Privacy policy
How Ludaro Limited collects, uses, and protects your personal data under GDPR and Maltese data protection law.
1. Data controller
Ludaro Limited (company C 112810, Floriana, Malta) is the data controller for all personal data processed through casino-slotspice.com. Questions about this policy can be directed to the Data Protection Officer at privacy@casino-slotspice.com.
2. Data collected
Personal data is collected across several categories:
- Identity data: name, date of birth, national ID or passport number
- Contact data: email address, phone number, residential address
- Financial data: payment method details, transaction history, source-of-funds documentation
- Gaming data: game sessions, bet amounts, win/loss records, bonus usage
- Technical data: IP address, browser type, device identifiers, session timestamps
- Communications data: support chat logs, email correspondence, KYC document submissions
3. Legal bases (GDPR Article 6)
| Processing purpose | Legal basis |
|---|---|
| Account registration and management | Contract performance (Art. 6(1)(b)) |
| KYC verification | Legal obligation (Art. 6(1)(c)): AML Directive |
| Responsible gambling tools | Legal obligation (Art. 6(1)(c)): MGA requirements |
| Marketing communications | Consent (Art. 6(1)(a)), withdrawable at any time |
| Fraud prevention | Legitimate interests (Art. 6(1)(f)) |
| Analytics and site improvement | Legitimate interests (Art. 6(1)(f)) |
4. Third-party processors
Ludaro Limited shares data with selected third-party processors under data processing agreements:
- Cloudflare: network security, DDoS protection, DNS
- Google Analytics 4: anonymised site usage analytics
- Mailchimp: marketing email delivery (consent-based only)
- Intercom: live chat support platform
- Onfido: KYC identity and document verification
- Payment processors: Instant Bank Transfer, Jeton, Zimpler, Visa, Mastercard, Revolut, Apple Pay
5. Cookie categories
Cookies used by casino-slotspice.com fall into four categories:
- Essential: session management, security, login state. Cannot be disabled.
- Functional: language preference, game history. Optional but affect experience.
- Analytics: anonymised usage data via Google Analytics 4.
- Marketing: affiliate tracking, retargeting. Requires explicit consent.
6. Data retention
Identity and financial data: retained for 5 years after account closure in compliance with AML obligations. Gaming data: retained for 2 years after last activity. Marketing data: retained until consent is withdrawn. Technical logs: 90 days rolling.
7. International transfers
Some processors (including Google and Mailchimp) process data in the United States. These transfers are covered by EU Standard Contractual Clauses (SCCs) adopted under GDPR Article 46(2)(c). A copy of the applicable SCCs is available on request from the DPO.
8. Your rights
Under GDPR you have the right to: access your data; rectify inaccurate data; request erasure (subject to legal obligations); restrict or object to processing; data portability; and withdraw consent at any time without affecting prior processing. Submit requests to privacy@casino-slotspice.com. The Data Protection Officer will respond within 30 days.
9. Breach notification
In the event of a personal data breach likely to result in risk to your rights, Ludaro Limited will notify you and the relevant supervisory authority within 72 hours of becoming aware, in accordance with GDPR Article 33. Ludaro Limited maintains an internal breach log and incident response plan reviewed annually.
Privacy FAQs
How do I request a copy of my data?
Email privacy@casino-slotspice.com with the subject 'Data Access Request'. The Data Protection Officer will respond within 30 days with a full export of data held about your account.
Can I request deletion of my data?
Yes, subject to legal obligations. AML regulations require Ludaro Limited to retain identity and financial data for 5 years after account closure. Other data categories can be deleted on request.
How do I opt out of marketing emails?
Click the unsubscribe link at the bottom of any marketing email, or go to My Account > Communication Preferences and toggle off marketing communications.
Who is your DPO?
The Data Protection Officer can be contacted at privacy@casino-slotspice.com. All data subject requests should be sent to this address.
10. Profiling and automated decision-making
Slotspice uses automated systems to detect unusual account activity, including potential fraud and money laundering patterns. These systems may generate flags that lead to account suspension or requests for additional documentation. Where an automated decision materially affects your account, you have the right to request human review by emailing privacy@casino-slotspice.com. Slotspice will review and respond within 10 business days.
Slotspice does not use profiling for personalised gambling feature recommendations in a way that targets you based on inferred vulnerability. Responsible gambling tools are recommended based on account activity thresholds defined by the MGA, not by commercial machine-learning models.
11. Cookies in detail
The following specific cookies are set by casino-slotspice.com:
- __cf_bm (Cloudflare): bot management, 30-minute session. Essential.
- PHPSESSID: PHP session management. Essential, session-scoped.
- slotspice_lang: language preference. Functional, 1-year expiry.
- _ga (Google Analytics 4): anonymous visitor ID. Analytics, 2-year expiry.
- _gid (Google Analytics 4): session analytics. Analytics, 24-hour expiry.
- intercom-id-* (Intercom): anonymous visitor ID for support chat. Functional, 9-month expiry.
- aff_id: affiliate tracking. Marketing, 30-day expiry. Only set with consent.
You can manage cookie preferences at any time via the cookie preference centre accessible from the site footer. Withdrawing consent for analytics or marketing cookies does not affect the functionality of the platform or your ability to deposit, play, or withdraw.
12. Contact and supervisory authority
For all data protection queries, contact the Data Protection Officer at privacy@casino-slotspice.com. If you are not satisfied with Ludaro Limited's handling of your data subject request, you may lodge a complaint with the Information and Data Protection Commissioner of Malta (idpc.org.mt) or your local supervisory authority if you reside in another EU member state.
How and why marketing messages are sent
casino-slotspice.com sends marketing communications only to players who have given explicit consent at registration or through account settings. Marketing messages include promotional offers, bonus notifications, tournament announcements, and product updates related to casino-slotspice.com.
casino-slotspice.com uses Mailchimp to deliver marketing emails. Mailchimp processes your email address and delivery status data on behalf of casino-slotspice.com under a data processing agreement. casino-slotspice.com does not sell your email address or personal data to third parties for their own marketing purposes.
You can withdraw consent for marketing communications at any time by clicking the unsubscribe link at the bottom of any marketing email, by updating your preferences in My Account, or by contacting support. Withdrawal of consent takes effect within 24 hours and does not affect your ability to receive transactional communications such as account security alerts, withdrawal confirmations, and KYC request notifications, which are sent regardless of marketing preferences.
Ludaro Limited retains your contact details for marketing purposes as long as your account is active and you have not withdrawn consent. If you close your account, marketing data is deleted within 30 days unless retention is required for another legal purpose such as AML record-keeping.
Technical and organisational measures
Slotspice implements technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures are reviewed annually and updated in response to new threats or vulnerabilities.
Access to personal data within the organisation is role-based. Only staff whose job function requires access to a particular category of data can access it. Customer-facing support agents can access account details and transaction history but cannot access KYC documents unless they are in the compliance team. KYC documents are accessible only to compliance and senior management personnel.
Slotspice's incident response plan covers detection, containment, investigation, notification, and remediation of data security incidents. The plan is tested twice annually through tabletop exercises. Key personnel responsible for incident response are on call 24 hours a day. In the event of a breach affecting your data, you will be notified within 72 hours of Slotspice becoming aware of the incident, as required by GDPR Article 33.
Types of cookies and how to manage them
Casino-slotspice.com uses cookies and similar tracking technologies to operate the website, remember your preferences, and analyse how the site is used. The cookie policy explains the types of cookies in use and how you can manage them.
Strictly necessary cookies cannot be disabled because they are required for core functions including session management, login, security validation, and the shopping cart. These cookies do not track you for marketing purposes.
Analytics cookies help casino-slotspice.com understand how visitors interact with the site. casino-slotspice.com uses this data to identify pages with usability issues and to improve the overall experience. Analytics cookies are set by the web analytics platform used by casino-slotspice.com and collect data in aggregated, anonymised form.
Marketing cookies are set only if you give explicit consent via the cookie banner. These cookies enable casino-slotspice.com to show you relevant offers on third-party sites through the advertising network used by casino-slotspice.com. You can withdraw consent at any time through the cookie settings link that appears on every page.