Customer Privacy Policy

1. Important information about this privacy notice and who the controller is

This privacy notice was last updated on 28 May 2026. Please read this privacy notice carefully as it contains important information on who we are and how and why we collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact us or supervisory authorities if you have a complaint. This privacy notice should be read together with:

• Our General Terms & Conditions – these are the terms upon which we offer our site, services and products;
• Our Fair Use Policy – this sets out information relating to the fair use of our services and products;
• Our Refer a Friend Policy – this provides details of how you can "refer a friend" to MrQ; and
• Our Safer Gambling Policy – this contains details of how we help to make sure you are in control of your gambling.

Tek Fox Ltd a company incorporated under the laws of Malta with company registration number C96152 (Tek Fox) is the controller for your personal data. When we use the term "we", "us", "our" or "MrQ" we are referring to Tek Fox. MrQ collects, uses and is responsible for certain personal data about you. When MrQ does this, we are subject to the EU and the UK General Data Protection Regulation (which we refer to as the "GDPR" in this privacy notice).

2. When does this privacy notice apply?

This privacy notice applies to MrQ's use of your personal data in the following situations, when you:

• Use our website www.MrQ.com (Website);
• Use our Mobile App;
• Play our Games;
• Contact us when you make enquiries through our Website, call us, email us or contact us on our socials or via live chat;
• Refer a friend to MrQ;
• Take part in any market research and/or provide feedback to us via surveys; and
• Post on social media and your post is directed to MrQ.

This privacy notice also applies to the use of personal data for our commercial and legal purposes when you interact with us in any way.

This privacy notice is not intended to take precedence over other notices or legal documents on our Website or provided to you throughout your interactions with MrQ.

3. Key terms used in this privacy notice

In this privacy notice we use certain words which have the following meanings:

Account: an account held by an Account Holder.

Account Holder: an individual who has successfully registered an Account on the Website.

AML: anti money laundering.

DPO: our data protection officer who can be contacted by emailing [email protected]

KYC: know your customer.

PEP: politically exposed person.

Personal data: any information relating to an identified or identifiable individual.

Player: an individual who is an Account Holder.

Special category data: personal data revealing racial or ethnic origin, political opinions, religious beliefs, philosophical beliefs or trade union membership, genetic data, biometric data (where used for identification purposes), data concerning health, sex life or sexual orientation.

Games: any of the gaming products offered on our Website or via our Mobile App.

4. Personal data we collect about you and how and why we use your personal data

Under data protection law, we can only use your personal data if we have a lawful reason (a 'legal basis'), for example, where you have given consent, to comply with our legal and regulatory obligations, for the performance of a contract with you or to take steps at your request before entering into a contract, or for our legitimate interests or those of a third party. A legitimate interest is when we or a third party has a business or commercial reason to use your personal data, so long as this is not overridden by your own rights and interests.

For ease, we have grouped types of personal data we use together into information types:

Registration Information – your full name, date of birth and postal address and Contact Information.

Contact Information – your postal address, email address and telephone number.

Interactions Information – your full name, email address, phone number, social media account, the content of the interaction and notes relating to our interaction with you. If our interaction is via the phone – your voice and a recording of the interaction.

KYC and Verification Information – your full name, passport, driving licence, identification card, proof of address and proof of payment methods used on your Account.

Due Diligence/AML Information – your full name, nationality, country of birth, occupation, employment history, salary, source of income, source of wealth, financial vulnerability, previous education, media involvement, PEP and sanctions list screening, ownership of payment methods, bank statements and supporting documents.

Safer Gambling Information – data relating to use of safer gambling tools, gaming activity, session duration, wagers/losses/wins on your Account, financial transactions, payment methods, Interactions Information, financial vulnerability indicators (including insolvency and bankruptcy records and history of County Court Judgements), vulnerability indicators and other indicators of harm.

Self Exclusion Information – Registration Information, Contact Information, the self-exclusion start and end date, and registration with GAMSTOP (who are the national multi-operator self-exclusion scheme).

Payments Information – your full name, debit card details, cardholder name, e-wallet details, bank account holder name, details associated with any other payment method used, successful and unsuccessful deposit and withdrawal data and any other financial transactions linked to your payments and use of your Account.

Gaming and Usage Information – date, time and amounts of stakes, winnings, deposits, deposit failures, withdrawals, and other gaming transactions including game choice and bonus uptake related to your Account.

Device Information – data including but not restricted to login and access data, IP address, ISP, VPN usage, proxies, network data, device type, language, time-zone, operating system, geolocation, operating system, browser type, screen resolution, fonts, advanced identifiers like WebGL and Canvas fingerprints.

Account Information – player ID, Registration Information, Gaming and Usage Information, Payments Information, KYC and Verification Information, Due Diligence/AML Information, Safer Gambling Information, Self Exclusion Information, Device Information and Interaction Information.

Feedback and Research Information – Registration Information, Contact Information and a record of any comments or feedback provided for this purpose as well as your social media profile and handle, where relevant.

The table below explains what we use your personal data for and why and our reason for using your personal data under data protection (and other laws where appropriate).

5. What happens if you fail to provide us with personal data

Where we need to collect personal data due to Legal and regulatory obligation, or under the terms of a contract we have with you and you fail to provide the personal data when requested, we may not be able to provide you with our products or services. In this case, we may have to cancel a service you have with us, but we will notify you if this is the case at the time.

6. How your personal data is collected

We collect personal data from you:

• Directly, when you enter or send us information, for example, when you register an Account with us, when you provide KYC identification and verification documents, when you contact us via any channels, send us feedback, financially transact on the Website or Mobile App, use our Website, play our Games, use our Mobile App, post material to social channels and complete feedback surveys or participate in research; and
• Indirectly, such as your browsing activity, device information, technical and profile data based on your equipment, site interactions and usage patterns while on our Website; we will usually collect this information indirectly using the technologies explained in our cookie policy.

We may also collect information from the following sources:

• From cookies on our Website – please see our cookie policy for more information;
• From our payment providers – financial and transaction data;
• From Credit Reference Agencies and similar providers – financial vulnerability checks and related financial information;
• From publicly available sources, for example, social media sites, search engines – verification and identification information and to build a risk profile; and
• From the National Self-Exclusion Register (GAMSTOP) – when an individual opts into "exclusions" from all participating UK gambling operators.

7. How we collect and use special category data

During the course of providing services to you, we may collect Special Category Data, for example, we may collect information from publicly available sources about previous criminal convictions. If you provide special category data to us during interactions with us, such as health information, we may retain and use this information to add protections to your account, where necessary if this identifies vulnerabilities which may impact your ability to use our services safely or to protect you from gambling related harms. We will always ensure we have a lawful basis for collecting and using this information.

8. Marketing and profiling

We use your personal data to send you updates by email, SMS, push notifications, post and telephone about our Games, including exclusive offers, promotions or new Games. We rely on consent to use your personal data for marketing purposes.

You have the right to opt out of receiving marketing communications at any time by using the "unsubscribe" link in emails. Where you opt out of receiving marketing messages, opting out will not apply to other communications which we are required to send by law or in connection with the provision of our services. We may ask you to review your marketing preferences when you have an Account with us or if there are changes in the law, regulation, or the structure of the MrQ business. You may also change your preferences by visiting your Account and changing your preferences in your profile section.

We collect information on how you use our Website, our Mobile App and which pages of our Website and Games you visit most to understand your preferences. We use this information to tailor the content and offers you see on our Website and Mobile App and to send you relevant information we think you might like based on your preferences. You have the right to object at any time to your personal data being used for direct marketing (including profiling). For details of how to exercise this right, see section "Your rights" below.

9. Who we share your personal data with

Your personal data may be shared with other companies within the MrQ group. It may also be disclosed to a third party who acquires us, or substantially all of our assets. We may also share some of your personal data with, or obtain your personal data from, the following categories of third parties:

• Payment service providers – in order to process your payments for services;
• Service providers – who may need access to certain personal data in order to provide their services to us, including but not limited to communications platforms, credit reference agencies, KYC and AML service providers, gaming providers, anti-fraud detection providers, customer relationship management tools and market researchers/consultants and advertisers;
• Regulators, Government Authorities and Law enforcement Agencies – to ensure we are cooperating and complying with applicable laws and regulations.

In addition to the categories of recipient listed above, we may disclose your personal data when this is required by the law of any jurisdiction to which MrQ may be subject.

We only allow those organisations to handle your personal data if we are satisfied that they take appropriate measures to protect your personal data. Where appropriate, we also impose contractual obligations on them to ensure they can only use your personal data to provide products and services to us and to you.

We or the third parties mentioned above occasionally also share personal data with:

• Our and their external auditors, for example, in relation to the audit of our or their accounts, in which case the recipient of the information will be bound by confidentiality obligations.
• Our and their professional advisors (such as lawyers and other advisors), in which case the recipient of the information will be bound by confidentiality obligations.
• Law enforcement agencies, courts, tribunals and regulatory bodies to comply with our legal and regulatory obligations.
• Other parties that have or may acquire control or ownership of our business (and our or their professional advisers) in connection with a corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvency. Where possible, information will be anonymised but this may not always be possible. The recipient of any of your personal data will be bound by confidentiality obligations.

10. Use of Artificial Intelligence (AI)

We use artificial intelligence (AI) powered tools as part of our customer interaction and support services to help us respond more efficiently, improve service quality, and enhance your overall experience on our platform. These tools may assist with handling common enquiries, routing requests, and providing timely responses. AI systems may process personal data you provide during interactions, but they operate under appropriate safeguards, are subject to human oversight, and do not make decisions that produce legal or similarly significant effects on you without human involvement.

We also use AI for internal and operational purposes, including analysing and understanding our player's interactions with the website, identifying trends in behaviour, improving our products and services, supporting staff training, and enhancing the efficiency and consistency of our internal processes.

We ensure that any use of AI is proportionate, secure, and in line with applicable data protection laws. Where AI is used for internal analysis, it is subject to appropriate access controls and, where possible, data minimisation and aggregation techniques. If you have any questions about our use of AI or wish to object to the processing, please contact us using the details in the section "How to contact us" below.

11. Where your personal data is held

Personal data may be held at our offices and those of our group companies, third party agencies, service providers, representatives and agents as described above, see section "Who we share your personal data with" above. Some of these third parties may be based outside the UK/EU. For more information, including on how we safeguard your personal data when this happens, see section "Transferring your personal data out of the UK and EU" below.

12. How long your personal data will be kept

We will not keep your personal data for longer than we need it for the purpose for which it was collected and as necessary to comply with legal and regulatory requirements and obligations under applicable laws or regulations, for example the applicable gambling regulations, KYC and AML regulations, or for us to resolve disputes and enforce our policies.

13. Transferring your personal data out of the UK and EU

It is sometimes necessary for us to transfer your personal data to countries outside the UK and EU. In those cases, we will comply with applicable UK and EU laws designed to ensure the privacy of your personal data. We will also transfer your personal data from the EU to the UK.

Under data protection laws, we can only transfer your personal data to a country outside the UK/EU where:

• The UK government has decided the particular country ensures an adequate level of protection of personal data (known as an "adequacy regulation") further to Article 45 of the UK GDPR;
• In the case of transfers subject to EU data protection laws, the European Commission has decided that the particular country ensures an adequate level of protection of personal data (known as an "adequacy decision") further to Article 45 of the EU GDPR;
• There are appropriate safeguards in place, together with enforceable rights and effective legal remedies for you; or
• A specific exception applies under relevant data protection law.

Where we transfer your personal data outside the UK or EU, we do so on the basis of an adequacy regulation or where this is not available, legally-approved standard data protection clauses recognised or issued further to Article 46(2) of the GDPR. In the event we cannot or choose not to continue to rely on either of those mechanisms at any time, we will not transfer your personal data outside the UK/EU unless we can do so on the basis of an alternative mechanism or exception provided by UK data protection law and reflected in an update to this policy.

Any changes to the destinations to which we send personal data or in the transfer mechanisms we rely on to transfer personal data internationally will be notified to you in accordance with the section on "Changes to this privacy notice" below.

14. Your rights

You have the following rights, which you can exercise free of charge:

• Access: The right to be provided with a copy of your personal data.
• Rectification: The right to require us to correct any mistakes in your personal data.
• Erasure (the right to be forgotten): The right in certain situations to require us to delete your personal data.
• Restriction of processing: The right to require us to restrict processing of your personal data in certain circumstances, for example, if you contest the accuracy of the data.
• Data portability: The right in certain situations to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party.
• To object: The right to object at any time to your personal data being processed for direct marketing (including profiling). The right to object in other situations to our continued processing of your personal data, for example, processing carried out for the purpose of our legitimate interests unless there are compelling legitimate grounds for the processing to continue or the processing is required for the establishment, exercise or defence of legal claims.
• Not to be subject to automated individual decision making: The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.
• The right to withdraw consent: If you have provided us with a consent to use your personal data you have a right to withdraw that consent easily at any time. You may withdraw consent by clicking on any unsubscribe links in communications we send to you. Withdrawing consent will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn.

For more information on each of those rights, including the circumstances in which they apply, please contact us using the details in the section 'How to contact us' below. If you would like to exercise any of those rights, please contact us via [email protected] and provide enough information to identify yourself, for example, your full name, postal address and customer number, any additional identity information we may reasonably request from you, let us know what right you want to exercise and the information to which your request relates.

15. Keeping your personal data secure

We have appropriate security measures to prevent personal data from being lost accidentally, used or accessed unlawfully. We limit access to your personal data to those who have a genuine business need to access it. Those processing your personal data will do so only in an authorised manner and are subject to a duty of confidentiality. We also have procedures to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

16. Use of cookies on our Website

A cookie is a small text file placed on your device (for example, your computer, smartphone or other electronic device) when you use our Website. We use cookies to recognise your device and store information about your preferences or past actions so that we can customise the Website and its content to your preferences.

For more information about how we use cookies and how you can control them, please see our Cookie Policy.

17. Third-party links on our Website

This Website contains links to third-party websites, plugins and applications. Clicking on those links and enabling those connections may allow third parties to collect or share personal data about you. We do not control these third-party websites and we are not responsible for their privacy policies or the use of your personal data. When you leave our Website, we encourage you to read the privacy notice of every website you visit.

18. How to complain

Please contact us if you have any queries or concerns about our use of your personal data using the contact details in the section "How to contact us" below. We hope we will be able to resolve any issues you may have. You also have the right to lodge complaints with the appropriate Data Protection Supervisory Authority.

• The competent authority in the UK is the Information Commissioner's Office
• The competent authority in Malta is the Office of the Information and Data Protection Commissioner (IDPC)

19. Changes to this privacy notice

We may change this privacy notice from time to time, when we do make changes, we will inform you via our Website by posting an updated copy of this privacy notice.

20. Updating your personal data

We take reasonable steps to ensure your personal data remains accurate and up to date. Please let us know if any of the personal data you have provided to us has changed, please contact us using the contact details in the section 'How to contact us' below.

21. How to contact us

You can contact us and/or our DPO by email via [email protected] if you have any questions about this privacy notice or the information we hold about you, to exercise a right under data protection law or to make a complaint.

V2 Last Updated 28/05/2026