Privacy Policy

Purpose of Privacy Policy

This Privacy Policy (the "Policy") explains how Mysti Games Ltd. ("us," "we," "our," "Mysti") collects, uses, stores, shares, and protects your personal data when you interact with our website, craybet.com (the "Website"), and its services. This Policy is designed to provide you with a clear understanding of how your personal information is processed and to ensure that we meet our legal obligations in protecting your data.

By using our Website, you acknowledge that your personal data will be collected and processed in accordance with this Privacy Policy and the applicable legal bases described herein. We are committed to protecting your privacy and ensuring that your personal information is handled in a secure and responsible manner. If you have any questions about this Privacy Policy, please do not hesitate to contact us.

Only individuals aged 18 or older, or such higher minimum age as may apply under the laws of your jurisdiction, are permitted to access or use craybet.com. We will process the data you provide to verify that you meet the minimum age requirement before granting access to our services.

This Privacy Policy forms an integral part of our Terms and Conditions. The terms "Company," "we," "us," and "our" refer to Mysti Games Ltd., the entity responsible for processing your personal data. Any references to "Player," "you," "your," and/or "yours" refer to individuals who access and use the services provided on craybet.com.

This Privacy Policy does not apply to third-party websites, pages, or services that may be linked to or from our Website and over which we have no control. We encourage you to review the privacy policies of such third parties before providing them with your personal data.

Data Controller and Data Processor

Data Controller – The organization that determines the purposes and means of processing personal data. Mysti Games Ltd. acts as the Data Controller for the personal data it collects from users of its Website.

Data Processor – A third party that processes personal data on behalf of the Data Controller. Mysti Games Ltd. may engage third-party vendors or service providers to perform certain data processing activities in compliance with applicable data protection regulations, including payment processing, identity verification, fraud prevention, hosting, analytics, customer support, and compliance screening.

Personal Data We Collect

We collect various types of personal data to provide our services and ensure a secure, personalized gaming experience. The following types of data may be collected:

Identity Data: First and last name, date of birth, place of birth, residential address (including city, ZIP code, and country), nationality, identity reference number, passport number, age.

Contact Data (subject of processing): Phone number, postal address, email address.

Account Data: Username, account details, logs of your activities on the Website, such as game sessions, deposits, withdrawals, balance data, gameplay history, and account status.

If you reach out for customer support via live chat or the contact form, we collect your name, email address, and details of your query or issue, as well as information about your gameplay or activities on the Website.

Account Limits Data: Information about limits you set on your account, including time limits, bet limits, loss limits, and daily deposit limits.

Financial Data: Payment method information, masked payment card details where applicable, bank account data (including IBAN and BIC), billing information, and transaction records.

Self-Exclusion Data: Data related to self-exclusion, including the dates and periods of self-exclusion you choose.

Know Your Customer (KYC) Data: To comply with legal and regulatory requirements, we collect documents to verify your identity and the source of your funds, such as:

Valid identification (passport, national ID, driving license)

Proof of address (utility bill, bank statement)

Source of wealth and source of funds

Political status (PEP data)

Sanctions, fraud, or adverse media screening results where required

Technical Data: Your Internet Protocol (IP) address, login information, browser type, device details, operating system, platform, location data where applicable, and other technical details about your interactions with the Website.

Usage Data: Information about your visits to the Website, including pages visited, games played, time spent, and interactions with the site.

Cookie Data: Information collected through cookies regarding your site visits, the games you played, duration of play, and your general behavior on the Website. This information is collected in accordance with our Cookie Policy.

Public Sources Data: Information available from public sources, such as search engines, public registers, and other publicly available databases where permitted by law.

Marketing Data: Your preferences for receiving marketing materials, updates, and promotional content from us.

We generally do not collect or process special categories of personal data, such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless required by law, voluntarily provided by you, or necessary for responsible gaming, dispute handling, or compliance purposes. In such cases, we may take steps to ensure your safety and may close or restrict your account if necessary.

We collect, or may collect, the above information through methods including:

Data input during account registration and verification processes

Communications with customers

Data provided or created when you use our services and products

Cookies and similar tracking technologies

Third-party service providers, including payment providers, identity verification providers, fraud prevention providers, and compliance screening providers

Publicly available sources, where permitted by law

Purposes of Collecting and Processing Your Personal Data

We collect and process your personal data for the following purposes:

To provide our services: To ensure that you can access and use our gaming platform and perform all related activities (e.g., account management, gameplay, deposits, and withdrawals).

To comply with legal obligations: We process your data to comply with legal and regulatory requirements, including Anti-Money Laundering (AML), sanctions screening, counter-terrorist financing laws, taxation, reporting, audit, and recordkeeping obligations.

To manage risk and detect fraud: To prevent fraudulent activities, money laundering, suspicious transactions, and misuse of the Website, as well as to protect the integrity of the platform.

For marketing purposes: With your consent, or where otherwise permitted by applicable law, we may use your contact information to send you promotional materials, offers, and updates about our products and services.

To identify problem gambling: We process your data to monitor gaming behavior and detect signs of problem gambling. If necessary, we will take action to protect you and others from harm.

To ensure the security of our services: We use data for monitoring and protecting the platform against illegal or unauthorized activities.

To respond to your requests and complaints: We process your data to respond to your questions, comments, complaints, and customer support requests.

To enforce our Terms and Conditions and policies: We may process your data to investigate breaches, enforce our contractual rights, and establish, exercise, or defend legal claims.

To improve our services: We may process your data for service development, analytics, internal reporting, and improvement of user experience, including using aggregated or de-identified information where appropriate.

The legal basis for processing your personal data includes performance of a contract, compliance with legal obligations, legitimate interests, and, where applicable, your consent for marketing communications.

If you do not provide the personal data we request, we may be unable to process your registration, verify your identity, maintain your account, provide you with our services, process your transactions, or respond to your enquiry or complaint.

Data Processing and Legal Basis

Mysti Games Ltd. processes personal data on the following legal grounds:

Performance of a contract: To fulfill our contractual obligations to you (e.g., providing gaming services and support).

Legal obligations: To comply with legal requirements, including AML, KYC, sanctions, tax, and gaming regulations.

Legitimate interests: For the purposes of fraud prevention, risk management, platform security, customer support, service improvement, and enforcement of our Terms and Conditions and policies, provided that such interests are not overridden by your rights and freedoms.

Consent: For sending marketing communications, where you have opted in, and where required for certain cookies or similar technologies.

We do not generally rely on your consent for processing personal data, except for marketing communications and where otherwise required by law. You have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal.

Sharing and Disclosing Your Personal Data

We may disclose your personal data to the following categories of third parties:

Service providers: Third-party vendors, payment processors, hosting providers, analytics providers, identity verification providers, fraud prevention providers, compliance screening providers, and customer support providers who assist in delivering our services.

Regulatory authorities and law enforcement: We may share your data with authorities to comply with legal obligations, prevent fraud, investigate criminal activities, or respond to lawful requests.

Business partners: We may share data with our group companies or business partners for operational, compliance, security, administrative, or customer service purposes.

Third-party data processors: We may disclose data to data processors who process personal data on our behalf, ensuring they comply with data protection standards.

Legal obligations: If required by law, we may disclose your personal data in response to legal processes, such as court orders, subpoenas, or lawful regulatory requests.

Business transfers: In the event of a merger, acquisition, financing, reorganization, restructuring, sale of assets, or other corporate transaction, your personal data may be disclosed or transferred to the relevant parties, subject to appropriate safeguards and lawful processing.

We ensure that third-party processors adhere to data protection standards and only process your data for the purposes for which it was collected.

Marketing Communications

If you have consented to receive marketing communications, we may send you information about our services and promotions. You can opt out of marketing communications at any time by:

Changing your preferences in your profile.

Clicking the unsubscribe link in any marketing emails.

Contacting us directly to request removal.

Withdrawing your consent will not affect your ability to use our services.

Please note that even if you opt out of marketing communications, we may still contact you in relation to the management and administration of your account, security matters, transactions, compliance requests, customer support, or other service-related matters. Such communications do not affect your opt-in or opt-out status for direct marketing communications.

Data Security

We take the security of your personal data seriously and use Secure Sockets Layer (SSL) encryption to protect it during transmission. Access to your personal data is restricted to authorized employees and service providers who need it to perform their duties.

We have implemented procedures to prevent unauthorized access, use, alteration, loss, or disclosure of your data. Additionally, in the event of a data breach, we will notify you and/or the relevant authorities as required by law.

However, you acknowledge that no method of transmission over the Internet or method of electronic storage is completely secure. Accordingly, while we take reasonable steps to protect your personal data, we cannot guarantee absolute security.

Our employees, agents, contractors, and service providers are required to maintain the confidentiality of personal data and are subject to appropriate confidentiality and security obligations.

If you post information in public areas, bulletin boards, chat functions, or social media environments, such information may become public and may be accessed by others. We cannot guarantee the security of information that you choose to disclose publicly.

You are responsible for maintaining the confidentiality of your account credentials and for restricting access to your devices. Please remember to log out of your account when you have completed your session, especially if you share a computer or device with another person.

Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected. After the termination of your relationship with us, the following retention periods generally apply:

5 years: Identity Data, Contact Data, Technical Data, Usage Data, KYC Data, Financial Data, and general Self-Exclusion Data.

10 years: Account Data, including gaming, transaction, and account activity records, where required for legal, regulatory, tax, audit, or dispute-related purposes.

Records relating to self-excluded players and responsible gaming restrictions may be retained for a longer period where necessary to comply with legal, regulatory, safeguarding, consumer protection, or responsible gaming obligations, including preventing re-registration where appropriate.

We store personal data for as long as necessary to fulfill the purpose(s) for which it was collected, provide our services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.

When personal data is no longer required, we will securely delete, destroy, anonymize, or permanently de-identify it, unless further retention is required by law or justified by a lawful basis.

Your Rights and Data Subject Requests

You have the following rights regarding your personal data, subject to applicable law:

Right to access: You can request a copy of the personal data we hold about you.

Right to rectification: You can correct any inaccurate or incomplete personal data.

Right to erasure: You can request the deletion of your data, subject to legal and regulatory exceptions.

Right to restrict processing: You can request to restrict processing of your data in certain circumstances.

Right to object: You can object to the processing of your personal data for direct marketing purposes and, where applicable, to processing based on legitimate interests.

Right to withdraw consent: You can withdraw your consent to marketing communications at any time.

Right to data portability: Where applicable, you may request that certain personal data be provided to you in a structured, commonly used, and machine-readable format.

Rights relating to automated decision-making: Where required by law, you may request information about significant automated decisions and seek human review.

To exercise these rights, please contact us at support@craybet.com.

We may request additional information to verify your identity before processing your request. We will respond within a reasonable period or within the period required by applicable law. In some circumstances, we may be unable to comply fully with your request due to legal, regulatory, security, or other lawful reasons. If we refuse your request where required by law, we will explain the reasons and inform you of any available complaint mechanisms.

International Data Transfers

Your personal data may be transferred to, stored, or processed in countries outside your country of residence, including countries that may have data protection laws that are different from those in your jurisdiction.

Where we transfer personal data internationally, we will take reasonable steps to ensure that appropriate safeguards are in place and that your personal data remains protected in accordance with applicable data protection laws.

Complaints and Supervisory Authority

If you have any questions, requests, or complaints relating to the handling of your personal data, please contact us at support@craybet.com and we will do our best to address your concerns.

If you are located in a jurisdiction that provides such a right, including the European Economic Area where applicable, you also have the right to lodge a complaint with a competent data protection supervisory authority if you believe that our processing of your personal data violates applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy as needed to reflect changes in our practices, services, technologies, legal obligations, or for other operational reasons. Any changes will take effect upon publication on the Website, unless otherwise required by law. Please review this page periodically for updates. Where required by law or where changes are material, we may provide additional notice by appropriate means.