Popular Games
Privacy Policy
Version: 1.0 | Last Updated: 31 July 2025
MonsterWin (“we”, “us”, “our”), operating the website at monsterwin-bonus.com (the “Platform”), is committed to protecting the privacy and personal data of all individuals who interact with our services. This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, and what rights you have in relation to it.
This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy. By using our Platform or creating an Account, you acknowledge that you have read and understood this Privacy Policy.
1. Introduction
1.1. Who We Are
MonsterWin is the operator of the online gaming Platform accessible at monsterwin-bonus.com. As the entity responsible for the processing of your personal data, we act as the Data Controller under applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and related national implementing legislation.
1.2. Scope
This Policy applies to all personal data processed in connection with your registration, use of, and interaction with our Platform, whether through our website, mobile interface, or customer communications channels.
2. Data We Collect
2.1. Data You Provide Directly
When you register an Account or interact with our services, you may provide us with the following categories of personal data:
- Identity Data: Full name, date of birth, gender, nationality;
- Contact Data: Email address, telephone number, residential address;
- Account Data: Username, password (stored in encrypted form), account preferences;
- Financial Data: Payment method details (card numbers are not stored in full), transaction history, source of funds documentation;
- Identity Verification Data: Copies of government-issued identification, proof of address, and other KYC documents;
- Communications Data: Content of emails, live chat transcripts, and support ticket correspondence.
2.2. Data Collected Automatically
When you access or use the Platform, we automatically collect certain technical and behavioural data, including:
- Technical Data: IP address, browser type and version, device type, operating system, screen resolution;
- Usage Data: Pages visited, time spent on pages, click-stream data, session duration, login timestamps;
- Gaming Data: Games played, bets placed, wagering history, bonus usage, win/loss records;
- Cookie Data: As described in Section 6 of this Policy.
2.3. Data from Third Parties
We may receive personal data about you from third-party sources, including:
- Identity verification and fraud prevention service providers;
- Payment processors and financial institutions;
- Anti-money laundering databases and screening services;
- Responsible gaming and self-exclusion registers;
- Marketing analytics and affiliate partners (where applicable).
3. How We Use Your Data
3.1. Purposes of Processing
We process your personal data for the following purposes:
- Account Registration & Management: To create, maintain, and administer your Player Account;
- Identity Verification (KYC): To verify your identity, age, and eligibility to use the Platform;
- Financial Transactions: To process deposits, withdrawals, and other financial operations;
- Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal or prohibited conduct;
- Responsible Gaming: To monitor gambling behaviour, apply responsible gaming tools, and comply with player protection obligations;
- Customer Support: To respond to your queries, complaints, and requests;
- Marketing Communications: To send you promotional offers and information about new games and features, where you have consented to receive such communications;
- Legal Compliance: To comply with our legal and regulatory obligations, including AML, data protection, and tax requirements;
- Platform Improvement: To analyse usage patterns and improve the functionality, content, and user experience of the Platform;
- Analytics & Reporting: To produce aggregated statistical reports on Platform performance and user behaviour.
4. Legal Bases for Processing
4.1. Basis Overview
We rely on the following legal bases for processing your personal data under the GDPR:
| Processing Purpose | Legal Basis |
|---|---|
| Account creation and management | Performance of a contract (Art. 6(1)(b)) |
| KYC and age verification | Legal obligation (Art. 6(1)(c)) |
| Payment processing | Performance of a contract (Art. 6(1)(b)) |
| Fraud and AML checks | Legal obligation / Legitimate interests (Art. 6(1)(c)/(f)) |
| Customer support | Legitimate interests (Art. 6(1)(f)) |
| Direct marketing | Consent (Art. 6(1)(a)) |
| Platform analytics and improvement | Legitimate interests (Art. 6(1)(f)) |
| Responsible gaming compliance | Legal obligation / Legitimate interests (Art. 6(1)(c)/(f)) |
4.2. Withdrawal of Consent
Where we process your data based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal. To withdraw consent for marketing communications, you may click the “unsubscribe” link in any marketing email or contact us at [email protected].
5. Data Sharing & Third Parties
5.1. Categories of Recipients
We may share your personal data with the following categories of third parties:
- Payment Service Providers: To process your deposits and withdrawals (e.g., Visa, Mastercard, Skrill, Neteller, PayPal, Viva Wallet);
- Identity Verification Providers: To carry out KYC and document verification procedures;
- Fraud & AML Compliance Services: To screen transactions and identify suspicious activity;
- Game Software Providers: Who supply the games and RNG systems on the Platform;
- Customer Support Platform Providers: Who host our live chat and ticketing infrastructure;
- Marketing & Analytics Partners: To measure campaign effectiveness and improve user experience (subject to your consent);
- Legal & Regulatory Authorities: Where required by law, court order, or regulatory obligation;
- Self-Exclusion Registers: To ensure compliance with self-exclusion requests.
5.2. No Sale of Data
We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.
5.3. Third-Party Processors
All third-party service providers who process personal data on our behalf are required to enter into Data Processing Agreements and to process data only in accordance with our instructions and applicable data protection law.
6. Cookies & Tracking Technologies
6.1. What Are Cookies
Cookies are small text files stored on your Device when you visit a website. We also use similar tracking technologies, including pixels, web beacons, and local storage objects. Together, these technologies help us recognise your Device, remember your preferences, and analyse your interaction with the Platform.
6.2. Categories of Cookies We Use
| Cookie Type | Purpose |
|---|---|
| Strictly Necessary | Essential for the Platform to function, including session management and account security. |
| Performance / Analytics | To collect information on how users interact with the Platform, enabling us to improve functionality. |
| Functional | To remember your preferences, such as language settings and game choices. |
| Targeting / Marketing | To deliver relevant promotional content and measure the effectiveness of our advertising campaigns. |
6.3. Cookie Consent
Upon your first visit to the Platform, you will be presented with a cookie consent banner. Strictly necessary cookies are set automatically as they are essential for the Platform’s operation. All other categories of cookies require your explicit consent before being activated. You may manage your cookie preferences at any time via our Cookie Settings tool.
6.4. Managing Cookies
You may also control and delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies, visit www.aboutcookies.org.
7. Data Security
7.1. Security Measures
MonsterWin implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- SSL/TLS encryption for all data transmitted between your Device and the Platform;
- Encryption at rest for sensitive personal and financial data stored in our systems;
- Access controls limiting internal access to personal data on a strict need-to-know basis;
- Regular security audits and penetration testing of our infrastructure;
- PCI-DSS compliance standards for payment data handling.
7.2. Data Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, MonsterWin will notify the competent supervisory authority without undue delay and, where required, will also inform the affected individuals in accordance with applicable law.
8. Data Retention
8.1. Retention Periods
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account and identity data | Duration of account + 5 years after closure |
| Financial and transaction records | 5 years from transaction date |
| KYC and verification documents | 5 years from account closure |
| Support communications | 3 years from last contact |
| Marketing preferences and consent records | Until withdrawal of consent + 1 year |
| Gaming and wagering history | 5 years from transaction date |
8.2. Post-Retention Disposal
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data disposal procedures.
9. Your Rights
9.1. Rights Under GDPR
As a data subject under the GDPR, you have the following rights in relation to your personal data:
- Right of Access: To request a copy of the personal data we hold about you;
- Right to Rectification: To request correction of inaccurate or incomplete personal data;
- Right to Erasure (“Right to be Forgotten”): To request deletion of your personal data, subject to our legal retention obligations;
- Right to Restriction of Processing: To request that we restrict the processing of your data in certain circumstances;
- Right to Data Portability: To receive your personal data in a structured, machine-readable format;
- Right to Object: To object to processing based on legitimate interests or for direct marketing purposes;
- Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time;
- Right to Lodge a Complaint: To lodge a complaint with the competent data protection supervisory authority.
9.2. Exercising Your Rights
To exercise any of your rights, please contact our Data Protection Officer (DPO) at [email protected]. We will respond to all verifiable requests within 30 days of receipt. We may request proof of identity before processing your request to prevent unauthorised access to your data.
10. International Data Transfers
10.1. Cross-Border Transfers
In the course of providing our services, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure that appropriate safeguards are in place in accordance with applicable data protection law, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission;
- Transfers to countries with an adequacy decision issued by the European Commission;
- Binding Corporate Rules (where applicable);
- Other lawful transfer mechanisms as permitted under the GDPR.
10.2. Data Processor Contracts
All international data processors are bound by data processing agreements that require them to maintain data security standards equivalent to those required under the GDPR.
11. Minors
11.1. Age Restriction
Our Platform is strictly for individuals aged 18 years and over. We do not knowingly collect, process, or store personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete such data and close the associated Account.
11.2. Parental Responsibility
Parents and guardians are encouraged to use available parental control software to prevent minors from accessing online gambling platforms. We support the work of organisations dedicated to the protection of minors in online environments.
12. Changes to This Policy
12.1. Policy Updates
MonsterWin may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory obligations. When we make material changes, we will notify you by email or by posting a notice on the Platform prior to the change taking effect. The “Last Updated” date at the top of this Policy reflects the date of the most recent revision.
12.2. Continued Use
Your continued use of the Platform following the effective date of any update constitutes your acknowledgement of the revised Policy. We encourage you to review this Policy periodically.
13. Contact Information
13.1. Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:
- DPO Email: [email protected]
- General Support: [email protected]
- Website: monsterwin-bonus.com
You also have the right to lodge a complaint with the competent national data protection supervisory authority in your country of residence if you believe that we have processed your personal data in a manner inconsistent with applicable data protection law.