Mafia Casino Data Protection & Privacy Explained

How We Handle Personal Data at Mafia Casino

Anyone looking into Mafia Casino Australia privacy practices should know that we act, together with our direct and indirect subsidiaries, as the controller of the personal data we process, though no separate legal entity is named in our documentation. At registration we collect email address, date of birth, country, phone number, gender, full name, social security number, zip code, username, and the IP address and location data captured automatically when an account is opened. Beyond registration, we automatically gather device information such as IP address, operating system version and device identifiers, together with logs and usage information covering content viewed, ad clicks, searches, social sharing, session dates and times, pages viewed, links followed and time spent on the site.

Where Additional Data Comes From

We may also supplement this with information from public and government databases, commercially available databases, financial and credit institutions, fraud prevention agencies and public authorities, as well as data inferred from gaming behaviour or made public through linked Facebook or Google accounts. This supports the four lawful bases on which we process data: performance of a contract, legal obligation, legitimate interest, and consent.

Your Data Protection Rights

Under our privacy framework, every player can exercise the following rights over their personal data, each tied to a specific action we are able to carry out on request.

• Access - request a copy of the personal data we hold about the account.
• Rectification - ask us to correct inaccurate or outdated registration details.
• Erasure - request deletion of personal data once it is no longer required.
• Restriction of processing - limit how particular data is used while a matter is resolved.
• Data portability - obtain data in a format that can be transferred elsewhere.
• Objection - object to processing carried out on the basis of legitimate interest.
• Withdrawal of consent - withdraw consent previously given for marketing or personalisation.
• Lodging a complaint - raise a complaint with a supervisory authority in the EU member state of residence, place of work, or place of the alleged infringement.

These rights sit alongside the account management options described on our sign-in and account access page, since several requests begin from the same account credentials used to log in.

Who Receives Your Information and How Long We Keep It

Personal data may be shared with internal authorised employees, brands within the same group of subsidiaries, contractors, agents, joint controllers and affiliates, as well as payment providers and financial institutions, who receive details such as name, date of birth, email, address and KYC documents strictly for their own anti-money-laundering compliance when a transaction is processed through our deposit and withdrawal methods. We also work with customer support, email and SMS delivery providers, cloud hosting services, marketing partners, fraud prevention agencies, game providers, data aggregators, and law enforcement or regulatory authorities where required.

If a complaint, review or query is submitted to a third-party platform such as a casino review site, gambling forum or dispute resolution body, we may respond directly on that platform and disclose only the personal data necessary to identify the account and answer the query, on the basis of our legitimate interest in protecting our business reputation. Data is retained for the duration of the account and to fulfil the purposes described above, and longer where anti-money-laundering or other regulatory obligations require it; once the account is closed and no legal or business need remains, data is deleted or anonymised. Access to games is offered only through a protected network using technology for encrypting sensitive data, administrative, technical and physical safeguards are applied, and international transfers outside the EU/EEA rely on adequacy decisions, European Commission Standard Contractual Clauses or other recognised safeguards, though absolute security is never guaranteed. A Cookie Notice forms a binding part of our Terms and governs how cookies are used across the site, which we also outline in our general overview of what we offer.