Privacy Policy
This Privacy Policy explains how the operator of the United Kingdom-facing version of the Slots Paradise website (Slots Paradise) available via slotsperadise.com ("we", "us", "our") collects, uses, stores and shares personal data of players and visitors from the UK and other locations. It applies to all users who visit or use the website, register an account, participate in gambling activities, or otherwise interact with our services.
This Privacy Policy is designed to comply with applicable data protection laws, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, and to align, where relevant, with the EU General Data Protection Regulation ("EU GDPR") and certain Mexican privacy requirements. It does not provide gambling regulatory protection and does not alter our licensing status. This Privacy Policy is effective from 6 November 2025.
Who We Are
The online gambling services marketed as Slots Paradise for the United Kingdom (Slots Paradise) are provided through the website available at https://slotsperadise.com and related URLs and subdomains (including, where applicable, redirects from slotsparadise.com) (the "Website"). For the purposes of UK GDPR, the data controller is the operator of the Website.
Based on the information available as of January 2025, the operator:
- Has not publicly disclosed its full legal name, registered office address, company registration number, or tax identification details in the Terms & Conditions or website footer.
- Claims to operate under the laws of Curaçao, but does not provide a verifiable licence number or clickable seal from a recognised master licence holder, and its Curacao licensing status is therefore unverified.
- Is not licensed by the UK Gambling Commission (UKGC) for the provision of remote gambling services to UK players and operates in the UK market as a grey-market, non-GamStop casino.
- Appears to host or route services through infrastructure located in offshore jurisdictions such as Curaçao and possibly Costa Rica or Panama, based on technical analysis.
Because the operator has chosen not to disclose key corporate details, UK players have no effective UK gambling regulatory protection, no GamStop self-exclusion integration, and no access to UK-approved dispute resolution bodies (such as IBAS) in relation to gambling disputes. This lack of regulatory transparency may also impact the practical enforceability of your data protection rights, even though those rights exist under law.
For data protection matters, we refer to our internal Data Protection Lead or privacy team:
- Data controller: Operator of the Slots Paradise website at slotsperadise.com (exact legal entity name and address not publicly disclosed as of November 2025).
- Data Protection Lead / Privacy team: Accessible via the customer support and contact options made available on the Website (for example, live chat or support email, where provided).
- Postal address: Not publicly disclosed by the operator as of November 2025; this section will be updated once a verifiable registered address is published.
We strongly recommend that you keep copies of all communications with us relating to privacy and that you carefully consider the risks of sharing personal data with offshore operators that do not provide full corporate transparency or recognised licensing.
What Personal Data We Collect
When you use the Slots Paradise section of slotsperadise.com, we collect and process different categories of personal data, depending on how you interact with the Website and services.
Identification and contact data
- Profile details: First name, last name, username or nickname, date of birth, nationality, and verification information you provide to prove your age and identity.
- Contact details: Email address, mobile or landline phone number (where provided), preferred language, and any contact details you share with customer support.
- Verification documents: Copies and data extracted from identity documents (such as passports, national ID cards, driving licences), proof of address documents (such as utility bills or bank statements), and any other KYC/AML documentation you upload.
Technical and usage data
- Device and technical data: IP address, approximate location based on IP, device identifiers, browser type and version, operating system and platform, screen resolution, and language settings.
- Usage and log data: Dates and times of access, login and logout events, pages viewed, referral URLs, clickstream data, time spent on pages, error logs, and other diagnostic information.
Payment and financial data
- Transaction data: Deposits, wagers, wins, losses, withdrawals, bonuses claimed, bonus abuse flags, chargebacks, reversals, and transaction timestamps.
- Payment method data: Partial card details (such as card type and last four digits), payment instrument identifiers (e.g. e-wallet handles, account IDs), payment processor tokens, and relevant billing information. Full card numbers are typically processed by third-party payment providers, not by us directly.
- Anti-fraud and AML data: Checks associated with suspicious transactions, sanctions and politically exposed persons screening results (where applicable), and risk scores assigned by us or external providers.
Behavioral and profile data
- Gaming behaviour: Game history, game preferences, bet sizes, frequency and duration of play sessions, win/loss trends, self-exclusion settings (where offered), and any responsible gambling limits you set.
- Interaction data: Records of communications with customer support (chat transcripts, emails once available), complaints, dispute notes, and feedback you submit.
- Marketing preferences: Opt-in/opt-out choices for promotional communications (email, SMS, push notifications), and engagement metrics such as openings, clicks, and unsubscriptions.
Cookies and similar technologies
- Cookies: Small text files placed on your device that may be session-based (deleted when you close your browser) or persistent (stored for a defined period). These can be first-party (set by us) or third-party (set by external partners).
- Tracking technologies: Web beacons, pixels, tags, scripts, SDKs and local storage that help us recognise your browser or device, understand how you use the Website, and measure the effectiveness of promotions.
Some of this information is provided directly by you (for example, when you register or contact support), while other information is collected automatically (for example, through logging systems and cookies) when you access or use the Website.
Legal Basis for Processing
We process your personal data only when a valid legal basis exists under the UK GDPR and, where relevant, similar frameworks in the EU and Mexico. Depending on the specific processing activity, we rely on the following legal grounds:
- Performance of a contract: We process data necessary to enter into and perform our agreement with you, including:
- Creating and managing your player account.
- Providing access to casino games, promotions, and loyalty programmes.
- Processing deposits, bets, winnings, withdrawals, and bonus redemptions.
- Providing customer support and resolving issues related to your account or gameplay.
- Compliance with legal obligations: Even though we are not licensed by the UKGC, we may be subject to anti-money laundering, counter-terrorist financing, fraud prevention, tax, and accounting laws in the jurisdictions in which we operate (for example, Curaçao or other offshore locations). To comply with such laws, we may:
- Verify your age and identity (KYC checks).
- Monitor and record transactions for AML/CTF purposes.
- Retain records for legally mandated periods.
- Respond to lawful requests from competent authorities.
- Legitimate interests: We process certain data because it is necessary for our legitimate interests or those of third parties, provided your interests and fundamental rights do not override those interests. These include:
- Securing the Website, preventing fraud, and protecting our operations and other players.
- Maintaining and improving the performance and functionality of the Website.
- Analysing aggregate behaviour to optimise games, offers, and user experience.
- Enforcing our terms and conditions and managing business risks.
- Consent: In specific situations, we rely on your explicit consent, such as:
- Sending direct marketing communications to you by email, SMS, or push notifications where required by law.
- Using non-essential cookies and similar technologies for analytics and advertising on your device in the UK (in line with UK PECR rules).
- Processing certain categories of optional data that are not strictly necessary for the performance of the contract or legal obligations.
- Protection of vital interests or important public interest: In rare cases, we may process data where necessary to protect your vital interests or those of another person, or for reasons of substantial public interest recognised under applicable law (for example, preventing serious crime or harm).
Where we rely on consent, you may withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Where we rely on legitimate interests, you may object to such processing as described in the "Your Rights" section.
Purpose of Processing
We process your personal data for clearly defined purposes. The main purposes include:
- Providing and operating casino services: To register you as a player, verify your age and identity, enable gameplay, process deposits and withdrawals, allocate bonuses, and administer promotions and loyalty schemes.
- Managing your account and relationship with us: To maintain accurate account records, manage responsible gambling limits (where available), respond to your questions or complaints, and communicate with you about service-related matters.
- Improving and personalising the service: To analyse how players use the Website, diagnose technical issues, develop new features and games, test and refine user experience, and tailor content and offers to your interests where permitted.
- Marketing and promotions: To send you information about bonuses, campaigns, tournaments, loyalty rewards and other offers from Slots Paradise, where you have consented to receive such communications or where we are otherwise legally permitted to do so, and to measure the effectiveness of these campaigns.
- Analytics and statistics: To compile aggregated statistics on Website traffic, performance, and product usage, helping us understand and improve our business, while using de-identified or aggregated data wherever possible.
- Fraud prevention, security and integrity: To monitor gameplay and transactions, detect and investigate fraud, bonus abuse, chargebacks, collusion, money laundering, and other prohibited behaviour, and to protect our systems, players, and business.
- Legal and regulatory purposes: To comply with applicable laws in relevant jurisdictions, respond to lawful requests and court orders, enforce our terms, and protect or defend our legal rights and interests.
Disclosure & Sharing
We do not sell your personal data in the sense prohibited by applicable data protection laws. However, we may disclose or share your personal data with third parties in the following circumstances, always subject to appropriate contractual and security safeguards where feasible:
- Payment service providers and banks: We share necessary transaction and identification data with payment processors, card schemes, e-wallet providers, and banks to process deposits, withdrawals, refunds, chargebacks, and to investigate suspicious transactions.
- Technical and operational service providers: We engage third parties to provide services such as web hosting, content delivery, security monitoring, customer support tools, analytics, marketing platforms, and IT development. These providers may have access to your personal data only to the extent necessary to perform services on our behalf and are bound by confidentiality and data protection obligations.
- Game providers and platforms: We may share pseudonymised or account-related identifiers and transactional information with casino game providers and platform partners to deliver games, ensure fairness, and resolve incidents related to specific games.
- Affiliates and marketing partners: Where you access the Website via an affiliate link or marketing campaign, we may share limited information (such as registration and conversion metrics) with that partner for the purpose of tracking and paying commissions, and - subject to your consent - for joint marketing initiatives.
- Advertising networks and analytics partners: With your consent for non-essential cookies and tracking, we may allow third-party analytics and advertising providers to set cookies or similar technologies on your device to measure traffic, attribute marketing performance, and serve personalised content or adverts.
- Professional advisers: We may share data with our lawyers, auditors, accountants, or other professional advisers where necessary to obtain advice or protect our legal interests.
- Regulators, law enforcement and authorities: We may disclose data to competent authorities, regulators, courts, or law enforcement agencies in Curaçao, the UK, or other jurisdictions where we are required to do so by law or where disclosure is reasonably necessary to protect our rights, other players, or the public (for example, to investigate suspected fraud, money laundering, or other crime).
- Corporate transactions: If we are involved in a merger, acquisition, restructuring, sale of assets, or similar transaction, your data may be transferred to the relevant third parties as part of the due diligence or transaction, subject to appropriate confidentiality protections.
Because our licensing status and corporate transparency are limited, certain disclosures to offshore or unverified third parties may occur outside jurisdictions with robust data protection regimes. We seek to apply contractual safeguards and technical measures, but you should be aware that practical oversight by UK or EU authorities may be limited.
International Transfers
Your personal data may be transferred to, stored in, or otherwise processed in countries outside the United Kingdom and the European Economic Area ("EEA"). This is primarily because the operator and certain service providers are located in offshore jurisdictions with differing levels of data protection.
- Offshore gambling and hosting jurisdictions: Based on available information, we may process or store data in Curaçao (claimed operational jurisdiction, licence unverified) and in other locations such as Costa Rica or Panama, where gambling regulation and data protection standards may be less stringent than in the UK.
- Other third countries: Some of our technical, analytics, or marketing partners may be based in or process data from locations including the EEA, the United States, and other countries around the world.
Where we transfer personal data from the UK/EEA to countries that are not recognised by the UK government or the European Commission as providing an "adequate" level of data protection, we seek to implement appropriate safeguards, such as:
- Standard contractual clauses (SCCs) and UK data transfer mechanisms: Using the European Commission's SCCs together with the UK's International Data Transfer Addendum (IDTA) or similar UK-approved transfer tools, where suitable.
- Contractual and organisational safeguards: Imposing data protection and security obligations on recipients, restricting onward transfers, and requiring prompt notification of data breaches.
- Technical measures: Using encryption, access controls, and data minimisation to reduce the risk associated with offshore transfers.
However, given the offshore and grey-market nature of the operator and certain infrastructure locations, you should be aware that effective legal remedies and regulatory enforcement in respect of such international transfers may be more difficult to obtain than when dealing with fully regulated UKGC-licensed operators.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, accounting, reporting and anti-fraud requirements. Retention periods depend on the category of data and the context of processing, and are guided by applicable laws in relevant jurisdictions.
- Player account and identification data: Core account information (such as name, contact details, date of birth, and KYC documents) is typically retained for the duration of your relationship with us and for up to five (5) years after account closure, or longer if required by AML/CTF or other legal obligations.
- Transaction and gameplay data: Records of deposits, bets, wins, losses, withdrawals and bonus usage may be retained for up to five (5) to ten (10) years after the relevant transaction, depending on legal and tax requirements and the need to investigate fraud or resolve disputes.
- Technical and log data: Server logs, security logs, and device information are generally retained for a shorter period, typically from three (3) months to two (2) years, unless a longer retention period is necessary for security investigations or legal claims.
- Marketing and consent data: Records of your marketing preferences and consents are retained for as long as you remain registered or subscribed and for up to two (2) years thereafter, in order to demonstrate compliance with consent requirements and to honour opt-outs.
- Complaints and support communications: Correspondence with customer support, including privacy-related enquiries and complaints, is generally retained for up to five (5) years after resolution, or longer where necessary to defend legal claims.
When the applicable retention period expires, or the data is no longer required for the purposes described, we will delete or anonymise your personal data where technically feasible and commercially reasonable. In certain cases, data may be retained in an anonymised form that no longer identifies you. If you request deletion of your data, we will also assess whether we are legally required or otherwise permitted to retain some information, for example to comply with AML rules or to protect our legitimate interests.
Your Rights
Under the UK GDPR and comparable laws, including the EU GDPR and, for certain users, the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), you have several rights regarding your personal data. Because the operator of slotsperadise.com is offshore and unlicensed in the UK, the practical enforcement of these rights may be more complex, but the rights themselves remain applicable where we offer services to you.
Core data protection rights
- Right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how we use it.
- Right to rectification: You can ask us to correct inaccurate data and complete incomplete data, for example updating your contact details or verification information.
- Right to erasure ("right to be forgotten"): You can request deletion of your personal data in certain circumstances, such as where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing. We may need to retain some data despite such a request where required by law (for example, AML rules) or to protect our legitimate interests.
- Right to restriction of processing: You can request that we temporarily restrict processing of your data, for example while we verify its accuracy or assess an objection you have raised.
- Right to object: You can object at any time to processing based on our legitimate interests, including profiling for direct marketing. Where you object to direct marketing, we will stop such processing.
- Right to data portability: You can request that we provide you with certain personal data in a structured, commonly used and machine-readable format, or that we transmit it to another controller where technically feasible, when processing is based on consent or contract and carried out by automated means.
- Rights related to automated decision-making: If we use automated decisions that produce legal or similarly significant effects for you (for example, automated fraud decisions), you may have the right to obtain human intervention, express your point of view, and contest the decision.
Marketing and consent-related rights
- Right to withdraw consent: Where we rely on your consent (for example, for direct marketing or non-essential cookies), you can withdraw that consent at any time via your account settings, unsubscribe links in communications, or by contacting us through available channels.
- Right to object to marketing: You can object to receiving marketing communications from us at any time, and we will respect your preferences. We may still send non-promotional, service-related messages.
Mexican ARCO rights
If you are a resident of Mexico, we seek to align our practices with the ARCO rights under the LFPDPPP:
- Access: To know what personal data we hold about you and how we use it.
- Rectification: To request correction of inaccurate or incomplete data.
- Cancellation: To request that we stop processing and delete certain data, subject to legal retention obligations.
- Opposition: To object to certain processing activities based on legitimate interest or other grounds.
How to exercise your rights
- Submission of request: You can exercise your rights by contacting us through the support and contact channels made available on slotsperadise.com (for example, live chat or support email if provided). Please clearly indicate that your request relates to "Data protection" or "Privacy".
- Information we may request: To protect your account and prevent unauthorised access, we may ask you to provide information to verify your identity (such as basic account details, security questions, or KYC verification).
- Response timeframe: We aim to respond to your request within 30 calendar days of receipt. In complex cases, this period may be extended by a further two months, in which case we will inform you of the extension and reasons.
- Cost: Requests are generally handled free of charge. We may charge a reasonable fee or refuse to act where requests are manifestly unfounded, repetitive or excessive, in line with applicable law.
Please note that, although we commit to honouring these rights, the offshore and unregulated nature of the operator and hosting jurisdictions may affect the ability of UK, EU or Mexican authorities to effectively enforce compliance. You retain the right to lodge a complaint with a supervisory authority as described in the "Complaints & Contacts" section.
Cookies & Tracking Technologies
We use cookies and similar tracking technologies on the Slots Paradise section of slotsperadise.com to operate the Website, improve its performance, enhance your experience, and support marketing and analytics. Cookies may be placed by us (first-party) or by third parties.
Types of cookies
- Strictly necessary (functional) cookies: These cookies are essential for the operation of the Website and for enabling core features such as logging in, navigating between pages, maintaining your session, processing payments, and applying security measures. They cannot be switched off using our cookie tools, although you can block them in your browser (which may cause the site to malfunction).
- Preference cookies: These remember your choices, such as language, region, or display settings, helping provide a more personalised experience when you return.
- Analytics and performance cookies: These help us understand how visitors use the Website, which pages are most popular, how users move around the site, and whether error messages are being triggered. We use this information to improve performance and user experience, often in an aggregated form.
- Advertising and targeting cookies: These cookies and similar technologies may be set by us or by third-party partners to build a profile of your interests, show relevant adverts on the Website or other sites, measure campaign performance, and limit the number of times you see a particular advert.
Third-party technologies
Third parties such as analytics providers, affiliate networks, and advertising partners may use cookies, pixels, and similar technologies through the Website. These third parties may collect information about your online activities over time and across different websites and services, subject to their own privacy notices.
Managing cookies
- Cookie banner and settings: Where required by UK and EU law, we provide a cookie banner or settings panel that allows you to accept or reject non-essential cookies (such as analytics and advertising cookies). You can change your preferences at any time via the cookie settings available on the Website, if provided.
- Browser settings: Most browsers allow you to manage cookies through their settings, including blocking or deleting them. Consult your browser's help pages for instructions. Please note that disabling certain cookies may significantly affect the functionality and performance of the Website.
- Do Not Track: Our Website may not respond to browser "Do Not Track" signals. You can control tracking primarily through cookie settings and browser controls.
Data Security
We implement technical and organisational measures intended to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Nevertheless, no online platform can guarantee absolute security, particularly in offshore and grey-market contexts, and you should carefully consider the risks before using any unregulated gambling website.
Technical measures
- Encryption in transit: We aim to use industry-standard Transport Layer Security (TLS) protocols (TLS 1.2 or higher) to encrypt data transmitted between your browser and the Website, helping protect it from interception.
- Encryption and protection at rest: Where feasible, we use encryption, access controls, and other safeguards to protect sensitive information stored in our systems, such as passwords (stored in hashed form) and certain financial data.
- Access controls and authentication: Access to personal data is limited to authorised personnel and service providers who need the information for legitimate purposes and are subject to confidentiality obligations. We use authentication and authorisation controls to enforce these restrictions.
- Security monitoring: We employ logging, monitoring, and detection mechanisms to identify suspicious activity, potential intrusions, or misuse of accounts.
Organisational measures
- Staff awareness: Staff members with access to personal data are expected to follow internal privacy and security guidelines. We seek to provide training and guidance on handling personal data securely.
- Risk management: We conduct ongoing assessments of security risks, taking into account the nature of our operations, our offshore hosting environment, and the sensitivity of data processed.
- Vendor due diligence: Where possible, we select service providers that apply appropriate security standards and include data protection obligations in their contracts with us.
Incident response
We maintain procedures for responding to actual or suspected personal data breaches. In the event of a breach that is likely to result in a risk to your rights and freedoms, and where required by law, we will:
- Notify the relevant supervisory authority without undue delay and, where applicable, within statutory time limits (for example, 72 hours under UK GDPR).
- Inform affected individuals as soon as reasonably practicable, providing information about the breach, its likely consequences, and the measures taken or proposed to address it.
Due to the nature of offshore operations and our unlicensed status in the UK, the ability of UK or EU authorities to verify or enforce security practices may be limited. You should therefore consider whether you are comfortable sharing personal and financial data with an operator that does not provide full regulatory transparency or recognised certification (for example, ISO 27001 or SOC 2), which we do not claim to hold.
Complaints & Contacts
If you have questions, concerns or complaints regarding this Privacy Policy or our handling of your personal data, you are entitled to contact us and, if needed, escalate your concerns to supervisory authorities.
Contacting us
- Initial contact: Please contact us through the customer support and communication channels provided on slotsperadise.com (for example, live chat or general support email, if available). Clearly state that your enquiry relates to "Privacy" or "Data Protection".
- Data Protection Lead: Your request will be handled by our internal Data Protection Lead or privacy team, even though a named Data Protection Officer and full corporate details are not publicly disclosed as of November 2025.
- Postal contact: The operator has not provided a verifiable postal address for privacy matters. If and when such an address is disclosed, it will be inserted into this Privacy Policy.
Internal complaint procedure
- Step 1 - Submission: Submit your complaint or request with sufficient detail to allow us to understand the issue (for example, relevant account details, dates, and a clear description of your concern).
- Step 2 - Acknowledgement: We aim to acknowledge receipt of your complaint within a reasonable period, typically within seven (7) days.
- Step 3 - Investigation: We will investigate your complaint, which may include reviewing system logs, transaction records, and correspondence.
- Step 4 - Response: We will provide a substantive response within 30 days where possible, explaining our findings and any measures taken. For complex matters, we may extend this period in line with applicable law and will inform you of the delay.
Escalation to supervisory authorities
Depending on your place of residence, you may have the right to lodge a complaint with a relevant data protection authority if you believe that your data protection rights have been infringed.
- United Kingdom: In the UK, the supervisory authority is the Information Commissioner's Office (ICO).
- Website: https://www.ico.org.uk
- Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
- European Economic Area (if applicable): If you are located in the EEA, you may contact your local data protection authority. Details are available on the European Data Protection Board (EDPB) website.
- Mexico: If you are a resident of Mexico, you may lodge a complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI).
- Website: https://home.inai.org.mx
Please be aware that, due to the offshore and unlicensed status of the operator providing the Slots Paradise version via slotsperadise.com, the ability of these authorities to investigate and enforce against the operator may be limited in practice, even though they can receive complaints about the processing of personal data of their residents.
Updates
We may update this Privacy Policy from time to time, for example to reflect changes in our processing activities, the technologies we use, our corporate structure, or applicable laws and regulatory guidance. The version applicable to your use of the Slots Paradise section of slotsperadise.com is the version published on the Website at the time of use.
Notification of changes
- Minor changes: For non-material updates (such as clarifications or corrections), we may simply update the text on the Website, with the "Last updated" date being amended.
- Material changes: For significant changes affecting how we process your data or your rights (for example, changes in categories of data processed, new purposes, or new types of recipients), we will provide advance notice of at least 30 days where reasonably practicable. Notification methods may include:
- Email or on-site messaging sent to your registered contact details (once available).
- Prominent banners or notices on the Website.
- Alerts in your account dashboard.
Your options when we update this policy
- Review changes: We encourage you to regularly review this Privacy Policy, particularly when notified of updates, to understand how your data is processed.
- Object to changes: If you do not agree with a material change, you may object to certain processing (where applicable) or close your account and stop using the Website. We may retain certain data after account closure as described in the "Data Retention" section.
Last updated: November 2025. This version supersedes any previous versions relating to the Slots Paradise configuration of slotsperadise.com. Future updates will include a brief summary of material amendments where required or helpful for transparency.