Scope and Purpose
The KYC Policy sets out how Mmk121 conducts Know Your Customer and anti money laundering activities. It covers identity verification, data collection and handling, risk assessment, and regulatory reporting. The policy applies to all users who register for and/or use the Services and remains in effect for the duration of the customer relationship and as required by law after termination.
Personal Data We Collect
We collect personal data necessary to establish and maintain a customer relationship, verify identity, process payments, and communicate with customers. Data categories include:
- Identity data such as name, date of birth, nationality, and government issued identifiers;
- Contact data including address, email, and telephone number;
- Financial data including payment method details, bank accounts, and transaction history;
- Account and device data such as login history, IP address, and device identifiers;
- KYC documentation and information provided by the customer;
- Data inferred from activity on the Services and communications with support staff.
Personal data may be stored in secure systems and retained for the periods required by law and by this policy.
How We Use Your Personal Information
We use personal data to provide and administer Services, verify identity, assess risk, prevent fraud and money laundering, process payments, and communicate important information about the account. Data may be used for security monitoring, internal analytics, regulatory reporting, and enforcement of Terms and Conditions. Retention periods align with legal requirements and are described in the Retention section.
Legal Basis for Processing and Consent
We process personal data on grounds including contract performance, compliance with legal obligations, and legitimate interests in maintaining the integrity of the Services and preventing abuse. Where required by law, we obtain consent for processing that is not essential to contract or legal obligations. You may withdraw consent where processing is based on consent, subject to contractual or legal constraints; withdrawal does not affect processing already undertaken under other lawful bases.
Identity Verification and KYC Procedures
Verification is performed to confirm identity and assess risk. Triggers include registration, deposits, withdrawals, or notable changes in activity. Acceptable documents include a valid passport, national ID card, or driver’s license; proof of address such as a recent utility bill or bank statement not older than two months. For funding sources or as required, additional verification may be requested (for example proof of funds or a selfie with an identity document). If cumulative deposits or withdrawals reach or exceed €500 or the equivalent, or if suspicious activity is suspected, further verification may be required. During verification, we may restrict withdrawals until checks are completed. If information provided is false or misleading, we may terminate the account and deny access to Services in addition to other remedies available under the Terms and Conditions.
Prohibited Jurisdictions and Restrictions
Registration and deposits are prohibited for residents located in certain jurisdictions where online gambling is restricted or prohibited. The following jurisdictions illustrate the scope of restrictions and are not necessarily exhaustive: Afghanistan, Albania, Algeria, American Samoa, Angola, Anguilla, Antigua & Barbuda, Argentina, Armenia, Aruba, Australia, Austria, Azerbaijan, Bahamas, Bangladesh, Barbados, Belarus, Belgium, Belize, Benin, Bermuda, Bhutan, Bonaire (Sint Eustatius and Saba), Bosnia and Herzegovina, Botswana, Bouvet Island, British Indian Ocean Territory, Bulgaria, Burkina Faso, Burundi, Cambodia, Cameroon, Cape Verde, Cayman Islands, Central African Republic, Chad, Christmas Island, Cocos (Keeling) Islands, Colombia, Congo, Cook Islands, Costa Rica, Ivory Coast, Croatia, Cuba, Curacao, Cyprus, Czech Republic, Denmark, Djibouti, Dominica, Dominican Republic, Ecuador, Egypt, El Salvador, Equatorial Guinea, Eritrea, Estonia, Ethiopia, Falkland Islands, Faroe Islands, Fiji, France, French Guiana, French Polynesia, French Southern Territories, Gabon, Gambia, Germany, Ghana, Greece, Greenland, Grenada, Guadeloupe, Guam, Guatemala, Guinea, Guinea-Bissau, Guyana, Haiti, Holy See, Honduras, Hong Kong, Hungary, Iran, Iraq, Israel, Italy, Jamaica, Jordan, Kazakhstan, Kosovo, Kuwait, Kyrgyzstan, Laos, Latvia, Lesotho, Liberia, Libya, Lithuania, Madagascar, Malawi, Malaysia, Maldives, Mali, Malta, Mauritania, Mauritius, Mayotte, Mexico, Micronesia, Montenegro, Montserrat, Mozambique, Myanmar, Namibia, Nauru, Nepal, Netherlands, New Caledonia, Nicaragua, Niger, Nigeria, Niue, Norfolk Island, North Korea, Oman, Pakistan, Panama, Paraguay, Peru, Philippines, Poland, Portugal, Puerto Rico, Qatar, Reunion, Romania, Rwanda, Saint Barthélemy, Saint Helena, Saint Kitts & Nevis, Saint Lucia, Saint Martin, Saint Pierre and Miquelon, Saint Vincent and the Grenadines, Samoa, San Marino, Sao Tome and Principe, Saudi Arabia, Senegal, Seychelles, Sierra Leone, Singapore, Slovakia, Slovenia, Solomon Islands, Somalia, South Sudan, Spain, Sri Lanka, State of Palestine, Sudan, Suriname, Svalbard, Swaziland, Sweden, Syria, Taiwan, Tajikistan, Tanzania, East Timor, Togo, Tokelau, Tonga, Tunisia, Turkey, Turkmenistan, Turks and Caicos Islands, Tuvalu, U.S. Virgin Islands, Uganda, Ukraine, United Kingdom, United States Minor Outlying Islands, United States of America, Uzbekistan, Vanuatu, Venezuela, Virgin Islands, Wallis and Futuna, Western Sahara, Yemen, Antarctica, Macedonia, Moldova, Mongolia, Kenya, Kiribati, Lebanon. We reserve the right to update this list consistent with applicable law and regulatory guidance.
AML Monitoring and Reporting
We maintain ongoing monitoring of transactions and customer activity to detect indicators of money laundering and fraud. Staff receive AML training and are empowered to identify suspicious patterns such as unusual gaming or deposit and withdrawal activity, inconsistent card data, or identity concerns. When suspected activity is identified, we will escalate to the designated AML Officer and, where required, file reports with the relevant authorities. We maintain transaction records and cross reference activity with communications histories to detect collusion or illicit behavior. High risk or politically exposed persons are identified and subjected to enhanced due diligence.
Account Access, Restrictions and Termination
During verification or investigations, we may restrict or suspend withdrawal capabilities. We may suspend or terminate an account if information provided by the customer is false, misleading, or incomplete, or if required by law or regulatory order, or if the customer breaches the Terms and Conditions.
Data Sharing and International Transfers
We may disclose personal data to regulatory authorities, payment processors, financial institutions, and other service providers as necessary to provide Services, comply with legal obligations, or protect legitimate interests. When required, transfers to jurisdictions outside the customer’s domicile may occur in accordance with applicable data protection laws and safeguards.
Data Security and Retention
We implement appropriate technical and organizational measures to protect personal data against loss, unauthorized access, or disclosure. Personal data is retained for a period of eight years from the date of the last interaction or as required by law, after which it is securely deleted or anonymized.
Cookies and Tracking Technologies
We use cookies and similar tools to manage sessions, authenticate users, remember preferences, and enhance security. You may adjust your cookie preferences where allowed by law, but certain cookies are necessary to provide Services.
Your Rights and How to Exercise Them
You may request access to, correction of, or deletion of your personal data. You may also request restriction of processing, data portability, or objection to processing based on legitimate interests. Requests should be directed to the contact details below. We will respond in line with applicable law and provide information about any processing done on your data.
Responsible Gambling and Age Verification
We operate a program to promote responsible gambling. We require all customers to be at least 18 years old and may perform age verification at registration or upon detection of underage indicators. If you are under the legal age, you will be denied access to Services.
Contact Information and They Privacy Requests
For questions about this policy or to exercise your data rights, contact the designated data protection contact at Mmk121. We may designate a data protection officer or privacy team to handle requests and complaints and to coordinate regulatory inquiries. We will respond within the timeframes required by applicable law and maintain records as required by regulatory authorities.