Mystake — Privacy Policy
This document describes how personal information is collected, processed, and safeguarded in connection with the use of the Mystake platform. It applies to all registered account holders and visitors accessing the site from the United Arab Emirates.
Information We Collect
Mystake collects several categories of information necessary to operate an online gaming platform and to meet regulatory obligations. This includes:
- Identity data — full name, date of birth, nationality, and government-issued identification submitted during account verification.
- Contact data — email address, phone number, and residential address.
- Payment data — details related to deposits and withdrawals, including payment method type and transaction history, without storing full card numbers where alternative processing is used.
- Technical data — IP address, device identifiers, browser type, and operating system.
- Behavioural data — gameplay activity, session duration, and betting history.
- KYC documentation — proof of identity and proof of address submitted for verification purposes.
This information is collected directly during registration, account verification, deposits, and ongoing platform use.
How We Use Your Information
Personal data collected through the platform is processed for defined operational and legal purposes. Identity and KYC data are used to verify account holders and confirm eligibility to use the service. Payment data supports transaction processing, fraud prevention, and reconciliation of deposits and withdrawals. Technical and behavioural data assist in detecting irregular account activity, preventing unauthorised access, and maintaining platform stability. Where consent has been obtained, contact details may be used to send promotional communications, which account holders can decline at any stage. Data is also processed to comply with anti-money laundering obligations and to respond to lawful requests from competent regulatory authorities. Processing is limited to purposes directly connected to account management, security, and legal compliance, rather than unrelated commercial use.
Data Protection and Security
Account and transaction data are stored on systems designed to limit access to authorised personnel involved in verification, payments, or compliance functions. Encryption is applied to sensitive data during transmission, and access controls restrict internal handling of identification documents and payment records. Retention periods are aligned with the minimum required for regulatory, accounting, and dispute-resolution purposes, after which data is deleted or anonymised where no further legal basis for retention exists. Third-party service providers involved in payment processing or identity verification are engaged under confidentiality obligations limiting use of data to the specific service performed. These measures reflect standard practice for online gaming operators handling identity and financial information, rather than guarantees against all possible risks.
Cookies
Cookies and similar tracking technologies are used to support core site functionality and to analyse platform usage.
| Cookie Type | Purpose |
|---|---|
| Essential | Enable login sessions, security checks, and core site navigation |
| Functional | Remember account preferences such as language or display settings |
| Analytics | Measure traffic patterns and platform performance |
| Advertising | Support marketing communications where consent has been given |
Essential cookies cannot be disabled without affecting core functionality, while functional, analytics, and advertising cookies can typically be managed through browser settings. Continued use of the platform after adjusting cookie preferences may alter certain features.
Your Rights
Data protection in the United Arab Emirates is governed by Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, overseen by the UAE Data Office. Under this framework, individuals may request access to the personal data held about them, request correction of inaccurate information, and request deletion of data no longer required for a valid processing purpose. Individuals may also object to processing carried out for direct marketing and may withdraw previously given consent where processing relies on that consent. Requests are subject to verification of identity to prevent unauthorised disclosure of account information. Certain data, particularly records required for anti-money laundering or regulatory compliance, may be retained despite a deletion request where a legal obligation applies.
Contact Information
Requests concerning personal data, including access, correction, or deletion requests, can be submitted through the account support channel available within the platform. Account holders are advised to submit such requests from their registered account to allow identity verification before any data-related action is taken.