Privacy Policy

Mega Wins Vault respects your privacy. This policy explains what personal data we collect when you use megawinsvaultuk.com, why we collect it, how long we keep it and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

The data controller for megawinsvaultuk.com is Mega Wins Vault. If you have any question about this policy or about how your data is handled, contact us at info@megawinsvaultuk.com. We are a comparison and information website; we are not a gambling operator and we never hold your gambling account, deposits or winnings.

2. The data we collect

We collect only what we need to run the Site safely and improve it:

• Technical identification data — your IP address, approximate location derived from it, device type, operating system, browser type and version, screen size, language settings, referring page and the date and time of each request.
• Usage data — the pages you view, how long you stay, the links you click (including clicks through to casino operators) and how you interact with page elements, collected through cookies and similar technologies described in our Cookie Policy.
• Security signals — technical characteristics of your browser used by our anti-abuse technology to distinguish real visitors from bots. These signals are processed as a hashed token and are not used to identify you by name.
• Affiliate attribution data — when you register with an operator after clicking our link, the operator may report back aggregated information (for example that a referred visitor registered or deposited) so that our commission can be calculated. We do not receive your name, account details or gambling history.
• Correspondence — if you email us, we keep your email address, your message and our reply.

We do not deliberately collect special-category data, and we do not ask for your date of birth, identity documents or payment details. Those are collected by the operator you choose, under its own privacy policy.

3. Why we use your data

• to deliver the Site, keep it secure and detect fraud and automated abuse;
• to understand how the Site is used so we can improve content, speed and layout;
• to measure the performance of our advertising campaigns;
• to operate our affiliate agreements and calculate commission;
• to answer your enquiries and handle complaints;
• to comply with legal obligations and regulatory requests.

4. Legal bases

We rely on legitimate interests (Article 6(1)(f) UK GDPR) for site operation, security, analytics in aggregated form and affiliate reporting — interests that are not overridden by your rights because the data is limited and pseudonymised where possible. We rely on your consent (Article 6(1)(a)) for non-essential cookies and marketing technologies, which you can withdraw at any time. We rely on legal obligation (Article 6(1)(c)) where we must keep or disclose records by law.

5. Your rights

Under the UK GDPR you can:

• Access the personal data we hold about you;
• Rectify data that is inaccurate or incomplete;
• Erase your data where there is no good reason for us to keep it;
• Restrict processing in certain circumstances;
• Port data you provided to another service in a machine-readable format;
• Object to processing based on legitimate interests, including direct marketing;
• Withdraw consent at any time where consent is the basis for processing.

To exercise any right, email info@megawinsvaultuk.com. We will respond within one month. If you are unhappy with how we handle your data you can complain to the UK supervisory authority, the Information Commissioner’s Office (ICO), although we would appreciate the chance to resolve your concern first.

6. Data protection and retention

We use HTTPS encryption, access controls and reputable hosting providers to protect data in transit and at rest. Server logs and security tokens are retained for up to 12 months; aggregated analytics data may be kept longer because it no longer identifies anyone. Correspondence is kept for as long as needed to deal with your enquiry and for a reasonable period afterwards for record-keeping. When data is no longer needed we delete or anonymise it.

7. Who we share data with

We share data only with:

• service providers who host the Site, deliver analytics or protect it from abuse, acting on our instructions;
• advertising platforms, for campaign measurement, where you have consented;
• gambling operators and affiliate networks, for attribution of referrals in aggregated form;
• courts, regulators or law-enforcement bodies where we are legally required to do so.

We never sell personal data.

8. International transfers

Some of our providers process data outside the United Kingdom. Where they do, we rely on the UK’s adequacy regulations, the UK International Data Transfer Agreement or the Addendum to the EU Standard Contractual Clauses, together with appropriate technical safeguards, so that your data receives protection equivalent to that in the UK.

9. Cookies

Cookies and similar technologies are described in full in our Cookie Policy, including how to manage them in your browser.

10. Children

The Site is intended for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy to reflect changes in our practices or the law. The date at the top of the page shows when it was last revised; significant changes will be highlighted on the Site.