Privacy Policy

This notice sets out how Mr Fortune handles the personal information of its registered players and website visitors. It covers what we gather, the legal grounds we rely on, and the choices available to you.

Information We Gather

When you register, we record your full name, date of birth, residential address, email address, telephone number, and preferred currency. This set is the minimum required to satisfy the customer due diligence obligations attached to licence MGA/B2C/445/2017.

Verification requires documentary evidence — typically a government-issued photo identification and a recent utility bill or bank statement confirming your address. Copies are stored in encrypted form and are accessible only to authorised compliance personnel.

Technical information is captured automatically as you browse: IP address, browser and device fingerprint, operating system, referring page, and timestamps for each session. Payment records, wagering history, bonus participation, and correspondence with our support desk are retained alongside your account file.

How Your Information Is Applied

The primary purpose is contractual: operating your account, settling wagers, processing deposits and withdrawals, and responding when you contact us. Without this processing we could not deliver the service you signed up for.

A second category is regulatory. Anti-money-laundering legislation, Maltese gaming regulations, and responsible gambling codes each impose record-keeping and monitoring duties that we are legally required to meet.

We also examine behavioural signals to detect collusion, bonus abuse, account takeover attempts, and indicators of gambling harm. Where automated screening flags an account, a human reviewer assesses the case before any restriction is applied.

Marketing communications rely on your consent alone. You may withdraw that consent at any time through the account preferences screen or the unsubscribe link in any message, and doing so will not affect your ability to use the platform.

Disclosure to Third Parties

Mr Fortune does not sell personal information. Data is shared only with parties who perform a defined function on our behalf: payment institutions, identity verification providers, game studios supplying content, cloud hosting operators, and our customer messaging platform.

Each processor is bound by a written agreement restricting use of the data to our documented instructions and requiring security measures equivalent to our own. Transfers outside the European Economic Area proceed under Standard Contractual Clauses approved by the European Commission.

Disclosure to the Malta Gaming Authority, law enforcement agencies, or financial intelligence units occurs where a valid legal instrument compels it. We assess every such request for validity and scope before releasing anything.

Retention Periods and Security

Account and transaction records are held for five years following the closure of your account, the minimum term prescribed by anti-money-laundering rules. Self-exclusion records persist beyond that point because their purpose is to prevent re-registration.

Traffic in and out of our systems is protected with TLS 1.3. Sensitive fields are encrypted at rest, access follows a least-privilege model with mandatory two-factor authentication for staff, and independent penetration testing is commissioned annually.

Should a breach occur that presents a risk to your rights, we will notify the relevant supervisory authority within seventy-two hours and inform affected players directly where the risk is high.

Your Rights and Cookie Choices

You are entitled to request a copy of the data we hold, correct inaccuracies, ask for erasure where no overriding legal duty prevents it, restrict or object to certain processing, and receive your data in a portable format. Requests are answered within one month.

Strictly necessary cookies keep you signed in and protect session integrity; these cannot be disabled without breaking core functionality. Analytics and preference cookies are optional and are governed by the consent banner shown on your first visit.

Direct any privacy enquiry to our Data Protection Officer. If you are dissatisfied with the outcome, you may lodge a complaint with the Office of the Information and Data Protection Commissioner in Malta, or with the Office of the Privacy Commissioner in New Zealand.

Where to Get Support

• Data Protection Officer, Mr Fortune — [email protected]
• Office of the Information and Data Protection Commissioner (Malta) — idpc.org.mt
• Office of the Privacy Commissioner (New Zealand) — privacy.org.nz

This notice describes current practice and may be revised as our services or legal obligations change. Material amendments will be announced by email and through an on-site notice at least fourteen days before they take effect.