Mercury Online Casino: Privacy

1. General Provisions

1.1 This Privacy Policy sets out the rules for the processing of personal data by Mercury, an online casino platform operated by a licensed entity.
1.2 The Policy complies with applicable international privacy regulations including the GDPR and other relevant data protection frameworks.
1.3 It applies to all personal data collected through our website, mobile apps, online services, and customer support channels.
1.4 By using Mercury services, users agree to the practices described in this Policy.
1.5 Mercury reserves the right to update this Policy at any time. Changes take effect immediately upon posting on our website.

2. Key Definitions

• Personal Data: Information that identifies or can identify a natural person.
• Data Subject: The individual whose personal data is processed.
• Processing: Any operation performed on personal data.
• Controller: Mercury, which determines the purposes and means of processing.
• Processor: Entity processing data on behalf of the controller.
• Consent: Freely given agreement by the data subject for processing their data.
• Sensitive Data: Data revealing racial or ethnic origin, political opinions, religious beliefs, health, sexual life, or orientation.

3. Rights and Obligations of the Operator

3.1 Rights:

• Request and use necessary data for service provision.
• Use data for specified purposes only.
• Deny access in cases provided by law.
• Provide means for data updates and rectification.

3.2 Obligations:

• Process data lawfully and in accordance with this Policy.
• Implement technical and organizational security measures.
• Respond to data subject requests within legal timeframes.
• Inform users about policy updates.
• Obtain express consent when required.
• Maintain records of data processing activities.
• Conduct Data Protection Impact Assessments when applicable.
• Appoint a Data Protection Officer if required.
• Report data breaches to authorities and affected users.

4. Rights and Obligations of Data Subjects

4.1 Rights:

• Access: Request access to their personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of data no longer necessary.
• Objection: Object to processing in specific circumstances.
• Restriction: Request limited processing of data.
• Portability: Receive data in a structured format.
• Not be subject to automated decisions.
• Withdraw consent at any time.

4.2 Obligations:

• Provide accurate and updated information.
• Inform Mercury of any data changes.
• Use services according to terms and conditions.
• Respect intellectual property rights.
• Do not share third-party data without consent.

5. Data Processing Principles

• Lawfulness, Fairness, Transparency: Processing must be legal and clear.
• Purpose Limitation: Data collected for specific purposes only.
• Data Minimization: Only data necessary for purposes are collected.
• Accuracy: Data must be accurate and up-to-date.
• Storage Limitation: Data retained only as long as necessary.
• Integrity and Confidentiality: Data secured against unauthorized access.
• Accountability: Mercury must demonstrate compliance with these principles.

6. Legal Grounds for Processing

6.1 Legal Bases:

• a) User consent
• b) Performance of a contract
• c) Legal obligation
• d) Vital interests
• e) Public interest
• f) Legitimate interests of Mercury

6.2 Sensitive data is processed only with explicit consent, unless legally exempt.
6.3 Detailed records of obtained consent are maintained.
6.4 Consent may be withdrawn at any time.
6.5 Users will be informed of new processing purposes.

7. Data Processing Procedures

7.1 Data Collection:

• Web and mobile forms
• Customer support interactions
• Usage of our services
• Cookies and tracking technologies
• Third-party sources (where legally permitted)

7.2 Data Types:

7.3 Storage:

• Data stored on secure, certified servers.
• Retention based on purpose and legal requirements.
• Safe deletion or anonymization when no longer needed.

7.4 Transfers:

• We do not sell personal data.
• Shared only with:
• Service providers (processors)
• Regulatory authorities
• Affiliated group companies
• Appropriate safeguards for international transfers.

7.5 Security Measures:

• Encryption of sensitive data
• Firewall and intrusion detection systems
• Role-based access controls
• Two-factor authentication
• Employee training
• Regular security audits
• Incident response plans
• Data backup and disaster recovery
• Continuous monitoring

8. Confidentiality

Mercury is committed to maintaining the confidentiality of your data. All staff and service providers are required to sign confidentiality agreements and adhere to security protocols. Breaches may result in disciplinary or legal action.

9. Final Provisions

Effective Date: From the date of publication on the website.
Contact:

• Email: [email protected]

Response Time: 15 business days
Policy Updates: Users will be notified of major changes.
Applicable Law: Subject to relevant international and local laws.
Jurisdiction: Disputes to be resolved in competent courts.
Severability: If one clause is invalid, the remainder still applies.
Last Update: [Insert current date]
By using Mercury, you confirm that you have read and understood this Privacy Policy and agree to be bound by its terms.