Mythoswin Privacy Policy

Last updated: 1 October 2026

Who we are

This policy applies to the Mythoswin website and Progressive Web App. The operator of Mythoswin (“we”, “us”) is the data controller for your personal data and is responsible for handling it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy, please contact our team through support, available 24/7 by live chat or via the email contact form.

Data we collect

Information you give us

• Registration details: full name, email address, password (stored in encrypted form), date of birth, UK address and mobile number.
• Verification documents: photo ID, proof of address and, where required, source-of-funds or source-of-wealth evidence.
• Payment information: details of the payment methods you use, such as debit card tokens, e-wallet identifiers and bank account details for Open Banking transfers. We do not store full card numbers.
• Communications: live chat transcripts, emails, complaint correspondence and survey responses.
• Safer-gambling settings: deposit limits, loss limits, reality checks, time-outs and self-exclusions.

Information we collect automatically

• Gameplay and transaction records: deposits, withdrawals, bets, wins, bonuses and session times.
• Technical data: IP address, device type, browser, operating system and approximate location, used to confirm you are in Great Britain and to protect your account.
• Cookies and similar technologies: see our Cookie Policy.

Information from third parties

We receive data from identity and age verification providers, credit reference agencies (for identity and affordability checks only — these do not affect your credit score), fraud prevention databases, payment processors and GAMSTOP.

Why we use your data and our lawful bases

Verification and AML checks

UK law requires us to verify your age and identity before you can deposit or gamble. Mythoswin uses electronic checks against trusted data sources, and may ask for documents if these checks are inconclusive.

We also have duties under the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017. This means we may ask where your money comes from, review your transaction history and, in some cases, report suspicious activity to the relevant authorities. We are not always permitted to tell you that a report has been made.

Marketing consent

We only send marketing messages if you have opted in. You can choose which channels you are happy to receive — email, SMS or push notifications — during registration or at any time in your account settings. Every marketing email includes an unsubscribe link.

We will never send marketing to anyone who is self-excluded, on a time-out or registered with GAMSTOP, and we suppress marketing where we have concerns about gambling harm. Service messages, such as security alerts and changes to our terms, are not marketing and will still be sent.

Who we share your data with

We only share your personal data where necessary and with appropriate safeguards in place:

• Verification providers and credit reference agencies, to confirm your age, identity and address.
• Payment processors and banks, to process deposits and withdrawals.
• Game providers, to run the games you play (restricted to a player identifier and gameplay data).
• Regulators and law enforcement, including the Gambling Commission, HM Revenue & Customs and the National Crime Agency, where required by law.
• GAMSTOP, to check whether you have self-excluded and to honour the national self-exclusion scheme.
• Alternative Dispute Resolution providers, if you refer a complaint to them.
• Service providers such as hosting, live chat, email delivery and analytics companies, acting under contract on our instructions.

We do not sell your personal data.

International transfers

Some of our service providers may process data outside the UK. Where this happens, we ensure your data is protected by an adequacy decision recognised by the UK, or by appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep your data

We keep your data for as long as your account is open. After your account is closed, we retain account, verification and transaction records for 5 years to meet our anti-money-laundering obligations, and longer only where the law or an ongoing dispute requires it. Self-exclusion records are kept for as long as necessary to honour the exclusion. Marketing preferences are deleted or anonymised once they are no longer needed.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data, where we have no legal reason to keep it.
• Restrict or object to certain processing, including processing based on legitimate interests.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, for example to marketing.
• Not be subject to solely automated decisions that have legal or similarly significant effects, without human review.

To exercise any of these rights, contact Mythoswin through support. We will respond within one month, and we may need to verify your identity first. Some rights do not apply in full where we must keep data to meet legal obligations, such as AML retention.

Your right to complain to the ICO

If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk.

Security

We protect your data with encryption in transit, secure data centres, access controls and regular security testing. You can strengthen your own account by switching on two-factor authentication — see our login guide.

Changes to this policy

We may update this policy from time to time. Significant changes will be notified by email or on-site message. Please also read our Terms and Conditions and Responsible Gaming pages to understand how Mythoswin works.