Privacy Policy

Policy Boundaries

This policy applies only to this website, not to any other service a visitor may reach from it. Every rule below governs how Mirax casino handles information gathered while someone uses this site, and nothing in this document extends to offline interactions or to pages operated by other parties.

Who This Covers

The document addresses anyone who visits, reads, or interacts with the website, whether they leave comments, submit messages, or simply browse. It describes the expectations both sides carry: what the site may collect and what a visitor can reasonably demand in return.

Collected Information

Data arrives through two channels. The first is direct: a visitor supplies contact details, writes a message, or otherwise enters information deliberately. The second is automatic: the website records technical footprints left during normal operation, including the IP address, browser type, device characteristics, pages viewed, and session behaviour.

Neither channel is optional in full. Browsing without any automatic collection is technically impossible, though the depth of that collection can be limited through browser settings.

Purpose of Processing

Every piece of information serves a defined end. The website needs data to deliver its core function, respond to enquiries, and keep content accurate and current. Editorial quality depends on understanding what readers find useful, which requires analysing aggregate behaviour rather than individual activity.

Security forms a second purpose. Detecting spam, fraud, and abusive patterns requires examining traffic signals such as IP addresses and request sequences. Stability and uptime likewise depend on monitoring how the site performs under real usage.

Audience analytics sit between these two aims: they improve the experience for readers while helping the editorial team judge what content deserves attention. No single data point is pursued for its own sake; each one ties back to a stated function.

Aggregated Processing

Where a purpose can be met without identifying a specific person, the site works with aggregated or anonymised data instead. Visitor counts, popular sections, and device trends reveal patterns without linking them to any individual. This approach reduces the privacy impact of analytics while preserving the insight the editorial team needs.

Aggregation is not always possible. Responding to a direct message or verifying a deletion request necessarily involves identifiable information. The site chooses the least intrusive form of data that still achieves the task.

Cookies and Similar Tools

Cookies and related technologies perform three jobs: they keep the site functional, they remember preferences a visitor has selected, and they feed analytics systems. Without them, settings would reset on every page load and repeated visits would look like first-time arrivals.

Browser controls give visitors the final say. Most browsers allow rejection of some or all cookies, and the site respects those choices. The trade-off is practical: disabling cookies may disable features that depend on them, such as remembering a language choice or a display preference.

Data Sharing

The website does not sell or rent information to unrelated parties. Sharing happens only with a defined group of service providers: hosting companies that store the site, analytics firms that process usage statistics, communication tools that deliver messages, and security services that protect against abuse.

Each provider receives only what its function requires and nothing more. The site selects these partners with care, but it cannot guarantee the practices of organisations it does not control.

Legal obligations form a separate basis for disclosure. If a court, regulator, or lawful request demands information, the site may release it. The same applies where disclosure protects the website’s legitimate interests, such as defending against a legal claim or investigating suspected misuse.

Security Measures

Protection rests on reasonable technical and organisational controls. Secure systems guard data in transit and at rest, access is limited to people who genuinely need it, and internal procedures aim to catch and correct problems before they escalate.

No method offers absolute certainty. Even well-designed security can be breached by determined attackers, human error, or unforeseen vulnerabilities. The site commits to sensible precautions, not to an impossible guarantee of invulnerability.

Visitors also carry responsibility. Using strong credentials where the site requires them and reporting suspicious activity helps the overall effort succeed.

Cross-Border Transfers

Some service providers operate servers or teams outside the visitor’s own country. When information crosses borders, it may be subject to the laws of the destination country, which can differ from local rules.

The site relies on standard safeguards for such transfers: contractual clauses with providers, data-handling agreements, and a general expectation that partners maintain comparable protection levels. Visitors should understand that international data flows are a routine part of modern website operations rather than an unusual occurrence.

Responsible Gaming Support

Certain data supports player-protection efforts. Where behaviour suggests misuse of site materials, or where a safety-related message may be appropriate, the site may use the available information to act accordingly.

This function exists to identify patterns that warrant attention, not to penalise visitors. The aim is to keep content consumption healthy and to intervene early when something appears off. Self-exclusion and responsible-gambling resources remain available through the website’s dedicated channels, and nothing in this policy weakens those safeguards.

Visitor Rights

Every visitor may ask what personal data the site holds about them. Requests for access, correction of inaccurate details, or deletion are all legitimate, and the site will act on them where the law and practical constraints allow.

Verification precedes action. Before releasing or changing any data, the site must confirm the requester is who they claim to be. This step protects against unauthorised access by someone impersonating another person.

Some requests cannot be fully granted. Where data is needed for legal compliance, security monitoring, or ongoing dispute resolution, deletion may be partial or delayed. The site will explain any limitation rather than silently ignoring the request.

Retention Period

Information stays only as long as it serves a genuine purpose. Security logs, analytics records, communication threads, and administrative files each have their own natural lifespan tied to their function.

Once a purpose expires, the data faces one of two fates: deletion or anonymisation. Anonymised data may remain for statistical purposes because it no longer identifies anyone. The site does not keep personal data indefinitely out of habit; every retention decision traces back to a current need.

External Links

Links on this website lead to third-party services, including casinos and other resources. Once a visitor leaves this site, this policy ceases to apply.

The website does not control those external services and cannot answer for their privacy practices. Visitors should review the destination site’s own policy before sharing any information there.

Policy Updates

This document may change as the website evolves or as legal expectations shift. Each revision reflects the practices in effect at that time, and the most recent version published on the site governs all subsequent use.

Visitors who continue using the site after an update accept the revised terms. Those who disagree with a change may stop using the site or submit a privacy request through the contact channels below.

Contact Options

Questions, access requests, correction demands, or deletion requests all flow through the website’s official contact methods. Submissions should describe the concern clearly so the site can respond without unnecessary back-and-forth.

The site acknowledges every legitimate request and handles it without undue delay. Where a request cannot be fulfilled in full, the response will state the reason and, where possible, suggest an alternative path.