Privacy policy
The operator Mr Bet is the data controller for everything collected through mr-bet.io. Questions about any of it go to [email protected], and requests are answered inside the period the law sets, which is one month in the European Economic Area.
Two principles run through everything below. Data is collected because it is needed to run the account or because the law requires it, and it is deleted when neither reason applies any longer.
What Mrbet collects
| Category | Examples | When it is collected |
| Account data | Email address, password hash, currency, date of birth | At registration |
| Identity data | Full name, address, nationality, document images | During verification |
| Financial data | Deposits, withdrawals, payment method tokens, transaction history | With each payment |
| Gameplay data | Games opened, stakes, results, session times, bonus history | While you play |
| Technical data | IP address, device type, operating system, browser, app build | On every visit |
| Communication data | Chat transcripts, emails, support notes | When you contact the team |
| Marketing data | Consent status, message opens, campaign responses | If you opt in |
Full card numbers are never stored. The payment processor replaces them with a token that works only for this merchant, so a copy of the database would not expose a usable card.
Why the data is processed at Mr Bet casino
| Purpose | Data used | Legal basis |
| Running the account | Account, financial and gameplay data | Performance of the player agreement |
| Age and identity checks | Identity data | Legal obligation under gambling and anti-money-laundering law |
| Fraud and security monitoring | Technical, financial and gameplay data | Legitimate interest in protecting players and the operator |
| Responsible gambling monitoring | Gameplay and financial data | Legal obligation and legitimate interest |
| Support | Communication and account data | Performance of the agreement |
| Marketing messages | Marketing and account data | Consent, withdrawable at any time |
| Accounting and tax records | Financial data | Legal obligation |
Automated checks run on gameplay and payment patterns to detect fraud and signs of harmful play. A decision that would close an account or hold a payout is reviewed by a person before it takes effect, and you can ask for the reasoning behind it.
Who receives data from Mr. Bet
Data is never sold. It reaches four groups of recipients, each bound by contract to use it only for the task given to them.
- Payment processors and banks, to move money in and out of the account.
- Identity verification providers, to check documents against official sources.
- Game studios, which receive a pseudonymous player identifier and round data rather than your name.
- Regulators, auditors and law enforcement, where a legal obligation or a valid request applies.
Transfers outside the European Economic Area happen where a supplier operates elsewhere. Those transfers use standard contractual clauses approved by the European Commission or an adequacy decision covering the destination country.
Cookies at Mrbet casino
| Type | Purpose | Can it be refused |
| Strictly necessary | Sign-in sessions, security tokens, load balancing | No, the site cannot run without them |
| Functional | Language, currency display, favourite games | Yes |
| Analytics | Page traffic, error rates, feature use in aggregate | Yes |
| Marketing | Measuring campaigns and affiliate referrals | Yes |
| Third party | Set by payment and live chat providers inside their windows | Partly, through their own settings |
The consent banner appears on the first visit and the choice can be changed at any time from the cookie settings link in the footer. Refusing analytics and marketing cookies changes nothing about the games, the bonuses or the payout process.
How long data is kept at casino Mr Bet
| Data | Retention period |
| Account and identity data | The period required by the gaming licence after account closure, then deletion |
| Financial records | As required by accounting and tax law in the operator jurisdiction |
| Verification documents | The statutory anti-money-laundering period, then deletion |
| Chat and email records | 24 months from the last contact |
| Technical logs | 12 months |
| Marketing consent records | Until consent is withdrawn, plus proof of withdrawal |
| Self-exclusion records | Kept permanently, since the exclusion has to remain enforceable |
Self-exclusion data is the one category that survives a deletion request. Removing it would let an excluded player open a new account, which defeats the purpose of the tool and breaks the licence.
Your rights
| Right | What it means in practice |
| Access | A copy of everything held on your account, in a readable format |
| Correction | Fixing an inaccurate name, address or date of birth |
| Deletion | Removal of data no longer needed, subject to the retention rules above |
| Restriction | Pausing processing while a dispute over accuracy is resolved |
| Objection | Stopping processing based on legitimate interest, including profiling for marketing |
| Portability | Receiving account data in a machine readable file |
| Withdraw consent | Ending marketing messages, without affecting anything already sent |
| Complain | Raising the matter with the data protection authority in your country |
Requests go to [email protected] from the address registered on the account. Identity is confirmed first, because handing account data to whoever asks would be the larger privacy failure. No fee applies unless a request is repetitive or excessive.
Marketing choices
Emails and push messages are sent only with consent, and every message carries an unsubscribe link that works immediately. Preferences can also be changed in account settings, channel by channel, so it is possible to keep payout notifications while stopping promotional mail.
Consent is cancelled automatically by a self-exclusion or a cooling-off period, including campaigns already scheduled. Reactivating marketing afterwards is a manual step that only you can take.
Security measures
Traffic runs over TLS encryption, stored documents are encrypted at rest, and access inside the company follows the least privilege rule, so a support agent cannot open the verification archive. Passwords are stored as salted hashes and cannot be read by anyone, including staff.
Suspected vulnerabilities can be reported to [email protected]. Reports are acknowledged within a day, and researchers who report responsibly are not pursued for the testing itself.
Changes and contact
Updates to this policy are published here with a revision date, and material changes are announced by email. The document is worth rereading after any change that affects retention or recipients.
Anything unclear can go to [email protected] or through live chat with the support team. The rules governing accounts and payouts sit in the terms of use, document handling is described on the verification page, and the Mr Bet casino home page gathers the brand details, licence information and current bonus terms in one place.