Privacy Policy

This Privacy Policy explains how the online casino service operated under the Fortune Mobile profile on fortunemobi.com ("Fortune Mobile", "we", "us", "our") collects, uses, discloses and protects your personal data. It applies to players and other visitors who access or use our mobile-first casino services and website from the United Kingdom. Please read it carefully before using our services. The controller of your personal data is described below. This Privacy Policy is effective from 6 November 2025 and was last updated on 20 January 2026.

Who We Are

The Fortune Mobile casino offering available via fortunemobi.com is operated under the brand name "Fortune Mobile" by:

Grace Media Limited
Suite 7, Hadfield House, Library Street,
Gibraltar, GX11 1AA

Grace Media Limited is a limited company and acts as the data controller for personal data processed in connection with your use of Fortune Mobile.

Regulatory details:

United Kingdom: Licensed and regulated by the UK Gambling Commission under remote gambling operator account number 57869. See the public register: https://gamblingcommission.gov.uk/public-register/business/detail/57869.
Gibraltar: Holds a Gibraltar remote gambling licence issued by the Government of Gibraltar (licence reference not specified).

Data Protection Contact

We have a data protection function responsible for privacy compliance (the "Data Protection Officer" or "DPO"). You can contact our data protection team using the following details:

Email: [email protected] (please state "Data Protection / Privacy Request" in the subject line)
Postal: Data Protection Officer, Grace Media Limited, Suite 7, Hadfield House, Library Street, Gibraltar, GX11 1AA

We do not provide a public customer service telephone line. Support and privacy-related communications are handled via email, live chat or SMS/text channels made available within our services.

What Personal Data We Collect

When you use Fortune Mobile via fortunemobi.com, we collect and process different categories of personal data. The exact data collected depends on how you interact with us (for example, browsing the site, registering an account, depositing, or playing games).

Identity and Contact Data

Basic identification: full name, date of birth, gender (where provided), nationality.
Contact details: email address, mobile phone number, postal address and country of residence.
Account identifiers: username, player ID, authentication credentials (hashed passwords, security tokens).

Verification and Compliance Data

KYC documentation: copies or data extracted from identity documents (e.g. passport, driving licence), proof of address, and where required proof of payment method ownership.
Risk and due diligence data: results of identity checks, age verification, sanctions/PEP screening and affordability assessments carried out by us or our providers.

Financial and Transaction Data

Payment data: limited card details (card type and tokenised reference, but not full card numbers), e-wallet identifiers, bank account IBAN/Sort Code where applicable.
Transaction records: deposits, withdrawals, bonuses credited, wagering requirements status and balance history.

Technical and Device Data

Technical identifiers: IP address, device identifiers, operating system, browser type and version, screen resolution, mobile network and language settings.
Log data: access dates and times, pages viewed, clickstream information, session duration, login and security logs.

Usage and Behavioural Data

Gameplay behaviour: game selections, bet sizes, win/loss history, session length and frequency, time and date of play.
Interaction data: clicks, taps and navigation patterns on our website or app-like interface, responses to in-product messages and offers.
Responsible gambling data: self-exclusion status (including via GamStop), limits you set (deposit, loss, session limits), reality checks and time-outs.

Marketing and Communication Data

Preferences: your choices about receiving marketing via email, SMS/text, push notifications or in-account messages.
Engagement: records of whether marketing messages were opened, links clicked and unsubscribes or objections to marketing.

Cookies and Similar Technologies

Cookies: small text files stored on your device to make the site work, remember your preferences and measure performance.
Similar technologies: tags, pixels, SDKs and local storage used for analytics, fraud prevention and, where permitted, advertising and personalisation.

Legal Basis for Processing

We process personal data only where we have a valid legal basis under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Performance of a Contract

Account creation and management: we need to process your identity, contact and account data to open, operate and maintain your Fortune Mobile account.
Provision of gambling services: processing of gameplay, transaction and technical data is necessary to provide games, apply bonuses, settle bets and pay winnings.

Compliance with Legal Obligations

Gambling regulations: as a UK Gambling Commission-licensed operator, we must conduct age and identity verification, monitor play and retain relevant records.
AML/KYC and financial crime laws: we are legally required to carry out due diligence, transaction monitoring and report certain activity to competent authorities.
Tax and reporting: we may be required to retain and disclose transactional data to tax or other public authorities.

Legitimate Interests

Service improvement and analytics: we analyse aggregated and pseudonymised usage data to improve our products, fix issues and optimise performance.
Fraud and security: we process technical, behavioural and device data to detect and prevent fraud, misuse, bonus abuse and security incidents.
Business management: we use certain data for internal reporting, risk management and to protect our legal rights, subject to your interests and fundamental rights.

Consent

Marketing communications: we rely on your consent (or, where appropriate, soft opt-in) to send email, SMS or similar marketing communications about Fortune Mobile via fortunemobi.com. You can withdraw consent at any time.
Non-essential cookies: we use certain analytics and advertising cookies or similar technologies only with your consent, obtained through our cookie banner or settings.

Vital Interests and Legal Claims

Vital interests: in rare circumstances we may process data to protect your or another person's vital interests (for example where we believe there is a serious risk of harm).
Legal claims: we may process relevant data where necessary for the establishment, exercise or defence of legal claims.

Purpose of Processing

We use your personal data for the following purposes, in each case relying on one or more of the legal bases described above:

To provide and operate our casino services: creating and managing your account, enabling deposits and withdrawals, providing games, calculating and paying winnings, and delivering core functions of the Fortune Mobile profile on fortunemobi.com.
To verify identity and meet regulatory obligations: performing KYC and age checks, carrying out AML monitoring, fulfilling responsible gambling obligations and complying with UK Gambling Commission requirements.
To improve our services: analysing how players use our website, games and features to develop new functionality, fix bugs, enhance performance and improve the user experience.
To provide customer support: managing support requests via email, live chat and SMS/text, keeping records of communications and resolving complaints.
For marketing and personalisation: (where permitted) sending tailored offers, bonuses and information about Fortune Mobile, segmenting audiences and measuring campaign effectiveness.
For analytics and statistics: creating aggregated statistics on gameplay, transactions and website usage for business reporting, planning and management.
For fraud prevention and security: monitoring activity to detect suspicious behaviour, protect your account, enforce our Terms and Conditions and safeguard our systems.

Disclosure & Sharing

We do not sell your personal data. We share it only with trusted third parties where necessary for the purposes set out in this Privacy Policy, subject to appropriate safeguards and contracts.

Service Providers and Business Partners

Payment providers: banks, card schemes, e-wallets and other payment processors to process deposits, withdrawals and refunds.
Game providers: third-party game studios and platform providers whose games you access through Fortune Mobile, where data sharing is required to run the games and resolve technical issues.
KYC/AML and verification partners: identity verification, age-check and fraud-prevention service providers who assist us in meeting our legal obligations.
IT, hosting and security providers: companies that host our systems, provide cloud services, data storage, security, analytics and technical support.
Marketing and communications services: email sending platforms, SMS/text gateways and analytics providers we use to deliver and measure communications, where permitted by law.

Group Companies and Affiliates

Grace Media group entities: other entities within the Grace Media Limited group, where necessary for internal administration, compliance and reporting.
Affiliates: selected affiliate partners for tracking referrals and calculating commissions, using unique identifiers rather than unnecessary personal details wherever possible.

Regulators, Authorities and Other Third Parties

Regulators and law enforcement: the UK Gambling Commission, Gibraltar regulators, tax authorities, law enforcement and other public bodies where we are required or permitted by law to share data.
Professional advisers: lawyers, auditors, insurers and consultants where necessary to obtain professional advice or manage legal and regulatory risks.
Corporate transactions: potential buyers, investors or other parties in connection with any merger, sale of assets, restructuring or similar corporate event, subject to confidentiality obligations.

Where we share data with advertising networks or other third parties for marketing purposes, we will do so only where permitted by law and, where required, on the basis of your consent. All recipients are required to handle your data securely and only for specified purposes.

International Transfers

Fortune Mobile operates with infrastructure and partners located in several jurisdictions. This may involve transferring your personal data outside the United Kingdom.

Gibraltar: your data may be transferred to and processed in Gibraltar, where Grace Media Limited is registered. The UK government has designated Gibraltar as providing adequate protection for personal data, and transfers take place in accordance with applicable UK laws.
European Economic Area (EEA): some of our service providers or their sub-processors may be located in the EEA. Transfers between the UK and EEA are subject to applicable UK and EU adequacy decisions or appropriate safeguards.
Other countries: where we use providers in countries that are not subject to a UK adequacy regulation, we implement appropriate safeguards, such as UK-approved Standard Contractual Clauses, and assess the level of protection offered by the recipient.

We take steps to ensure that any international transfer of your data complies with UK data protection law and that your rights and protections travel with your data. Further information about these safeguards can be obtained by contacting us at [email protected].

Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy and to meet legal, regulatory, tax or accounting requirements.

Typical Retention Periods

Account and identity data: generally retained for up to 5 years after your account is closed, to comply with gambling, AML and record-keeping obligations and to handle any queries or disputes.
Transactional and financial records: typically retained for 6 - 7 years from the end of the relevant financial year, in line with tax and accounting laws.
KYC/AML documentation and checks: retained for the period required by applicable AML legislation and guidance, usually 5 years from the end of the customer relationship or the date of the last transaction.
Marketing data: retained while you maintain an active account and for a reasonable period (for example up to 2 years) after your last interaction with us, unless you withdraw consent or object to marketing earlier.
Technical logs and security data: retained for shorter periods, typically between a few months and 2 years, depending on the sensitivity of the data and security requirements.
Cookies: stored on your device for the periods described in our cookie settings interface, depending on whether they are session or persistent cookies.

When data is no longer required, we will securely delete or anonymise it. If you exercise certain rights (such as erasure), we may retain limited information where necessary to document our compliance or where we are legally required to retain it.

Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have several rights in relation to your personal data. These rights apply primarily to players and visitors located in the United Kingdom. If you are located in another jurisdiction, you may have additional rights under your local laws.

Data Protection Rights

Right of access: you can request confirmation of whether we process your personal data and obtain a copy of that data together with information about how we use it.
Right to rectification: you can ask us to correct inaccurate or incomplete personal data. Where possible, you can update certain details directly in your account.
Right to erasure: you can request deletion of your personal data where there is no good reason for us to continue processing it. This right is subject to legal and regulatory retention obligations (for example, gambling and AML laws may require us to retain some records).
Right to restrict processing: you can ask us to suspend processing of certain data, for example while we verify its accuracy or assess an objection.
Right to object: you can object to processing based on our legitimate interests, including profiling. You always have the right to object to direct marketing, including profiling related to direct marketing.
Right to data portability: in certain cases, you can receive personal data you provided to us in a structured, commonly used and machine-readable format and ask us to transfer it to another controller, where technically feasible.
Right to withdraw consent: where we rely on consent (for example for marketing or non-essential cookies), you can withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.

How to Exercise Your Rights

Contact channel: you can exercise your rights by emailing us at [email protected] and clearly stating your request and that it relates to data protection.
Verification: we may need to request specific information from you to confirm your identity and ensure that personal data is not disclosed to anyone who has no right to receive it.
Response time: we aim to respond to all valid requests within one month (30 days). If your request is particularly complex or you have made multiple requests, this period may be extended, but we will inform you of any extension and the reasons.
Fees: you will not usually have to pay a fee to exercise your rights. We may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, in accordance with the law.

If you are located in another jurisdiction, you may have similar or additional rights under your local data protection laws. For example, individuals in Mexico have rights under the Federal Law on Protection of Personal Data Held by Private Parties. While our primary regulatory framework is UK law, we will endeavour to take into account applicable local requirements where relevant and proportionate.

Cookies & Tracking Technologies

We use cookies and similar technologies on fortunemobi.com to operate the Fortune Mobile service, enhance your experience and support security and analytics.

Types of Cookies

Strictly necessary cookies: required for the site to function, for example to keep you logged in, enable payment flows and apply security features. These cannot be switched off in our systems.
Functional cookies: remember your preferences (such as language, region and settings) and help personalise your experience.
Analytics and performance cookies: collect aggregated information about how visitors use our site (e.g. which pages are visited most). We use this to improve our services.
Advertising and targeting cookies: where permitted, used to deliver relevant marketing messages, limit how often you see an advertisement and measure campaign effectiveness.

Managing Cookies

Browser settings: most browsers allow you to block or delete cookies through their settings. Doing so may affect the functionality of the site.
In-product controls: where available, you can manage your cookie preferences via our cookie banner or settings interface on fortunemobi.com, especially for non-essential cookies.
Third-party tools: some third-party services provide their own opt-out mechanisms, which we will link to where applicable.

For more detailed information about specific cookies used and their lifetimes, please consult our cookie settings panel when accessing the site.

Data Security

We take the security of your data seriously and implement a combination of technical and organisational measures designed to protect it against unauthorised access, loss, misuse or alteration.

Technical Measures

Encryption in transit: data transmitted between your device and our services is protected using TLS (Transport Layer Security) 1.2 or higher, where supported by your device and browser.
Encryption at rest: we use industry-standard encryption or equivalent safeguards for sensitive data stored within our systems where appropriate.
Access controls: personal data is stored in systems with role-based access controls, and access is granted only to personnel and providers who need it to perform their duties.
Security monitoring: we log and monitor access to systems, and we use security tools to detect suspicious activity and potential threats.

Organisational Measures

Policies and training: staff are subject to confidentiality obligations and receive training on data protection, information security and responsible gambling obligations.
Vendor due diligence: we assess key third-party providers for their security practices and include appropriate data protection obligations in our contracts.
Incident response: we maintain procedures to respond to security incidents. Where a personal data breach occurs and poses a risk to you, we will notify you and the relevant supervisory authority in accordance with legal requirements.

We aim to align our security practices with recognised industry standards and good practice frameworks and review our measures regularly in light of evolving risks and regulatory expectations. However, no system can be completely secure, and you also play an important role by keeping your login credentials confidential and using secure networks and devices.

Complaints & Contacts

If you have any questions, concerns or complaints about how we handle your personal data in connection with Fortune Mobile on fortunemobi.com, please contact us first so that we can try to resolve the issue.

How to Contact Us

Email (primary contact): [email protected]
Postal: Data Protection Officer, Grace Media Limited, Suite 7, Hadfield House, Library Street, Gibraltar, GX11 1AA

We will acknowledge your complaint and aim to provide a substantive response within 30 days, or explain if we need more time due to its complexity.

Escalation to Supervisory Authorities

If you are not satisfied with our response or believe that we are processing your personal data in a way that infringes data protection law, you have the right to lodge a complaint with a supervisory authority.

United Kingdom - Information Commissioner's Office (ICO):
Website: https://ico.org.uk
Telephone (UK): 0303 123 1113
Postal: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
European Economic Area: if you are located in the EEA, you may lodge a complaint with your local data protection authority.
Mexico: individuals in Mexico may contact their local data protection authority (for example, the National Institute for Transparency, Access to Information and Personal Data Protection), in accordance with applicable Mexican data protection regulations. Our primary regulation, however, remains UK data protection law.

We encourage you to contact us directly first so we can address your concerns as quickly as possible.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or regulatory guidance relevant to Fortune Mobile and the Fortune Mobile profile on fortunemobi.com.

How We Will Inform You

Website notices: we will post the updated Privacy Policy on fortunemobi.com and update the "Last updated" date at the top of the document.
In-account and banner alerts: for significant changes, we may display prominent notices within your account area or via banners on the site.
Email or in-product messages: where appropriate, we may notify registered players by email, SMS or in-account messaging.

Advance Notice and Your Choices

Advance notice: where we make material changes that affect how we use your personal data, we will give you at least 30 days' notice before the changes take effect, unless immediate changes are required by law or regulatory guidance.
Your options: if you do not agree to the updated Privacy Policy, you may choose to stop using our services and request closure of your account. Continued use of the services after the effective date of an update will constitute your acknowledgement of the updated policy.

Last updated: January 2026. Material changes since the November 2025 version include clarified descriptions of data categories, updated information on regulatory references and international transfers, and expanded explanations of your rights and complaint options.