For players of MrBen · Effective 15 October 2026 · Version 1.0
The MrBen website you previously used was operated on the White Hat Gaming Limited ("WHG") platform. That platform service is now ending. The MrBen brand is not closing — it is moving to its owner, Mr iGaming & Fintech Group Ltd, which will operate it directly and relaunch it on its own platform. As part of this change, responsibility for your personal data is transferring from WHG to Mr iGaming & Fintech Group Ltd.
We are keeping your account data so that we can continue to look after your account, welcome you back when MrBen relaunches, and meet our legal obligations. This notice explains who is now responsible for your personal data, what data we hold, why we process it, the legal basis for doing so, how long we keep it, and the rights you have. Please read it carefully.
1. Who is responsible for your data (the data controller)
Mr iGaming & Fintech Group Ltd (operating the MrBen brand) is now the data controller for your personal data.
Controller
Mr iGaming & Fintech Group Ltd
Registered address
Archbishop Makarios III Avenue 84, Office 1, 6017, Larnaca, Cyprus
White Hat Gaming Limited previously acted as the operator/processor of this data and is transferring it to us in accordance with the termination agreement between the parties.
2. What personal data we hold
We hold the personal data associated with your player account, which may include:
Identity and contact details — name, date of birth, email address, postal address, telephone number.
Account information — username, account status, verification (KYC) status, and communication and marketing preferences.
Transaction history — deposits, withdrawals, gameplay and bonus activity linked to your account.
Responsible-gambling information — any limits, time-outs or self-exclusions you set.
We do not receive or store your full payment-card numbers or passwords from the previous platform.
3. Why we process your data (purposes)
Legal and regulatory compliance — to meet anti-money-laundering, licensing, responsible-gambling and record-keeping obligations, including retaining records for the periods the law requires.
Continuing and relaunching your account — to maintain your account during the move, and to restore access and welcome you back when MrBen relaunches on our own platform.
Our own business use, including reactivation and marketing communications about the relaunch and our services — only where you have given the necessary consent, and you can withdraw that consent at any time.
We will not send marketing to self-excluded players. If you are self-excluded, or set yourself to exclude while a marketing consent is active, we will not send you marketing or reactivation communications. Any self-exclusion recorded against your account is respected and enforced.
4. Our lawful basis for processing
Depending on the purpose, we rely on the following lawful bases under applicable data-protection law (including the UK/EU GDPR where it applies to you):
Purpose
Lawful basis
Meeting AML, licensing and other legal obligations
Legal obligation
Continuing to provide and administer your account
Performance of a contract
Reactivation and marketing communications
Consent (which you may withdraw at any time)
Keeping our services secure and preventing fraud
Legitimate interests
5. Your rights and how to exercise them
You have the following rights over your personal data:
Access — request a copy of the personal data we hold about you.
Correction — ask us to correct data that is inaccurate or incomplete.
Erasure — ask us to delete your data, where we are not required to keep it by law.
Objection — object to certain processing, including marketing.
Portability — receive certain data in a portable, machine-readable format.
Withdraw consent — withdraw any consent you have given, at any time.
To exercise any of these rights, or to ask a question about this notice, email us at privacy@mrben.com. We will respond within the timeframe required by applicable law (normally within one month). If you are not satisfied with our response, you have the right to complain to your local data protection supervisory authority. As our controller is established in Cyprus, that authority is the Office of the Commissioner for Personal Data Protection (Cyprus) — dataprotection.gov.cy.
6. How long we keep your data
We keep your personal data only for as long as necessary for the purposes above:
Your account and its data — kept while the brand is being migrated and relaunched so we can restore your account. If you ask us to close your account or delete your data, we will do so, subject to the legal retention requirement below.
Regulatory and AML records — retained for the periods required by law: for anti-money-laundering records, typically five (5) years after the end of our business relationship with you, or longer where the law requires.
Marketing preferences and reactivation data — retained until you withdraw consent or object, after which it is removed from marketing use.
When data is no longer required, it is securely deleted or anonymised.
7. Changes to this notice
We may update this notice from time to time. The version and effective date at the top show when it was last changed.