MagicWin Privacy Policy

1. Data Controller

MagicWin acts as the data controller responsible for your personal information. We determine the purposes and means by which your personal data is processed. Any questions regarding data handling can be directed to our designated Data Protection Officer through the contact methods provided within your account settings.

2. Information We Collect

We collect personal data that is necessary for providing our services, complying with legal obligations, and improving user experience.

Directly provided by you:

• Full name, date of birth, and gender
• Email address, phone number, and residential address
• Payment and financial information, including bank details and transaction history
• Identity verification documents (passport, driving licence, utility bills)
• Account credentials and security information

Automatically collected:

• IP address, browser type, and device identifiers
• Log data, including pages visited, session duration, and clickstream data
• Cookies and tracking technologies (see Section 7)

From third parties:

• Identity verification agencies and fraud prevention services
• Payment processors and financial institutions
• Public databases used for regulatory compliance checks

3. How We Use Your Data

MagicWin processes personal data for clearly defined purposes, each supported by a lawful basis under UK GDPR.

• Account management: Creating and maintaining your registered account
• Service delivery: Processing deposits, withdrawals, and gameplay activity
• Legal compliance: Meeting obligations under the UK Gambling Commission licence, anti-money laundering (AML) regulations, and Know Your Customer (KYC) requirements
• Fraud prevention: Detecting, investigating, and preventing fraudulent transactions or prohibited activity
• Customer support: Responding to queries, complaints, and disputes
• Responsible gambling: Monitoring account behaviour to identify signs of problem gambling and enforcing self-exclusion measures
• Communications: Sending transactional notifications and service updates

We do not use your data for automated decision-making that produces significant legal effects without human review.

4. Legal Bases for Processing

Each processing activity rests on one or more of the following lawful bases:

• Contractual necessity – processing required to fulfil your account agreement
• Legal obligation – compliance with regulatory and statutory requirements
• Legitimate interests – fraud prevention and security, where these interests are not overridden by your rights
• Consent – for specific communications where consent is required and has been given

5. Data Sharing and Disclosure

MagicWin does not sell personal data to third parties. We share data only where necessary:

• With licensed payment service providers to process transactions
• With identity verification and credit reference agencies
• With regulatory bodies, including the UK Gambling Commission, when required
• With law enforcement or government authorities in response to lawful requests
• With technical service providers operating under strict data processing agreements

All third parties with whom we share data are contractually bound to protect it and process it only for specified purposes.

6. Data Retention

Personal data is retained for as long as necessary to fulfil the purposes outlined in this policy, including post-closure retention obligations. Under UK gambling regulations, account and transaction records are typically retained for a minimum of five years following account closure. Financial records linked to AML compliance may be held for up to seven years.

7. Cookies

MagicWin uses cookies and similar technologies to support website functionality, analyse traffic, and maintain session security. You can manage cookie preferences through your browser settings or via our cookie consent tool. Disabling certain cookies may affect the functionality of our services.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access – request a copy of the data we hold about you
• Rectification – request correction of inaccurate or incomplete data
• Erasure – request deletion of your data where no legal obligation requires retention
• Restriction – request that we limit how your data is used
• Portability – receive your data in a structured, machine-readable format
• Objection – object to processing based on legitimate interests

To exercise any of these rights, contact our Data Protection Officer through your registered account. We will respond within 30 days of receiving a verified request. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Security Measures

We apply technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include data encryption, secure server environments, access controls, and regular security assessments. No transmission over the internet is entirely risk-free; however, we maintain standards consistent with industry best practice.

10. Changes to This Policy

MagicWin may update this Privacy Policy to reflect changes in law, regulatory guidance, or our internal practices. Any material changes will be communicated to registered users via email or an in-account notification. The date at the top of this document reflects the most recent revision.