Privacy Policy

Version: 1.0  |  Last Updated: 31 July 2025  |  Effective Date: 31 July 2025

This Privacy Policy ("Policy") describes how MonsterWin (the "Company", "we", "us", or "our"), operating through the Website at monsterwinbonuses.com (the "Website"), collects, processes, stores, uses, and protects personal data relating to individuals ("you" or "the Player") who access or use our services.

This Policy is incorporated into and should be read alongside our Terms & Conditions and Responsible Gaming Policy. By using the Website, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

We are committed to protecting your personal data and processing it in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and all other applicable data protection legislation.

1. Introduction

1.1. Scope of This Policy

This Policy applies to all personal data collected by or on behalf of MonsterWin in connection with the Website and our online gaming services. It covers data collected through:

• Account registration and maintenance;
• Deposits and withdrawals;
• Game play and betting activity;
• Bonus and promotion participation;
• Customer support communications;
• Cookies and other tracking technologies used on the Website.

1.2. Data Controller

MonsterWin acts as the data controller for the personal data collected through the Website. As data controller, we determine the purposes and means of processing your personal data. For all data protection enquiries, please contact our Privacy team using the details set out in Section 13 of this Policy.

2. Data We Collect

2.1. Data You Provide Directly

When you register an account, use our services, or contact us, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality;
• Contact Data: Email address, residential address, telephone number;
• Account Data: Username, password (stored in encrypted form), security questions and answers;
• Financial Data: Payment method details (card numbers are tokenised and not stored in full), bank account details (where relevant), transaction history, deposit and withdrawal records;
• Verification Documents: Copies of government-issued ID, proof of address, proof of payment method, and source of funds documentation submitted during KYC;
• Communications Data: Records of correspondence with our customer support team, including emails, chat logs, and telephone call records.

2.2. Data Collected Automatically

When you access the Website, we automatically collect the following technical and usage data:

• Technical Data: IP address, browser type and version, operating system, device type and identifiers, screen resolution, time zone;
• Usage Data: Pages visited, links clicked, session duration, referring URLs, search queries within the Website;
• Behavioural Data: Game play patterns, betting history, bonus usage, session start and end times;
• Cookies and Tracking Data: As further described in Section 6 of this Policy.

2.3. Data from Third Parties

We may receive personal data about you from third parties, including:

• Identity verification and KYC service providers;
• Anti-fraud and AML screening databases;
• Payment processors and financial institutions;
• Responsible gaming or self-exclusion registers (e.g., where you have previously registered a self-exclusion);
• Marketing affiliates and partners (where permitted by applicable law).

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• Account Management: To create, verify, and administer your Account, including processing deposits and withdrawals;
• Service Provision: To enable you to access and play games, participate in promotions, and use all features of the Website;
• KYC & Compliance: To verify your identity and age, comply with anti-money laundering (AML) obligations, and meet regulatory requirements;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorised access, and other illegal activity;
• Customer Support: To respond to your queries, complaints, and requests;
• Responsible Gaming: To monitor Player behaviour for signs of problem gambling and to apply and enforce responsible gaming tools (such as self-exclusion);
• Marketing & Communications: To send you promotional communications, personalised offers, and newsletters (where you have given consent or where we have a legitimate interest and you have not opted out);
• Website Improvement: To analyse usage patterns, troubleshoot technical issues, and improve the functionality and content of the Website;
• Legal Obligations: To comply with legal and regulatory obligations, including record-keeping, reporting, and responding to lawful requests from authorities.

4. Legal Bases for Processing

Under the GDPR, we must have a lawful basis for each type of processing activity. We rely on the following legal bases:

Where we rely on legitimate interests as a legal basis, we have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms.

5. Data Sharing & Third Parties

5.1. Categories of Recipients

We may share your personal data with the following categories of third parties:

• Payment Service Providers: To process deposits and withdrawals;
• Identity Verification Providers: To conduct KYC and AML checks;
• Game Software Providers: Who may receive technical data necessary for game functionality and fairness auditing;
• IT & Cloud Service Providers: Who host the Website infrastructure and related systems;
• Customer Support Platforms: Third-party tools used to manage support communications;
• Marketing & Analytics Partners: Analytics platforms and advertising networks (subject to your consent where required);
• Regulatory & Law Enforcement Authorities: Where we are legally required to disclose data (e.g., AML reporting obligations, court orders);
• Professional Advisers: Lawyers, auditors, and accountants, where necessary for business operations or legal defence.

5.2. Data Processing Agreements

All third parties who process personal data on our behalf are required to enter into data processing agreements with us and are bound by contractual obligations of confidentiality and data security that are at least as protective as the standards in this Policy.

5.3. Sale of Personal Data

We do not sell, rent, or trade your personal data to third parties for commercial purposes.

6. Cookies & Tracking Technologies

6.1. What Are Cookies?

Cookies are small text files placed on your device when you visit the Website. They enable the Website to recognise your device, remember your preferences, and collect information about how you interact with the Website.

6.2. Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Website to function properly (e.g., maintaining your login session). These cannot be disabled.
• Performance & Analytics Cookies: Help us understand how visitors interact with the Website (e.g., Google Analytics). These are only set with your consent.
• Functionality Cookies: Enable personalised features such as language preferences and game history.
• Targeting & Advertising Cookies: Used to deliver relevant advertising and track the effectiveness of marketing campaigns. Only set with your consent.

6.3. Managing Cookies

Upon your first visit to the Website, you will be presented with a Cookie Consent Banner that allows you to accept or reject non-essential cookies. You may update your preferences at any time by accessing the Cookie Settings panel on the Website or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of the Website.

6.4. Other Tracking Technologies

In addition to cookies, we may use web beacons, pixel tags, session replay technologies, and local storage to collect information about your use of the Website. These technologies operate in a similar way to cookies and are subject to the same consent requirements.

7. Data Security

7.1. Security Measures

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using industry-standard Secure Socket Layer (SSL) / Transport Layer Security (TLS) technology;
• Data Encryption at Rest: Sensitive data, including financial information and identification documents, is encrypted when stored;
• Access Controls: Personal data is accessible only to authorised personnel who need it for legitimate business purposes;
• Firewalls & Intrusion Detection: Our systems are protected by industry-standard firewalls and monitored for suspicious activity;
• Regular Security Audits: We conduct periodic reviews and penetration tests of our security systems.

7.2. Data Breaches

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and report the breach to the relevant supervisory authority within the timeframes required by the GDPR.

8. Data Retention

8.1. Retention Periods

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. Our standard retention periods are as follows:

At the end of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data deletion procedures.

9. Your Rights

Under the GDPR, you have the following rights in respect of your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you (Subject Access Request);
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data be corrected;
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations;
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your data in certain circumstances;
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another controller;
• Right to Object: You have the right to object to the processing of your data where we rely on legitimate interests or where processing is for direct marketing purposes;
• Right to Withdraw Consent: Where we process data based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant supervisory authority (in Greece, the Hellenic Data Protection Authority – HDPA, www.dpa.gr).

To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within 30 calendar days. We may request proof of identity before processing your request.

10. International Data Transfers

10.1. Cross-Border Transfers

In order to provide our services, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure that appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Transfers to countries benefiting from an European Commission adequacy decision;
• Other legally recognised transfer mechanisms under the GDPR.

10.2. Your Rights in Relation to Transfers

You may request further information about the specific safeguards in place for any particular international data transfer by contacting our Privacy team at [email protected].

11. Minors

The Website is strictly intended for individuals aged 21 years or older. We do not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a minor, we will promptly delete such data and close any associated Account. If you believe a minor has registered an Account on our Website, please contact us immediately at [email protected]. Further information on our approach to protecting minors is available in our Responsible Gaming Policy.

12. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time. Changes will be effective upon posting of the updated Policy on the Website. Where changes are material, we will notify you by email to your registered address or via a prominent notice on the Website. The "Last Updated" date at the top of this document always reflects the most recent revision. We encourage you to review this Policy periodically to stay informed of how we protect your data.

13. Contact Information

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data, please contact us:

• General Support: [email protected]
• Privacy & Data Protection Enquiries: [email protected]
• Website: monsterwinbonuses.com

We aim to respond to all privacy-related enquiries within 30 calendar days. If you are not satisfied with our response, you have the right to raise a complaint with the Hellenic Data Protection Authority (HDPA):

• Website: www.dpa.gr
• Address: Kifisias 1-3, 115 23 Athens, Greece
• Telephone: +30 210 6475600