🔒
Data handling and privacy notice
Aligned with UK GDPR, the DPA 2018 and Anjouan Gaming Board rules

Data protection notice — Mr Punter Casino

Last updated: 22 July 2026 · The purpose of this notice is to explain the way Mondero Enterprises Ltd (trading as Mr Punter) gathers, uses, keeps and safeguards player information, in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the additional duties imposed by the Anjouan Gaming Board.

1. Who controls your data

The controller is Mondero Enterprises Ltd, licensed by the Anjouan Gaming Board and formally registered as a data controller with the competent supervisory authority.

To reach our Data Protection Officer (DPO): privacy@mr-punter-uk.net

2. What information we gather

2.1 Identifying information (required)

  • Full legal name exactly as printed on your government photo ID
  • Your date of birth
  • Photo ID reference number together with a scan (driving licence or passport)
  • A selfie taken alongside the ID document (part of KYC)
  • Your declared address plus supporting proof

2.2 Contact information

  • Your email address
  • A UK mobile telephone number

2.3 Financial information

  • Details of the payment instrument in play (last four digits of a card, masked bank account details, linked PayPal handle, cryptocurrency wallet address)
  • A record of every deposit and withdrawal

2.4 Activity information

  • Records of your bets and the corresponding game outcomes
  • How long, and how often, you play
  • Your IP address, hardware type, operating system and browser
  • An approximate location, inferred from IP

2.5 Derived information

  • An automatically generated problem-gambling risk score, used to flag potentially harmful play
  • Your current VIP tier and any loyalty points accumulated

3. On what legal grounds we process it

  • Contractual performance — indispensable for running your account and settling wagers
  • Legal duty — covering KYC checks and AML reporting to the Anjouan Gaming Board and equivalent authorities
  • Consent — solely for marketing messages, which you can switch off at any moment under Account > Preferences
  • Legitimate interest — detecting fraud, duplicate registrations and promotion abuse

4. What we do with the data

  • Run your account and process every deposit or withdrawal you request
  • Confirm your identity and eligibility through KYC
  • Detect fraud and preserve the integrity of the games
  • Discharge our regulatory duties towards the Anjouan Gaming Board and AML rules
  • Send bonus and promotional messages (only on an opt-in basis, and easy to turn off)
  • Surface responsible-gambling tools calibrated to how you play
  • Handle enquiries directed to customer support

5. When we share data with other organisations

Player data is never put up for sale. Information leaves our systems only in the following situations:

  • Payment providers (Visa/Mastercard, PayPal, Skrill, Neteller, banking partners and crypto processors) — for the sole purpose of settling deposits and withdrawals. Only the minimum required data (name, amount, transaction reference) is transmitted.
  • Studios and game suppliers (Pragmatic Play, Evoplay, InOut Games, Evolution and similar partners) — so that their titles run within our lobby. Suppliers see your session identifier and stake amount, but not identifying personal details.
  • Regulators and public authorities — the Anjouan Gaming Board, competent AML or tax bodies, and courts — whenever the law or a court order demands it.
  • KYC vendors handling document verification, always bound by a strict confidentiality contract.

6. Sending data abroad

Some of our game and technology partners are based outside the United Kingdom (Malta, the EU, the United States). Whenever data crosses the border, we insist that the receiving party provides a level of protection equivalent to UK GDPR, relying on Standard Contractual Clauses or adequacy decisions when needed.

7. Cookies and related tracking

Cookies are used for essential features such as your session, bet slip and language preference, as well as for anonymised, aggregate analytics via Google Analytics. Third-party advertising cookies are not deployed. You can adjust cookie settings inside your browser at any time, though disabling essential cookies will stop the Site from operating correctly.

8. For how long we keep the data

  • Live account records: for the whole lifetime of the account plus 10 years after it closes (this is a regulatory requirement of the Anjouan Gaming Board and AML rules)
  • Bet and transaction history: 10 years, measured from the date of the operation
  • KYC files: 10 years from the day the account is closed
  • Marketing communications: until consent is revoked, plus a further 6 months
  • Self-exclusion records: 10 years, so as to block any attempt to re-register

9. Your data-subject rights

UK GDPR grants you the rights listed below, all of which can be exercised without charge:

  • Right of access — obtain a copy of every piece of personal data we hold about you
  • Right of rectification — have inaccurate or outdated details corrected
  • Right of erasure — ask us to delete data (subject to retention rules imposed by regulation)
  • Right to restrict processing — limit certain uses in defined circumstances
  • Right to object — object specifically to marketing processing
  • Right to portability — receive a structured export of your data and hand it to another operator

To invoke any of these rights, send a message from your registered email address to privacy@mr-punter-uk.net; you will hear back within 30 days at the most. You may also lodge a complaint with the UK's Information Commissioner's Office (ICO): ico.org.uk.

10. How we protect the data

Data is protected through a layered set of technical and organisational safeguards: TLS 1.3 encryption whilst in transit, AES-256 encryption at rest for sensitive fields, role-based access for internal staff, round-the-clock monitoring for unusual access attempts, and encrypted backups kept for 90 days. No system is ever perfectly secure, however — should a data-related incident occur, we will inform the affected individuals and the ICO within 72 hours.

11. Under-18s

The service is off-limits to anyone below the age of 18. If we discover that a minor has registered by providing false information, the account is closed immediately, any winnings are held back and not paid out, and only the original deposited funds are refunded to their source. The minor's data is then deleted, unless a court order dictates otherwise.

12. Revising this notice

The notice may be revised to reflect regulatory developments or changes to the way we process data. Whenever this happens, notification goes out by email on the effective date. If the change is significant, explicit re-acceptance will be required before continuing to use the Site.

13. Contact channels

Privacy queries: privacy@mr-punter-uk.net

Data Protection Officer: the same address, with the subject line "DPO Enquiry"

Supervisory body: Information Commissioner's Office (ICO) — ico.org.uk

Version 2.5 · In force from 22 July 2026  |  Back to home