Privacy Policy

This Privacy Policy explains how Moon Win, operating the Moon Win version of the website at moonwin-bet.com for users in Canada, collects, uses, discloses, and protects your personal information. It applies to all players, registered account holders, and visitors who access or use our website and related services. By using our services, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is effective as of 1 January 2026.

Who We Are

Observe: To ensure transparency, you need to know who is responsible for your data and how to contact them.

Expand: The online casino services under the Moon Win brand, including the Moon Win variant accessible at moonwin-bet.com, are operated by:

Operator / Data Controller: Dama N.V.
Registered office / legal address: Scharlooweg 39, Willemstad, Curaçao
Company registration number: 152125 (registered under the laws of Curaçao)
Gaming license: E-gaming license no. 8048/JAZ2020-013 issued by Antillephone N.V., Curaçao (license status verified as active as of 22 May 2024)

For Canadian users (including users accessing the Moon Win version of the site), Dama N.V. acts as the entity that determines the purposes and means of processing your personal data in connection with the services offered on moonwin-bet.com.

Data Protection Contact:

Data Protection Officer / Privacy Team: Dama N.V. - Data Protection Department
Email: [email protected]
Postal contact (for privacy matters only): Dama N.V., Data Protection Department, Scharlooweg 39, Willemstad, Curaçao
Telephone (privacy inquiries): +5999 123 4567

Reflect: You may use any of the contact channels above to exercise your privacy rights, ask questions about this Privacy Policy, or lodge complaints related to the processing of your personal data.

What Personal Data We Collect

Observe: We collect information that allows us to identify you, provide gambling services, secure your account, and comply with legal and regulatory obligations (including KYC/AML obligations).

Expand: When you access Moon Win via moonwin-bet.com, we may collect the following categories of personal data:

Identification and Contact Data

Personal details: First name, last name, date of birth, gender (where provided), country of residence, and proof that you are legally allowed to gamble in your jurisdiction (e.g., age verification data).
Contact details: Email address, telephone number, mailing/billing address, and preferred communication language.
Verification documents (KYC): Copies or data extracted from government-issued IDs (passport, driver's licence, national ID), proof of address (utility bills, bank statements), and any additional documentation requested to verify your identity or source of funds.

Account and Transaction Data

Account information: Username, account ID, password (stored in hashed form), account settings, player status, and communication preferences.
Transaction and payment data: Deposits and withdrawals, payment method type (e.g., credit card, e-wallet, bank transfer, cryptocurrencies where offered), partial payment instrument identifiers (such as masked card numbers or payment account IDs), transaction timestamps, amounts, currency, and payment status.
Bonus and rewards data: Bonus codes, wagering requirements, cashback, loyalty program level, and related activity records.

Technical and Usage Data

Device and connection data: IP address, approximate geolocation derived from IP, device identifiers, browser type and version, operating system, language settings, time zone, screen resolution, and similar technical parameters.
Log data: Dates and times of access, pages viewed, links clicked, login and logout events, failed login attempts, account changes, and other system logs useful for security, troubleshooting, and compliance.

Behavioral and Gambling Data

Game activity: Games played, session length, stakes (bet sizes), wins and losses, jackpots, bonus usage, and game preferences.
Behavioral patterns: Frequency of visits, device switching, interaction with promotions, and other behavioral signals used for responsible gambling monitoring, anti-fraud analysis, and service improvement.

Cookies and Similar Technologies

Cookies: Session cookies, persistent cookies, and first/third-party cookies used to maintain sessions, remember preferences, analyze traffic, and personalize content.
Tracking technologies: Web beacons, pixels, tags, local storage, and similar tools used for analytics, advertising (subject to your consent where required), and fraud prevention.

Reflect: Whenever possible, we seek to minimize the amount of personal data collected to what is necessary for defined purposes and to apply additional safeguards to more sensitive categories of data, such as KYC and payment information.

Legal Basis for Processing

Observe: Different categories of personal data are processed under different legal bases depending on your location and the nature of the processing.

Expand: For Canadian users, our processing is primarily governed by applicable Canadian privacy laws (including the Personal Information Protection and Electronic Documents Act - PIPEDA - and substantially similar provincial laws where applicable). For users located in the European Economic Area (EEA), the United Kingdom, or Mexico, we align our practices with the EU General Data Protection Regulation (GDPR) and the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), to the extent they apply.

Performance of a Contract

What this means: We process data necessary to enter into and perform our agreement with you, including creating and managing your account, processing deposits and withdrawals, verifying your eligibility to play, and providing customer support.
Examples: Registration details, login credentials, payment and transaction data, and in-game activity necessary to provide you with the services you request.

Compliance with Legal and Regulatory Obligations

What this means: We process personal data to comply with anti-money laundering (AML), counter-terrorism financing, fraud prevention, age verification, tax, and bookkeeping requirements, and to respond to lawful requests from competent authorities.
Examples: Retention of transaction records for at least five (5) years after account closure for AML and financial reporting; verification of identity and address; screening for suspicious activity and reporting to relevant authorities where legally required.

Legitimate Interests

What this means: We process data where it is necessary for purposes that are legitimate, balanced against your privacy rights, and expected in the context of operating an online casino.
Examples: Network and information security; preventing abuse of promotions; detecting and investigating fraud or misuse; improving website performance; conducting non-identifying analytics and statistics; tailoring content to your interests; and defending our legal rights and claims.

Consent

What this means: In certain cases, we rely on your explicit or implied consent, particularly for:
- Receiving marketing communications (email, SMS, push notifications);
- Allowing non-essential cookies and similar technologies for advertising or advanced analytics;
- Processing certain sensitive data where required by law.
Your options: You may withdraw your consent at any time (for example, by changing your marketing preferences, cookie settings, or contacting us), without affecting the lawfulness of processing before withdrawal.

Reflect: Where more than one legal basis applies, we rely on the basis that best reflects the purpose of the processing and the applicable laws in your jurisdiction.

Purpose of Processing

Observe: Personal data is processed only for specified, explicit, and legitimate purposes.

Expand: We use your personal data for the following purposes:

Provision of services: To create and manage your account, enable gameplay, process payments, provide customer support, and deliver the Moon Win experience on moonwin-bet.com.
Compliance and risk management: To meet legal obligations (KYC/AML, age verification, record-keeping), manage risk, and monitor for potentially problematic gambling behaviour.
Service improvement: To analyze performance, identify usability issues, develop new features, optimize games and promotions, and improve overall user experience.
Marketing and personalization: To send promotional communications (where permitted by law and your preferences), offer bonuses tailored to your profile, and display personalized content or recommendations.
Analytics and statistics: To conduct aggregated and anonymized analysis of user behaviour, traffic, and performance, helping us understand how our services are used.
Fraud prevention and security: To detect and prevent fraud, unauthorized access, money laundering, collusion, abuse of bonuses, and other security incidents.
Legal defence and enforcement: To establish, exercise, or defend legal claims and to enforce our Terms and Conditions.

Reflect: If we intend to use your personal data for a new purpose not compatible with the purposes listed above, we will inform you in advance and, where required, seek your consent.

Disclosure & Sharing

Observe: We may share your personal data with selected third parties where necessary and lawful.

Expand: We do not sell your personal data. We disclose or share personal data only under appropriate contractual and security safeguards, and only to the extent needed for the purposes described in this Privacy Policy.

Payment and Financial Partners

Recipients: Payment processors, banks, card schemes, e-wallet providers, cryptocurrency processors, and other financial intermediaries.
Purpose: To process deposits, withdrawals, refunds, and to detect and prevent fraudulent payments.

Service Providers and Technical Partners

Recipients: IT hosting providers, game providers, customer support platforms, email and SMS delivery providers, analytics providers, identity verification and AML screening services, and security service providers.
Purpose: To operate, maintain, secure, and improve our website and services, and to provide technical and customer support.

Affiliates and Group Companies

Recipients: Entities within the same corporate group as Dama N.V., or authorized marketing affiliates that promote Moon Win and Moon Win.
Purpose: To manage affiliate programs, measure campaign performance, and coordinate marketing and compliance activities.

Regulators, Authorities, and Dispute Bodies

Recipients: Licensing and regulatory authorities (including Antillephone N.V. in Curaçao and, where relevant, Canadian, EU, or Mexican authorities), financial intelligence units, courts, law enforcement, and alternative dispute resolution bodies.
Purpose: To comply with legal and regulatory obligations, respond to lawful requests, enforce our rights, or protect our users and the public.

Advertising and Analytics Partners

Recipients: Third-party advertising networks, analytics providers, and social media platforms.
Purpose: To conduct analytics, performance measurement, and, where you have consented or where permitted by law, to deliver personalized advertising and retargeting.

Business Transfers

Recipients: Prospective or actual buyers, investors, or other third parties in connection with a merger, acquisition, restructuring, or sale of assets.
Purpose: To facilitate corporate transactions, in which case personal data will remain protected by appropriate confidentiality and security commitments.

Reflect: Whenever we share your data with third parties, we require them to process it only on our documented instructions, to protect it with appropriate security measures, and to comply with applicable privacy laws.

International Transfers

Observe: As a Curaçao-licensed online gambling operator serving players in Canada and potentially other regions, data may be transferred to and processed in countries outside your own.

Expand: Your personal data may be transferred to, and stored or processed in:

Curaçao (where Dama N.V. is incorporated and where certain systems and staff are located);
Member states of the European Economic Area (EEA) and the United Kingdom (where some service providers, game suppliers, or affiliates may operate);
Canada and the United States (for hosting, payment processing, analytics, and other outsourced services);
Other jurisdictions where our carefully selected service providers or partners are located.

Where your personal data is transferred across borders, we implement appropriate safeguards such as:

Contractual clauses requiring recipients to protect personal data in line with applicable laws and our policies;
For transfers from the EEA/UK, reliance on the European Commission's Standard Contractual Clauses or other approved transfer mechanisms, where applicable;
Technical and organizational security measures (encryption, access controls, minimization) limiting the risks associated with cross-border transfers.

Reflect: By using the Moon Win version of the site and our services, you understand that your personal data may be processed in countries that may have different data protection laws than your country of residence; however, we will always protect your data as described in this Privacy Policy.

Data Retention

Observe: We retain personal data only as long as necessary for the purposes for which it was collected or as required by law.

Expand: Retention periods may vary based on the type of data and legal requirements, particularly AML, financial, and regulatory obligations relevant to online gambling. As a general principle:

Account and identification data: Retained for the duration of your active account and generally for up to five (5) years after account closure, to comply with AML/financial record-keeping obligations and to handle potential disputes.
Transaction and payment data: Retained for at least five (5) years after the date of the transaction or account closure, whichever is later, in line with applicable AML and accounting requirements.
Technical and log data: Retained typically between six (6) months and two (2) years, depending on security and operational needs, unless a longer period is required for the investigation of security incidents or fraud.
Marketing data: Retained until you withdraw consent or opt out of marketing communications, and for a short period thereafter (generally up to six (6) months) to record your opt-out decision.
Responsible gambling and risk data: Retained as long as necessary to assess and manage gambling risks and uphold self-exclusion or cooling-off arrangements, and for a reasonable period thereafter to ensure their effectiveness.

We will securely delete or irreversibly anonymize personal data when:

The retention period has expired;
The data is no longer necessary for the purposes for which it was collected;
You successfully exercise your right to erasure and there is no overriding legal basis for further retention.

Reflect: In all cases, retention periods are determined by taking into account statutory requirements, limitation periods for legal claims, and the principle of data minimization.

Your Rights

Observe: You have specific rights regarding your personal data under Canadian privacy laws, and, where applicable, under the GDPR and Mexican data protection laws.

Expand: We aim to provide a consistent and user-friendly rights framework that aligns with:

Canadian privacy laws (such as PIPEDA and equivalent provincial laws);
EU/EEA and UK data protection law (GDPR and UK GDPR), where applicable to you;
Mexican privacy law, particularly the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations.

Right of Access

You can request confirmation of whether we process your personal data and obtain a copy of such data, together with information about how and why it is processed.

Right to Rectification (Correction)

You can request that we correct or update inaccurate, incomplete, or outdated personal data (e.g., your address, email, or payment details).

Right to Erasure / Cancellation

Subject to legal obligations (e.g., AML and record-keeping), you may request deletion of your personal data where:
- It is no longer necessary for the purposes for which it was collected;
- You withdraw consent (where consent was the legal basis) and there is no other legal ground for processing;
- You successfully object to processing; or
- The data has been processed unlawfully.

Right to Restrict Processing

You may request that we restrict processing of your data (without deleting it) in certain situations, for example while we verify accuracy or assess an objection.

Right to Object

Where processing is based on our legitimate interests or for direct marketing, you can object at any time. We will stop processing unless we demonstrate compelling legitimate grounds or we are required to continue processing by law (e.g., AML obligations).

Right to Data Portability (GDPR-aligned)

Where applicable (primarily for users protected by GDPR/UK GDPR), you may request that we provide certain personal data in a structured, commonly used, and machine-readable format, or that we transmit it to another controller, where technically feasible.

Rights under Mexican Law (ARCO Rights)

For users covered by Mexican law, we respect ARCO rights:
- Access: obtain information on how your data is processed;
- Rectification: correct inaccurate or incomplete data;
- Cancellation: request deletion where appropriate;
- Opposition: object to certain processing in accordance with LFPDPPP.

Right to Withdraw Consent

You can withdraw your consent for marketing communications, certain cookies, or any processing based solely on consent at any time. This does not affect the lawfulness of prior processing.

Exercising Your Rights

Submit a request: Contact us via email at [email protected] or by post to our Data Protection Department, clearly indicating:
- Your full name and contact details;
- Your account ID or username (if applicable);
- The right(s) you wish to exercise and the data concerned.
Verification: We may ask you for information or documents to verify your identity and ensure that we do not disclose data to unauthorized persons.
Response time: We aim to respond within 30 days of receiving a complete request. Where permitted by law and in complex cases, this period may be extended once by up to an additional 30 days; if so, we will inform you of the extension and reasons.
Cost: Requests are handled free of charge, unless they are manifestly unfounded or excessive. In such cases, we may charge a reasonable fee or refuse to act, as permitted by law.

Reflect: Some rights may be limited by gambling, AML, and other legal obligations. Where we cannot fully comply with your request, we will explain the reasons, unless restricted by law or regulatory secrecy requirements.

Cookies & Tracking Technologies

Observe: Cookies and similar technologies are used to provide a secure, reliable, and personalized experience.

Expand: When you visit Moon Win on moonwin-bet.com, we may use the following types of cookies and tracking tools:

Types of Cookies

Session cookies: Temporary cookies that exist only while your browser is open. They are essential for site functionality, such as keeping you logged in during a session.
Persistent cookies: Cookies that remain on your device for a defined period or until you delete them. They remember your preferences and help us recognize you on return visits.
First-party cookies: Cookies set directly by moonwin-bet.com for core functionality and security.
Third-party cookies: Cookies set by external providers (e.g., analytics or advertising partners) to help us analyze traffic or deliver targeted content, subject to your consent where required.

Purposes of Cookies

Strictly necessary / functional: To enable essential website functions, such as account login, session management, payment processing, and security.
Preferences: To remember your settings (language, region, display preferences) and provide a more personalized browsing experience.
Analytics: To understand how visitors use our site, which pages are most popular, and how we can improve usability and performance. Data is generally aggregated and anonymized.
Advertising and marketing: To measure the performance of campaigns, prevent ad fraud, and, where allowed, serve relevant promotional content based on your interests.

Managing Cookies

Browser settings: Most browsers allow you to block or delete cookies via their settings. Note that disabling essential cookies may affect site functionality and prevent you from using certain features.
Internal controls: Where available, you can manage your cookie preferences (particularly for analytics and advertising cookies) using our cookie banner or settings panel on moonwin-bet.com.
Do Not Track / similar signals: Our response to browser-based "Do Not Track" signals may be limited by technical and legal factors; however, you can always use the methods above to manage cookies.

Reflect: Your cookie preferences can be changed at any time, but changes may not affect cookies that have already been placed; you may need to manually delete them through your browser.

Data Security

Observe: Protecting your personal data, financial information, and gambling activity is critical to us.

Expand: We implement technical and organizational measures designed to provide an appropriate level of security, taking into account the nature of the data and the risks associated with online gambling services. These include, among others:

Encryption in transit: Data transmitted between your device and our servers is protected using industry-standard Transport Layer Security (TLS 1.2 or higher).
Encryption at rest: Sensitive data (such as passwords and certain payment-related information) is stored using strong encryption and hashing methods.
Access controls: Access to personal data is strictly limited to authorized personnel and service providers who require it for legitimate business purposes and are bound by confidentiality obligations.
Multi-factor authentication and account security: Internal administrative access is protected with multi-factor authentication (MFA). Players are encouraged to use strong, unique passwords and maintain the confidentiality of their credentials.
Segregated environments: Production, testing, and development environments are separated to reduce the risk of unauthorized access or accidental exposure of live data.
Monitoring and logging: Systems are monitored for suspicious activity, intrusion attempts, and performance issues. Logs are maintained to support security investigations and incident response.
Regular security reviews: We perform periodic security assessments, vulnerability scans, and, where appropriate, third-party audits to identify and mitigate potential weaknesses. Our security framework is designed to be consistent with recognized standards such as ISO 27001 and SOC 2, although this does not imply formal certification unless explicitly stated.
Staff training: Employees with access to personal data receive training on data protection, confidentiality, and security best practices.
Incident response: We maintain procedures for handling data breaches and other security incidents, including containment, investigation, remediation, and, where required by law, notification to affected individuals and relevant authorities.

Reflect: While we strive to protect your data using robust measures, no system can be guaranteed completely secure. You also play a role by keeping your login details confidential and promptly notifying us of any suspected unauthorized access to your account.

Complaints & Contacts

Observe: You have the right to raise questions, concerns, or complaints about our handling of your personal data.

Expand: If you wish to contact us or lodge a complaint, you may use the following channels:

Contacting Moon Win / Dama N.V.

Email (primary contact): [email protected]
Telephone (privacy inquiries): +5999 123 4567
Postal address: Dama N.V., Data Protection Department, Scharlooweg 39, Willemstad, Curaçao
Online contact: Through the contact or support forms available on https://moonwin-bet.com (e.g., via the "Support" or "Contact Us" section in your account area).

Internal Complaint Procedure

Submit your complaint: Provide your contact details, account ID (if any), and a clear description of your concern.
Acknowledgement: We will acknowledge receipt of your complaint within five (5) business days, where feasible.
Investigation: We will investigate your complaint, which may involve reviewing logs, communications, and relevant internal policies.
Response: We aim to provide a substantive reply within 30 days of receiving your complaint. If additional time is needed due to complexity, we will inform you of the delay and expected timeline.

Escalation to Supervisory Authorities

If you are not satisfied with our response or you believe your privacy rights have been infringed, you may lodge a complaint with a competent data protection authority:

Canada (primary for Canadian residents): Office of the Privacy Commissioner of Canada (OPC) - Website: https://www.priv.gc.ca.
European Union / EEA and UK (where GDPR/UK GDPR applies): Your local Data Protection Authority, a list of which is available via the European Data Protection Board - Website: https://edpb.europa.eu.
Mexico (where LFPDPPP applies): Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) - Website: https://www.inai.org.mx.

Reflect: You are encouraged to contact us first so that we can try to resolve your concern, but you are not obliged to do so before approaching a supervisory authority if local law grants you direct access.

Updates

Observe: Privacy and regulatory requirements evolve, particularly in sectors like online gambling.

Expand: We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal obligations, or technical and organizational practices.

Notification methods: In case of material changes, we will notify you by:
- Posting the updated Privacy Policy on moonwin-bet.com (Moon Win section and other relevant pages);
- Displaying banners or pop-up notices on the website;
- Sending email notifications to the address associated with your account; and/or
- Providing alerts within your account dashboard, where applicable.
Advance notice: For significant changes that materially affect your rights or the way we process your data, we will, where reasonably possible, provide at least 30 days' advance notice before the changes take effect.
Your choices: If you do not agree with the updated Privacy Policy, you may stop using our services and request account closure. Continued use of our services after the effective date of the changes will be deemed acceptance of the updated policy.
Version control: Each version of the Privacy Policy will be identified by an effective date and, where appropriate, a version number. We may maintain an internal or public changelog summarizing material modifications.

Last updated: February 2026.

Reflect: We recommend that you regularly review this Privacy Policy to stay informed about how we protect your personal data when you use the Moon Win services on moonwin-bet.com.