Privacy policy

1. Who we are

DM First Play operates the website dmfirstplay.com and the games described on it. This policy explains what personal data we handle, why, and what you can ask us to do with it. Questions go to support@dmfirstplay.com.

2. Data we collect

Account data: name, date of birth, email address, country and the identity documents needed for age and identity verification.

Play data: rounds played, stakes, results, session times and the limits you have set.

Technical data: IP address, device and browser type, approximate location derived from IP, and pages viewed.

Support data: messages you send us and our replies.

Demo games on this site run in your browser and do not require an account; their play-money credits are not stored on our servers.

3. Why we use it

To operate accounts and settle rounds; to verify age and identity as required by law; to detect fraud, collusion and bonus abuse; to monitor for markers of gambling harm; to answer support requests; and to meet anti-money-laundering and record-keeping obligations. Marketing messages are sent only with consent and can be withdrawn at any time.

4. Legal bases

We rely on contract (running your account), legal obligation (age checks, AML, record retention), legitimate interests (security, fraud prevention, service improvement) and consent (marketing and non-essential cookies).

5. Cookies

Essential cookies keep you signed in and secure the session; these cannot be switched off. Analytics cookies measure page performance in aggregate and load only with consent. You can clear or block cookies in your browser, though essential cookies are required for a signed-in account.

6. Sharing

We share data with identity and payment verification providers, hosting and security providers, and regulators or law enforcement where legally required. We do not sell personal data. Providers act on documented instructions and are bound by confidentiality terms.

7. Retention

Account and transaction records are retained for the period required by applicable gambling and anti-money-laundering law, typically five years after an account closes. Self-exclusion records are kept for the exclusion period and afterwards, so an exclusion cannot be bypassed by opening a new account. Technical logs are kept for a short rolling window.

8. Your rights

You can request access to your data, correction of inaccurate data, deletion where no legal duty requires retention, a portable copy, restriction of processing, and withdrawal of consent. Write to support@dmfirstplay.com; we respond within one month and may ask you to verify your identity first. You may also complain to your local data protection authority.

9. Security and changes

Data is encrypted in transit with TLS, access is restricted on a need-to-know basis, and credentials are stored hashed. No system is perfect; suspected compromise of your account should be reported immediately. Material changes to this policy are announced on this page with a revised date, and continued use after the change means acceptance.