Betmaximus Casino Privacy Policy
This policy explains what personal data we collect when you play at Betmaximus Casino, why we collect it, how long we keep it and the controls you have over it. We operate under a Malta Gaming Authority licence and process your data in line with the UK GDPR and the Data Protection Act 2018.
Data We Collect at Betmaximus
We collect only the data we need to run your account, meet our regulatory obligations and keep the site safe. That falls into six categories.
- Identity data: your name, date of birth, email address, phone number and residential address.
- Verification documents: copies of your ID, proof of address and payment method, submitted for KYC checks.
- Transaction data: deposits, withdrawals, wagering records, payment method details and, where used, cryptocurrency wallet addresses.
- Technical data: IP address, device type, operating system, browser and approximate location derived from your IP.
- Gameplay behaviour: games played, bet sizes, session times, win and loss history, and bonus usage.
- Marketing preferences: which channels you opted into (email, SMS), and whether you accepted or declined bonus communications.
How We Use Your Information
We use your data to open and manage your account, verify your identity before your first withdrawal, and process deposits and withdrawals through the payment methods you choose. Transaction records also feed our fraud prevention work: we flag unusual betting patterns, chargebacks and attempts to hold multiple accounts.
We monitor gameplay behaviour for responsible gambling purposes. Where your play shows signs of harmful behaviour, we use that data to contact you about deposit limits, time-outs or self-exclusion tools. We also use it to meet our reporting duties to the Malta Gaming Authority and to applicable financial regulators.
Marketing communications are sent only where you have given consent. Where you opt in, we use your play history and preferences to tailor bonus offers, such as cashback or reload promotions. You can withdraw that consent at any time.
Our Legal Bases for Processing
Contract. We process your identity, transaction and account data to perform the agreement between us: providing your account, processing payments and paying out winnings. Without this data we cannot operate your account.
Legal obligation. Anti-money-laundering and licensing rules oblige us to verify your identity, retain transaction records for at least five years and report suspicious activity. We process verification documents and KYC data on this basis, whether or not you consent.
Legitimate interest. We process technical and gameplay data to detect fraud, prevent bonus abuse, secure our platform and produce aggregated statistics. We balance this interest against your rights and keep the data involved to a minimum.
Consent. Marketing communications and non-essential cookies run on your consent only. You can withdraw consent at any time through your account settings or the unsubscribe link in any email, and withdrawal does not affect prior processing.
Retention Periods We Apply
We keep each category of data only as long as the purpose requires, or as long as gambling regulation forces us to. After that, we delete or anonymise it.
| Data category | Retention period |
|---|---|
| Identity and account data | Life of the account, then 5 years after closure |
| KYC verification documents | 5 years after account closure (regulatory minimum) |
| Transaction and wagering records | 5 years minimum, per AML regulations |
| Technical and log data | Up to 12 months, then deleted |
| Marketing preferences and history | Until you withdraw consent or request deletion |
| Self-exclusion records | For the duration of the exclusion plus the regulatory retention window |
Who We Share Data With
We never sell your personal data. We share it only with parties who help us operate the casino, and only to the extent each purpose requires.
- Payment processors handling your deposits and withdrawals, including card schemes, e-wallet providers and crypto payment gateways.
- KYC and AML verification providers that check your ID, address and payment method documents.
- The Malta Gaming Authority and other regulators or law enforcement bodies, where reporting is legally required.
- Analytics providers that help us measure site performance in aggregate, only with your cookie consent.
- Game and platform suppliers that host the games you play, who receive the minimum data needed to deliver a session.
- Professional advisers such as auditors and lawyers, under confidentiality obligations.
Your Rights Under GDPR
You hold the following rights over your personal data. Exercise them by emailing our data protection officer at [email protected], or through [email protected]. We respond within one month, extended by two further months for complex requests where we notify you.
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is inaccurate or incomplete.
- Erasure: ask us to delete data where no legal retention duty applies.
- Portability: receive your account and transaction data in a machine-readable format.
- Objection: object to processing based on legitimate interest, including profiling.
- Withdraw consent: stop marketing or optional cookie processing at any time.
- Complain: raise a complaint with the Information Commissioner's Office (ICO), the UK data protection authority, or with the regulator in your jurisdiction.
Cookies and Tracking Tools
We use strictly necessary cookies to keep you logged in and secure your session, and optional analytics and marketing cookies only after you accept them in the cookie banner. You can change your cookie choices at any time via the cookie settings link in the site footer.
Full details of every cookie category, its purpose and its lifetime sit in our dedicated Cookies Policy. That page also explains how to block cookies in your browser and what happens to site functions if you do.
How We Keep Data Secure
We encrypt personal data in transit with TLS and encrypt verification documents at rest. Access to your data follows a need-to-know model: staff roles restrict who can view KYC documents, payment details or gameplay logs, and every access is logged and auditable.
We test our controls regularly through internal reviews and third-party security assessments. If a breach affects your personal data and creates a risk to you, we notify the ICO within 72 hours of becoming aware, and we inform you directly where the risk is high.
Frequently Asked Questions
Can I play at Betmaximus Casino without sharing KYC documents?
You can register and deposit without immediate verification, but we must verify your ID, proof of address and payment method before your first withdrawal. This is a regulatory requirement under our MGA licence and cannot be waived.
How do I stop marketing emails?
Use the unsubscribe link in any email, or change your communication preferences in your account settings. Marketing data is deleted or suppressed promptly once you withdraw consent; transaction records are unaffected.
Do you keep my data if I self-exclude?
Yes, we retain your self-exclusion record for the duration of the exclusion and for the regulatory retention window afterwards, so the exclusion cannot be circumvented by opening a new account.
Who do I contact about a privacy concern?
Email our data protection officer at [email protected] for anything involving your personal data, or reach support 24/7 via live chat and [email protected]. If we cannot resolve the matter, you can complain to the ICO.