Privacy Policy

This Privacy Policy explains how Monopoly Casino, operated through the website monopoliic.com and related channels, collects, uses, discloses and protects your personal data. It applies to all players, prospective players and other visitors who access monopoliic.com from the United Kingdom or interact with our services in connection with the Monopoly Casino brand.

The policy is designed to comply with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations ("PECR") and applicable gambling regulations issued by the UK Gambling Commission. By using our services, you acknowledge that you have read this Privacy Policy and understand how we process your personal data.

Effective date: 6 November 2025 (Last updated: 6 November 2025).

Who We Are

Observe: Monopoly Casino is the UK-facing online casino offering provided via monopoliic.com under the Monopoly Casino brand. The service is operated by Gamesys Operations Limited, a limited company forming part of Bally's Corporation group.

Expand: For UK customers, Gamesys Operations Limited is licensed and regulated by the UK Gambling Commission under licence number 38905 for the provision of online gambling services. The company's registered and principal place of business for these purposes is:

Gamesys Operations Limited
Suite 2, Floor 4, Waterport Place
Gibraltar GX11 1AA
Gibraltar

Reflect: For all queries regarding this Privacy Policy or our data protection practices, you may contact our dedicated data protection contact point (Data Protection Officer or privacy team) by using the contact options provided in the "Contact Us" or "Help" sections of monopoliic.com and clearly marking your message "Data Protection / Privacy". You may also write to our registered address above, addressed to the "Data Protection Officer". Where we make a specific privacy contact email or web form available on monopoliic.com, you should use that channel for the fastest response.

What Personal Data We Collect

Observe: In operating Monopoly Casino on monopoliic.com, we must collect a range of information to provide gambling services responsibly and lawfully.

Identification and Contact Data

Account and identity details: full name, username, date of birth, gender (where provided), nationality, proof of identity (e.g. copies or data from passports, ID cards, driving licences), proof of address (e.g. utility bills, bank statements).
Contact details: email address, telephone number(s), residential address and any other contact information that you provide when registering or updating your account.

Regulatory, Financial and Transaction Data

Payment data: partial payment card details (card type, expiry date and tokenised numbers, never full card numbers in plain text), bank account identifiers, e-wallet details, payment transaction identifiers and related payment metadata, subject to PCI-DSS and other security standards.
Gaming and betting data: deposits, withdrawals, bonuses, wagering activity, game sessions, bet amounts, outcomes, jackpots won, loyalty or VIP activity and any limits or self-exclusion settings you configure.
KYC/AML data: information obtained for "Know Your Customer", affordability and anti-money laundering checks, such as occupation, source of funds, income ranges, sanctions and politically exposed person ("PEP") screening results.

Technical and Usage Data

Technical identifiers: IP address, device type, operating system, browser type and version, language settings, time zone, mobile network, approximate location derived from your IP address.
Log and behavioural data: login dates and times, session duration, clickstream and navigation paths, page views, interaction with banners and messages, error logs and performance data.

Cookies and Similar Technologies

Cookie data: unique identifiers stored in cookies or similar technologies (such as pixels, tags and SDKs) to remember your preferences, maintain sessions, perform analytics and, where you consent, deliver personalised marketing.

Communication and Support Data

Customer support records: transcripts or recordings of chats, emails and phone calls with our support teams, including complaints and dispute records.
Marketing preferences: your choices about receiving email, SMS, push notifications and on-site marketing communications.

Reflect: We collect only the data that is reasonably necessary for the purposes described in this Policy and as required by law and our gambling licences.

Legal Basis for Processing

Observe: Under the UK GDPR, we must identify the legal grounds on which we process your personal data.

Expand: Depending on the type of data and the context, we rely on one or more of the following legal bases:

Performance of a contract: to create and manage your Monopoly Casino account on monopoliic.com, verify your identity, provide games, process deposits and withdrawals, pay winnings, operate loyalty programmes and offer customer support.
Compliance with legal obligations: to meet requirements under UK gambling law, UKGC licence conditions and codes of practice, anti-money laundering and counter-terrorist financing rules, responsible gambling obligations, taxation and accounting laws, and to respond to lawful requests from authorities.
Legitimate interests: to operate and improve our business (including service optimisation, risk management, fraud detection, network and information security), to prevent misuse of our services, to defend or establish legal claims and to keep limited records of interactions. We balance these interests against your rights and expectations and apply safeguards.
Consent: for placing or reading non-essential cookies, sending certain forms of direct electronic marketing (e.g. email, SMS, push notifications, where required by PECR) and, where applicable, for using some categories of behavioural data to personalise offers. You can withdraw your consent at any time, as described below.

Reflect: Where we ask you to provide personal data because it is necessary to comply with the law or to enter into a contract, we will indicate this. If you choose not to provide such data, we may not be able to open or maintain your account or provide certain services.

Purpose of Processing

Observe: We use your data for clearly defined, lawful purposes connected with the operation of Monopoly Casino via monopoliic.com.

Expand: The main purposes include:

Providing and managing services: setting up and administering your account, verifying your identity and eligibility, enabling deposits and withdrawals, operating games and promotions, and providing customer support.
Regulatory and responsible gambling: meeting UKGC and other regulatory requirements, monitoring play for safer gambling purposes, managing self-exclusion and cooling-off periods, and conducting affordability and source-of-funds assessments.
Fraud prevention and security: preventing, detecting and investigating fraud, money laundering, chargebacks, abuse of bonuses and other illegal or suspicious activities, as well as protecting the security and integrity of our systems.
Analytics and service improvement: analysing technical and behavioural data to understand how users interact with monopoliic.com, fix bugs, improve performance, develop new features and evaluate game offerings.
Marketing and personalisation: subject to your preferences and applicable laws, sending you offers, promotions and news about Monopoly Casino, tailoring content and bonuses and measuring the effectiveness of our marketing campaigns.
Legal and business purposes: handling complaints and disputes, enforcing our terms and conditions, managing risk, preparing management reports and complying with legal retention and audit obligations.

Reflect: We do not use your personal data for purposes that are incompatible with those described above without informing you and, where required, obtaining your consent.

Disclosure & Sharing

Observe: We may share your personal data with carefully selected third parties where necessary for the operation of Monopoly Casino on monopoliic.com or to meet legal obligations.

Expand: Categories of recipients include:

Group companies: other entities within Bally's Corporation group that support our operations, subject to intra-group data protection arrangements.
Payment and banking partners: banks, card schemes, payment processors and e-wallet providers that process your deposits and withdrawals.
Verification and AML service providers: identity verification, credit reference and affordability assessment providers, sanctions and PEP screening services and fraud prevention agencies.
IT and hosting providers: companies providing data hosting, platform services, security tools, analytics, customer support software and communications systems.
Regulators and authorities: the UK Gambling Commission, HM Revenue & Customs, law enforcement agencies, courts and other public authorities where we are required or permitted to do so by law or regulation.
ADR providers and dispute bodies: alternative dispute resolution organisations such as eCOGRA, where they act as independent mediators in player disputes.
Marketing and advertising partners: subject to your consent and preferences, providers of marketing, analytics and advertising services, including those serving personalised or interest-based advertising.
Business transfers: potential or actual purchasers, advisers and other parties in connection with any merger, acquisition, restructuring or sale of assets, in which case we will impose confidentiality and data protection obligations.

Reflect: We do not sell your personal data. When we share data with third parties, we require them by contract to protect it, to use it only for the specified purposes and to process it in compliance with applicable data protection laws.

International Transfers

Observe: Some of our service providers and group companies are located outside the United Kingdom, including in Gibraltar and other jurisdictions.

Expand: Where your personal data is transferred outside the UK, we ensure that an adequate level of protection is in place, in particular by:

Relying on UK "adequacy regulations" where the destination country is deemed to provide an essentially equivalent level of protection.
Entering into appropriate contractual safeguards with recipients, such as the UK International Data Transfer Agreement or the UK addendum to the European Commission's Standard Contractual Clauses.
Applying technical and organisational measures such as encryption, access controls and data minimisation to reduce transfer-related risks.

Reflect: Transfers related to Monopoly Casino commonly involve Gibraltar and other locations where hosting, support or verification services are provided. You may contact us for more information about the specific safeguards used for a given transfer.

Data Retention

Observe: We keep your personal data only for as long as necessary for the purposes described in this Privacy Policy and as required by law and our regulatory obligations.

Expand: As a UK-licensed gambling operator, we must retain certain records for minimum periods to comply with UKGC, anti-money laundering and tax requirements. Typical retention periods are:

Category	Retention period (indicative)
Account and identity data	For the lifetime of your account and generally up to 5 years after account closure, or longer where required for AML, fraud prevention or legal claims.
Transaction and game records	At least 5 years from the date of the relevant transaction, and up to 7 years where required by law or for accounting and tax purposes.
Customer support and complaint files	For the duration of the issue and normally up to 6 years after resolution, to evidence our interactions and handle potential disputes.
Marketing preferences and communications	For as long as you remain opted in and, after you opt out, for a reasonable period (typically up to 2 years) to evidence your choice and avoid future contact.
Technical logs and security data	Typically between 12 and 24 months, unless a longer period is needed for security investigations or legal proceedings.
Cookies	In line with their technical lifetime, as described in our cookie tools and browser settings.

Reflect: When data is no longer required, we will securely delete or irreversibly anonymise it. In some cases we may retain limited information (for example, your name, date of birth and exclusion status) to comply with responsible gambling and self-exclusion obligations.

Your Rights

Observe: Under the UK GDPR and other applicable data protection laws, you have a range of rights in relation to your personal data processed in connection with Monopoly Casino on monopoliic.com.

Expand: These rights include, where relevant:

Right of access: to obtain confirmation as to whether we process your personal data and, if so, to receive a copy and certain information about how it is used.
Right to rectification: to have inaccurate or incomplete personal data corrected or completed.
Right to erasure: to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the lawful basis) or where you successfully object to processing. Legal and regulatory obligations (for example, gambling and AML rules) may limit this right.
Right to restriction: to request that we limit the processing of your data in certain circumstances (for example, while we verify its accuracy or assess an objection).
Right to object: to object at any time to processing based on our legitimate interests and to object to direct marketing (including profiling for marketing) at any time.
Right to data portability: to receive certain personal data you have provided to us in a structured, commonly used and machine-readable format and to request that we transmit it to another controller where technically feasible.
Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

Reflect: To exercise any of these rights, contact our data protection contact point as described in the "Who We Are" or "Complaints & Contacts" sections, clearly stating which right you wish to exercise and providing sufficient information to verify your identity. We will respond without undue delay and in any event within one month of receipt of your request; this period may be extended by up to two further months for complex or multiple requests, in which case we will inform you of the extension and reasons. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.

Where Mexican privacy laws (such as the Federal Law on the Protection of Personal Data Held by Private Parties) or EU data protection law apply to you in addition to UK law, we aim to align our practices with those frameworks, subject to our overriding legal and regulatory obligations in the UK gambling context.

Cookies & Tracking Technologies

Observe: monopoliic.com uses cookies and similar technologies in connection with Monopoly Casino to provide and improve our services.

Types of Cookies

Strictly necessary cookies: session and similar cookies that are essential for the operation of the site, enabling core functions such as login, account management, security and transaction processing.
Functional cookies: cookies that remember your preferences (such as language, region and game settings) to provide a more personalised experience.
Analytics and performance cookies: cookies (often from third-party analytics providers) that help us understand how visitors use the site, so we can improve performance, fix issues and optimise content.
Advertising and marketing cookies: cookies used, with your consent where required, to deliver and measure personalised offers, promotions and advertising on monopoliic.com or third-party sites and apps.

Managing Cookies

Consent management: where required by law, we will request your consent before setting non-essential cookies. You can change or withdraw your consent at any time using the cookie tools or settings available on monopoliic.com.
Browser settings: most browsers allow you to block or delete cookies. Doing so may affect the functionality of the site and your ability to log in or use some features.

Reflect: Further details about specific cookies used, their lifetimes and purposes may be provided in a separate cookie interface or notice on monopoliic.com, which forms part of this Privacy Policy.

Data Security

Observe: Protecting your personal data and maintaining the integrity of Monopoly Casino on monopoliic.com is a core obligation under UK data protection and gambling regulations.

Expand: We implement appropriate technical and organisational measures, including:

Encryption and secure transmission: using TLS 1.2 or higher for data in transit and industry-standard encryption measures for sensitive data at rest, including payment and authentication data.
Access controls and authentication: restricting access to personal data to authorised staff on a need-to-know basis, supported by strong authentication mechanisms and role-based permissions.
Network and application security: firewalls, intrusion detection and prevention systems, anti-malware tools, secure development practices and regular vulnerability assessments.
Monitoring, logging and audits: logging access to systems processing personal data and performing regular internal reviews and audits aligned with recognised frameworks such as ISO/IEC 27001 and SOC 2, where appropriate.
Staff training and policies: mandatory confidentiality obligations and data protection training for staff who handle personal data, backed by internal policies and disciplinary measures for misuse.
Incident response: documented procedures for responding to security incidents, assessing risk and notifying affected individuals and regulators where required by law.

Reflect: While no system can be guaranteed 100% secure, these measures are designed to provide a level of security appropriate to the risks associated with processing personal data in the context of online gambling. You also play an important role by keeping your login details confidential and notifying us promptly of any suspected unauthorised access to your account.

Complaints & Contacts

Observe: You can contact us about this Privacy Policy, our handling of your personal data or any related concern.

Expand: For general privacy queries or to exercise your data protection rights, please contact our data protection contact point (Data Protection Officer or privacy team) via the contact methods made available on monopoliic.com (for example, secure account messaging, web forms or email), clearly marking your message "Data Protection / Privacy". You may also write to:

Data Protection Officer
Gamesys Operations Limited
Suite 2, Floor 4, Waterport Place
Gibraltar GX11 1AA
Gibraltar

We aim to acknowledge and investigate privacy-related complaints promptly and to provide a substantive response within one month of receipt, or within any longer period permitted by law where the matter is particularly complex.

Reflect - Escalation to Supervisory Authorities: If you are not satisfied with our response, you may have the right to lodge a complaint with a data protection authority:

United Kingdom: The Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom (see ico.org.uk for up-to-date contact details).
Mexico: Where Mexican data protection law applies, you may lodge a complaint with the competent Mexican data protection authority (currently the National Institute for Transparency, Access to Information and Personal Data Protection, "INAI").
European Union / EEA: Where EU/EEA data protection law applies to you, you may complain to your local data protection authority in the Member State of your habitual residence, place of work or alleged infringement.

We encourage you to contact us first so that we can attempt to resolve your concerns directly and efficiently.

Updates

Observe: We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or best practices.

Expand: When we make material changes, we will take appropriate steps to inform you in advance, which may include:

Posting a prominent notice on monopoliic.com (for example, a banner or pop-up).
Sending you an email or secure account message.
Displaying notices within your account dashboard.

For significant changes that materially affect your rights or how we use your data, we will provide at least 30 days' notice where reasonably practicable. During this period, you may review the updated policy and, if you do not agree with it, you may choose to close your account and stop using Monopoly Casino on monopoliic.com.

Reflect - Version Control: Each version of this Privacy Policy will be identified by an effective date at the top ("Last updated: 6 November 2025"). Where appropriate, we may also provide a brief summary of key material changes (for example, expansion of data categories, new processing purposes or new types of recipients) in a change log or notification message.