Privacy policy — Mr Punter Casino

Last updated: 22 July 2026 · This policy describes how Mondero Enterprises Ltd (Mr Punter) collects, uses, stores and protects the personal data of its Users, in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the specific obligations of the Anjouan Gaming Board.

1. Data controller

Mondero Enterprises Ltd, registered under the Anjouan Gaming Board licence. Registered as a data controller with the relevant data protection authority.

Data Protection Officer (DPO) contact: privacy@mr-punter-uk.com

2. Data we collect

2.1 Identification data (mandatory)

• Full name, as shown on your photo ID
• Date of birth
• Photo ID number and image (driving licence or passport)
• Selfie with the ID (KYC)
• Declared address + proof of address

2.2 Contact data

• Email address
• UK mobile number

2.3 Financial data

• Payment method used (last 4 digits of card, partial account details, associated PayPal account, crypto wallet address)
• Deposit and withdrawal history

2.4 Usage data

• Betting history and game results
• Session length and frequency
• IP, device type, operating system, browser
• Approximate geographic location (via IP)

2.5 Derived data

• Problem gambling risk profile (calculated automatically to alert on potentially harmful patterns)
• VIP level and accumulated points

3. Legal basis for processing

• Performance of the contract — necessary to operate the account and process wagers
• Legal obligation — KYC, anti-money-laundering reporting to the Anjouan Gaming Board and equivalent bodies
• Consent — for sending marketing communications (revocable at any time from Account > Preferences)
• Legitimate interest — fraud detection, duplicate accounts, bonus abuse

4. How we use the data

• Operate your account, process deposits and withdrawals
• Verify identity and eligibility (KYC)
• Prevent fraud and safeguard game integrity
• Meet regulatory obligations (Anjouan Gaming Board, AML)
• Send communications about bonuses and promotions (opt-in, can be disabled)
• Offer responsible gambling tools based on your usage pattern
• Respond to support enquiries

5. Data sharing with third parties

We do not sell data to third parties. We share information only with:

• Payment processors (Visa/Mastercard, PayPal, Skrill, Neteller, bank partners, crypto processors) — to settle deposits and withdrawals. Shared data is the minimum necessary (name, amount, transaction reference).
• Game providers (Pragmatic Play, Evoplay, InOut Games, Evolution, etc.) — to operate their games inside our platform. Providers receive your session ID and wager amount, not identifying personal data.
• Regulatory authorities — Anjouan Gaming Board, competent AML/tax authorities, courts — when required by law or judicial order.
• KYC providers (document verification) — under a strict confidentiality agreement.

6. International transfer

Some game providers and technical service providers are located outside the UK (Malta, EU, United States). When we transfer data abroad, we require the destination to offer an adequate level of protection under UK GDPR — using Standard Contractual Clauses or adequacy decisions where required.

7. Cookies and similar technologies

We use cookies for essential functionality (session, bet slip, language preferences) and for aggregated analytics (anonymised Google Analytics). We do not use third-party advertising cookies. You can manage cookies from your browser settings, but disabling essential cookies prevents normal use of the site.

8. Retention period

• Active account data: whilst the account is open + 10 years after closure (regulatory obligation of the Anjouan Gaming Board and AML rules)
• Betting and transaction history: 10 years from the operation
• KYC: 10 years from account closure
• Marketing communications: until consent is revoked + 6 additional months
• Self-exclusion requests: 10 years (blocking re-registration)

9. Your rights as a data subject

Under UK GDPR you have the following rights, exercisable free of charge:

• Access — request a copy of all personal data we hold about you
• Rectification — correct inaccurate or outdated data
• Erasure — request the deletion of data (limited by regulatory retention obligations)
• Restriction of processing — limit how we use your data in specific circumstances
• Object — object to processing for marketing purposes
• Portability — receive your data in a structured format and transfer it to another operator

To exercise these rights, write from your registered email to privacy@mr-punter-uk.com — response within a maximum of 30 days. You also have the right to complain to the UK's Information Commissioner's Office (ICO): ico.org.uk.

10. Security

We apply technical and organisational measures to protect data: TLS 1.3 encryption in transit, AES-256 encryption at rest for sensitive data, role-based access control for staff, continuous monitoring of anomalous access attempts, encrypted backups with 90-day retention. Even so, no system is 100% invulnerable — in the event of an incident involving your data, we will notify the affected persons and the ICO within 72 hours.

11. Minors

The service is restricted to persons aged 18 or over. If we detect that a minor has created an account using false data, we close the account immediately, retain any winnings (which are not paid) and refund only the deposited capital to the original source. Minors' data is deleted except where a judicial order applies.

12. Modifications to this policy

We may update this policy for regulatory reasons or to reflect changes in our processing. Changes are notified by email from the effective date. Significant modifications require explicit re-acceptance before continuing to use the site.

13. Contact

Privacy enquiries: privacy@mr-punter-uk.com

Data Protection Officer: same email, with subject "DPO Enquiry"

Supervisory authority: Information Commissioner's Office (ICO) — ico.org.uk