Privacy Policy

Version: 1.0  |  Last Updated: 31 July 2026

This Privacy Policy (“Policy”) explains how monsterwin-review.com (“Website”, “Platform”, “we”, “us”, or “our”) collects, processes, stores, and shares personal data relating to visitors and registered users (“you” or “your”) of the Platform.

We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner, in accordance with the European Union General Data Protection Regulation (“GDPR”) (EU) 2016/679, applicable national data protection legislation, and other relevant international privacy standards.

This Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy. By using the Platform or registering an Account, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, please discontinue use of the Platform.

1. Introduction

1.1. Who We Are

monsterwin-review.com is an online gaming platform providing casino games, promotional services, and related content to registered users. We act as the data controller for personal data collected through the Platform, meaning we determine the purposes and means of processing your personal data.

1.2. Scope of This Policy

This Policy applies to all personal data collected through:

• The Website monsterwin-review.com and any related subdomains or mobile-optimised versions;
• Account registration and management processes;
• Customer support interactions;
• Marketing and promotional communications (where consented);
• Payment processing and financial transactions.

2. Data We Collect

2.1. Information You Provide Directly

We collect personal data that you actively provide to us, including:

• Identity Data: Full name, date of birth, gender, nationality;
• Contact Data: Email address, telephone number, residential address;
• Account Data: Username, password (stored in encrypted form), Account preferences;
• Financial Data: Payment method details, deposit and withdrawal history, transaction records;
• Verification Data: Copies of identification documents (passport, driving licence, national ID), proof of address, source of funds documentation;
• Communications Data: Records of correspondence with our customer support and compliance teams.

2.2. Information Collected Automatically

When you access and use the Platform, we automatically collect certain technical and behavioural data, including:

• Device and Technical Data: IP address, browser type and version, operating system, device identifiers;
• Usage Data: Pages visited, time spent on the Platform, clicks, game sessions, betting history, login frequency;
• Location Data: Approximate geolocation derived from your IP address;
• Cookies and Tracking Data: Information collected via cookies, web beacons, and similar tracking technologies (see Section 6).

2.3. Information Received from Third Parties

We may receive personal data about you from third-party sources, including:

• Identity verification and KYC service providers;
• Payment processing partners;
• Fraud prevention and anti-money laundering (AML) databases;
• Responsible gaming registries and self-exclusion schemes.

3. How We Use Your Data

3.1. Purposes of Processing

We process your personal data for the following purposes:

• Account Registration and Management: Creating and maintaining your Player Account, authenticating your identity, and providing access to the Platform's services;
• Contract Performance: Processing deposits and withdrawals, settling game results, administering Bonuses and promotions;
• Identity Verification (KYC): Verifying your age, identity, and address in compliance with our legal obligations;
• Anti-Money Laundering (AML) and Fraud Prevention: Monitoring transactions and activity patterns to detect, investigate, and prevent fraud, money laundering, and other financial crimes;
• Customer Support: Responding to your queries, complaints, and requests;
• Marketing and Promotions: Sending you promotional communications, personalised offers, and updates, where you have provided your consent or where we have a legitimate interest;
• Responsible Gaming: Monitoring gambling behaviour to identify potential signs of problem gambling and applying responsible gaming tools where appropriate;
• Platform Improvement: Analysing usage patterns to improve the Platform’s functionality, content, and user experience;
• Legal Compliance: Fulfilling our legal and regulatory obligations, including responding to lawful requests from competent authorities.

4. Legal Bases for Processing

4.1. Legal Bases under GDPR

We rely on the following legal bases under Article 6 of the GDPR to process your personal data:

4.2. Special Category Data

Where we process special categories of personal data (such as health-related data in the context of responsible gaming assessments), we do so on the basis of substantial public interest or with your explicit consent, as required by Article 9 GDPR.

5. Data Sharing & Third Parties

5.1. Third-Party Service Providers

We share your personal data with carefully selected third-party service providers who assist us in delivering the Platform’s services. These include:

• Payment Processors: To facilitate deposits and withdrawals;
• KYC / Identity Verification Providers: To verify your identity and comply with regulatory requirements;
• Game Software Providers: Who host and operate the Games available on the Platform;
• Fraud Prevention and AML Providers: To detect and prevent financial crime;
• Cloud and IT Infrastructure Providers: Who host and maintain our Platform infrastructure;
• Marketing and Analytics Providers: To deliver targeted communications and analyse Platform performance;
• Customer Support Platforms: To facilitate the management of Player inquiries.

All third-party processors are contractually bound to process your data only in accordance with our instructions and applicable data protection law.

5.2. Legal and Regulatory Disclosures

We may be required to disclose your personal data to competent authorities, regulators, law enforcement agencies, or courts where we are under a legal obligation to do so. Such disclosures will be made only to the extent strictly necessary and in accordance with applicable law.

5.3. Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the relevant third party as part of that transaction, subject to equivalent data protection commitments.

5.4. No Sale of Personal Data

We do not sell, rent, or otherwise commercially exploit your personal data to third parties for their own marketing purposes.

6. Cookies & Tracking Technologies

6.1. What Are Cookies

Cookies are small text files placed on your device when you visit the Platform. We also use similar technologies, including web beacons, pixels, and local storage objects. These technologies help us operate the Platform, understand user behaviour, and deliver relevant content.

6.2. Types of Cookies We Use

6.3. Managing Cookies

You can manage or disable cookies through your browser settings or via our cookie consent management tool available on the Platform. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are essential to the operation of the Website.

7. Data Security

7.1. Technical and Organisational Measures

We implement appropriate technical and organisational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

• Transport Layer Security (TLS/SSL) encryption for data transmitted between your device and the Platform;
• Encryption of sensitive data at rest (including financial and identity data);
• Access controls and role-based permissions limiting data access to authorised personnel only;
• Regular security audits, penetration testing, and vulnerability assessments;
• Staff training on data protection and security practices;
• PCI-DSS compliant payment processing infrastructure.

7.2. Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with our obligations under the GDPR. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

8. Data Retention

8.1. Retention Periods

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Where retention beyond these periods is required by law, regulation, or for the purpose of legal proceedings, data will be retained accordingly.

9. Your Rights

9.1. Rights Under GDPR

Subject to applicable law, you have the following rights in relation to your personal data:

• Right of Access (Art. 15): The right to obtain a copy of the personal data we hold about you;
• Right to Rectification (Art. 16): The right to have inaccurate or incomplete personal data corrected;
• Right to Erasure (Art. 17): The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal obligations;
• Right to Restriction of Processing (Art. 18): The right to request that we restrict the processing of your data in certain circumstances;
• Right to Data Portability (Art. 20): The right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller;
• Right to Object (Art. 21): The right to object to processing based on our legitimate interests or for direct marketing purposes;
• Right to Withdraw Consent (Art. 7(3)): Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

9.2. How to Exercise Your Rights

To exercise any of the above rights, please contact our Data Protection Officer at: [email protected]. We will respond to verifiable requests within 30 days of receipt. In cases of complexity or where numerous requests have been received simultaneously, this period may be extended by a further 60 days, with notification to you.

9.3. Right to Lodge a Complaint

If you believe that our processing of your personal data is not in compliance with applicable data protection law, you have the right to lodge a complaint with your national supervisory authority. In Greece, the competent authority is the Hellenic Data Protection Authority (HDPA) (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), accessible at www.dpa.gr.

10. International Data Transfers

10.1. Transfers Outside the EEA

Some of our third-party service providers operate outside the European Economic Area (EEA). Where personal data is transferred to a country that has not been determined by the European Commission to provide an adequate level of data protection, we ensure that appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Binding Corporate Rules (BCRs) where applicable;
• Adequacy decisions recognised under applicable GDPR provisions.

You may request further information about international transfers and the safeguards in place by contacting us at [email protected].

11. Minors

11.1. Age Restriction

The Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been provided by a person under the applicable minimum age, we will take immediate steps to delete that data and close the associated Account.

11.2. Parental Responsibility

Parents and guardians are responsible for supervising the online activities of minors in their care. We encourage the use of parental control tools and filtering software to restrict access to gambling-related websites. Further guidance is available on our Responsible Gaming Page.

12. Changes to This Policy

12.1. Updates

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The “Last Updated” date at the top of this Policy will be revised accordingly. Where changes are material, we will notify registered Players via email or a prominent notice on the Platform.

12.2. Continued Use

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the revised Policy. If you do not accept the changes, you must discontinue use of the Platform and may request Account closure.

13. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us as follows:

• General Data Inquiries & Subject Access Requests: [email protected]
• Data Protection Officer (DPO): [email protected]
• General Customer Support: [email protected]

We are committed to resolving all data-related inquiries promptly and in accordance with applicable data protection legislation.