The personal data of users of this Website are controlled and processed by the company GALAKTIKA N.V. (hereinafter referred to as the “Company” or “we”), the address: Scharlooweg 39, Willemstad, Curaçao. The “Company” and “User” are hereinafter jointly referred to as “Parties” and individually as the “Party”.

We comply with the principles established by the General Data Protection Regulation (Regulation (EU) 2016/679), namely, personal data:

• are processed lawfully, fairly and transparently;
• are collected for specified, explicit and legitimate purposes and not processed further in a manner that is incompatible with those purposes (“Purpose Limitation”);
• are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“Data Minimisation”);
• are accurate and, where necessary, updated; every reasonable step must be taken to ensure that personal data which were inaccurate, taking into account the purposes for which they were processed, were erased or corrected without delay (“Accuracy”);
• are stored in a form that permits identification of subjects for no longer than is necessary for the purposes for which personal data are processed (“Storage Limitation”);
• are processed in a manner that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing as well as against accidental loss, destruction or damage using appropriate technical or organisational measures (“Integrity and Confidentiality”).

Personal data which are collected and processed by the Company in respect to users: name, surname, patronymic, address of residence and contact details, valid email address, relevant payment information, login (username). The company has the right to request a scanned copy of your passport in order to establish your identity. All data provided by you must be correct and valid. You are solely responsible for the accuracy, completeness and correctness of the data which you provide.

We use your personal data to verify your identity when registering on our Website, to identify you in order to ensure accurate processing of payments from the User to the Company and from the Company to the User. We use your payment details (such as the name of the cardholder, the credit card number and the card expiration date) for the purpose of providing you with services on our Website. We also use your personal data for the following main purposes:

• to provide you with our services; to maintain your account and records;
• to communicate with you as part of our services;
• to provide answers to your questions and comments;
• to monitor the Website metrics and the quality of our services;
• to explore the audience interest in our services;
• to improve the quality of our services and our Website;
• to notify you about our special offers and services that may be of interest to you;
• to measure your user experience on our Website;
• to transfer your winnings (if there are appropriate grounds for such an action);
• to receive your feedback, including by conducting surveys;
• to resolve disputes;
• to charge fees (if there are appropriate grounds);
• to eliminate problems and errors on our Website;
• to prevent potentially prohibited or illegal activities;
• to ensure compliance with the Terms and Conditions published on this Website.

Your personal data may be disclosed (transferred) by the Company to any of our affiliated companies or any business partners (regardless of their territorial location) for the purposes described above in this Policy. We guarantee that such companies are aware that personal data must be processed in a lawful, fair and transparent manner in compliance with the General Data Protection Regulation (Regulation (EU) 2016/679), and respect the provisions of this Regulatory Act. We and the above-mentioned companies may from time to time involve third parties for the processing of your personal data for the purposes indicated above, provided that such processing will be governed by contractual arrangements in the form prescribed by law. Your personal data may also be disclosed to the appropriate governmental, regulatory or executive body in case it is prescribed or permitted by law.

Rights and Obligations of the Parties

1. The User’s Rights:
   • to set the data processing restriction if one of the following conditions is met:
     • the accuracy of personal data is being disputed by you during the period that allows the Company to verify the accuracy of your personal data;
     • the processing is unlawful, and you oppose the erasure of your personal data and require the restriction of their use instead;
     • the Company no longer needs your personal data for processing purposes, but they are required by you to establish, implement or protect your legal requirements;
     • you objected to the processing of your personal data before checking the legal grounds for processing such data by the Company;
   • to request and receive personal data about you (that you provided to the Company) in a structured, commonly used and machine-readable format (by submitting the corresponding request) and to transfer these data to another controller without any interference by the Company;
   • to be informed whether the Company stores information about you;
   • to request information about the exact purpose(/s) of processing your personal data and information about the categories of your personal data that are being processed by the Company;
   • to request access to your personal data stored by the Company;
   • to request information about the estimated period during which your personal data will be stored by the Company, and, if it is not possible, the criteria according to which the period of storage of such data is determined;
   • to submit a complaint to the European Data Protection Supervisor, if you believe that the Company has violated the applicable legislation on the protection of personal data.
2. The User’s Obligations:
   • to provide your accurate and true personal data in full volume, in accordance with the Terms and Conditions published on this Website;
   • to promptly provide the Company with your updated personal data, if any of your personal data were changed;
   • to promptly report to the Company any unauthorised access to your personal data by a third party if you became aware of such a fact;
   • to notify the Company about disagreements with any purpose of data processing or if you wish the Company to terminate the processing of your personal data, by sending a corresponding message. The User is fully aware that sending a notice of disagreement with any of the purposes of personal data processing and/or intention to stop their personal data processing carried out by the Company is a legitimate reason for the termination of any relationships between the Parties within the Terms and Conditions published on this Website. You are solely responsible for the veracity, accuracy and timeliness of your personal data being provided to the Company.
3. The Company’s Rights:
   • to terminate any or all contractual relationships (stipulated by the Terms and Conditions published on the Company’s Website) with you in case you do not give your consent to the Company for processing of your personal data for the purposes specified in this section;
   • to amend data protection rules unilaterally without any prior approval for such amendments from you.
4. The Company’s Obligations:
   • to report any correction or erasure of personal data, or restriction of the processing of the User’s personal data to every third party to whom the User’s personal data have been disclosed by the Company for any of the data processing purposes established by this Policy, unless this proves impossible or involves a disproportionate effort;
   • to inform you about the recipients of your personal data (third parties), if you submit a relevant request;
   • to provide you with your personal data (stored by the Company) in a structured, commonly used and machine-readable format if you submit a relevant request;
   • to notify the supervisory authority about a User’s personal data breach within 72 hours of becoming aware of such a fact. Where the notification to the supervisory authority is not made within 72 hours, it shall be accompanied by reasons for the delay;
   • to notify immediately the User about the fact of his/her personal data breach if such a breach is likely to result in a high risk to the rights and freedoms of the User.
   The Parties also have all the rights and obligations provided by the General Data Protection Regulation. The time period of storing your personal data by the Company extends for the entire period of the duration of relationships between the Parties provided by the Terms and Conditions published on the Company’s Website as well as for the next three years after the termination of the Parties’ relationships (to resolve potential disputes).

The Company is obliged to comply with EU legislation on the rules for the processing and protection of personal data, in particular, the General Data Protection Regulation (Regulation (EU) 2016/679) and the Electronic Communications Privacy Directive (Directive 2002/58/EC) as amended by Directive 2009/136/EC.

We use the latest technology in order to ensure the safe storage of all personal data of the Website users. We apply the 128-bit SSL encryption (Secure Socket Layer), a technology preferred by many legal and financial organisations. The 128-bit SSL guarantees 100% security of all transactions made via the Website.

MONRO Casino reserves the right to use the personal data of users for marketing communications, including by phone, SMS, email, and Telegram. Users who do not want to receive promotional materials can opt out during registration or revoke their consent at any time by emailing help‑[email protected]. However, opting out may result in some bonus options becoming unavailable.

Cookie policy

When you visit the Website, our system automatically collects information about your visit, such as your browser, IP address, and the referring Website. This collection may be done in conjunction with our platform providers and partners. We may receive from them general demographic or usage data of our Website visitors. We do not use automatically collected information to identify you personally without receiving additional consent.

To collect the information in question, we use cookies and similar tracking tools. Cookies are small text files that are stored on your computer or equipment when you visit our Web pages. Some of the cookies are essential for the Website to operate; others improve your Website experience and help us deliver a better service. Below are the types of cookies we use and their purposes.

Required cookies: enable the navigation and basic functionality of the websites, e.g., access to member areas of the Website.

Functional cookies: allow us to analyse your Website usage and your selections on the Website (e.g., your session key, language, or region), so we can save these settings and offer you a more personalised experience.

Advertising cookies: allow us to gauge how effective our content marketing is. These cookies are provided by our partners to track Website visits and new user registrations from advertising. We do not share your personal information (such as name or email) to affiliated partners except for site visit data collected directly by such Advertising cookies. However, your site visit data may be linked with other personal information collected through other sources by the providers. The latter external data processing is governed by the privacy notices and policies of these third‑party providers.

In addition to the above, we use a number of third‑party service providers who also set cookies on this Website, in order to deliver the services that they are providing to us. Such services include, but are not limited to, helping us to improve your experience by tracking your activity on the Website, measuring the effectiveness of the Website and the effectiveness of our marketing campaigns.

Most online browsers automatically accept cookies. If you prefer, it is possible to block some or all cookies, or to delete cookies that have already been set by modifying your browser settings. However, we recommend that you do not block or delete your cookies as this may restrict your use of our Website.

When you play casino slots developed by NetEnt, NetEnt’s Privacy Policy also applies.

If you wish to view any personal data that we store about you or if you want to make any changes to your personal data or delete them; or if you wish to receive information on how your personal data are used by the Company, how we keep your personal data confidential, you can submit a relevant request to the email [email protected]. In order to keep confidential, you also need to verify your identity when submitting your request. For this purpose, you need to attach a copy of your passport to the request. We reserve the right to charge reasonable fees for duplicate requests, requests for additional copies of the same data and/or requests which are considered obviously unreasonable or excessive. We can also refuse to process requests that we consider to be obviously unreasonable or excessive.