This document governs the processing of personal data by the operator of SlotOwl. We act as the data controller for all information collected through our platform, including websites and mobile applications. The scope covers every interaction with our services, from initial registration to the final closure of an account. This includes all data subjects who use the service, whether as a registered player or an unregistered visitor.

Our processing activities are limited to the purposes defined in this policy and related documents. We do not extend our data use beyond what is strictly necessary for providing our gaming services. Any processing for additional purposes requires a separate consent or a specific legal basis. The operator remains accountable for all data handling practices carried out by its processors.

We may update this policy from time to time to reflect changes in the law or our practices. Any material changes will be communicated through the platform or via email. The version in force at the time of data processing applies to all activities. We retain the previous versions for the duration of the relevant retention period to ensure transparency.

You should review this document regularly to stay informed of how your information is managed. We recommend checking the document before making any significant changes to your account settings. The policy applies to all jurisdictions where we operate in compliance with local regulations. This ensures a consistent standard of protection across our entire network of services.

We share personal data only with third parties necessary for service delivery. These recipients act as processors or joint controllers under strict agreements governing every interaction. We do not sell personal data to external marketing entities under any circumstances. Any disclosure is strictly limited to the minimum information required for the specific task at hand.

Payment providers require specific transaction details to process deposits and withdrawals securely and efficiently. Identity verification services check documents against official government databases to confirm your identity accurately. They process only what is absolutely needed to confirm you are who you claim to be. The data is not retained by them longer than required for the mandatory compliance check.

Game suppliers receive anonymised performance data to verify fairness and integrity of our gaming products. Regulators may access records during routine audits or investigations to ensure compliance with licence conditions. Law enforcement receives information only when a valid legal order compels us to do so. We actively challenge any requests that exceed the lawful scope of the requirement.

International transfers occur frequently when suppliers operate outside our primary jurisdiction. We use standard contractual clauses to protect data during transfer effectively. These clauses are approved by the supervisory authority and enforceable globally. They ensure the same high level of protection as domestic processing standards.

We retain personal data only as long as necessary to fulfil the purposes for which it was collected. The retention periods vary significantly by category of information and specific legal requirement. We do not keep data indefinitely without a specific justification or legal obligation. Automated deletion processes remove expired records from active systems immediately upon expiry.

Account data is retained while the account remains open and active with us. Transaction records are kept for seven years after the last activity occurs. This satisfies the statutory requirements for financial record keeping and auditing purposes. Verification documents are deleted once the identity check is complete unless fraud is suspected.

Marketing consent data is held until you withdraw permission through our system. Withdrawal triggers an immediate update to our marketing database to prevent further contact. We do not use this data for any other purpose than marketing communications. Deletion is confirmed within the regulatory timeframe as required by law.

Legal disputes may extend retention for the duration of the proceedings or claims. We preserve evidence relevant to the claim or defence of the parties involved. Once resolved, the data is processed for archiving or deletion accordingly. The retention period aligns precisely with the statute of limitations for the specific legal action.

We implement technical and organisational measures to protect your personal data at all times. Encryption is used for data in transit and at rest to prevent unauthorised access. Access to data is restricted to authorised personnel on a need-to-know basis only. We regularly test these systems for vulnerabilities and gaps to maintain security.

Data breaches are managed according to a strict incident response plan and protocol. We notify the supervisory authority within 72 hours if the breach poses a risk. You will be informed promptly if your rights and freedoms are at significant risk. We investigate every breach to prevent recurrence and improve our security posture.

You may complain to SlotOwl directly about our data practices and handling. We aim to resolve issues informally before escalation to save you time. Contact details are available on our contacts page for your reference. We provide a written response detailing our investigation outcome clearly.

If you are unsatisfied with our response, you may contact the supervisory authority. You have the right to lodge a complaint with the local regulator if needed. We cooperate fully with regulatory investigations and audits as part of compliance. Our commitment to compliance is binding on all staff without exception.