What Mijo collects, why we need it, who we share it with, and the choices you have.
MIJO • Curaçao Gaming Authority
This Privacy Policy explains how MIJO ("Mijo", "we", "us") collects and uses personal data when you visit mijo.bet, create an account, play, make payments, or contact support. Mijo is only for people aged 18 or over, and we do not knowingly collect data from anyone younger. If we change this policy we will update the date above, and tell you in the app when the change matters to you.
We collect only what we need to run your account and keep play safe:
Username, email address, password (stored hashed, never in plain text), display name if you set one, timezone, and any invite or promo code you use. Your country and wallet currency are set from your location when you sign up.
Before you can withdraw, we ask for a photo of an ID document, the document type, your full name and your address. Our team checks it by hand and records your date of birth and document number from the document.
IP address, browser and device type, a device fingerprint (a one-way code made from browser settings such as screen size, language and timezone), and the time of each sign-in.
Deposits, withdrawals and the payout details you enter (such as a Cash App tag, PayPal email, or card or bank account number), bets and game results, bonuses, referrals, ranks, points and favourite games.
Ticket messages, attachments and ratings. If you contact us without an account, we also keep the name and email you give.
While you are signed in: the pages you open and the buttons you use (for example Deposit, a game, a banner or a bonus), with the time, your device type, system and browser, and your rank at that moment. On your first visit we also note how you found us (the campaign link, the website that sent you and the page you landed on) and save it with your account when you sign up. In the game search we keep the words you searched and whether you opened a result, but never anything that looks like an email address or a phone or card number. We do not record what you type into any other field.
We use your data to:
Run your account and wallet: sign you in, keep your balance, record bets, and send emails about your account, payments and tickets.
Process payments: credit deposits and pay withdrawals. Our team reviews every withdrawal before it is paid.
Verify your identity and age: confirm you are 18 or over and spot people who open more than one account.
Run bonuses, referrals and ranks: track wagering, apply bonus rules, pay referral rewards and award points and XP.
Keep play safe: apply the deposit, loss and session limits, breaks and self-exclusions you choose, and detect fraud or abuse.
Help you: answer support tickets and improve our help articles.
Improve the site and our marketing: see which pages, games, offers and campaigns players use, using totals that do not name anyone. Our support team can see a signed-in player's recent activity when helping with their account.
Meet legal duties: keep records our licence and the law require, and respond to lawful requests.
We use Google Analytics cookies to understand how the site is used. We do not use advertising cookies. We also store what the site needs to work:
We never sell your data. We share it only with services that help us run Mijo, and only what each one needs:
Your player code (which can be your username), game launches and bets
Crypto deposit amount and coin only, not your name or email
Deposits by Apple Pay, Google Pay or Cash App, and payouts to Cash App, Chime, PayPal or Zelle: the amount, an order reference, your IP address and device, and for withdrawals the payout details and name you enter
Deposits by Cash App, Apple Pay, Google Pay or Chime, and payouts to Cash App, Chime, PayPal, bank account or card: the amount, an order reference, your IP address and device, and for withdrawals the payout details and name you enter
Sends our emails: your email address and the messages we send you
Our support team works in a private Telegram group. Ticket messages, your username and payment alerts are shared there
Shows us how the site is used: the pages you visit, your device and browser, and your approximate location. Not your name or email
The services that host and deliver the site see your IP address and country
Only when the law, our licence or a court requires it
Depending on where you live, you may have the right to the following. Email us and we will reply within 30 days:
Ask what personal data we hold about you and get a copy of it.
Ask us to fix wrong data or delete your data. Payment, verification and play records we must keep by law are kept until that duty ends, so we may close your account instead of erasing everything at once.
Passwords are stored hashed, never in plain text. Your sign-in is kept in a secure cookie that page scripts cannot read. ID documents sit in private storage that only authorised staff can open, and staff accounts need a code from an authenticator app to sign in. Payout details you enter for a withdrawal are encrypted, and our team only ever sees them masked (for a card or bank account, the last 4 digits). We delete the full details 7 days after the withdrawal is finished, unless it is under a payment claim or you chose to save them for your next withdrawal. Saved details stay encrypted, are only ever shown to you masked, and are kept until you remove them on the withdraw page. We never ask for a card's security code (CVV).
We keep your data while your account is open. After it closes, we keep payment, verification and play records for 5 years to meet legal and licensing duties, then delete them. Site activity is kept for 30 days (pages opened and banners seen) or 90 days (buttons used and searches), then deleted; only totals that do not name anyone are kept after that.
For privacy questions, a copy of your data, or a correction or deletion request, email us from the address on your account:
Curaçao Gaming Authority
MIJO, Curaçao