A clear view of your information.

The purposes behind the records.

Recent completed wins may appear on the home page as a game title and a fictional Virtual Chip award. This public feed contains no player names, email addresses, account identifiers or private round details.

We use your account details, game records and requested preferences to provide the service under our Terms (performance of a contract). Account creation and game continuity require this information; without it we cannot provide an account or synchronised play.

We use security records, eligibility declarations, voluntary break records and support correspondence for our legitimate interests in protecting accounts, preventing abuse, keeping an adult service and resolving problems. We limit the information to these purposes. Where a data-protection request requires us to comply with the law, our basis is legal obligation. Accepting the Privacy notice is not consent to marketing.

Signing in and declaring eligibility.

Registration stores your name, email, an Argon2id password hash and creation time. Passwords are not stored as plain text. Session tokens are stored as hashes and expire after fourteen days. The account security page shows coarse browser/device names and last-active dates, lets you revoke other sessions and change your password. One-time email and recovery links expire after 60 and 30 minutes respectively; tokens are hashed and queued link contents are encrypted until sent. When email delivery is connected, its provider receives the recipient address and transactional message. No marketing is included.

At registration we record your declaration of UK residency, age 18+ and acceptance of the current Terms, with its date. Guest players make the same age/residency declaration before opening a playable guest game; it is remembered for 30 days in that browser. These are self-declarations, not identity or location verification. We do not ask for a date of birth or identity document in these flows. Chosen account breaks are recorded separately.

Keeping a game visit continuous.

Slot play records the shared credit balance, round identifiers, results, bonus progress, preferences and credit activity. This supports continuity across games and recovery of an interrupted request without a second charge. Where an account retains earlier casual-play records, these include per-mode results, compatible saves, achievements and a chosen table accent.

Account favourites, ordered next-up lists, up to twelve recent game visits with timestamps, avatar and frame choices are stored under your account. Your cosmetic room, chosen object, marked collection atlas, up to six private game shelves, comfort preferences and private three-game field tray with selected purposes are also stored with the account. Private shelves and atlas marks are never added to public shared links. Earlier device favourites are imported only when you select Import device picks. Guest favourites and casual saves remain local. Slot guest balances, rounds and bonus progress are stored on the server under a random guest-session identifier for seven days. The most recent 120 credit activity entries are retained for that guest visit. No account or email is needed. Expired guest records are removed when new guest sessions are created. Preview demonstrations do not add account results or spend credits.

When you choose to share a collection.

Publishing a collection creates a public link containing your chosen title, up to twelve selected games, avatar and frame. It never includes your account name, email, credit balance, recent visits or game records. Anyone with the link can view it; share it only if you want to.

Unpublish removes access through that link immediately. A later publication creates a new link. Shared pages are excluded from our sitemap and request no search indexing. Copies previously saved by others are outside our control. Profile and shared-collection records are retained with your account; use Contact for account-data requests.

Your conversation with support.

Contact stores your reply email, topic, message, reference, date, status and follow-up messages, linked to your account when signed in. Team replies appear on the private request page. Account requests are visible only to that account; guest requests use a private browser receipt valid for 90 days. A reference alone does not grant access. Do not include passwords, payment details, identity documents or unnecessary sensitive information.

The optional report-preparation tool only formats text in the page. Copying it places that text on your clipboard. It submits nothing until you separately use the support form.

A support notification queue stores the reference, destination, delivery status and retry count. Notifications contain the reference, not your message. We do not claim an email has been delivered merely because a request was saved.

Essential storage and site security.

Essential cookies maintain sign-in, protect requests, remember your guest eligibility declaration and allow you to read your private support thread. The Cookies page explains their purposes and durations. Assets and fonts load from this site. No payment service, advertising network or analytics script is connected.

The serving system may log requested URLs, timestamps, browser details and IP addresses for operation and security. Short-lived hashed rate-limit keys protect account and game requests. Application error records contain a random reference, route template, status and time, with no request contents; they are capped at 1,000 records and 30 days. Administrator actions retain account ID, action and target reference for 180 days; deletion removes the actor association. Password hashes, request checks and access controls reduce risk; no system can promise perfect security.

Retention, exports and deletion.

Account and game records are kept while the account is active. The privacy controls allow you to download account-linked records or permanently delete your account after confirming your password. Deletion removes linked sessions, game progress, credits, saved collections and account-linked support messages. A record containing only the deleted account number and deletion date is retained for 90 days to prevent accidental restoration. Device-only records and a browser’s chosen break are separate.

Open support requests remain while the issue is handled. Closed ordinary requests are kept for 180 days; closed privacy requests for one year to document their handling. An account deletion also removes that account’s linked requests. Guest request receipts expire after 90 days; successful mail queue entries are removed after 30 days. Failed or pending notifications remain with their request for review.

Guest slot visits expire after seven days. Adult declarations expire after 30 days unless a longer chosen browser break applies. Expired sign-in sessions, rate-limit records and guest visits are removed during relevant account/game operations; expired support, security-link and deletion records are removed by the retention job. Private recovery backups must be restricted to a 30-day window; erased accounts must not be reactivated when a backup is restored.

Requests about your personal information.

Depending on the circumstances, you may request access, correction, erasure, restriction or portability of your personal information. You may object to processing based on legitimate interests. We do not send marketing email or make solely automated decisions with legal or similarly significant effects about you.

Contact Player Care to exercise a right, including if you cannot sign in. We normally respond within one month. If we need proportionate information to verify your identity, clarification or a lawful extension, we will explain what is needed and why. The account download tool is optional and does not limit the scope of an access request.

You may complain to the Information Commissioner’s Office about our use of your information. You can contact the ICO independently and do not have to raise the matter with us first.

Choosing the right control.

Account privacy provides a password-protected export and account deletion. Storage choices concerns requested records in this browser. These controls have different effects: clearing local storage does not delete account records.

You can also make a privacy request through Contact, including when you cannot sign in. Do not send a password or identity document with your first message.

Use your privacy controls.

Download your account records or delete your account. You can also send a privacy request, including without signing in.

You may complain to the Information Commissioner’s Office. You do not have to contact us first.