Sign Up
Login
A Midnight Wins privacy policy is usually read as a formality and it answers three practical questions: who holds the data, why they are allowed to keep it, and what can be asked of them. This page sets out those three for a Midnight Wins account and is a plain-language companion to the policy published on the site rather than a substitute for it.
| Role | Party | What it means in practice |
|---|---|---|
| Operator | Cerberlot N.V. | The company that decides what data is collected and why |
| Brand | Midnight Wins | The site through which the data is gathered |
| Regulator | Curaçao eGaming | The authority whose rules the collection follows |
| Game studios | Third-party suppliers | Receive play data for the games they provide |
| Payment providers | Banks, wallets, networks | Handle transaction data on their own terms |
The fourth and fifth rows are the ones players tend not to expect. An account generates data that does not stay with a single company: a game runs on a studio’s servers and a deposit passes through a payment provider, each operating under their own policies. That is normal architecture for a site of this kind, and the practical consequence is that a deletion request to one party does not reach the others.
Data accumulates in four distinct streams, and they are governed differently because they exist for different reasons.
| Stream | Where it comes from | Why it exists |
|---|---|---|
| Registration data | The sign-up form | Creating and identifying the account |
| Verification data | Documents submitted on request | Meeting the licence conditions on identity |
| Transaction data | Deposits and withdrawals | Processing payments and financial record-keeping |
| Activity data | Play, sessions, devices | Running the games and applying limits |
Registration data is the smallest stream and the one most players think of. Verification and transaction data are the streams that carry legal weight, and they are the reason the answer to a deletion request is rarely a simple yes.
Requesting deletion of an account is a legitimate step and it does not remove everything. Records gathered to satisfy identity and anti-money-laundering obligations exist because a regulator requires them, and they are held for periods set by that requirement rather than by the operator’s preference.
The distinction that resolves most confusion is between marketing data and compliance data. A request to stop receiving offers can be honoured immediately and completely. A request to erase an identity document submitted for verification runs into a retention period that Midnight Wins does not have discretion over. Both requests are reasonable; only one of them can be answered the way a player expects.
A request that names which stream it targets therefore gets a real answer. A blanket request to delete everything produces a clarifying question, which costs an extra exchange before anything happens.
Cookie banners at Midnight Wins, as everywhere, present a single choice that conceals several. The categories behave differently and only some of them are genuinely optional.
| Category | What it does | Can it be declined |
|---|---|---|
| Strictly necessary | Keeps a session signed in, secures the connection | No; the site cannot function without it |
| Functional | Remembers language, layout, currency display | Yes, at the cost of resetting preferences |
| Analytics | Measures which pages and games are used | Yes, with no effect on play |
| Marketing | Builds a profile for targeted offers | Yes, and this is the one worth considering |
Declining the last two categories at Midnight Wins changes nothing about how the games run or how a bonus clears. It changes what is known about a player elsewhere. Anyone accepting a banner without reading it is usually consenting to the fourth row without meaning to, which is the practical reason the granular option is worth the extra click.
| Right | What to ask for | Realistic limit |
|---|---|---|
| Access | A copy of the data held on the account | None; this is the most straightforward request |
| Correction | A name or address amended | Must be consistent with verification documents |
| Deletion | Removal of personal data | Compliance records carry mandatory retention |
| Restriction | Processing paused while a matter is open | Applies to a dispute rather than as a default |
| Objection | An end to marketing use | Fully effective for marketing |
| Portability | Data in a transferable format | Applies to what was actively supplied |
The middle column is what turns a right into an outcome. A request stated as a right without a specific ask produces a description of the policy; a request naming the data and the action produces the action. The difference is usually one sentence.
Requests of this type carry statutory response windows in most jurisdictions and Midnight Wins publishes its own handling in the policy. A dated written thread is what makes any subsequent step possible, which is a further reason to use email rather than live chat for anything in this category.
Card numbers entered on a Midnight Wins payment page are generally handled by the payment provider rather than stored by the casino, which is why a card has to be re-entered rather than being visible in the account. Device wallets go further: the merchant receives a token and never the underlying number at all.
For a Midnight Wins account funded through Apple Pay, Google Pay or an equivalent, the practical outcome is that the most sensitive field in the whole process is never typed into a form on the site. That is a meaningful reduction in exposure and it costs nothing to take advantage of.
Vous ne pouvez pas copier le contenu de cette page
JS enabled