1. Why We Collect Your Data
MenaceKing (operated by UNOCOMPAÑIA S.R.L. of Costa Rica) takes your privacy seriously. We collect data to deliver and improve our gaming services, comply with laws, and maintain a safe, fair platform.
- Provide and improve our services: To enable account creation, gameplay, deposits, withdrawals, and to offer tailored recommendations, bonus offers, and promotions based on your activity and preferences. This personalization enhances your experience across casino, sportsbook, live casino, virtual sports, and Esports games.
- Comply with legal and regulatory obligations: To meet requirements under anti-money laundering (AML), counter-terrorism financing (CTF), age and identity verification, licensing rules, tax reporting, and responsible gaming legislation in various jurisdictions.
- Protect our platform and players: To detect and prevent fraud, money laundering, collusion, and other abuses; to analyze usage patterns, monitor suspicious behavior, and maintain the integrity of the games and betting markets.
- Support legitimate business operations: To manage customer support, handle disputes, conduct audits, perform analytics and business intelligence, and report aggregated data to regulators and stakeholders when required.
Data Controller & DPO
- Data Controller: UNOCOMPAÑIA S.R.L., Costa Rica, Registration No. 3-102-927059 (“MenaceKing”).
- Data Protection Officer: [email protected]. Contact for any questions about our data practices, to request information, or to raise concerns about privacy or data security.
2. Information We Collect
We gather various categories of data throughout your relationship with us. Each serves a specific purpose in providing services and ensuring compliance.
2.1 Website Usage Data
Automatically collected when you browse or interact with menaceking.com or our mobile apps:
- Technical details: IP address, device type, browser version, operating system, screen resolution.
- Interaction logs: Pages visited, clicks, search queries, session duration, navigation paths, and any errors encountered.
- Traffic and performance data: Load times, crash reports, and network latency metrics.
Why: To maintain and optimize site performance, troubleshoot issues, secure our systems, and understand how players engage with our platform.
2.2 Registration & KYC Data
Collected during sign-up and identity verification processes:
- Personal identifiers: Full legal name, date of birth, gender, nationality, and place of birth (if required).
- Contact details: Residential address, email address, and telephone number.
- Account credentials: Chosen username and encrypted password.
- Government ID documents: Passport, national ID, driver’s license, or social security number, plus proof of address (utility bills or bank statements under 3 months old).
Why: To confirm your eligibility by age and location, prevent underage gambling, comply with AML/CTF obligations, and ensure secure account access.
2.3 Payment & Financial Data
Processed when you deposit or withdraw funds:
- Card payments: Cardholder name, card type, card number (encrypted), expiry date, and CVV (never stored).
- Bank transfers: Account holder name, bank name, IBAN, SWIFT/BIC code.
- E‑wallets & crypto: Wallet addresses, transaction IDs, and network confirmations for digital currency deposits and withdrawals.
Why: To execute financial transactions securely, validate ownership of payment instruments, detect and prevent fraudulent or unauthorized transactions, and comply with financial regulations.
2.4 Profile & Behavior Data
Collected through cookies, tracking pixels, and server logs:
- Gaming preferences: Favorite games, bet sizes, wagering history, win/loss patterns, and time spent in each game type.
- Marketing interactions: Email opens/clicks, promotional code usage, referral sources, and response to targeted offers.
- Device fingerprinting: Unique device identifiers, browser settings, and plugin versions to help detect multi-accounting and account sharing.
Why: To personalize your experience, make tailored recommendations, send relevant promotions, and strengthen security against fraudulent schemes.
2.5 Communication Records
Stored interactions with our support teams:
- Customer support: Email threads, live chat transcripts, and recorded call logs (with consent) for training, quality assurance, and dispute resolution.
- Notifications: Copies of notifications, announcements, and policy updates sent to you via email or in-app messages.
Why: To provide efficient customer service, document issue resolutions, and maintain a record of essential communications in compliance with regulatory retention requirements.
3. How We Use Your Data
Your personal data is processed under specific legal bases, ensuring transparency and lawful use.
- With your consent: For marketing communications, promotional profiling, and certain non-essential cookies. You can withdraw consent anytime via your account settings or by contacting us.
- Contractual necessity: To create and manage your account, process your bets and withdrawals, deliver bonuses, and ensure smooth transaction flows.
- Legal compliance: To comply with AML/CTF laws, age verification rules, responsible gaming regulations, and to respond to lawful requests by authorities.
- Legitimate interests: To enhance platform security, detect and prevent fraud, improve our products through analytics, and conduct internal audits—provided these interests do not override your fundamental rights and freedoms.
Not providing required data for account creation or verification may block your ability to use certain services or access your account.
4. Who We Share Your Data With
We share your information only when strictly necessary, under formal agreements and with appropriate safeguards.
4.1 Within the MenaceKing Group
- Subsidiaries and affiliates involved in platform development, customer support, marketing, and compliance monitoring.
4.2 Third-Party Service Providers
- Gaming vendors: Operators of casino, live-dealer, and virtual sports content.
- Payment processors and banks: Entities facilitating deposits, withdrawals, and fraud checks.
- Verification partners: KYC/AML specialists (e.g., SumSub) for document checks and identity verification.
- IT and hosting: Cloud providers, data center operators, and cybersecurity firms.
- Marketing and analytics: Agencies conducting market research, sending emails, and analyzing user behavior (under strict confidentiality).
4.3 Regulators, Law Enforcement & Authorities
- Gambling commissions, tax authorities, courts, and law enforcement agencies when required by law or to respond to legal requests or suspicious activity reports.
4.4 Public & Anonymized Data
- Aggregated statistics, anonymized datasets, and performance metrics shared in public reports, press releases, or regulatory submissions—none of which identify you personally.
We do not sell, trade, or rent your personal data to unrelated third parties for their own marketing purposes.
5. How We Protect Your Data
We deploy a multi-layered security strategy to keep your data safe.
- Encryption in transit and at rest: SSL/TLS protocols protect data during transmission; sensitive fields are encrypted using AES-256 at database level.
- Strict access controls: Role-based access, two-factor authentication, and audit logs ensure only authorized personnel can view or handle personal data.
- Infrastructure defenses: Firewalls, intrusion detection/prevention systems (IDS/IPS), distributed denial-of-service (DDoS) mitigation, and regular vulnerability assessments.
- Secure development practices: Code reviews, penetration testing, and adherence to industry security standards (e.g., OWASP Top 10).
- Employee training & policies: Mandatory data protection and cybersecurity training, plus formal policies on incident response, data handling, and breach notification.
Your role: Keep your passwords confidential, enable two-factor authentication where available, and promptly report any unauthorized access.
6. Data Retention
We keep your data only as long as necessary:
- Active account data: Stored for as long as your account remains open to support ongoing gameplay, legal compliance, and customer service.
- Post-closure retention: Core identification, transaction, and verification records are retained for a minimum of 5–10 years (depending on jurisdiction) to satisfy AML, CTF, tax, and licensing rules.
- Anonymized insights: Aggregated or fully anonymized data sets are kept indefinitely for analytics, product development, and historical reporting.
When retention periods expire, personal data is securely deleted or irreversibly anonymized.
7. Your Rights
Under data protection laws (e.g., GDPR where applicable), you have rights regarding your personal data:
- Right of access: Request a copy of the data we hold about you.
- Right to rectification: Ask us to correct incomplete or inaccurate information.
- Right to erasure (“right to be forgotten”): Request deletion of your personal data, subject to legal retention obligations.
- Right to restriction: Ask us to limit processing, for instance during dispute resolution.
- Right to data portability: Receive your data in a structured, commonly used, machine-readable format.
- Right to object: Object to processing based on legitimate interests, especially around profiling and direct marketing.
- Right to withdraw consent: Revoke any consents given for marketing or optional data uses.
To exercise these rights, contact [email protected]. We will respond within the legally mandated timeframe (typically 30 days).
8. Filing a Complaint
If you believe we have violated data protection laws or mishandled your data:
- Contact our DPO: Send details of your concern to [email protected] for internal review and resolution.
- Regulatory complaint: Lodge a complaint with your local data protection authority (e.g., Costa Rica’s Privacy Agency, or your country’s regulator).
We aim to resolve all issues promptly and transparently.
9. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in regulations, technologies, or business practices:
- For material changes affecting your rights, we will provide prominent notice via email or site announcements.
- Please review this page regularly to stay informed of our data practices.
10. Cookies & Tracking Technologies
To improve your experience and deliver relevant services, we use cookies and similar technologies on our website and apps. Here’s what you need to know:
- Types of cookies: We employ essential cookies for site functionality (e.g., login sessions), performance cookies to analyze usage and load times, personalization cookies to remember preferences, and marketing cookies to tailor offers and promotions.
- Third‑party tracking: We partner with analytics providers and advertising networks, which may place their own cookies or pixels to gather anonymized information about your browsing behavior across sites.
- Managing cookies: Most browsers allow you to control or disable cookies via settings or extensions. You can also adjust cookie preferences through our Cookie Policy banner or in your account settings, though disabling certain cookies may impact site functionality and personalization.
- Retention periods: Session cookies expire when you close your browser, while persistent cookies remain for a fixed period (usually 30–90 days) unless you delete them earlier.
- Opt‑out options: For marketing cookies, you can withdraw consent or opt‑out of targeted advertising through our Privacy Settings page or by visiting industry opt‑out platforms like YourOnlineChoices.
By continuing to use MenaceKing without changing your settings, you consent to our use of cookies as described. For full details, see our Cookies Policy at menaceking.com/cookies.