Privacy Policy

This policy describes how M99 Casino, operating under Curacao eGaming licence 8048/JAZ, handles the personal information of players who use our website and apps. We collect only what we need to run your account, meet legal duties and keep games fair, and we explain here who sees it and for how long. By registering you confirm you are 18 or older and accept this policy together with our terms and conditions.

Information We Collect

Identity details: name, date of birth, address, email and mobile number.
Verification files: photo ID, proof of address and proof of payment ownership.
Financial data: AUD transactions, payment method details and withdrawal records.
Gameplay data: bets, wins, bonus activity and session times.
Technical data: IP address, device type, browser and cookie identifiers.
Messages sent to our live chat and email at support@m99casino.com.

Some details are optional, such as a profile preference or a marketing choice. Where information is needed to operate your account or satisfy legal rules, such as your identity documents, we explain why when we ask for it and cannot provide the related service without it.

Why We Use It

We process information to create and secure your account, run deposits and withdrawals, complete KYC checks, pay bonuses, operate responsible gambling tools and respond to your questions. We also use it to detect fraud, multiple accounts and abuse, and to improve the casino, such as spotting games that load slowly on mobile.

Our lawful bases are performance of the contract with you, compliance with legal and licence obligations, our legitimate interest in security and service quality, and your consent where we ask for it, for example for promotional emails.

Verification and Anti-Money-Laundering Checks

Before your first withdrawal we must verify who you are. We compare your documents with your registration details and may ask for extra evidence of the source of funds when activity is unusual. These checks are required by our licence conditions and by anti-money-laundering standards, so they cannot be skipped.

Who We Share Data With

Payment processors, banks, card networks, e-wallets and crypto service providers, to move your money.
Game studios and live-dealer providers, only to the extent a game session requires.
Identity and fraud-prevention services.
Regulators, courts or law enforcement where the law demands it.

We do not sell your personal data to advertisers or data brokers.

Marketing Messages

With your consent we send promotions by email or in your account inbox, such as the Friday top-up or tournament notices. You can switch these off in your profile or by using the unsubscribe link, and we will still send essential account and security messages.

How We Protect Your Data

We use encrypted connections, restricted staff access, activity logging and secure storage for documents. No system is perfectly secure, so please protect your own login: choose a unique password, never share codes and log out of shared devices.

Documents you upload are stored separately from gameplay data, and only the verification and payments teams can open them. If we ever discover a breach that puts your information at risk, we will notify you and the relevant authority as required by the law that applies.

How Long We Keep It

We hold account and transaction records for as long as your account is open and for a period afterwards that meets legal and licensing requirements, generally several years. Marketing preferences are kept until you withdraw consent. After retention periods end we delete or anonymise the data.

International Processing

Our servers and service providers may be located outside Australia. Where data is moved, we require providers to apply protections consistent with this policy, and we remain responsible for how it is handled on our behalf.

Your Rights

Request a copy of the data we hold about you.
Ask us to correct information that is inaccurate.
Ask for deletion, subject to our legal retention duties and responsible gambling records.
Object to or withdraw consent for marketing.
Complain to us, and if unsatisfied, to a data protection authority.

Send requests to support@m99casino.com from your registered email address.

We aim to answer rights requests within 30 days. To protect your account, we may ask you to confirm your identity first, and we may decline a request where the law or a security duty requires us to keep records.

Changes and Contact

We may update this policy and will note the change on our site, with notice to you where it is material. Questions can be sent through our contacts page or to support@m99casino.com.

Last updated: October 6, 2026