Privacy Policy
Last updated: 24 May 2026 · This policy explains how Megaways Casino collects, uses and protects your personal data.
1. Who We Are
Megaways Casino is operated by SkillOnNet Ltd, a company registered in Malta with registered office at Office 1/5297, Level G, Quantum House, 75 Abate Rigord Street, Ta' Xbiex XBX 1120, Malta (company registration number C 50024). SkillOnNet Ltd is the data controller responsible for the personal data we process about you. We are licensed by the Malta Gaming Authority and, for UK customers only, by the UK Gambling Commission.
This policy applies to the website megawayscasino.com and all related services. By using our services, you acknowledge the practices described here. If you do not agree, please do not use the site.
2. The Data We Collect
We collect the following categories of personal data:
- Identity and contact data — name, date of birth, gender, residential address, email address and mobile number, provided when you register and verify your account.
- Verification (KYC) data — copies of government-issued ID, proof of address, proof of payment method and, where required, source-of-funds documentation. This may include special-category data where a document reveals it.
- Financial and transaction data — deposits, withdrawals, payment-method details, balances, bonus history and wagering activity.
- Technical and usage data — IP address, device identifiers, browser type, operating system, login times, pages viewed and gameplay logs.
- Communications data — live-chat transcripts, emails and records of your contact with our support team.
- Marketing and preference data — your consent choices and how you respond to our promotions.
3. How and Why We Use Your Data (Lawful Bases)
Under the EU General Data Protection Regulation (GDPR), we rely on specific lawful bases under Article 6, and Article 9 where special-category data is involved:
| Purpose | Lawful basis |
|---|---|
| Creating and managing your account; processing bets, deposits and withdrawals | Performance of a contract |
| Identity verification, age verification, anti-fraud and anti-money-laundering checks | Legal obligation; public interest |
| Responsible-gambling monitoring and player-protection interventions | Legal obligation; legitimate interests |
| Site security, troubleshooting and service improvement | Legitimate interests |
| Sending marketing communications | Consent (which you may withdraw at any time) |
| Processing ID documents that may reveal special-category data | Substantial public interest; legal obligation (GDPR Art. 9) |
Where we rely on legitimate interests, we balance those interests against your rights and only proceed where yours do not override them.
4. Who We Share Your Data With
We do not sell your personal data. We share it only where necessary, with:
- Group brands — SkillOnNet operates a network of more than 40 casino brands. Where you hold or open accounts across this ecosystem, certain data (such as verification status and responsible-gambling flags) may be shared to enforce shared limits, the cross-brand welcome-bonus cooldown and self-exclusion across all brands.
- Service providers — payment processors, KYC and fraud-prevention partners, game suppliers, cloud hosting, analytics and customer-support platforms, all acting under contract on our instructions.
- Regulators and authorities — the Malta Gaming Authority, the UK Gambling Commission (for UK players), tax authorities, courts and law-enforcement bodies, where legally required.
5. International Transfers
Your data is primarily processed within the European Economic Area (EEA). Where data is transferred outside the EEA — for example to a service provider in another country — we use appropriate safeguards such as European Commission adequacy decisions or Standard Contractual Clauses. For players in the Philippines, this means your data is processed outside the country under these safeguards rather than under local hosting.
6. How Long We Keep Your Data
We retain personal data only as long as necessary for the purposes set out above, or as required by law. KYC and anti-money-laundering records are kept for at least five years after the end of our relationship, and transaction records for up to seven years, in line with Maltese and EU obligations. After applicable periods expire, data is securely deleted or anonymised.
7. How We Protect Your Data
We use technical and organisational measures including encryption in transit (TLS), access controls, network monitoring and staff training. While no system is completely immune to risk, we work continuously to safeguard your information and we will notify you and the relevant authority of any qualifying personal-data breach as required by law.
8. Your Rights Under the GDPR
Subject to legal limits, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete data, except where we must retain it for legal or regulatory reasons (such as AML records).
- Restriction and objection — limit or object to certain processing, including direct marketing.
- Portability — receive certain data in a structured, machine-readable format.
- Withdraw consent — at any time, where processing is based on consent.
To exercise any right, contact our Data Protection Officer (below). We respond within one month. You may also lodge a complaint with the Office of the Information and Data Protection Commissioner (Malta) at idpc.org.mt.
9. Data Privacy Act of the Philippines (RA 10173)
Megaways Casino operates from Malta and is not established in the Philippines. We nonetheless respect the principles of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) — transparency, legitimate purpose and proportionality. Philippine players have rights comparable to those above, including the rights to be informed, to access, to object and to data portability. If you are a Philippine resident and have a privacy concern we cannot resolve, you may contact the National Privacy Commission (NPC) at privacy.gov.ph. Because we are an offshore operator, your primary supervisory authority remains the Maltese regulator.
Automated Decision-Making and Profiling
Some of our fraud-prevention, anti-money-laundering and responsible-gambling checks use automated processing to flag unusual activity. These tools support, but do not solely determine, significant decisions about your account — a member of our team reviews material outcomes such as account suspension. You have the right to request human intervention, to express your point of view and to contest a decision that is based solely on automated processing.
10. Cookies and Tracking
We use cookies and similar technologies to operate the site, measure performance and (with your consent) personalise marketing. Full details, including specific cookie names and durations, are set out in our separate Cookies Policy, where you can also manage your preferences.
11. Marketing Choices
We send marketing only where you have consented. You can opt out at any time using the unsubscribe link in any email, by adjusting your account preferences, or by contacting support. Opting out of marketing does not affect essential service messages about your account, security or transactions.
12. Children
Our services are strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If we discover an underage account, we close it and delete the associated data. Parents who believe a minor has accessed our services should contact us immediately.
13. Changes and Contact
We may update this policy from time to time; the "last updated" date above shows the latest version, and material changes will be communicated where appropriate. To contact us about privacy or to reach our Data Protection Officer, email [email protected] or write to SkillOnNet Ltd, Office 1/5297, Level G, Quantum House, 75 Abate Rigord Street, Ta' Xbiex XBX 1120, Malta.
18+ only. Megaways Casino is operated by SkillOnNet Ltd and licensed by the Malta Gaming Authority. Please gamble responsibly.