Your visit. Your information.

Why we use information.

We use your account details, game records and requested preferences to provide the service under our Terms (performance of a contract). Account creation and game continuity require this information; without it we cannot provide an account or synchronised play.

We use security records, eligibility declarations, voluntary break records and support correspondence for our legitimate interests in protecting accounts, preventing abuse, keeping an adult service and resolving problems. We limit the information to these purposes. Where a data-protection request requires us to comply with the law, our basis is legal obligation. Accepting the Privacy notice is not consent to marketing.

Account and eligibility records.

Registration stores your name, email, an Argon2id password hash and creation time. Passwords are not stored as plain text. Session tokens are stored as hashes and expire after fourteen days. The account security page shows coarse browser/device names and last-active dates, lets you revoke other sessions and change your password. One-time email and recovery links expire after 60 and 30 minutes respectively; tokens are hashed and queued link contents are encrypted until sent. When email delivery is connected, its provider receives the recipient address and transactional message. No marketing is included.

At registration we record your declaration of UK residency, age 18+ and acceptance of the current Terms, with its date. Guest players make the same age/residency declaration before opening a playable guest game; it is remembered for 30 days in that browser. These are self-declarations, not identity or location verification. We do not ask for a date of birth or identity document in these flows. Chosen account breaks are recorded separately.

Game records.

Signed-in casual play stores per-mode results, compatible saved rounds, achievements and your table accent under your account. Slot play stores the shared credit balance, round identifiers, results, bonus progress, preferences and credit activity. These records support continuity and prevent an interrupted request being charged twice.

Account favourites, ordered next-up lists, up to twelve recent game visits with timestamps, avatar and frame choices are stored under your account. Your cosmetic room, chosen object, marked collection atlas, up to six private game shelves, comfort preferences and private three-game field tray with selected purposes are also stored with the account. Private shelves and atlas marks are never added to public shared links. Earlier device favourites are imported only when you select Import device picks. Guest favourites and casual saves remain local. Slot guest balances, rounds and bonus progress are stored on the server under a random guest-session identifier for seven days. The most recent 120 credit activity entries are retained for that guest visit. No account or email is needed. Expired guest records are removed when new guest sessions are created. Preview demonstrations do not add account results or spend credits.

Optional shared collections.

Publishing a collection creates a public link containing your chosen title, up to twelve selected games, avatar and frame. It never includes your account name, email, credit balance, recent visits or game records. Anyone with the link can view it; share it only if you want to.

Unpublish removes access through that link immediately. A later publication creates a new link. Shared pages are excluded from our sitemap and request no search indexing. Copies previously saved by others are outside our control. Profile and shared-collection records are retained with your account; use Contact for account-data requests.

Requests and support.

Contact stores your reply email, topic, message, reference, date, status and follow-up messages, linked to your account when signed in. Team replies appear on the private request page. Account requests are visible only to that account; guest requests use a private browser receipt valid for 90 days. A reference alone does not grant access. Do not include passwords, payment details, identity documents or unnecessary sensitive information.

The optional report-preparation tool only formats text in the page. Copying it places that text on your clipboard. It submits nothing until you separately use the support form.

A support notification queue stores the reference, destination, delivery status and retry count. Notifications contain the reference, not your message. We do not claim an email has been delivered merely because a request was saved.

Cookies, hosting and security.

Essential cookies maintain sign-in, protect requests, remember your guest eligibility declaration and allow you to read your private support thread. The Cookies page explains their purposes and durations. Assets and fonts load from this site. No payment service, advertising network or analytics script is connected.

The serving system may log requested URLs, timestamps, browser details and IP addresses for operation and security. Short-lived hashed rate-limit keys protect account and game requests. Application error records contain a random reference, route template, status and time, with no request contents; they are capped at 1,000 records and 30 days. Administrator actions retain account ID, action and target reference for 180 days; deletion removes the actor association. Password hashes, request checks and access controls reduce risk; no system can promise perfect security.

Keeping and controlling information.

Account and game records are kept while the account is active. The privacy controls allow you to download account-linked records or permanently delete your account after confirming your password. Deletion removes linked sessions, game progress, credits, saved collections and account-linked support messages. A record containing only the deleted account number and deletion date is retained for 90 days to prevent accidental restoration. Device-only records and a browser’s chosen break are separate.

Open support requests remain while the issue is handled. Closed ordinary requests are kept for 180 days; closed privacy requests for one year to document their handling. An account deletion also removes that account’s linked requests. Guest request receipts expire after 90 days; successful mail queue entries are removed after 30 days. Failed or pending notifications remain with their request for review.

Guest slot visits expire after seven days. Adult declarations expire after 30 days unless a longer chosen browser break applies. Expired sign-in sessions, rate-limit records and guest visits are removed during relevant account/game operations; expired support, security-link and deletion records are removed by the retention job. Private recovery backups must be restricted to a 30-day window; erased accounts must not be reactivated when a backup is restored.

Your data-protection rights.

Depending on the circumstances, you may request access, correction, erasure, restriction or portability of your personal information. You may object to processing based on legitimate interests. We do not send marketing email or make solely automated decisions with legal or similarly significant effects about you.

Contact Player Care to exercise a right, including if you cannot sign in. We normally respond within one month. If we need proportionate information to verify your identity, clarification or a lawful extension, we will explain what is needed and why. The account download tool is optional and does not limit the scope of an access request.

You may complain to the Information Commissioner’s Office about our use of your information. You can contact the ICO independently and do not have to raise the matter with us first.

Use your privacy controls.

Download your account records or delete your account. You can also send a privacy request, including without signing in.

You may complain to the Information Commissioner’s Office. You do not have to contact us first.