Privacy Policy
This notice sets out how Mr Fortune handles the personal information of registered players and site visitors. It describes the categories of data involved, the legal grounds relied upon, and the choices available to you.
Information collected
During registration we capture your full name, date of birth, residential address, email address, telephone number, and preferred currency. Verification adds copies of government-issued identification and, where required, proof of address or source of funds.
Operational records accumulate as you use the platform: deposits and withdrawals, game rounds, bonus participation, correspondence with support, and login timestamps.
Technical information reaches us automatically from your browser or app, including IP address, approximate geographic region, device model, operating system, and referral source. Cookies and similar identifiers support session continuity and fraud detection.
Purposes and legal basis
Contractual necessity covers account creation, processing of transactions, and delivery of the games you request. Without this information the service cannot be provided.
Legal obligation governs age verification, anti-money-laundering checks, sanctions screening, and record retention mandated by the Malta Gaming Authority under licence MGA/B2C/445/2017.
Legitimate interest supports platform security, prevention of collusion and bonus abuse, and internal analysis that informs product decisions. Consent, which you may withdraw at any time, applies to marketing communications and non-essential cookies.
Disclosure to third parties
Payment institutions, identity verification bureaus, and game content studios receive only the fields necessary to perform their function under written processing agreements.
Regulators, financial intelligence units, and law enforcement bodies may receive records where a valid legal instrument compels disclosure. Mr Fortune does not sell personal information to advertisers or data brokers.
Transfers outside the European Economic Area rely on standard contractual clauses or an adequacy decision recognised by the European Commission, with supplementary safeguards applied where the receiving jurisdiction requires them.
Retention and security measures
Account and transaction records are held for a minimum of five years after closure to satisfy anti-money-laundering statutes, after which they are deleted or irreversibly anonymised.
Traffic between your device and our servers is encrypted in transit, credentials are stored using salted one-way hashing, and administrative access is restricted by role with activity logged for audit.
Should a breach create a likely risk to your rights, we notify the competent supervisory authority within seventy-two hours and inform affected players directly without undue delay.
Exercising your rights
You may request a copy of the data we hold, correct inaccuracies, ask for erasure where no overriding legal duty applies, restrict or object to certain processing, and receive your records in a portable machine-readable format.
Requests are answered within one month. Because gaming accounts are a frequent target for impersonation, we will confirm your identity before releasing any information.
If our response does not satisfy you, a complaint may be lodged with the Office of the Information and Data Protection Commissioner in Malta or with the Office of the Privacy Commissioner of Canada.
Where to get help
- Data Protection Officer, Mr Fortune — written requests may be submitted through the privacy form in the help centre
- Player support desk — available in live chat for questions about verification documents and account records
This notice reflects our practices at the date of last revision and may be updated as products, processors, or regulatory requirements change. Material amendments are announced on the site and, where the law requires it, notified to registered players before taking effect.