Privacy Policy at Mrpacho Casino
What Data We Collect
Categories of personal data
We collect only the data we need to run your account, meet our licensing obligations and keep the site safe. When you register, deposit, play or contact support, the following categories come into our hands.
- Identity data: full name, date of birth, email address, phone number and residential address.
- Verification documents: passport, driver licence or other government ID, proof of address and proof of payment method, collected during KYC checks before your first withdrawal.
- Transaction data: deposits, withdrawals, bonuses claimed, wagering history and wallet balances across AUD, EUR, USD, CAD, NZD, BTC, ETH and USDT.
- Technical data: IP address, device type, operating system, browser, language and approximate location derived from your IP.
- Gameplay behaviour: games played, session times, bet sizes, win and loss patterns and any limits you set on your account.
- Marketing preferences: which channels you agreed to hear from us on, and any opt-outs you record.
How We Use Your Data
Purposes of processing
Every use we make of your data maps back to a specific purpose. We do not repurpose data collected for compliance in order to sell you bonuses, and we never sell personal data to anyone.
- Creating and administering your player account, including login, profile and wallet functions.
- Carrying out KYC and anti-money laundering checks required under our Curaçao eGaming licence (8048/JAZ2023-166).
- Processing deposits and withdrawals through methods such as PayID, Neosurf, Visa, Skrill, Jeton and cryptocurrency.
- Preventing fraud, bonus abuse, multi-accounting and underage gambling.
- Monitoring play for signs of problem gambling and enforcing the deposit limits, loss limits and self-exclusion tools we offer, alongside Gambling Help Online (1800 858 858).
- Sending you marketing messages where you have consented, and honouring your opt-outs.
- Meeting legal, regulatory and audit obligations.
The Bases We Rely On
Contract. We process your data to perform the agreement between you and us. Without your identity and payment details we cannot open an account, settle bets or pay out winnings, so this basis covers account administration, transactions and gameplay records.
Legal obligation. Curaçao eGaming and anti-money laundering law require us to verify your identity, monitor transactions and keep records for set periods. Where processing flows directly from these duties, you cannot opt out while you hold an account with us.
Legitimate interest. We rely on this basis to keep the site secure, detect fraud and multi-accounting, analyse aggregated play patterns to improve our games lobby, and respond to disputes. We weigh our interests against your rights and only process what is necessary for these goals.
Consent. Marketing emails, SMS and personalised offers run on your consent. You can withdraw it at any time through your account settings or the unsubscribe link in any message, and we will stop that processing without affecting the rest of your account.
How Long We Keep Data
Retention by category
We hold each category of data only as long as the purpose requires. Gambling regulation forces longer retention on some records than you might expect, so we set these periods out plainly in the table below.
| Data category | Retention period |
|---|---|
| Identity and account data | For the life of your account, then 5 years after closure |
| KYC verification documents | 5 years after account closure, as required by AML rules |
| Transaction and wagering records | At least 5 years, per regulatory record-keeping duties |
| Gameplay and session logs | Up to 5 years for audit and dispute resolution |
| Technical and device logs | Up to 12 months for security and fraud analysis |
| Marketing preferences and consent records | Until you withdraw consent, plus 3 years for proof of consent |
| Support correspondence | Up to 3 years after your last message |
Who We Share Data With
Categories of recipients
We share your data with a limited set of processors and authorities, each bound by contract to use it only for the service they provide to us. We never sell your personal data.
- Payment processors and e-wallet providers, to move your deposits and withdrawals.
- KYC and AML verification providers, to confirm your identity and screen transactions.
- Game and platform suppliers, who receive only the technical data needed to load games and settle outcomes.
- Regulators and law enforcement, including Curaçao eGaming, when we are legally compelled to disclose.
- Analytics and IT service providers, under strict data processing agreements.
- Professional advisers such as auditors and lawyers, where needed for compliance.
Your Rights and Choices
Exercising your rights
You control your data, and we answer every request within 30 days. Email our data protection officer at [email protected] or reach the team through live chat, which runs 24/7, or at [email protected].
- Access: get a copy of the personal data we hold about you.
- Rectification: correct data that is wrong or out of date.
- Erasure: ask us to delete data we no longer need, subject to regulatory retention duties.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interest, including profiling.
- Withdraw consent: stop marketing at any time via account settings or unsubscribe links.
- Complain: raise concerns with the Office of the Australian Information Commissioner (OAIC) or your local data protection authority.
Cookies and Tracking
We use cookies and similar technologies to keep you logged in, remember your preferences, secure sessions and understand how the site is used. The full list of cookies, their purposes and their lifespans, along with the controls available in your browser, is set out on our dedicated Cookies Policy page.
How We Protect Your Data
Safeguards and breach response
All traffic between your device and our servers is encrypted with TLS, and payment and KYC documents sit in encrypted storage with access restricted to staff who need it for their role. We run role-based access controls, mandatory two-factor authentication for staff accounts and regular security reviews of our systems.
If a data breach occurs that risks your rights, we will notify the relevant supervisory authority without undue delay and, where the risk to you is high, inform you directly with clear steps on what to do next.
Frequently Asked Questions
Can I delete my Mrpacho Casino account and all my data?
Yes. Contact support or email [email protected] and we will close your account. Identity, KYC and transaction records must be kept for at least 5 years after closure under AML and licensing rules, but everything else is deleted on request.
Do you share my data with game providers?
Game suppliers receive only the technical data required to load games and settle outcomes, such as a session token and bet identifiers. They never see your full KYC documents or payment details.
How do I stop marketing messages?
Open your account settings and switch off the channels you no longer want, or click the unsubscribe link in any message. We stop marketing immediately, though a record of your opt-out is kept to prove we honoured it.