burger icon
Mother Land United Kingdom
Log In

Privacy Policy

This Privacy Policy explains how Mother Land, operated via the online platforms at motherslandi.com and the UK-facing legacy domain motherlandcasino.co.uk (together, the "Site"), collects, uses, discloses and protects your personal data when you visit the Site, create an account or otherwise interact with us. It applies to players, prospective players and other visitors located in the United Kingdom and any other region from which access is lawfully permitted.

The policy is prepared in line with the UK General Data Protection Regulation ("UK GDPR"), the UK Data Protection Act 2018 and applicable gambling regulations. By using the Site, you acknowledge that you have read this Privacy Policy. This version is effective from 1 January 2026 and may be updated from time to time as described below.

Who We Are

The online gambling services provided under the brand Mother Land on motherslandi.com and motherlandcasino.co.uk are operated by Heritage Gaming Ltd, a company registered in Malta under company number C-12345. Heritage Gaming Ltd is the data controller for the processing activities described in this Privacy Policy when offering remote casino and remote betting services to players in Great Britain and other permitted regions.

Heritage Gaming Ltd has its registered office in Sliema, Malta, and maintains a satellite compliance office in London, United Kingdom. While the full postal addresses and corporate telephone numbers are not specified in the current public source data, the most up-to-date contact details for the company, including any dedicated privacy or compliance contact channels, are made available via the "Contact" or equivalent sections of motherslandi.com and, where relevant, motherlandcasino.co.uk.

Heritage Gaming Ltd holds an active licence (account number 39482) issued by the United Kingdom Gambling Commission (UKGC) for "Remote - Casino" and "Remote - General Betting Standard - Real Event" activities. For information and verification, you can consult the UKGC public register at https://gamblingcommission.gov.uk/public-register.

For questions about this Privacy Policy or our data protection practices, you may contact our data protection function (for example, a Data Protection Officer or privacy team) using the contact details published on motherslandi.com, clearly marking your communication "Data Protection" or "Privacy". These channels may include an online contact form, in-account messaging and/or dedicated email or postal contact details as communicated on the Site from time to time.

What Personal Data We Collect

When you use Mother Land on motherslandi.com or related UK-facing domains, we collect and process different categories of personal data. The exact data collected will depend on how you interact with us and on the requirements of applicable gambling, anti-money laundering and data protection laws.

Identification and Contact Data

  • Basic identity details: full name, date of birth, gender (where provided) and similar identifiers required to create and manage your account and to satisfy Know Your Customer ("KYC") obligations.
  • Contact details: email address(es), postal address, country of residence and any telephone numbers you provide in your account profile or during customer support interactions.
  • Identity verification data: copies of or details from identity documents (e.g. passport, ID card, driving licence), proof of address documents (e.g. utility bills, bank statements) and any information you submit for enhanced due diligence checks.

Account, Gaming and Payment Data

  • Account information: username, account ID, authentication credentials (stored in encrypted form), account settings, self-exclusion and responsible gambling preferences, and communications preferences.
  • Gaming and transactional data: betting and gaming history, deposit and withdrawal amounts, payment methods used, bonuses claimed, wagering requirements, loyalty status, session times and other details relating to your use of our casino and betting services.
  • Payment data: partial payment card details or payment token identifiers (as provided by payment processors), bank account details where necessary for payouts, and transaction identifiers. Payment data is typically processed via secure third-party payment providers acting on our behalf.

Technical and Device Data

  • Technical identifiers: IP address, device identifiers, browser type and version, operating system and device type, language and time zone settings.
  • Usage logs: access dates and times, pages and resources accessed, clicks and navigation paths, login and logout times, error logs and similar diagnostic data generated by the platform.
  • Security-related data: login attempts, suspicious activity indicators, information derived from device fingerprinting or similar anti-fraud tools, and records of security events.

Behavioural and Profile Data

  • Behavioural data: games viewed and played, bet types and limits used, frequency and duration of sessions, bonuses and promotions accepted, and general patterns of site usage.
  • Profile and segmentation data: inferred preferences, risk profiles related to anti-money laundering and responsible gambling, and segments used for tailoring offers or applying limits and controls.

Communications, Marketing and Support Data

  • Customer support records: copies of chats, emails, internal tickets, call notes and any attachments you send when contacting customer support or our compliance teams.
  • Marketing data: your preferences regarding the receipt of marketing communications (email, SMS, push notifications, in-account messages), records of consent and opt-out, and interaction with marketing campaigns.

Cookies and Similar Technologies

  • Cookies: small text files stored on your device that can be session-based (deleted when you close your browser) or persistent (stored for a defined period), used for authentication, remembering preferences and improving functionality.
  • Similar technologies: web beacons, pixels, SDKs and local storage used to measure performance, detect fraud, provide personalised content and enable integrations with analytics or advertising partners.
  • Third-party cookies: cookies set by external providers (e.g. analytics, security, advertising or payment partners) when their services are integrated into the Site, subject to your consent where required by law.

Legal Basis for Processing

We only process your personal data where we have a valid legal basis under the UK GDPR and related legislation. Depending on the specific processing activity, one or more of the following bases will apply.

  • Performance of a contract: We process personal data that is necessary to enter into and perform our contract with you, including:
    • creating and managing your Mother Land player account;
    • facilitating deposits, bets, games and withdrawals;
    • providing customer support and resolving operational issues; and
    • providing information about material changes to our services or terms.
  • Compliance with legal obligations: We process personal data to comply with laws and regulatory requirements applicable to a UK-licensed gambling operator, such as:
    • UK anti-money laundering and counter-terrorist financing rules (including KYC, transaction monitoring and record-keeping obligations);
    • requirements imposed by the UK Gambling Commission and other competent authorities;
    • responsible gambling, self-exclusion and player protection obligations; and
    • tax, accounting and reporting obligations in relevant jurisdictions.
  • Legitimate interests: We process personal data where necessary for our legitimate interests, balanced against your rights and freedoms, for example:
    • maintaining the security and integrity of our platform (including fraud detection, risk management and IT security);
    • analysing service performance and player behaviour to improve our products, user experience and business operations;
    • exercising and defending our legal rights, including managing disputes; and
    • ensuring compliance with industry standards and audit requirements (e.g. ISO 27001, eCOGRA certifications).
  • Consent: We process certain data based on your explicit consent, which you can withdraw at any time, including:
    • sending direct marketing communications by electronic means where consent is required;
    • using non-essential cookies and similar technologies for analytics or advertising; and
    • sharing limited data with selected affiliates or advertising partners to tailor offers.
  • Vital interests and legal claims: In rare cases, we may process data to protect your vital interests or those of another person (for example, where we believe there is a serious and imminent risk of harm), and to establish, exercise or defend legal claims.

Purpose of Processing

We use your personal data for a range of purposes directly connected to the operation of Mother Land on motherslandi.com and related domains, as well as for broader compliance and security objectives.

  • Providing and managing our gambling services: To register your account, verify your eligibility, enable gameplay (casino and betting), settle bets, credit winnings, manage wallets, and provide functionalities available through the EveryMatrix-based platform that supports our Site.
  • Compliance, KYC and responsible gambling: To perform identity and age verification, perform risk assessments, comply with anti-money laundering and counter-terrorist financing rules, manage self-exclusion and account limits (including integrations with GAMSTOP and other schemes), and meet obligations under UK gambling regulation and related legislation.
  • Payments and financial management: To process deposits and withdrawals via payment service providers, execute refunds where appropriate, combat fraud and chargebacks, maintain transaction records and meet tax and accounting requirements.
  • Customer support and communication: To respond to your enquiries, investigate and resolve complaints, provide operational and security notifications, and send important service-related messages (for example, changes to terms or policies) that are not primarily promotional.
  • Service improvement and analytics: To monitor and analyse how players interact with games, promotions and site features, improve performance and usability, test new features, and optimise content. We may use aggregated or anonymised data where possible to reduce privacy impacts.
  • Marketing and personalisation: To send you tailored offers, bonuses and information about our services, subject to your marketing preferences and applicable law; to personalise content on the Site; and to measure the effectiveness of campaigns, including those run with affiliates or advertising partners.
  • Security, fraud prevention and risk management: To detect and prevent fraudulent or abusive activity, secure accounts and systems, investigate suspicious transactions or behaviour, and apply risk-based controls and monitoring, including the use of specialised tools and third-party services.
  • Legal, regulatory and audit purposes: To comply with regulatory reporting obligations, respond to lawful requests from competent authorities, cooperate with the UKGC and alternative dispute resolution providers, and meet audit and certification requirements (including ISO 27001 and eCOGRA assessments).

Disclosure & Sharing

We treat your personal data as confidential and only share it where necessary and lawful. When we share data, we ensure appropriate contractual and technical safeguards are in place, particularly where third parties act as data processors on our behalf.

  • Group entities and internal recipients: We may share data within Heritage Gaming Ltd (including between the registered office in Malta and the compliance office in the UK) for operational, compliance, audit and management purposes, strictly on a need-to-know basis.
  • Platform and technology providers: We share data with our core platform provider (currently a customised version of EveryMatrix) and with infrastructure and security partners (for example, providers of SSL/TLS services such as Cloudflare and hosting providers) that support the operation, security and performance of the Site.
  • Payment and financial service providers: We share relevant data with payment gateways, banks, card schemes and other financial institutions in order to process deposits, withdrawals and refunds, prevent fraud and comply with financial regulations.
  • KYC, AML and risk management partners: We may disclose personal data to identity verification services, credit reference agencies, fraud prevention agencies and other specialised providers to verify identities, assess risks and comply with anti-money laundering, counter-terrorist financing and sanctions screening obligations.
  • Regulators, authorities and dispute resolution bodies: We may share your personal data with the UK Gambling Commission, law enforcement agencies, tax authorities and other competent regulators where required or permitted by law. We may also share data, where necessary, with approved alternative dispute resolution ("ADR") providers such as IBAS in connection with dispute resolution.
  • Responsible gambling organisations: We may share limited data where necessary with responsible gambling and self-exclusion services (for example, GAMSTOP) and with support organisations such as GamCare, where you request or consent to such support or where we are required to do so in connection with player protection measures.
  • Service providers and professional advisers: We engage service providers for analytics, marketing (subject to consent where needed), customer support tools, email and SMS delivery, data storage, IT support, penetration testing, certification (including ISO 27001 assessment) and auditing (including eCOGRA for RNG and payout audits). These providers act under contractual obligations to protect your data and use it only for specified purposes.
  • Affiliates and advertising partners: With your consent and subject to applicable law, we may share limited data (such as hashed identifiers or aggregated information) with selected affiliates, tracking providers or advertising networks in order to measure campaign performance and prevent fraud. We do not sell your personal data.
  • Corporate transactions: If we undergo a reorganisation, merger, acquisition or sale of assets, we may transfer relevant data to the involved parties, subject to strict confidentiality and data protection commitments and, where required, appropriate notifications to you and/or regulators.

International Transfers

Heritage Gaming Ltd operates across more than one jurisdiction, including Malta and the United Kingdom. As a result, your personal data may be transferred to and processed in countries outside the UK, including within the European Economic Area ("EEA") and, where necessary, in other countries where our service providers are located.

  • Within the UK and EEA: Data is routinely transferred between the UK (including our London compliance office and UK-based infrastructure and service providers) and Malta (our registered office and certain operational functions). Transfers between the UK and EEA take place under adequacy regulations and standard contractual protections recognised under UK and EU law.
  • Other countries: Some of our technology, payment, analytics or security providers may be located in, or may process data from, countries that do not have data protection laws equivalent to those in the UK. In such cases, we implement appropriate safeguards, which may include:
    • standard contractual clauses approved by the European Commission and their UK equivalents or addenda;
    • data transfer and information security agreements aligned with ISO 27001 and comparable standards; and
    • technical measures such as encryption, pseudonymisation and strict access controls to mitigate risks.
  • Access by authorities: Transfers may, in limited circumstances, allow foreign authorities to access your data under their local laws. We carefully assess such risks and, where appropriate, implement additional safeguards or minimisation measures.
  • Obtaining more information: You can request further details of the international transfers that relate to your personal data, as well as copies of the relevant safeguards (with commercially sensitive information redacted), by contacting us through the channels described in the "Complaints & Contacts" section.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including compliance with legal, regulatory, accounting and reporting requirements. Retention periods are determined with reference to UK gambling regulation, anti-money laundering rules and general limitation periods for legal claims.

  • Account and identification data: Basic account details and KYC information are typically retained for the duration of your relationship with us and for a minimum period thereafter (often at least five years after account closure) to meet anti-money laundering and regulatory record-keeping obligations. In some cases, this period may be extended where required by law or to manage legal claims.
  • Gaming and transactional data: Records of bets, game outcomes, deposits, withdrawals, bonuses and account balances are kept for periods necessary to comply with regulatory, tax and accounting obligations and to resolve disputes. This usually means retaining relevant records for up to six to seven years from the end of the relevant financial year or the closure of your account.
  • Technical and security logs: Security logs, device identifiers and similar technical information are retained for shorter periods, typically ranging from a few months up to two years, unless a longer period is justified by security investigations, regulatory requirements or legal claims.
  • Marketing and preference data: Records of your marketing preferences and consents are retained for as long as you remain subscribed to marketing and for a defined period afterwards (for example, to demonstrate compliance with consent and opt-out requirements). If you opt out, we may retain minimal information (such as your email address and opt-out status) to ensure that we honour your preference.
  • Disputes and legal claims: Where a dispute, investigation or claim is ongoing or reasonably anticipated, we may retain relevant data until the matter is resolved and for an additional period in line with applicable limitation periods.

When data is no longer required, we will either securely delete it or irreversibly anonymise it so that it can no longer be associated with you. If deletion is not possible (for example, where the data is stored in backup archives), we will securely store it and isolate it from any further processing until deletion becomes possible.

Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have specific rights in relation to your personal data. These rights apply to Mother Land users of motherslandi.com and related domains, subject to certain legal exceptions and limitations. Where other data protection regimes apply to you (for example, if you are protected by Mexican or EU data protection laws in particular circumstances), similar or equivalent rights may also be available.

  • Right of access: You can request confirmation as to whether we process your personal data and obtain a copy of such data, together with information about how we process it. We will respond within one month of receiving a valid request, extendable by up to two further months for complex or numerous requests, in which case we will inform you of the extension.
  • Right to rectification: You can ask us to correct inaccurate or incomplete personal data. Where possible, you should first update your details directly through your account settings; otherwise, you may contact us using the channels set out in this policy.
  • Right to erasure ("right to be forgotten"): You can request deletion of your personal data in certain circumstances, for example where the data is no longer needed for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies) or where the data has been processed unlawfully. This right is subject to our legal obligations to retain certain data, including KYC and transactional information, for regulatory and anti-money laundering purposes.
  • Right to restriction of processing: You can ask us to restrict processing of your data in certain situations, such as where you contest its accuracy or where you have objected to processing and we are verifying whether our legitimate grounds override your interests.
  • Right to data portability: For data that you have provided to us and that we process by automated means based on your consent or for the performance of a contract, you can request to receive such data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted directly to another controller.
  • Right to object: You can object to processing based on our legitimate interests, including profiling, on grounds relating to your particular situation. We will stop processing unless we demonstrate compelling legitimate grounds or need the data for legal claims. You can always object to direct marketing and related profiling, in which case we will stop such processing.
  • Right to withdraw consent: Where we rely on your consent (for example, for certain marketing communications or use of non-essential cookies), you may withdraw your consent at any time through your account settings, our unsubscribe mechanisms or by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
  • Rights related to automated decision-making: Where we use automated decision-making that produces legal effects concerning you or similarly significantly affects you (for example, certain risk or fraud-related decisions), you have rights to obtain human intervention, to express your point of view and to contest the decision, subject to regulatory requirements.

Alignment with Mexican and other data protection laws: Mother Land primarily targets players in Great Britain and operates under UK law. However, where Mexican or other non-UK data protection laws apply to you in specific circumstances, you may also benefit from rights under those regimes (for example, the ARCO rights of access, rectification, cancellation and opposition under Mexican data protection law). In practice, the procedures we use to handle your requests - identity verification, written responses within approximately 30 days, and provision of information free of charge unless requests are manifestly unfounded or excessive - are designed to be broadly consistent with international data protection standards.

How to exercise your rights: You can submit a rights request by contacting us via the channels indicated in the "Complaints & Contacts" section or via any specific privacy tools made available in your account. We may ask you to provide additional information to verify your identity and to clarify your request. In most cases, we will respond free of charge; where permitted by law, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive.

Cookies & Tracking Technologies

We use cookies and similar technologies on motherslandi.com and related domains to ensure the Site functions properly, to improve performance and to support analytics, security and marketing activities. Some cookies are essential for the operation of the Site, while others are optional and used only with your consent where required by law.

Types of Cookies We Use

  • Strictly necessary (functional) cookies: These cookies are required for the Site to function and cannot be switched off in our systems. They include cookies that enable you to log in, move around the Site, place bets, process payments and use security features. Without them, our services may not work correctly.
  • Preference cookies: These cookies remember your choices and settings (such as language, region, display options and responsible gambling preferences) to provide a more personalised experience.
  • Analytics and performance cookies: These cookies collect information about how visitors use the Site, such as which pages are visited most frequently, how long sessions last and whether error messages occur. We use this information to improve the performance and usability of our services. Analytics cookies may be provided by us or by trusted third parties.
  • Advertising and affiliate cookies: These cookies may be used, with your consent where required, to deliver relevant marketing messages, measure the effectiveness of advertising campaigns and track conversions from affiliate partners. They may be set by third-party networks we work with.

Managing Cookies

  • On-site controls: Where available, you can manage your cookie preferences using the cookie banner or preference centre displayed when you first visit the Site or after significant changes. These tools typically allow you to accept or reject certain categories of non-essential cookies.
  • Browser settings: You can configure your browser to block or delete cookies, or to alert you when cookies are being sent. Each browser provides its own tools and options; however, blocking some types of cookies may impact the functionality and performance of the Site.
  • Third-party opt-outs: Where cookies are set by third-party analytics or advertising providers, additional opt-out mechanisms may be available via those providers' websites.

For more detailed information about the cookies used on Mother Land, including specific lifetimes and providers, please refer to any dedicated Cookie Policy or cookie information section available on motherslandi.com.

Data Security

We take the security of your personal data very seriously and implement a combination of organisational, technical and physical measures to protect against unauthorised access, loss, misuse, alteration or disclosure. Our security framework is aligned with recognised standards and is tailored to the specific risks faced by a UK-licensed online gambling operator.

  • Information security management: The Site is stated to operate under an ISO 27001-certified information security management system, which provides a structured approach to risk assessment, control implementation, monitoring and continuous improvement. Independent assessments and certifications (including those performed by eCOGRA for RNG and payout auditing) support our overall control environment.
  • Encryption and secure transmission: Data in transit between your browser and our systems is protected using industry-standard encryption protocols, such as TLS 1.2+ (with Cloudflare SSL and strict HTTP Strict Transport Security ("HSTS") configurations as part of our infrastructure). Where appropriate, we also encrypt or pseudonymise data at rest to limit the impact of any potential breach.
  • Access controls and authentication: Access to personal data is restricted to authorised personnel and service providers who need it for legitimate business or regulatory reasons. We use role-based access controls, multi-factor authentication where appropriate and strict password policies to prevent unauthorised access.
  • Network and platform security: Our platform, built on a customised version of EveryMatrix, is protected by layered security controls, including firewalls, intrusion detection and prevention systems, anti-malware tools and configuration hardening. Regular vulnerability assessments, penetration testing and security monitoring help us detect and respond to potential threats.
  • Operational procedures and training: Staff who handle personal data receive training on data protection, confidentiality, information security and responsible gambling obligations. Internal policies and procedures govern how data is collected, accessed, transmitted and stored.
  • Incident response and breach notification: We maintain incident response processes to detect, investigate and mitigate suspected data breaches or security incidents. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required by law, inform affected individuals without undue delay.

Complaints & Contacts

If you have concerns about how Mother Land, operating via motherslandi.com and related domains, handles your personal data, or if you wish to exercise any of your data protection rights, you can contact us or the relevant supervisory authority as outlined below.

How to Contact Us

  • Player support and general enquiries: For routine issues or questions, please contact our customer support team through the support channels available on the Site (for example, help centre, live chat or online contact forms). They will escalate privacy-related matters to our data protection function where needed.
  • Data protection and privacy requests: To exercise your rights, ask questions about this Privacy Policy or raise concerns about your personal data, please use the contact details designated for privacy matters in the "Contact" or "Privacy" sections of motherslandi.com. When contacting us, please provide sufficient information to identify your account and describe your request clearly.

Our Complaint Handling Process

  • Step 1 - Submission: You submit your complaint or request via one of our available channels, indicating that it relates to data protection or privacy.
  • Step 2 - Acknowledgement: We will acknowledge receipt of your complaint or rights request within a reasonable period (typically within a few working days), and may ask for additional information to verify your identity and clarify the issue.
  • Step 3 - Investigation: We will review your complaint or request, liaise with relevant internal teams (for example, compliance, security, customer support) and gather any necessary information.
  • Step 4 - Response: We aim to provide a substantive response within 30 days of receiving a valid and complete request, in line with the UK GDPR and comparable standards. If your request is complex or numerous, we may extend this period by up to two additional months and will inform you of the extension and reasons.
  • Step 5 - Further options: If you are not satisfied with our response, you have the right to escalate the matter to the relevant supervisory authority as described below.

Escalation to Supervisory Authorities

  • United Kingdom - Information Commissioner's Office (ICO): If you are located in the UK or your issue relates to our UK operations, you have the right to lodge a complaint with the ICO:
    • Website: https://ico.org.uk
    • Telephone (UK): 0303 123 1113
    • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
  • European Union supervisory authorities: In circumstances where EU data protection law applies to you (for example, if you are an EU data subject whose data is processed in the context of EU operations), you may have the right to lodge a complaint with your local data protection authority in the EU member state where you live, work or where the alleged infringement occurred.
  • Mexico - data protection authority: While Mother Land primarily targets the UK market, if Mexican data protection law applies to you in specific circumstances, you may have rights to lodge complaints with the competent Mexican data protection authority, currently the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). For contact details and procedures, please consult official INAI resources.

We encourage you to contact us first so that we can attempt to resolve your concern directly. This does not affect your right to approach a supervisory authority at any time.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, regulatory guidance, industry best practices or technological developments impacting Mother Land and the operation of motherslandi.com and related domains.

  • Notification of changes: When we make material changes, we will take appropriate steps to notify you in advance where practicable. This may include notices on the Site (such as banners or pop-up messages), updates in your account dashboard, and/or email notifications to the contact details associated with your account.
  • Effective date and versioning: Each version of this Privacy Policy will include a "Last updated" date to help you understand when it took effect. This policy was last updated on 1 January 2026. We may also maintain a brief log of material changes (for example, clarifications to data retention periods or changes in our list of key service providers) in a dedicated section or page available on the Site.
  • Advance notice for significant changes: Where changes materially affect your rights or the ways in which we process your personal data (for example, introduction of new processing purposes or new categories of recipients), we will provide, where reasonably possible, at least 30 days' notice before the new terms become effective. During this period, you may review the updated policy and, if you do not agree with it, request account closure and cessation of processing not required by law.
  • Continued use of the Site: Your continued use of Mother Land on motherslandi.com or related domains after the effective date of an updated Privacy Policy will be deemed acceptance of the changes to the extent permitted by law. We encourage you to review this policy periodically to stay informed about how we protect your personal data.