Privacy Policy

Welcome to Legend of Medusa™ (hereinafter, "the Website" or "we", "us", "our"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how Medusa Gaming Ltd., operating the Website at https://legendofmedusa.net/, collects, uses, stores, and shares your personal data when you interact with our services, particularly in relation to the Legend of Medusa™ slot game.

As a licensed gambling operator, we understand the critical importance of trust, transparency, and robust data protection. We recognise that our services fall under the "Your Money Your Life" (YMYL) category, impacting your financial well-being. This policy is designed to reassure you that your data is handled with the utmost care, in full compliance with UK and international data protection standards, and with a proactive approach to responsible gaming.

1. Who We Are

We are the data controller responsible for your personal data collected via this Website. This means we determine the purposes and means of processing your data. We are regulated by the UK Gambling Commission (UKGC) under Licence Number XXXXXX (example, typically found on footer or T&Cs) and adhere to their strict guidelines for player protection and data security.

2. Our Commitment to Your Privacy and Security

Your trust is paramount. We are dedicated to providing a secure, fair, and responsible gaming environment. Our commitment extends beyond mere legal compliance; it is fundamental to our operational culture.

3. What Data Do We Collect?

We collect various types of personal data depending on your interaction with our Website and the Legend of Medusa™ game:

• Identity Data: Full name, date of birth, gender, nationality, photographs, copies of identification documents (e.g., passport, driving licence).
• Contact Data: Billing address, email address, telephone numbers.
• Financial Data: Bank account details, payment card details, e-wallet information, transaction history. We comply with PCI DSS standards for payment data.
• Account Data: Username, password, unique player ID, account preferences, security questions and answers.

Gameplay Data (Specific to Legend of Medusa™):

• Betting History: Records of your bets, wins, losses, game rounds played, game outcomes, and specific game features triggered (e.g., Hold and Win feature, Gamble feature attempts and outcomes).
• Autoplay Settings: Configuration of autoplay limits and stops.
• Game Performance: Data related to game loading times, errors, and any malfunction events.
• Bonus and Jackpot Interactions: Records of jackpot wins (Grand, Major, Minor, Mini) and bonus symbol interactions.

• Responsible Gambling Data: Deposit limits, loss limits, self-exclusion periods, reality check settings, and any communications regarding responsible gambling concerns.
• Technical Data: Internet Protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this Website.
• Usage Data: Information about how you use our Website and services, including navigation paths, page views, duration of visits, and interaction patterns.
• Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties, and your communication preferences.
• Correspondence Data: Records of your communications with our customer support, including chat transcripts, emails, and call recordings.

4. How Do We Collect Your Data?

We use different methods to collect data from and about you, including:

Direct Interactions

You provide data directly when you:

• Register for an account
• Make deposits or withdrawals
• Play the Legend of Medusa™ game
• Apply for promotions or bonuses
• Contact customer support
• Set responsible gambling limits or self-exclude
• Subscribe to marketing communications

Automated Technologies or Interactions

As you interact with our Website, we automatically collect Technical and Usage Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.

Third Parties or Publicly Available Sources

We may receive personal data about you from various third parties:

• Technical Data from analytics providers (e.g., Yandex.Metrica), advertising networks, and search information providers
• Contact, Financial and Transaction Data from providers of technical, payment, and delivery services
• Identity and Contact Data from data brokers or aggregators
• Identity and Contact Data from publicly available sources (e.g., electoral roll) for identity verification and anti-money laundering (AML) purposes
• Identity and Responsible Gambling Data from national self-exclusion schemes (e.g., GAMSTOP) or other gambling operators as legally required

5. How and Why We Use Your Data (Purposes and Legal Bases)

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Purpose for Processing	Type of Data Involved	Legal Basis
Account Registration and Management	Identity, Contact, Account Data	Performance of Contract
Processing Gaming Transactions	Financial, Gameplay, Identity Data	Performance of Contract
Responsible Gambling Monitoring	Gameplay, Responsible Gambling Data	Legal Obligation
Customer Support	Contact, Correspondence, Account Data	Legitimate Interest
Marketing Communications	Contact, Marketing Data	Consent
Fraud Prevention and Security	Technical, Identity, Financial Data	Legitimate Interest
Regulatory Compliance	All relevant data types	Legal Obligation

6. Your Rights Under UK GDPR

Under UK data protection laws, you have rights in relation to your personal data:

7. Data Security and Protection

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. These measures include:

• SSL encryption for all data transmissions
• Secure server infrastructure with regular security updates
• Access controls and authentication procedures
• Regular security audits and penetration testing
• Staff training on data protection and security procedures
• Incident response procedures for potential data breaches

We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

8. International Data Transfers

Some of our external third parties may be based outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards including:

• Adequacy decisions for countries deemed to provide adequate protection
• Standard contractual clauses approved by the UK authorities
• Additional technical and organisational measures where necessary

9. Cookies and Similar Technologies

We use cookies and similar tracking technologies to collect and use personal data about you. Our website uses both essential cookies (necessary for website functionality) and non-essential cookies (for analytics and marketing).

Types of Cookies We Use:

• Essential Cookies: Required for basic website functionality and security
• Analytics Cookies: Help us understand how visitors interact with our website
• Marketing Cookies: Used to deliver relevant advertisements
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings, though disabling certain cookies may affect website functionality.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify registered users via email or account notification
• For significant changes, provide clear notice on our website

We encourage you to review this policy periodically to stay informed about how we protect your data.