Mamba is a game engine licensed to casino platforms. You are never our customer. Your casino is. We hold the minimum data needed to run one game session, and we return all of it to your casino when the session ends. This page explains exactly what flows in, what flows out, and what we never do.
When you open Mamba, your casino sends us:
| Data | Purpose | Required |
|---|---|---|
| Session UUID | Identifies your session. Random, casino-issued, not your name or account number. | Yes |
| Credit amount | Your playable balance. One credit equals one unit of your local currency. | Yes |
| Display name | Shown on your own screen only. Held in memory for the session and never stored. | Optional |
| Avatar | A preset icon you may pick in the game. It is chosen on your device, never uploaded, and never leaves your screen. We do not receive or store any photo. | Optional |
We do not receive (and cannot see) your real identity, account number, payment method, phone number or location.
One thing: the transaction ledger. Every bet placed, every win paid, with amount and timestamp. A signed list of plus and minus entries, nothing else. No behavioural profiles, no tracking pixels, no analytics identifiers.
When you cash out, or automatically after 60 minutes of inactivity, the session settles. We return to your casino:
When winnings reach your casino account. Settlement runs in one of two modes, chosen by your casino to match the rules of its jurisdiction:
Either way the full bet-by-bet ledger is returned, the totals reconcile exactly, and Mamba never holds your money at rest.
Session ledgers are retained for the period our licensing agreements and applicable gaming regulations require, typically seven years for audit purposes, then deleted. An optional display name is held only in memory and discarded when the session settles; avatars are preset icons chosen on your device and are never received or stored.
Session data is processed and stored on infrastructure in the region of your casino's license. We align our handling with the data-protection framework that applies there, including POPIA (South Africa), the Nigeria Data Protection Act, and the GDPR for European operators, and with the data-protection terms of each casino's gaming license.
Because your casino is the data controller, requests to access, correct or delete data about you go to your casino. They can request your full session history from us at any time, and we are contractually bound to provide or delete it. We support every such request within 30 days.
The demo on this site runs on the same engine with demo credits that are not money. A demo session stores the same transaction ledger (with a random demo UUID) and nothing else: no name, no email, no account. Demo sessions end automatically after a few minutes.
If this policy changes, the effective date above changes with it, and casinos are notified before the change applies. Questions reach us through your casino, or at privacy@playmamba.com.