Mafia Privacy and Data Protection Policy
Your personal data is handled under clearly stated lawful bases, from contract performance to consent. Playing Mafia Casino online means knowing exactly what we collect, including your date of birth and IP address, and why.
What Personal Data We Collect
Playing Mafia Casino online starts with a registration form, and the information gathered there forms the basis of every account we hold. We collect this data directly from you, automatically through your device, and in some cases from external sources, so you know exactly what sits behind your profile.
- Registration data: email address, date of birth, country, phone number, gender, full name, social security number, zip code and username
- Automatically captured on registration: IP address and location data
- Device information: IP address, operating system version and device identifiers
- Usage logs: content viewed, ad clicks, searches, social sharing, session dates and times, pages viewed, links followed and time spent
- General location information
- Third-party sources: public and government databases, commercially available databases, financial and credit institutions, fraud prevention agencies, and personal data made public through linked Facebook or Google accounts
Lawful Bases and How We Use Your Information
We process personal data only where a lawful basis applies: the conclusion and performance of our contract with you, a legal obligation, our legitimate interest, or your consent. Each basis covers a distinct set of activities, and we never blend them to justify processing beyond what the basis permits.
Legitimate interest and consent
Under legitimate interest we use data for legal claims and litigation defence, IT and system security, managing the business relationship, analytics and research, customer segmentation for risk management and responsible gaming, analysing gaming behaviour with machine learning to recommend games and features, and detecting fraud or abnormal patterns. Consent-based activities include direct marketing by email, SMS, phone or app notifications, customised offers based on gaming history, targeted advertising, and administering competitions, tournaments and loyalty schemes.
Where a complaint, review or query is submitted to a third-party platform such as a casino review site or gambling forum, we may respond directly to that platform and disclose personal data limited to what is necessary to identify the account and respond, on the basis of our legitimate interest in protecting our business reputation. Administrative, technical and physical safeguards are applied to protect your data, though absolute security is never guaranteed.
Who Receives Your Data and Your Rights
Personal data is shared only with parties that need it to deliver our service, process payments or meet our regulatory obligations. The categories below set out who may receive it and what you can do about your own record.
| Recipient or Right | Detail |
|---|---|
| Payment providers | First name, last name, date of birth, email, address, zip, city, country, phone number, alias and KYC documents for their own AML compliance |
| Other recipients | Internal staff, group brands and affiliates, service providers, marketing partners, fraud prevention agencies, game providers, analytics providers, and law enforcement or regulatory authorities |
| International transfers | Processed outside the EU/EEA using adequacy decisions, EU Standard Contractual Clauses or other recognised safeguards |
| Your rights | Access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent, and lodging a complaint with a supervisory authority |
These rights can be exercised at any time, and the same request process applies whether you reach us through your account sign-in or by contacting our support team directly.
How Long We Keep Your Information
We retain personal data for as long as your account remains open and for as long as needed to fulfil the purposes described above. Where anti-money-laundering rules or other regulatory obligations require a longer period, that period takes precedence over our standard retention practice.
Once an account is closed and no legal or business need remains, the associated data is deleted or anonymised. This applies across the account lifecycle, from the details recorded at registration through to the payment and transaction records tied to activity on deposits and withdrawals, which may need to be kept longer for compliance checks. A Cookie Notice forms part of our binding terms and governs how cookies are used alongside this policy.
Updated October 8, 2026