Privacy Policy

This Privacy Policy explains how Karthala Ventures LTD, as operator of megasino.win, collects, uses, stores, shares and protects personal data.

Our processing of personal data is primarily governed by the applicable data-protection laws of the Union of the Comoros and the regulatory requirements applicable to the operation of Megasino under a gambling licence issued in the Autonomous Island of Anjouan.

Where mandatory data-protection laws of another jurisdiction apply to a particular player or processing activity, those requirements will be observed in addition.

1. Data Controller

The controller responsible for personal data processed in connection with Megasino is:

Karthala Ventures LTD
Registration number: 16098
Hamchako, Mutsamudu
Autonomous Island of Anjouan
Union of the Comoros

Website: megasino.win
Email: support@megasino.win

Karthala Ventures LTD determines the purposes and essential means of processing personal data in connection with the operation of Megasino.

2. Data Protection Principles

Megasino processes personal data in accordance with principles of fair, lawful and transparent processing.

Personal data will:

• be collected for specified, explicit and legitimate purposes;

• not be further processed in a manner incompatible with those purposes;

• be limited to information that is adequate and relevant for the relevant purpose;

• be kept accurate, complete and up to date where necessary;

• be corrected or deleted where inaccurate or no longer required for the relevant purpose;

• not be retained in personally identifiable form for longer than necessary for the relevant purpose or applicable legal and regulatory requirements.

3. What Personal Data Do We Process?

Depending on how you use Megasino, we may process the following categories of information.

Account and Identity Data

Name, date of birth, residential address, username, email address, telephone number, language, account preferences and account status.

KYC and Verification Data

This may include passports, national identity cards, driving licences, proof of address, verification status and, where required, additional information relating to identity, payment methods, source of funds or source of wealth.

Payment and Transaction Data

This may include deposits, withdrawals, payment methods, transaction amounts, payment references, transaction dates and transaction status.

Depending on the payment method, complete payment credentials may be processed directly by the relevant payment service provider.

Gaming and Betting Data

This may include casino wagers, game results, sports bets, bonus activity, Freebets, Free Spins, gaming history, wins, losses and relevant gaming and transaction logs.

Technical Data

This may include IP address, device and browser information, operating system, session information, language settings, login events, technical logs and cookie or consent information.

Communications

Where you contact Customer Support, we may process emails, Live Chat messages, support requests, complaints, documents and other communications.

Responsible Gambling Data

Where you use player-protection measures, we may process information relating to self-exclusion, cooling-off periods, limits, responsible gambling requests and related account measures.

Where such information contains particularly sensitive personal data, it will be processed only where necessary for the relevant protection, legal or compliance purpose and where permitted by applicable law.

4. How Do We Obtain Personal Data?

We obtain personal data in particular:

• directly from you during registration, verification and use of your account;

• through your gaming, betting and payment activity;

• when you provide documents or information to Megasino;

• through communications with Customer Support;

• through our technical systems;

• from payment, KYC, security and fraud-prevention providers;

• from gaming and Sports Betting providers;

• through affiliate and referral systems;

• from authorities or other authorised bodies where legally or regulatorily permitted or required.

5. Purposes of Processing

We process personal data in particular to:

• create and administer player accounts;

• provide Casino and Sports Betting services;

• process deposits and withdrawals;

• administer bonuses and promotions;

• verify age and identity;

• conduct KYC and AML reviews;

• detect or prevent fraud, duplicate accounts, payment manipulation and other abusive activity;

• comply with legal and regulatory obligations;

• implement responsible gambling and player-protection measures;

• implement self-exclusion and cooling-off measures;

• maintain the technical security and integrity of our platform;

• provide Customer Support;

• handle complaints and disputes;

• establish, exercise or defend legal claims;

• provide necessary account, security or transaction communications.

6. Marketing

Direct promotional or bonus marketing is sent only in accordance with applicable legal requirements and the player's relevant preferences or consent.

Players may object at any time to the use of their personal data for direct marketing.

Marketing communications can be stopped using the available unsubscribe option or by contacting Customer Support.

Megasino will not send direct promotional or bonus marketing to a player during an active self-exclusion.

7. Recipients of Personal Data

Where necessary for the relevant purpose, personal data may be shared with categories of recipients including:

• payment service providers and banks;

• KYC and identity-verification providers;

• security and fraud-prevention providers;

• gaming and Sports Betting providers;

• hosting, cloud and infrastructure providers;

• IT and technical service providers;

• Customer Support and communications providers;

• affiliate and referral technology providers;

• legal, tax, audit and compliance advisers;

• the competent gambling regulator;

• law-enforcement authorities;

• courts;

• data-protection or other competent authorities;

• other recipients where a valid legal or regulatory basis exists.

Service providers receive only such information as is appropriate and necessary for their relevant function.

8. International Data Transfers

Because Megasino operates internationally, personal data may be processed by service providers or partners located in other countries.

International transfers of personal data are carried out in accordance with applicable data-protection laws of the Union of the Comoros and relevant regulatory requirements.

Before transferring personal data to another country, we consider matters including the level of data protection available in that country, the nature of the information transferred, the purpose and duration of processing and the technical, organisational or contractual safeguards in place.

Personal data will be transferred internationally only where the transfer is permitted under applicable law and an adequate or sufficient level of protection or another legally permitted safeguard is available.

Where mandatory data-transfer requirements of another jurisdiction additionally apply, the required transfer mechanism will also be observed.

9. Cookies and Similar Technologies

Megasino uses cookies and similar technologies for purposes including:

• authentication;

• session management;

• security;

• language preferences;

• functional sign-in features;

• technical functions;

• measurement;

• affiliate and referral attribution.

Non-essential cookies and similar technologies are used in accordance with your cookie preferences.

Further information is available in our Cookie Policy.

10. KYC, AML and Regulatory Reviews

Personal data may be processed in order to comply with requirements relating to identity verification, anti-money laundering, counter-terrorist financing, fraud prevention and transaction monitoring.

This may include identity information, transaction data, payment methods and additional verification documents.

Where required, information may be disclosed to competent authorities or other legally or regulatorily authorised bodies.

Certain reviews or reports may be subject to confidentiality requirements and Megasino may therefore be unable to provide additional information about them.

Further information is available in our KYC and AML Policy.

11. Responsible Gambling and Self-Exclusion

Information relating to responsible gambling is processed where necessary to effectively implement player-protection measures.

This may include:

• self-exclusion;

• cooling-off measures;

• limits;

• account restrictions;

• related communications.

During an active self-exclusion, relevant information may be retained and used to prevent use of the restricted account or attempts to circumvent the protective measure.

Further information is available in our Responsible Gambling Policy and Self-Exclusion Policy.

12. Retention of Personal Data

Personal data is retained only for as long as necessary for the relevant purpose or where legal or regulatory obligations require longer retention.

Retention periods may depend in particular on:

• the duration of the player account;

• KYC and AML requirements;

• regulatory record-keeping obligations;

• tax and accounting requirements;

• pending complaints or disputes;

• fraud or security investigations;

• applicable limitation periods.

Closing a player account therefore does not automatically result in the immediate deletion of all personal data.

Information for which there is no longer a legal, regulatory or legitimate operational need will be deleted, anonymised or otherwise removed from active processing as permitted by applicable law.

13. Data Security

Megasino applies appropriate technical and organisational security measures designed to protect personal data against loss, damage, unauthorised alteration, disclosure or access.

Such measures may include:

• access controls;

• authentication measures;

• encrypted data transmission;

• security logging;

• technical monitoring;

• role and permission controls;

• organisational security procedures.

Our technical systems and data-processing practices are operated with regard to the security and data-integrity requirements applicable to licensed gaming operators.

No electronic system can guarantee absolute security.

Players are also responsible for keeping their login credentials confidential and using appropriate passwords.

14. Automated and Risk-Based Reviews

Megasino may use automated or partially automated systems to help identify matters including:

• unusual transactions;

• fraud patterns;

• security risks;

• potential duplicate accounts;

• technical anomalies.

An automated indicator may result in a transaction or account being referred for additional manual review.

Where mandatory data-protection law applicable to a player provides additional rights concerning automated decisions, those rights may be exercised by contacting Customer Support.

15. Your Data Protection Rights

Depending on applicable data-protection law, you may have rights including the right to:

• obtain confirmation of whether personal data relating to you is being processed;

• obtain a clear copy of personal data held about you;

• have inaccurate information corrected;

• have incomplete information completed;

• have outdated information updated;

• request blocking or deletion of information where the legal conditions are met;

• object on legitimate grounds to certain processing;

• object to the use of your information for direct marketing without having to provide a specific reason;

• submit a complaint to a competent data-protection authority.

These rights may be subject to legal or regulatory restrictions.

In particular, KYC, AML, fraud-prevention, accounting, security or regulatory record-keeping requirements may prevent immediate deletion of certain information.

Before responding to a data-protection request, we may require appropriate proof of identity to ensure that personal information is not disclosed to or altered by an unauthorised person.

16. Minors

Megasino may only be used by persons who are at least 18 years old and who have also reached the legal minimum gambling age applicable to them.

Minors are not permitted to use our gambling services.

Where we establish that an account has been used by a minor, we may restrict or close the account and take any further measures required under our General Terms and Conditions and regulatory obligations.

Certain information may continue to be retained where necessary to prevent an unlawful re-registration or to comply with legal or regulatory requirements.

17. Data Protection Laws of Other Jurisdictions

Megasino is operated by Karthala Ventures LTD in Anjouan, Union of the Comoros.

The primary basis of this Privacy Policy is therefore the applicable data-protection law of the Union of the Comoros and the regulatory requirements of the Autonomous Island of Anjouan.

Nothing in this Privacy Policy is intended to exclude mandatory data-protection rights that apply to a player or particular processing activity under the law of another jurisdiction.

Where such mandatory requirements apply, they will be observed in addition.

18. Changes to This Privacy Policy

We may update this Privacy Policy where our services, technologies, regulatory requirements, legal obligations or data-processing activities change.

The current version will be published on megasino.win.

Where changes are material, players may also be informed through an appropriate additional communication method.

19. Contact

If you have questions about how your personal data is processed, wish to object to direct marketing or wish to exercise your data-protection rights, please contact:

Karthala Ventures LTD
Email: support@megasino.win

Please provide sufficient information for us to review your request and, where necessary, securely verify your identity.