Privacy Policy

Last Updated: 26/10/2025

MK Fortune (“we,” “us,” or “our”) is fully committed to protecting the privacy of its users. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you access or use our website, in accordance with the General Data Protection Regulation (GDPR), Maltese data protection laws, and other applicable international privacy standards. By using MK Fortune, you agree to the practices described in this policy.

We aim for complete transparency about what information we collect, why we collect it, how it is used, and the measures we take to safeguard it.

1. Information We Collect

At MK Fortune, we prioritize transparency and limit our data collection to what is necessary. We collect two main categories of information:

1.1 Personal Information Provided by You

When you voluntarily interact with our website, we may collect personal information you provide, including but not limited to:

• Identity Information: Name, title, and any other identifiers you provide

• Contact Information: Email address, telephone number, and mailing address if provided

• Communication Content: Messages, inquiries, or feedback submitted through forms, chat, or email

• Subscription Preferences: Preferences for newsletters, promotions, or notifications

• Other Voluntary Data: Any additional personal details you choose to share, such as survey responses or comments
  
  

We only collect information that is relevant to providing our services, responding to inquiries, or improving the user experience.

1.2 Information Collected Automatically

When you visit or interact with our website, we may automatically collect certain technical and usage information through cookies, analytics tools, or similar tracking technologies. This information helps us understand user behavior, improve our services, and maintain security. It may include:

• Device and Browser Information: IP address, browser type and version, operating system, device type, and screen resolution

• Usage and Interaction Data: Pages visited, time spent on pages, navigation patterns, clicks, and scroll behavior

• Referral and Traffic Data: Referring website, search terms, and affiliate or campaign tracking

• Performance Data: Errors, crashes, and other diagnostic information
  
  

1.3 Sensitive Data

We do not collect sensitive personal data—such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, health information, or sexual orientation—without your explicit consent. If you provide sensitive data voluntarily, it will be processed only in accordance with applicable data protection laws and with your informed consent.

1.4 Aggregate and Anonymous Information

We may also collect anonymized or aggregated data that does not directly identify individual users. This includes statistics on website usage, trends, and overall user behavior. Such data helps us optimize our services and enhance the user experience while maintaining privacy.

2. How We Use Your Information

We collect and process your personal information to operate our website, provide services, enhance user experience, and comply with legal obligations. Our use of your data is always guided by the principles of lawfulness, fairness, and transparency.

2.1 Providing and Improving Services

We use your information to:

• Operate and maintain the website efficiently and securely

• Personalize your experience and provide relevant content

• Analyze usage patterns to improve website performance, design, and functionality

• Detect and prevent technical issues, errors, or fraudulent activities
  
  

2.2 Communication and Support

Information you provide allows us to:

• Respond to inquiries, questions, or requests submitted via forms, email, or chat

• Provide customer support and troubleshooting assistance

• Notify you of important updates or changes to our services, policies, or website functionality
  
  

2.3 Marketing and Optional Communications

With your explicit consent, we may use your data to:

• Send newsletters, promotional offers, or updates related to our services

• Share information about affiliate programs, partnerships, or special campaigns

• Conduct surveys or gather feedback to enhance our services
  
  

You can opt out of marketing communications at any time by following the unsubscribe instructions in our emails or contacting us directly.

2.4 Affiliate Tracking and Referrals

We use collected information to track affiliate referrals accurately and issue commissions where applicable. This helps us maintain transparency and accountability in our affiliate programs.

2.5 Analytics and Research

We use data for analytical purposes, including:

• Monitoring website traffic and user engagement

• Measuring the effectiveness of website content, marketing campaigns, or partnerships

• Generating anonymized, aggregated reports to identify trends and improve services
  
  

2.6 Legal Compliance and Security

Your information may be used to:

• Comply with legal, regulatory, and contractual obligations

• Protect our rights, property, or safety, and the rights and safety of users or others

• Investigate, prevent, or take action regarding suspected illegal activities, fraud, or security breaches
  
  

2.7 Principles of Limited Use

We only process the information necessary for the purposes outlined above. Your personal data is never sold, rented, or leased to third parties. Information is shared only when required for operational purposes, legal compliance, or with service providers bound by strict contractual obligations.

3. Sharing and Third-Party Services

We respect your privacy and limit sharing of personal information to situations necessary for the operation of our services, legal compliance, or where you have provided explicit consent.

3.1 Trusted Service Providers

We may share personal information with carefully selected third-party service providers who perform services on our behalf. These providers are contractually bound to process your data only as instructed and to maintain strict security and confidentiality. Services may include:

• Website Hosting and Maintenance: Ensuring the website functions securely and efficiently

• Analytics and Performance Monitoring: Evaluating website traffic, user behavior, and performance

• Email Communications: Sending newsletters, notifications, or transactional messages

• Payment Processing (if applicable): Facilitating any payments or affiliate commission settlements
  
  

We ensure all providers implement appropriate technical and organizational measures to safeguard personal data and comply with applicable data protection laws.

3.2 Affiliate Links and Partnerships

Our website may contain links to third-party websites, including affiliate partners. Clicking these links may result in the sharing of certain information with the third party (e.g., referral data).

Important Notes:

• Interactions with third-party websites are governed by their own privacy policies

• We are not responsible for the content, security, or practices of external sites

• Affiliate partners may use cookies or tracking technologies; please consult their policies for details
  
  

3.3 Legal Obligations and Protection of Rights

We may disclose personal information when legally required, including:

• Responding to lawful requests by courts, law enforcement, or regulatory authorities

• Enforcing our Terms and Conditions or protecting intellectual property

• Investigating, preventing, or taking action against suspected illegal or fraudulent activity

• Protecting the safety, rights, or property of our users or the public
  
  

3.4 Aggregate or Anonymous Information

We may share aggregated or anonymized information with third parties for research, analytics, or reporting purposes. This data cannot be used to identify individual users and is primarily used to improve services and understand trends.

3.5 Principles of Responsible Sharing

• We never sell, rent, or lease personal information to third parties

• Sharing is limited strictly to operational, legal, or consented purposes

• Third parties are contractually required to maintain confidentiality and security of data

4. Cookies, Tracking Technologies, and International Transfers

4.1 Cookies and Tracking Technologies

We use cookies, pixels, and similar tracking technologies to enhance your experience, analyze site usage, and deliver personalized content. Cookies are small text files stored on your device that help us understand how our website is used.

Types of Cookies We Use:

• Strictly Necessary Cookies: Essential for website functionality, security, and navigation

• Performance and Analytics Cookies: Collect information about site usage, page visits, and user behavior to improve functionality

• Functional Cookies: Remember preferences, such as language or display settings, to provide a more personalized experience

• Advertising and Targeting Cookies: With your consent, used to deliver relevant ads and measure the effectiveness of campaigns
  
  

Managing Cookies:
You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect website functionality. For a full breakdown of the cookies we use, their purposes, and how to manage them, please see our dedicated Cookie Policy.

Consent:
Where required by law, we obtain your consent before placing non-essential cookies on your device. You have the right to withdraw consent at any time via your browser or our cookie management tools.

4.2 International Transfers of Data

Some of our service providers and business partners may be located outside the European Economic Area (EEA), including countries that may not provide the same level of data protection as your home country.

How We Protect Your Data During Transfers:

• We use legally recognized mechanisms, such as Standard Contractual Clauses (SCCs) approved by the European Commission

• Transfers occur only when necessary for service provision, legal obligations, or with your consent

• Data is always handled in compliance with GDPR and other applicable international data protection standards
  
  

Examples of International Transfers:

• Website hosting or maintenance services outside the EEA

• Analytics and marketing platforms hosted in countries outside the EEA

• Affiliate program tracking and reporting
  
  

We take all reasonable measures to ensure that your personal information remains secure and protected, regardless of where it is processed.

4.3 Principles of Responsible Data Handling

• Only data necessary for the specified purposes is transferred internationally

• Transfers are limited to trusted partners and providers with adequate safeguards

• We continuously monitor and review transfer arrangements to maintain compliance with applicable laws

5. Data Retention

At MK Fortune, we retain personal information only for as long as necessary to fulfill the purposes for which it was collected, in compliance with applicable laws, regulations, and legitimate business needs. We regularly review our data retention practices to ensure they remain proportional and lawful.

5.1 Retention Periods by Data Type

• Contact Information (e.g., name, email, phone number):
  Retained until you unsubscribe from newsletters, withdraw consent, or request deletion.

• Inquiry and Support Data:
  Retained for the duration necessary to respond to your inquiry, provide support, and comply with legal obligations.

• Analytics and Usage Data:
  Retained for a limited period to monitor website performance, analyze trends, and optimize user experience. Data may be anonymized or aggregated for long-term statistical purposes.

• Affiliate and Referral Tracking Data:
  Retained as needed for accurate reporting, commission calculation, and dispute resolution.

• Legal, Regulatory, or Accounting Records:
  Retained for periods required by law or regulation, including obligations under Maltese law, GDPR, and other relevant jurisdictions.
  
  

5.2 Anonymization and Deletion

Once the retention period for any personal data ends:

• Data is securely deleted or anonymized so that it can no longer identify an individual

• Anonymized data may be retained for research, statistical, or analytical purposes
  
  

5.3 Principles of Retention

• Minimal Retention: We retain only the data necessary for legitimate purposes

• Security in Retention: Personal data is stored securely during the retention period, protected against unauthorized access, loss, or disclosure

• User Rights: You can request deletion or correction of your personal data at any time, subject to applicable legal or contractual obligations
  
  

5.4 Review and Updates

We periodically review retention periods to ensure compliance with evolving legal requirements and industry best practices. Any changes to our retention practices will be reflected in this Privacy Policy.

6. Your Rights

Under the General Data Protection Regulation (GDPR) and other applicable international data protection laws, you have a range of rights regarding your personal information. MK Fortune is committed to ensuring these rights are respected, and you can exercise them at any time.

6.1 Right of Access

You have the right to request confirmation of whether we are processing your personal data. Upon request, we will provide:

• A copy of the personal data we hold about you

• Information on the purposes of processing, data categories, and recipients

• Details of retention periods, sources of data, and any automated decision-making processes
  
  

6.2 Right to Rectification

You can request the correction of any inaccurate or incomplete personal data we hold about you. MK Fortune will update your information promptly to ensure accuracy.

6.3 Right to Erasure (“Right to be Forgotten”)

You have the right to request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected

• You withdraw consent (where processing is based on consent)

• You object to processing and there are no overriding legitimate grounds

• The data has been unlawfully processed
  
  

Please note that certain data may need to be retained to comply with legal obligations or contractual requirements.

6.4 Right to Restriction of Processing

You can request that we limit the processing of your personal data if:

• You contest the accuracy of your data

• The processing is unlawful but you do not wish for it to be erased

• We no longer need the data for processing, but you require it for legal claims

• You have objected to processing pending verification
  
  

During this restriction period, your data will only be stored and not further processed.

6.5 Right to Object

You may object to the processing of your personal data for:

• Marketing purposes

• Profiling or automated decision-making

• Any processing based on legitimate interests
  
  

Upon receiving an objection, we will stop processing your data for the specified purpose unless we can demonstrate compelling legitimate grounds.

6.6 Right to Data Portability

You can request a copy of your personal data in a structured, commonly used, and machine-readable format. Where technically feasible, we will transmit this data directly to another controller upon your request.

6.7 Right to Withdraw Consent

Where we process your personal data based on your consent, you can withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

6.8 Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority, such as the Maltese Information and Data Protection Commissioner or your local data protection authority.

6.9 How to Exercise Your Rights

To exercise any of these rights, please contact us using the details in Section 12: Contact Us. We will respond promptly, typically within 30 days, in line with GDPR requirements.

7. Security Measures

MK Fortune is committed to protecting the personal information of our users. We implement a combination of technical, organizational, and administrative measures to safeguard data against unauthorized access, disclosure, alteration, or destruction.

7.1 Technical Measures

We employ advanced technical safeguards, including:

• Encryption: Personal data is encrypted during transmission (e.g., SSL/TLS) and, where applicable, at rest

• Secure Servers: Our website and databases are hosted on secure servers with firewalls and intrusion detection systems

• Access Controls: Access to personal data is restricted to authorized personnel only, with role-based permissions

• Regular Monitoring: Continuous monitoring of systems for suspicious activity or security breaches

• Software Updates and Patching: All systems are regularly updated to protect against known vulnerabilities
  
  

7.2 Organizational Measures

To ensure proper handling of personal data, we implement:

• Staff Training: Employees and contractors receive regular training on data protection, privacy principles, and security procedures

• Internal Policies and Procedures: Clear guidelines for data access, handling, storage, and deletion

• Confidentiality Agreements: Personnel handling personal data are bound by confidentiality obligations

• Vendor Oversight: Third-party service providers are required to maintain equivalent security standards through contractual agreements
  
  

7.3 Administrative Measures

We maintain policies and procedures to manage risks, including:

• Data Minimization: Collecting only necessary personal data for legitimate purposes

• Incident Response Planning: Procedures in place to detect, respond to, and remediate data breaches or security incidents

• Regular Audits: Periodic security assessments and audits of systems, processes, and third-party partners

• Accountability Mechanisms: Documentation and reporting to demonstrate compliance with GDPR and applicable laws
  
  

7.4 Data Breach Notification

In the unlikely event of a personal data breach:

• We will notify the relevant supervisory authority, such as the Maltese Information and Data Protection Commissioner, within 72 hours if the breach poses a risk to user rights and freedoms

• Affected users will be notified promptly if there is a high risk to their privacy or safety

• Investigations will be conducted to identify the cause, mitigate impact, and prevent recurrence
  
  

7.5 Limitations

While we take all reasonable precautions to protect your personal data, no system or method of transmission over the internet is completely secure. Absolute security cannot be guaranteed, and users are encouraged to take personal precautions when sharing information online.

8. Children’s Privacy

MK Fortune’s services are intended exclusively for users aged 18 and above. Protecting the privacy and safety of minors is a top priority, and we take all reasonable steps to prevent the collection of personal data from children.

8.1 No Intentional Collection

We do not knowingly collect personal information from individuals under the age of 18. This includes information submitted through forms, subscriptions, or interactive features on our website.

8.2 Action Upon Discovery

If we become aware that personal data has been inadvertently collected from a user under 18:

• The data will be immediately deleted

• Parents or legal guardians may contact us to request further information or verification of deletion
  
  

8.3 Age Verification Measures

To ensure compliance with age restrictions:

• Users are prompted to confirm their age before accessing services

• We implement automated systems and manual checks where appropriate to detect underage users
  
  

8.4 Educational and Safety Guidance

We encourage parents and guardians to monitor the online activity of minors and educate them about online safety. Children should never provide personal information without parental or guardian consent.

8.5 Legal Compliance

Our practices regarding children’s privacy comply with:

• GDPR, including the protections afforded to children’s data

• Local Maltese laws and other applicable international standards on age-restricted services

9. Responsible Data Handling

At MK Fortune, we are committed to handling your personal information responsibly, ethically, and in full compliance with applicable data protection laws, including GDPR and Maltese regulations.

9.1 Principles of Responsible Data Handling

Our approach to personal data is guided by the following principles:

• Lawfulness, Fairness, and Transparency: Personal data is collected and processed lawfully, fairly, and in a transparent manner. Users are fully informed about how their data is used.

• Purpose Limitation: Data is collected only for specified, explicit, and legitimate purposes and is not processed in a manner incompatible with those purposes.
  
  

• Data Minimization: We collect only the personal information necessary to achieve the purposes for which it is processed.

• Accuracy: Personal data is kept accurate, complete, and up-to-date. Users can request corrections if any data is incorrect.

• Storage Limitation: Data is retained only for as long as necessary for the intended purposes or as required by law.

• Integrity and Confidentiality: Data is stored securely using appropriate technical and organizational measures to protect against unauthorized access, disclosure, or alteration.
  
  

9.2 User Control and Rights

We respect and facilitate your control over your personal data. Users can:

• Access, correct, or delete their personal information

• Withdraw consent for specific processing activities

• Object to certain types of processing

• Request data portability
  
  

Our processes are designed to make exercising these rights straightforward and efficient.

9.3 Accountability and Monitoring

MK Fortune implements internal policies, audits, and staff training to ensure responsible handling of personal data. This includes:

• Regular reviews of data collection, storage, and processing procedures

• Monitoring compliance with GDPR, Maltese laws, and other applicable international regulations

• Ensuring third-party service providers follow equivalent standards for responsible data handling
  
  

9.4 Commitment to Continuous Improvement

We continuously assess and enhance our data protection measures, adopting new technologies and practices to ensure privacy, security, and compliance with evolving legal requirements.

10. Changes to This Privacy Policy

MK Fortune may update this Privacy Policy periodically to reflect changes in our practices, services, legal obligations, or regulatory requirements. We are committed to keeping you informed of any updates that may affect your personal information or rights.

10.1 How We Notify Users

• Website Updates: The most recent version of the Privacy Policy will always be available on our website with a clearly visible “Last Updated” date.

• Direct Notification: For significant changes that materially affect how personal data is processed, we may notify users via email or website notice.

• User Action: By continuing to use our services after a revised Privacy Policy is posted, you acknowledge and accept the updated terms.
  
  

10.2 Scope of Changes

Updates to the Privacy Policy may include, but are not limited to:

• Modifications to the types of personal data collected or how it is used

• Changes in cookies, tracking technologies, or data analytics practices

• Adjustments in international data transfer procedures

• Updates to user rights, retention periods, or security measures

• Changes required by new laws, regulations, or industry standards
  
  

10.3 User Responsibility

We encourage users to periodically review this Privacy Policy to remain informed about how we protect and process personal information. Staying informed ensures that you are aware of your rights and any changes in our data handling practices.

11. Contact Us

MK Fortune is committed to ensuring your privacy and data protection rights are respected. If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, you can contact us directly.

11.1 Contact Information

Email: Contact email

When contacting us, please provide sufficient information to allow us to identify your data and respond efficiently to your request.

11.2 Exercising Your Rights

You may contact us to:

• Access, correct, or delete your personal data

• Withdraw consent for specific processing activities

• Object to processing or request restriction

• Request data portability

• Make inquiries or complaints about our privacy practices
  
  

We will respond promptly, typically within 30 days, in accordance with GDPR and applicable international data protection laws.

11.3 Escalation and Supervisory Authorities

If you are not satisfied with our response, you have the right to escalate your concern to the relevant data protection authority, such as:

• Maltese Information and Data Protection Commissioner

• Your local supervisory authority, depending on your location
  
  

We encourage users to contact us first so we can address any issues directly and efficiently.

11.4 Commitment to Transparency

MK Fortune is committed to maintaining an open and transparent dialogue regarding your personal data. We welcome questions and feedback regarding our privacy practices and will always strive to resolve concerns responsibly.