Skip to the main content

18+ only. Gambling should stay entertainment, never income. Free, confidential help in the UK: GamCare on 0808 8020 133, or self-exclude through GAMSTOP. See our Responsible Gaming page.

Crypto-Friendly Play

Privacy Policy

MyStake Casino collects personal information in order to run a regulated gaming account, meet anti-money-laundering duties and keep your funds secure. This

Last reviewed

MyStake Casino collects personal information in order to run a regulated gaming account, meet anti-money-laundering duties and keep your funds secure. This notice describes what is gathered, the legal basis for each use, and the choices that remain yours.

Who controls your information

The data controller is the licensed entity operating MyStake Casino under Curaçao Gaming Authority licence OGL/2024/250/0115. Correspondence about this notice should be addressed to our Data Protection Officer using the contact route given below.

Because a portion of our player base is located in the United Kingdom, we apply UK GDPR standards to those accounts, including the lawful-basis framework, the accountability principle and the individual rights described further down this page.

Categories of information gathered

Registration details: full name, date of birth, residential address, email address, telephone number and preferred currency. These fields are mandatory because age and identity verification cannot proceed without them.

Verification records: a photograph of a government-issued document, a recent proof of address, and where a payment method requires it, a partially masked card image or bank statement extract. Documents are stored in encrypted form and are not visible to general support staff.

Financial and gameplay records: deposits, withdrawals, bonus credits, wagers placed, sessions opened and limits applied. Retaining this history is a licensing requirement, not a commercial preference.

Technical signals: IP address, device fingerprint, browser version, operating system, referral source and interaction timestamps, gathered through server logs and cookies as your session progresses.

Why we hold it and on what basis

Contractual necessity covers account creation, payment processing, bonus administration and customer support. Without this processing there is simply no account to operate.

Legal obligation covers age verification, source-of-funds enquiries, suspicious-transaction reporting and the retention schedules imposed on licensed operators.

Legitimate interest covers fraud prevention, bonus-abuse detection, collusion monitoring on multiplayer tables, network security and aggregate product analytics that never single out an individual.

Consent covers optional channels only — newsletters, SMS offers and personalised promotional tiles. Withdrawing consent is a single click in your communication preferences and never affects the standing of your account.

Sharing, transfers and retention

Information reaches third parties only where a defined purpose requires it: payment institutions completing a transaction, identity-verification bureaux confirming a document, game studios supplying the titles you open, and cloud infrastructure providers hosting the platform. Each operates under a written processing agreement.

Disclosure to a regulator, a court or a law-enforcement body occurs where a valid legal instrument compels it. We do not sell personal information to advertisers or data brokers in any circumstance.

Where information moves outside the United Kingdom or the European Economic Area, transfers rely on adequacy decisions or on standard contractual clauses supported by a transfer risk assessment.

Account and transaction records are held for five years after the closing of an account, reflecting anti-money-laundering law. Marketing consents lapse after twenty-four months of inactivity, and unverified registrations abandoned mid-process are erased within ninety days.

Your rights and how to exercise them

You may request a copy of your data, ask that inaccuracies be corrected, object to processing founded on legitimate interest, request portability in a machine-readable format, or ask for erasure where no retention duty overrides the request.

A written request receives a substantive answer within one calendar month. Complex or multiple requests may be extended by a further two months, and you will be told promptly if that applies.

Records connected to a self-exclusion are deliberately preserved even after a deletion request, because removing them would allow a new registration to bypass the protection you asked for.

If our response does not satisfy you, UK residents may complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

  • Data Protection Officer, MyStake Casino — [email protected]
  • Account and verification queries — live chat inside your MyStake Casino profile, staffed around the clock
  • Information Commissioner's Office (UK supervisory authority) — ico.org.uk, 0303 123 1113

This notice describes our practices at the date of last revision and may be amended as products, providers or regulatory duties change. Material amendments are notified by email and announced on the site before they take effect.