Privacy Policy
This notice sets out what personal information Mr Fortune collects, why we hold it, and the choices you have over it. It applies to our website, mobile interface, and all communications sent from our support and payments teams.
This notice sets out what personal information Mr Fortune collects, why we hold it, and the choices you have over it. It applies to our website, mobile interface, and all communications sent from our support and payments teams.
Information we collect
When you register we record your name, date of birth, residential address, email address, phone number, and chosen currency. These fields are mandatory because our Malta Gaming Authority licence requires us to confirm identity and age before gambling services are provided.
During verification we receive copies of identity documents, proof of address, and proof of payment ownership. Document images are stored encrypted and are visible only to the compliance staff assigned to your case.
Technical records are generated automatically: device type, browser version, operating system, IP address, session timestamps, and pages requested. We also keep a complete history of deposits, withdrawals, wagers, bonus activity, and messages exchanged with our support team.
Why we process it and on what basis
Contractual necessity covers everything needed to run your account: crediting deposits, settling game rounds, paying withdrawals, and answering support tickets. Without this information the account cannot function.
Legal obligation covers age verification, anti-money-laundering screening, sanctions checks, and transaction reporting. Records created for these purposes are retained even if you later close the account.
Legitimate interest covers fraud prevention, platform security, service testing, and aggregate reporting on how our games are used. Consent applies separately to marketing email, SMS, and push notifications, and withdrawing it takes effect within seventy-two hours.
Who we share it with
Payment processors, banks, and card schemes receive the minimum data needed to move funds. Game studios supplying content to Mr Fortune receive a pseudonymous player reference and round data, never your name or contact details.
Identity verification providers and anti-fraud partners are given document images and screening inputs under written contracts that restrict them to processing on our instructions only.
Regulators, auditors, and law enforcement receive information where we are legally compelled to supply it. We never sell personal data, and we do not disclose player lists to advertising networks or data brokers.
Storage, transfers, and retention
Primary storage is within the European Economic Area. Where a supplier operates outside it, transfers are covered by adequacy decisions or standard contractual clauses, and New Zealand players are additionally protected by the disclosure rules in the Privacy Act 2020.
Account, transaction, and verification records are held for five years after the relationship ends, as anti-money-laundering rules require. Support correspondence is kept for two years, and marketing preferences are retained indefinitely so that an opt-out is never accidentally reversed.
Data is protected in transit by TLS encryption and at rest by encrypted volumes with restricted key access. Staff access is role-based, logged, and reviewed each quarter.
Your rights and cookies
You may ask for a copy of your data, request correction of anything inaccurate, object to processing based on legitimate interest, or ask for erasure where no retention duty applies. We respond within thirty days and may ask you to confirm identity first.
Essential cookies keep you logged in and protect against session hijacking; these cannot be switched off without breaking the site. Analytics and preference cookies are optional and controlled through the banner shown on your first visit or the cookie settings link in the footer.
If you are unhappy with how Mr Fortune has handled your information, you may complain to the Office of the Privacy Commissioner in New Zealand or to the Maltese Information and Data Protection Commissioner.
Where to find help
- Data Protection Officer, Mr Fortune — written requests accepted through the privacy form in the help centre
- Account support — available in your profile for access, correction, and erasure requests
- Office of the Privacy Commissioner (New Zealand) — 0800 803 909 for unresolved privacy complaints