Super Slots Privacy Policy

What information do we actually collect from you?

We collect the information you give us when you create an account, including name, date of birth, residential address, email, phone number and the documents you provide for identity verification. Identity documents typically include a government issued photo ID, a recent utility bill or bank statement, and in some cases a selfie used by our verification partner to match the photo on the ID. We also collect technical information such as device type, browser, IP address, language settings and the pages you visit, which we use to keep the site secure, prevent fraud and improve the experience.

Transactional data is collected for every deposit, withdrawal, bet and bonus. This information is required by financial regulation, so we keep it even if you delete other parts of your profile. Customer support conversations are also recorded for training and quality, with a clear notice at the start of any live chat session and an option to request a copy of your own chat history at any time.

Why do we need each category of data?

Account and identity data run your account, process deposits and withdrawals, and meet anti money laundering and responsible gambling obligations. Transactional data keeps a complete financial record for tax, audit and dispute resolution. Technical data protects the site, blocks bots and helps us understand where the experience can be smoother. Marketing data, only used with your opt in, lets us send you relevant offers and skip the ones that would not interest you. We do not sell your data to third parties for advertising, and we do not buy data about you from third parties to enrich a profile.

Who do we share your data with, and where does it go?

We share your data only with the providers that help us deliver the service, including payment processors, identity verification partners, hosting providers, fraud prevention specialists and customer support tools. Each of these partners is bound by a written data processing agreement and must meet the same security standards we hold ourselves to. Some of these providers are based outside Australia, mainly in the European Union, the United Kingdom and the United States, which means data may be transferred internationally under approved safeguards such as standard contractual clauses.

We may also share data when required by law, for example with regulators, tax authorities or law enforcement bodies acting on a valid request. We will only disclose what is strictly necessary, and we will challenge any request that we believe is overly broad. We do not share your data with marketing networks, data brokers or other casinos under any circumstances.

How long do we keep your data and how do you exercise your rights?

We keep account data for as long as the account is open and for seven years after closure to meet financial record keeping requirements set by Australian and international law. Marketing preferences are kept until you unsubscribe. Server logs and security events are kept for ninety days. Self exclusion records are kept indefinitely so we can honour your decision on every future visit. After the retention period ends, data is either deleted or anonymised so it can no longer be linked back to you.

You can ask for a copy of your data, ask us to correct anything that is wrong, ask us to delete it where the law allows, ask us to stop processing it for marketing, or lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au. Requests are free, we respond within thirty days, and there is no penalty for exercising any right. To make a request, email privacy@super-slots.co.uk from the address registered on your account, or use the in app data request form under Account, Privacy.

How do we keep your data secure, and what happens if something goes wrong?

All connections to the site run over TLS 1.3. Stored data sits in encrypted databases protected with AES 256, with access limited to a small number of staff under role based controls and full audit logging. Passwords are hashed with industry standard algorithms and never stored in plain text. Two factor authentication is available for every account and strongly recommended. Our infrastructure is independently penetration tested at least once a year, and findings are remediated under tight deadlines.

In the unlikely event of a data breach that affects you, we will notify you and the relevant regulator within the timeframes required by the Notifiable Data Breaches scheme in Australia and similar rules in other jurisdictions, with a clear description of what happened, what data was involved, what we have done about it and what you can do to protect yourself. Cookies are covered separately on the cookie policy page, and you can change your preferences any time. If we change this policy in a way that affects how we use your data, we will email you and give you thirty days to review the change before it takes effect.