Privacy Policy
Introduction
Megaways Casino is operated by Skill On Net Limited (Reg. No. 14264775), acting as processing agent for Skill On Net Ltd (Malta, Reg. No. C50024).
Office 1/5297, Level G, Quantum House,
75 Abate Rigord Street, TA'XBIEX, XBX 1120, Malta
This policy explains what personal data we collect, why we collect it, how long we keep it, and what rights you have. All our staff undergo regular data privacy training and are bound by confidentiality obligations. Our services are not directed at minors and we do not knowingly collect data from anyone under 18.
Questions? Contact our Data Protection Officer: dpo@megawayscasino.com
GamProtect (Single Customer View)
We participate in GamProtect — an industry-wide scheme that protects high-risk customers in the UK. If you are identified as high-risk, limited data is shared with other participating gambling operators to enable timely safer gambling interventions.
We act as the Controller for data we submit. Tutelar (system operator) acts as the Data Processor.
Legitimate interests · Substantial public interest · Safeguarding of children and individuals at risk
To appeal an account closure or your inclusion in GamProtect, follow the redress process at gamprotect.co.uk/privacy or contact us at playerprotection@skillonnet.com
Data We Collect
| Category | Examples | Source |
|---|---|---|
| Personal | Name, email, address, date of birth, phone, payment details, government ID, occupation & salary | Provided by you at registration or during use |
| Device & Activity | IP address, geolocation, browser type, OS, pages viewed, clicks, game searches | Automatically collected |
| Sensitive | Nationality (for KYC compliance only) | Provided by you |
| Non-Personal | Aggregated usage stats, browser & OS type, access times | Automatically collected |
| GamProtect SCV | Name, DOB, postcode, email, phone, unique customer ID, at-risk status flag | Shared with SCV system only — no gambling history included |
How We Collect Your Data
Registration, deposits, customer service chats, social media comments, telephone calls (with consent).
IP address, hardware model, OS version, app version, advertising ID (with consent), geolocation.
AML/KYC verification agencies, self-exclusion registers, social media for identity verification, business transfers.
How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Account setup & service delivery | Contract |
| Safer Gambling & Anti-Money Laundering compliance | Legal Obligation |
| Identity & age verification | Legal Obligation |
| Winners' announcements (username only) | Consent |
| Marketing communications | Consent |
| Research & analytics to improve services | Legitimate Interest |
| Customer support & troubleshooting | Contract |
| Legal investigations & fraud prevention | Legal Obligation |
| GamProtect SCV participation | Legitimate Interest + Public Interest |
| Business sales or transfers | Legitimate Interest |
How Long We Keep Your Data
We retain personal data only as long as needed to fulfil the original purpose, meet legal and regulatory obligations (gambling regulations, AML, tax, payment processing), or resolve disputes. Once no longer required, data is securely deleted or anonymised.
GamProtect SCV data may be retained for different periods than standard account data, based on the harm-prevention purpose of the scheme — including "orphan" data where the original operator is no longer available.
Your Rights
Transparency about how your data is collected and used — this policy fulfils that right.
Request a copy of the personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Request deletion of your data where it is no longer needed or consent has been withdrawn (subject to legal exceptions).
Receive your data in a structured, machine-readable format and request it be transferred to another controller.
Ask us to limit how we use your data in certain circumstances.
Object to processing based on legitimate interest or for direct marketing — the latter is absolute.
Rights apply in relation to profiling and automated decisions that significantly affect you.
To exercise any right: dpo@megawayscasino.com
For GamProtect-specific requests: playerprotection@skillonnet.com
International Data Transfers
We will only transfer your data outside the UK/EEA where appropriate safeguards are in place, including:
- European Commission adequacy decisions
- Standard Contractual Clauses (SCCs)
- UK Addendum to EU SCCs
- Binding Corporate Rules or other approved mechanisms
Where transfers occur in connection with the GamProtect SCV system (operated by Tutelar), we ensure UK GDPR-compliant safeguards are in place for any processing or storage outside the UK/EEA.
Cookies
Cookies are small text files stored in your browser that help us recognise your device, keep parts of the site working correctly, and personalise your experience.
| Type | Purpose | Required? |
|---|---|---|
| Strictly Necessary | Core site functionality, security, registration | Yes |
| Performance | Anonymous usage analytics — page visits, errors, interest areas | Consent |
| Functionality | Remembers your preferences (language, region, display settings) | Consent |
| Targeting / Tracking | Tailors advertising based on areas of the site you visit | Consent |
You can manage cookie preferences via your browser settings or by clicking the cookie preferences button at the top right of this page. Blocking strictly necessary cookies may impair site functionality. We use Google Analytics for behavioural analytics — you can opt out at tools.google.com/dlpage/gaoptout.
Security
We take the security of your data seriously. Our measures include:
TLS 1.2 encryption, DLP systems, antimalware, access restrictions. All transactions are encrypted end-to-end.
Role-based access, confidentiality obligations, regular staff training on data privacy.
Established breach notification procedures to inform you and relevant regulators within required timeframes.
Complaints & Changes
Submit complaints in writing with full details to dpo@megawayscasino.com. We may ask for ID verification before processing your request.
UK and European users have the right to complain to a supervisory authority. For the UK: ico.org.uk