Our Privacy Policy, In Plain Terms

This policy explains what personal data we collect when you play at Megadice Casino, why we collect it, how long we keep it and the rights you hold over it. It applies to every page of megadice-aud.com.

What Data We Collect

We collect only the data needed to run your account, meet our licence obligations and keep the site safe. When you register, you give us your full name, date of birth, email address, phone number and residential address. Verification documents, such as a passport or driver's licence scan and a proof of address, are collected before your first withdrawal as part of KYC checks.

Beyond identity, we record transaction data for every deposit and withdrawal, including the PayID, card, e-wallet or crypto wallet used, amounts in AUD, and timestamps. Our servers log device and connection details: IP address, browser type, operating system and approximate location derived from your IP. We also track gameplay behaviour, including the games you open, bet sizes, session length and bonus usage, so we can monitor responsible-gambling indicators and prevent fraud.

• Identity data: name, date of birth, email, phone, address
• KYC documents: ID scan, proof of address, payment verification
• Transaction data: method, amount, currency, timestamp
• Technical data: IP address, device, browser, coarse location
• Gameplay data: bets, sessions, games played, bonus activity
• Marketing preferences: which channels and offers you consent to receive

How We Use Your Data

We process your data for seven core purposes. First, we create and maintain your player account, authenticate your logins and deliver the service you signed up for. Second, we run KYC and AML checks, which the Curaçao licence held by MegaDice N.V. makes mandatory before we release funds. Third, payment processors need your transaction details to move money to and from your account.

Fourth, we use gameplay and device data to detect fraud, bonus abuse, multi-accounting and other prohibited activity. Fifth, we monitor play patterns against responsible-gambling thresholds, which lets us trigger session reminders and offer deposit or loss limits. Sixth, we send marketing messages only where you have consented, and we honour every opt-out promptly. Seventh, we meet legal and regulatory obligations, including tax and audit reporting, record-keeping and responding to lawful requests from authorities.

• Account creation, authentication and account management
• KYC/AML verification before withdrawals
• Payment processing and reconciliation
• Fraud prevention and bonus-abuse detection
• Responsible-gambling monitoring and interventions
• Marketing with your consent
• Compliance with legal and licence obligations

Why Processing Is Lawful

Contract

We process identity, account and transaction data to perform the contract you enter when you register. Without it we cannot open your account, take deposits or pay winnings, so this processing is non-negotiable for play.

Legal obligation

KYC documents, transaction records and suspicious-activity reports are processed because gaming and anti-money-laundering law requires it. These obligations cannot be waived, even if you ask us to delete your account.

Legitimate interest

Fraud detection, security monitoring, aggregated service analytics and dispute resolution rest on our legitimate interest in running a safe, viable platform. This interest never overrides your rights, and you may object to this processing through [email protected].

Consent

Marketing emails, SMS and optional cookies are processed only with your consent. You can withdraw that consent at any time from your account settings or by contacting us, without affecting your access to the games.

How Long We Keep It

We keep each category of data only as long as the purpose requires. Transaction and KYC records are held for a minimum of five years after account closure, because gaming regulations demand it. After the retention period ends, data is securely deleted or irreversibly anonymised.

Account data survives while your account is active. If you close your account, we retain the minimum records needed for audit for the statutory period, then erase the rest. Marketing consent records are kept until you withdraw consent, plus a short window to prove the opt-out was actioned. Support chat logs are kept for two years to handle disputes.

Who We Share It With

We never sell your personal data. We share it only with processors and authorities who need it to deliver a specific function, and every processor works under a written data-processing contract that restricts further use.

Payment processors receive the details needed to complete your deposits and withdrawals. KYC/AML verification providers receive ID documents to confirm you are who you claim to be. Our Curaçao licence requires us to share records with the regulator, auditors and law enforcement upon lawful request. Analytics and hosting providers receive aggregated or pseudonymised data that supports site performance. Game providers receive your in-game username and bet outcomes, but not your identity or payment details.

• Payment processors and acquiring banks
• KYC/AML verification services
• The Curaçao gaming regulator and auditors
• Law enforcement, on lawful request
• Hosting, analytics and email-delivery providers
• Game studios, limited to pseudonymised player IDs

Your Rights Over Your Data

You control your personal data, and we respond to every valid request within 30 days. Requests are free, though we may ask for ID confirmation so we do not hand data to the wrong person. Send any request to [email protected] and we will tell you what we have done, or why a specific request cannot be met, in writing.

If you believe we have mishandled your data, you can complain to the relevant data protection authority. Australian players can also raise gambling-privacy concerns with the OAIC, and we will cooperate fully with any regulator that contacts us.

• Access: get a copy of the data we hold about you
• Rectification: fix inaccurate or incomplete records
• Erasure: delete data we no longer have grounds to keep
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interest
• Withdraw consent: stop marketing at any time
• Complaint: escalate to a data protection authority

Cookies and Tracking Tools

We use a small set of cookies to keep you logged in, remember your preferences and measure anonymous site traffic. Session cookies are essential and cannot be switched off; optional analytics and marketing cookies load only after you accept them in the consent banner. Our dedicated Cookies Policy on this site lists every cookie, its purpose and its lifetime, and your browser settings let you block or delete cookies at any time.

How We Protect Your Data

All traffic between your device and our servers runs over TLS encryption, and payment and KYC data are encrypted at rest. Access to personal data is role-based: only staff who need it for support, payments or compliance can see it, and every access is logged and reviewable. We back up critical systems, test them regularly and patch vulnerabilities on a set schedule.

If a data breach occurs that risks your rights, we will notify the relevant regulator without undue delay and inform affected players directly, including clear advice on what to do next. Security incidents can be reported to us at any time via [email protected], which is staffed 24/7.

Contact Our Data Team

Questions about this policy, a data request or how we process your information go to our Data Protection Officer at [email protected]. We aim to acknowledge every message within two business days and resolve simple requests within a week. Megadice Casino updates this policy whenever our practices change, and the revision date at the top of this page tells you which version applies to you. If anything here reads unclearly, tell us, and we will rewrite it in plainer English.

Frequently Asked Questions

Does Megadice Casino sell my personal data to advertisers?

No. We never sell your data. It is shared only with processors such as payment and KYC providers, and only to deliver the specific function they perform for us.

Can I delete my account and all my data?

You can close your account at any time. KYC and transaction records are retained for a regulatory minimum of five years, after which they are securely deleted or anonymised.

Why do you need my ID before a withdrawal?

Our Curaçao licence requires KYC verification before your first withdrawal. We confirm your identity, address and payment method, then store the documents under encryption for the statutory retention period.

How do I stop marketing emails?

Withdraw consent in your account settings or click the unsubscribe link in any message. Opt-outs are actioned promptly and kept on record so we can prove the change.

Who do I complain to about my data?

Contact [email protected] first and we will investigate. If you are unsatisfied with our response, you may complain to the relevant data protection authority, including the OAIC in Australia.