytics and internal systems, anonymous only.

We do not sell or rent user data. Ever.

5. Data Storage & Retention

Your information is stored securely on encrypted servers located in the EU. Access is restricted to authorised staff. We retain data only as long as necessary:

Account and transaction data – up to 5 years after closure (legal requirement).
KYC documents – 5 years after last transaction.
Support communications – 12 months.
Analytics logs – 26 months, anonymised.

When data is no longer needed, it’s permanently deleted or anonymised.

6. Security Measures

We apply bank-grade protection:

256-bit SSL encryption on all traffic.
Encrypted backups stored in separate physical locations.
Role-based access control for employees.
Automatic session logout after inactivity.
Regular penetration tests and third-party audits.

No system is 100 % invulnerable, but we meet or exceed current UK iGaming security standards.

7. Marketing & Communication

We send promotional emails or SMS only if you’ve explicitly opted in. You can unsubscribe anytime via link in message or account settings. Opting out of marketing doesn’t affect essential communications such as payment notices or verification reminders.

8. Your Rights Under GDPR

As a UK resident, you have full control over your data. You can:

Request a copy of all data we hold about you (access request).
Ask for correction of inaccurate information.
Request deletion of your personal data (“right to be forgotten”).
Restrict or object to certain types of processing.
Withdraw consent for marketing at any time.
Request data portability to another controller.

Submit any such request by emailing [email protected]. We respond within 30 days as required by law.

9. International Transfers

Some partners or payment processors may operate outside the UK or EEA. In such cases, we ensure equivalent protection through EU Commission standard contractual clauses or other lawful mechanisms. No unprotected transfer occurs.

10. Protection of Minors

We do not knowingly collect or store data of individuals under 18. If any such record is found, it’s deleted immediately and the account closed. Verification prevents underage access, but reports can be sent to [email protected].

11. Policy Updates

This Privacy Policy is reviewed regularly. Updates appear here with a new “Last updated” date. Major changes trigger a notification in your account area. Current version reviewed in November 2025.

12. Contact for Privacy Matters

If you have questions about this policy, want to exercise your rights, or suspect misuse of your data, contact our Data Protection Officer:

Email: [email protected]
Response time: within 48 hours

If you’re unsatisfied with our handling, you can escalate the matter to the Information Commissioner’s Office (ICO) in the UK.

13. Summary

Magicwin Casino respects privacy as a core value. We collect minimal data, store it securely, use it lawfully, and delete it when done. Your trust keeps the platform running — we protect it with the same seriousness as your funds.