Hello Millions Privacy Policy

Hello Millions takes the responsibility of handling your personal information seriously. This policy explains, in plain language, what we collect when you create an account or use the social casino, how that information is stored, who we share it with and the rights you have over your data. The platform is operated by B-Two Operations Limited, a company registered in the Isle of Man (company number 021483V), registered office Second Floor, 18-20 North Quay, Douglas, Isle of Man, IM1 4LE. The policy applies to every page of hellomillions.org, every game in the lobby and every interaction you have with our support team.

We update this page whenever we make a material change to the way we collect or use information. The most recent version is always the version you are reading right now, with a short summary of any meaningful update sent by email to active players at least seven days before it takes effect.

What information does Hello Millions collect?

When you create an account we collect the basics needed to set it up and keep it secure, your name, date of birth, email address, country of residence and a password hash. During verification we collect a government-issued photo ID and a proof of address. As you play we collect activity data such as the games you open, your coin balances and any redemption requests, along with standard technical data like IP address, device type and browser version. None of this is collected casually. Each category exists for a clear reason, whether that is keeping the account secure, meeting age-verification requirements, processing a redemption, preventing fraud or improving the way the lobby runs on the device you happen to be using.

We also collect optional information you choose to share, like preferences in your account settings, marketing consent and any details you mention while talking to our support team. You can update or remove most of this information at any time from inside your account.

How is the data used?

Your personal data is used to run your account, process redemptions, prevent fraud, meet legal and regulatory requirements, send transactional emails such as confirmations and security alerts, and, only with your consent, send marketing updates about new promotions and games. We do not sell your personal data to third parties under any circumstances. Aggregated, non-identifying analytics may be used to understand player trends in the lobby, like which slot categories are popular at which times, but those datasets do not identify you personally and cannot be reversed into identifying you.

Who is the data shared with?

Data is shared with the service providers that help us run Hello Millions, payment partners for redemptions, identity verification specialists during KYC, cloud hosting providers, the email platform that sends transactional messages and the chat widget powering live support. Each provider is bound by a data processing agreement and may only use your data for the specific purpose we ask them to. We may also disclose data where required by law, regulator or court order, or to investigate suspected fraud against the platform or its players.

How long is data kept?

Account and verification data is held for the duration of your account plus the retention period required by applicable law, typically five years after closure. Marketing preferences and consent records are kept for as long as you remain opted in, with a short record retained after opt-out to confirm the change. Technical logs are kept for shorter rolling windows, usually between thirty and ninety days, after which they are deleted or anonymised. If you ever want a copy of the data we hold about you, you can request it at any time and we will send it back inside thirty days.

What rights do I have over my data?

You can access, correct, export or request the deletion of your personal data at any time by emailing support@hellomillions.org from the address linked to your account. Some data must be kept for regulatory reasons even after deletion is requested, and we will explain clearly what stays and what is removed. You also have the right to withdraw marketing consent at any time from the account preferences page, with the change taking effect immediately. If you are not satisfied with the way we handle a privacy request you can also escalate the matter to the relevant data protection authority for your region.

How is the data secured?

All transmissions are protected by bank-grade SSL encryption. Account passwords are stored as one-way hashes and are never accessible to staff. Two-factor authentication is available on every account and we strongly recommend turning it on. Access to internal systems is restricted on a need-to-know basis with mandatory multi-factor authentication for all staff accounts. The platform is hosted in tier-one data centres with physical access controls, intrusion detection and continuous monitoring, and full backups are taken regularly and stored separately from the live systems.

How does Hello Millions handle children and underage users?

Hello Millions is restricted to players who are 19 years of age or older. We do not knowingly collect data from anyone under 19. Age is verified at signup through the date-of-birth field and confirmed at redemption through identity verification documents. If we discover that an account has been opened by someone under 19, the account is closed immediately, any data is deleted in line with our retention policy and any balances are handled under the Terms of Service. If you believe an underage account exists, please email support@hellomillions.org with the relevant details so we can act quickly.

How do I contact Hello Millions about privacy?

Privacy questions, data access requests and complaints can be sent to support@hellomillions.org. Please send the request from the email address linked to your account so we can verify and respond quickly. For any request that needs to be handled by post, you can write to B-Two Operations Limited at Second Floor, 18-20 North Quay, Douglas, Isle of Man, IM1 4LE. Marking the envelope or subject line "Data request" helps us route the message to the right team without delay.