The website collects personal data to provide and improve services, meet regulatory duties, and protect users.

Personal data collected

• Identity and verification data: name, date of birth, nationality, identity document details, age checks, source of funds and source of wealth information.
• Contact information: email, telephone number, address.
• Account details: username, security credentials, preferences, responsible gambling settings.
• Financial information: payment method details processed by authorised providers, transaction records, deposits and withdrawals.
• Technical data: IP address, device identifiers, browser type, operating system, approximate location.
• Usage and interaction data: pages visited, session activity, gameplay logs, communication records.
• Compliance and risk data: fraud flags, sanctions screening outcomes, affordability assessments where required by law or regulation.

Why the collection occurs

• To create and manage accounts, verify age and identity, process payments, prevent fraud, and provide support.
• To meet legal and regulatory obligations under the UK Gambling Commission rules, anti-money laundering laws, and consumer protection law.
• To maintain security, ensure responsible gambling, and improve the user experience.

Protection measures

• Encryption in transit and at rest, secure key management, and tokenisation for sensitive fields.
• Access controls, multi-factor authentication, role-based permissions, and logging.
• Network security, vulnerability management, and regular testing.
• Staff training and vendor due diligence, including data processing agreements and audits.
• Data minimisation and pseudonymisation where practical.

User rights under UK GDPR and the Data Protection Act 2018

• Access: request a copy of personal data.
• Rectification: correct incomplete or inaccurate information.
• Erasure: request deletion where applicable.
• Restriction: limit processing in certain circumstances.
• Portability: receive data in a portable format where feasible.
• Objection: object to processing based on legitimate interests or direct marketing.
• Withdraw consent: withdraw consent at any time for activities that rely on it.
• Complaint: lodge a complaint with the Information Commissioner’s Office.

The service complies with UK GDPR, the Data Protection Act 2018, and applicable guidance from the Information Commissioner’s Office. Data is retained only for as long as required for the purposes stated or as required by law, including anti-money laundering retention periods.

Personal data is used to deliver online services in a lawful, fair, and transparent manner. Main uses include:

• Account set-up and management, customer support, and service notifications.
• Processing deposits, bets, gameplay, promotions, and withdrawals through licensed payment providers.
• Verification, risk checks, fraud prevention, sanctions screening, and responsible gambling measures.
• Compliance with legal obligations, including UK Gambling Commission requirements and anti-money laundering laws.
• Service improvement, troubleshooting, and performance monitoring.
• Analytics to understand usage and enhance website functionality.
• Personalisation based on user preferences and behaviour.
• Marketing communications where consent is given or where permitted by law, with the option to opt out at any time.

Lawful bases for processing include performance of a contract, compliance with legal obligations, legitimate interests such as security and service improvement, and user consent where required. Processing is limited to what is necessary for the stated purposes.

Users can exercise rights or request access, correction, or deletion by contacting the Data Protection team at [email protected]. For security, identity verification may be required before fulfilling a request. A response will be provided within one month, or longer for complex cases as permitted by law. Deletion requests will be honoured where there is no overriding legal or regulatory requirement to keep the data.

By using Maximum Casino, users consent to security checks necessary to provide the services and to the processing of payment information by authorised payment providers. Updates to account details can be made in the account settings or by contacting support.

The services are for users aged 18 and over. Age verification checks are carried out and may require documents or trusted database lookups; age cannot be confirmed without verification information or documents. Accounts believed to belong to a minor will be suspended and reviewed promptly.

If a parent or guardian believes a minor has provided personal data, contact [email protected]. The account will be closed and data deleted where permitted by law, retaining only what is necessary to meet legal obligations.

Personal data may be processed outside the United Kingdom in countries where partners, service providers, or group companies operate. Using the website constitutes consent to such transfers where consent is the appropriate legal basis. In all cases, transfers use UK-approved safeguards, such as adequacy regulations, the International Data Transfer Agreement, or Standard Contractual Clauses plus the UK Addendum, along with technical and organisational measures.

All recipients are required to protect confidentiality and process information only for documented purposes under contract.

This policy may include disclaimers that limit or clarify the scope and effect of certain rules to the extent permitted by applicable law. The disclaimer applies when the user accepts the policy by creating an account, selecting an acceptance option, signing any related agreement, or accessing and using the services by accession.

Nothing in this document excludes rights granted by law. If any term is held invalid, the remaining terms continue to apply.

Cookies are small text files stored on a device by websites to remember a user and improve online services. The site uses cookies for statistics, behaviour analysis, personalisation, security, and site improvement.

Types used

• Essential cookies for core functions and security.
• Analytics cookies to understand usage and performance.
• Preference cookies to remember settings.
• Marketing cookies subject to consent.

Retention

• Non-essential cookies are retained for up to 1 year.

Control

• Users can manage consent through browser settings or available cookie controls and can withdraw consent for non-essential cookies at any time.

By using Maximum Casino or creating an account, users confirm full acceptance of this Privacy Policy. The current version published on the website prevails over previous versions and takes effect from the date shown. Continued use after updates indicates acceptance of the revised document.

Personal information may be shared with third parties where required by law, to resolve disputes, to enforce agreements, or to deliver services. Typical recipients include identity verification providers, payment institutions, game suppliers, analytics vendors, cloud hosting, fraud and risk partners, regulators, and law enforcement. The website lists key processors and partners where appropriate; if a list is not available, information about purpose and scope is provided on request.

Providing data for these purposes may involve consent where needed, and all third parties are bound by confidentiality and data protection obligations. Their own privacy policies apply to their processing activities.

The website may contain links to other websites or services that operate their own privacy policies. The operator is not responsible for how those sites collect, use, or disclose personal data. Users should review the privacy information on any external site and exercise caution when providing information.