Privacy at Mirax

Responsibility for personal information handled through Mirax lies with Kika Technology B.V. as controller. A data protection officer oversees privacy questions and requests.

What we collect

We process identity details such as your name, birth date, nationality, gender, and identity-document number. Contact details include your home address, phone number, and email address. Account and payment records may cover card or bank information, deposits, withdrawals, and transaction history.

We also collect game choices, wagers, sessions, wins and losses, along with technical details such as your IP address, device, browser version, operating system, and location data. Verification files may include identity and address documents, source-of-funds information, and other due-diligence material. Messages or information you send through support are also part of the record.

Data comes from you, from cookies and similar tools, and from external parties including payment processors, affiliate partners, verification providers, and public authorities.

Why we use your data

Account registration, payments, withdrawals, and support are processed to perform our contract with you. Legal obligations support processing for AML checks, gambling rules, responsible gambling, and other regulatory duties. Fraud monitoring and platform protection rely on legitimate interests and legal obligations.

With your consent, we may send promotions and personalized offers. You can change your mind at any time in your account or by writing to our team. Legitimate interests also support analytics, testing, service improvement, internal reports, audits, complaint handling, and automated support workflows. Business insights may use anonymized or pseudonymized information.

Who receives information

We may share relevant data with technology and service providers, game studios and platform partners, payment processors, anti-fraud and AML providers, and identity-verification services. Regulators, courts, law enforcement, and other public authorities may receive it when the law or enforcement duties require this.

Gemini, Anthropic, and OpenAI act as messaging processors with restricted access to the customer-messaging workspace for support and marketing workflows. Data may also go to professional advisers, marketing agencies when you have opted in, and a business successor after a merger, restructuring, or sale. International transfers use available adequacy decisions or contractual safeguards and added controls where needed.

How long records remain

We retain data only for its stated purpose and applicable legal, contractual, or regulatory needs. Financial and AML records remain for at least 5 years after account closure. Technical and behavioural records remain as long as needed for fraud management, gambling-behaviour review, or legal claims. Anonymized or aggregated information may be retained indefinitely for analysis and reporting.

Your choices and rights

You may request access, correction, deletion where law permits, restricted processing, or a portable structured copy. You may object to certain processing, including direct marketing, withdraw consent, and complain to the supervisory authority in your jurisdiction. We may ask for additional documents to confirm your identity before acting on a request.

We use technical and organizational measures such as access controls, authentication, encryption, network controls, monitoring, and vulnerability testing. No system can promise total protection.

Our services are for adults aged 18 or older, or the higher legal age where you live. We do not knowingly process a minor's data.