SlotMafia Privacy Policy

1. Data Collected

At registration: email address, password, phone number, country of residence and account currency.

At first deposit: first and last name, date of birth, residential address, city, state and postal code.

During verification: copies of an identity document, a proof of address, a photo or screenshot of the payment method and, where requested, a bank statement. A phone call may be recorded as part of the check.

During use of the site: IP address, device type, browser, operating system, login times, pages visited, games played, bets, deposits, withdrawals and chat transcripts with support.

From payment providers: transaction references and the status of each payment. Full card numbers are not stored by the Casino.

2. Why the Data Is Used

• To open and maintain the account and process deposits and withdrawals
• To verify age and identity as required by the Curaçao gaming licence
• To detect fraud, multiple accounts, chargebacks and bonus abuse
• To meet anti-money laundering obligations and respond to lawful requests from the regulator
• To provide customer support and settle complaints
• To send bonus offers, tournament announcements and product news by email, SMS or push notification where the player has agreed to receive them
• To apply responsible gambling limits and self-exclusion requests

3. Legal Basis

Data is processed to perform the contract set out in the Terms and Conditions, to meet legal obligations under the licence and AML rules, on the basis of the Casino's legitimate interest in preventing fraud, and on the basis of consent for marketing. Consent to marketing can be withdrawn at any time through the account settings or the unsubscribe link in any message.

4. Who Receives the Data

• Payment service providers and crypto processors, to complete transactions
• Game providers, to the extent needed to load a game and record its result
• Identity verification and fraud prevention services
• The Curaçao Gaming Control Board and other authorities where required by law
• Other websites operated by the same controller, where the player has an account with more than one brand
• IT hosting and email service providers acting on the Casino's instructions

Data is not sold to third parties. Where a third party receives data for its own purposes, for example a game provider, that party's own privacy policy applies to its handling of the data.

5. Cookies

The site uses cookies to keep the player logged in, remember the language and currency, measure traffic and show relevant promotions. Session cookies expire when the browser is closed. Persistent cookies stay for up to 12 months. Cookies can be disabled in the browser, though the login and cashier will not work without the session cookie.

6. Data Security

Data in transit is protected by SSL encryption. Verification documents are stored in encrypted form with access restricted to the compliance team. Two-factor authentication is available in the account settings. The Casino cannot control how data is handled once it reaches a third-party provider, and the player's own device security is the player's responsibility.

7. Retention

Account data and transaction records are kept for five years after the account is closed, which is the period required by AML rules. Verification documents are kept for the same period. Marketing data is deleted when consent is withdrawn. Chat transcripts are kept for two years.

8. Player Rights

A player can request a copy of the personal data held about them, correction of inaccurate data, deletion of data that the Casino is not legally required to keep, restriction of processing, and withdrawal of marketing consent. Requests go to [email protected] from the registered email address and are answered within 30 days. A request to delete data cannot be applied to records that must be kept under the licence or AML law during the retention period.

Players in the European Economic Area have the additional rights set out in the GDPR, including the right to complain to a supervisory authority. Australian players are entitled to the protections in the Australian Privacy Principles where they apply to the Casino's handling of their data.

9. Minors

The site is for adults only. If the Casino learns that data has been collected from a person under 18, the account is closed and the data is deleted.

10. Changes

This policy may be updated when the service or the law changes. The date of the current version is shown at the top of the page, and material changes are announced by email.