Data Protection and Privacy Notice

MyStake prepared this notice to show players how their personal data is treated. It walks through what gets collected, the reasons behind it, and the protections in place. Sharing and storage timelines are covered too. The text speaks to players based in the United Kingdom.

About This Policy

The controller of your data is GTW B.V., the company behind MyStake. Gaming services cannot run without processing that information. Gambling rules also make such processing a requirement. Strip the data away, and the account stops working.

Anyone who opens an account falls under this notice. Read it next to the service terms, since the two go together. Staying on the site signals acceptance of the current text. Whenever wording changes, the update lands on this page.

What Data Is Gathered

To keep the service running, MyStake logs several kinds of personal detail. Some arrive at registration; the rest build up through everyday use. Nothing is asked for unless it serves a clear purpose. Here is the full breakdown.

Sign-up basics: full name, ways to contact you, and date of birth.
Support threads and a history of the questions you have raised.
Money movements: deposits, withdrawals, bets, and the methods behind them.
Session signals such as IP address, browser make and device type.
Proof documents for identity, age and the origin of funds.
Survey input and the results of any safer-gambling checks.

Why the Data Is Used

Each detail is put to a narrow, named use. Processing never starts without a lawful footing and a stated aim. The list below spells out those aims. All of them trace back to the service or to the law.

Settling bets and pushing through deposits, withdrawals and payments.
Servicing the account day to day and replying to support tickets.
Checking identity, age and payment data before money is released.
Sending offers, but only after consent has been recorded.
Discharging anti-money-laundering and counter-financing duties.
Spotting fraud, abuse and behaviour that sits outside the norm.
Reading customer patterns and carrying out statistical work.

Promotional Messages

MyStake may drop the occasional promo unless the player has opted out. Email is the usual channel, with phone used now and then. Partner deals worth a look may appear as well. What arrives stays the player’s call.

Backing out of marketing takes moments and is open at all times. A one-tap unsubscribe rides on every message, mirrored in the settings. Subject to the law, a name or nickname might feature in prize promotion. Whatever the player picks is respected.

Where the Data Comes From

The bulk of the data comes straight from the player, knowingly given. Browsing and play then generate a further slice automatically. Much of that is technical output from each session. Collection stays tied to what is actually needed.

A portion may reach MyStake by way of dependable suppliers. Think fraud-screening firms or providers of technical services. Data gathered like this sits under identical protection. It gets the same handling as anything supplied first-hand.

Who May Receive Your Data

Data only moves when a solid reason calls for it. Across the MyStake group, only those who need it can reach it. Each person sees just the slice their job demands. No hand-off happens on a whim. Every party on the receiving end owes the data the same care.

Approved suppliers may work with the data for the company. Several of them are based beyond the United Kingdom. When data crosses a border, fitting safeguards travel with it. On a need-to-know basis, access can extend to teams like:

The Data Protection Officer plus the compliance function.
Groups covering anti-money-laundering, payments and fraud review.
Support and retention staff, together with other approved roles.

When Data Is Disclosed Externally

Now and then, MyStake is obliged to pass data beyond its walls. That step follows only where the law plainly backs it. Only the slimmest necessary slice ever goes out. The recipient list is never widened for convenience. Each disclosure can be accounted for if questioned.

Certain features lean on outside links or social widgets. Tapping them can forward limited data, governed by those parties’ own terms. The grounds that permit disclosure appear below:

Discharging legal duties and meeting valid formal requests.
Partnering with processors that shift deposits and withdrawals.
Assisting regulators and, if called for, the authorities.
Bringing in fraud-screening and anti-money-laundering allies.
Feeding marketing suppliers, always inside the limits of consent.
Moving data through corporate steps like a merger or a sale.

How Long Data Is Kept

Data lingers only for the span the law sets, never longer. Storage clocks answer to regulation, not to preference. Closing an account does not wipe everything at once. Anti-money-laundering files are the standout case here.

Some statutory windows reach past the account’s own lifespan. That is why a wipe request may wait before it can be met. The moment the mandated period lapses, the data goes. In the meantime, it stays locked down and barely touched. Any request is still logged and acted on in turn.

Keeping Your Data Safe

Technical and organisational defences sit around player data. Reaching the account needs a one-off ID and a password together. A voluntary second factor adds more cover. As nothing is truly bulletproof, everyday care still pays off.

Login secrets are guarded jointly, by the platform and the player. Those details belong with the account holder and nobody else. Spot something off, and a quick note to support is in order. A periodic glance over account activity rarely hurts. Strong, unique passwords make a real difference.

Your Rights and How to Reach Us

Under data protection law, players hold a defined bundle of rights. Asking to view the data on file is one of them. So is having anything wrong or stale put right. These options are open to use at any point.

Marketing can be turned off and personal details refreshed on request. Route such asks through the Data Protection Officer or the email on mystake.com. UK players can escalate to the Information Commissioner’s Office as well. The UK GDPR is what secures that avenue.

Cookies and Tracking

Running the site leans on cookies and comparable tools. Picture a tiny file dropped onto the device as a visit unfolds. It can jot down the browser, the IP address and where the visit came from.

The browser hands the player the controls over cookies. Blocking or clearing them is a few clicks away in almost any browser. Switch certain ones off and parts of the site may behave differently. The essential cookies, though, keep the platform standing.

Cookies here sort into the following groups:

Essential ones, driving core jobs such as a secure log-in.
Functional ones, holding on to settings and preferences.
Advertising ones, steering more suitable offers into view.
Third-party ones, dropped by reliable external services.