Privacy Policy: What This Information Site Does With Your Data
Effective from 13 October 2026.
This policy describes how the independent MegaFishWins information site handles personal data. The site is an editorial service about a casino, not the casino itself. It does not run player accounts, take payments or hold verification documents, and the casino’s own handling of data is a separate matter between the player and the casino. The policy follows the principles of the EU General Data Protection Regulation (GDPR).
Who is responsible for the data on this site
The editorial team behind this site decides why and how the data described below is used, which makes it the controller for that data. The contact for every privacy question is [email protected].
Data in messages sent to the editorial team
When a reader writes to the contact address, the site receives the e-mail address, the name if one is given, the text of the message and anything the reader chooses to attach. This data is used to read the message, answer it and, where it reports an error in a figure or a calculation, to correct the page.
The legal basis is the reader’s request itself and, for keeping a record of the correction, the legitimate interest in running an accurate information site. A message is kept for as long as it takes to answer it and to make any resulting correction, and not longer than that need requires.
One practical rule follows from this purpose: please do not send identity documents, proof of address, card numbers or copies of payment-method proofs to this address. Those documents belong to the casino’s verification process, where full verification is required before withdrawals, and this site has no use for them. A message arriving with such an attachment is deleted. A reader writing about a €75 deposit that did not arrive can simply give the amount and the approximate day and leave account numbers out; payment problems are handled by the casino, whose live chat runs around the clock.
Technical data created by visiting a page
Opening a page creates technical data in the hosting systems: the IP address, the date and time of the request, the page requested, the type of browser and the device. This data is processed to deliver the page, to keep the site stable and to identify misuse. The legal basis is the legitimate interest in a secure and working site.
The site does not ask readers to register, to log in or to enter personal details to read a page, so no account data exists on this site.
Cookies and similar technologies
Where the site sets cookies, they serve the basic operation of the pages and, where used, aggregated measurement of which pages are read. Cookies that are not essential are used only with consent where the law requires it. A browser can block or delete cookies at any time, and pages remain readable without them.
Links to the casino and other sites
The pages contain links to the casino. A link leads away from this site, and from that point the casino, with its own terms, privacy information and cookies, is responsible for any data it collects. A player’s registration data, the choice of country and currency at sign-up, the identity document, proof of address and proof of payment-method ownership, and any deposit limit or self-exclusion entered in the account are all handled by the casino, not by this site.
Who receives data
Data is not sold. It is made available only to the service providers that this site needs in order to operate: the hosting provider and the e-mail provider. They process it on behalf of the site and under instructions. Data is passed on to authorities only where the law requires it.
Where a provider processes data outside the European Economic Area, the transfer relies on a recognised safeguard such as an adequacy decision or standard contractual clauses.
Readers under 18
The site is written for adults aged 18 or over, as casino play is. It is not directed at anyone younger. A parent or guardian who finds that a minor has sent a message can write to the contact address and the message will be deleted.
Security
Access to the mailbox and the hosting systems is limited to the people who need it to run the site, and the connection between a reader’s browser and the site is encrypted. No system is perfectly secure, which is a further reason to keep documents and card details out of messages.
Your rights under the GDPR
A reader can ask:
- for access to the data held about them;
- for incorrect data to be corrected;
- for data to be erased where there is no remaining reason to keep it;
- for processing to be restricted;
- for data to be handed over in a common format, where that applies;
- for processing based on legitimate interest to stop, with reasons relating to the reader’s situation;
- for any consent to be withdrawn, with effect for the future.
Requests go to the contact address. The reader may be asked to confirm who they are before data is released, which protects against someone else obtaining it.
A reader who believes data has been handled unlawfully can also complain to the data-protection supervisory authority in their country of residence or place of work.
Changes to this policy
When the way data is handled changes, this policy is revised and the effective date at the top is updated. The version a reader sees is always the current one.