Privacy Policy

This Privacy Policy explains how Slotbon N.V. ("Slotbon", "we", "us", "our") collects, uses, discloses and protects your personal data when you use the Slotbon version of our online casino and related services provided via slotbonwin.com (the "Website"). It applies to players, prospective players, website visitors, affiliates interacting with the Website, and any person who contacts us or whose data we process in connection with our services.

The policy is designed in line with our internal "observe - expand - reflect" approach: we observe what data is needed, expand our safeguards to cover all relevant risks and jurisdictions, and reflect regularly on whether our practices remain lawful, necessary and proportionate.

By registering an account, using the Website, submitting any form, making a deposit or otherwise interacting with us, you acknowledge that you have read this Privacy Policy. If you do not agree, you should not use the Website or should close your account. This version of the Privacy Policy is effective from 1 January 2026 and remains in force until replaced.

Who We Are

Observe: You need to know who is responsible for your personal data. Slotbon N.V. determines the purposes and means of processing your data when you use Slotbon on slotbonwin.com.

Expand: For most processing related to the Website, Slotbon N.V. acts as the "data controller" under applicable data protection laws, including the UK General Data Protection Regulation ("UK GDPR") and the UK Data Protection Act 2018 ("DPA 2018"). In some cases, local partners (for example, payment processors in Cyprus) may act as independent controllers or joint controllers for specific activities.

Corporate Information

Legal entity: Slotbon N.V., a public limited liability company (N.V.) incorporated under the laws of Curaçao.
Registered / legal address: Slotbon N.V., Willemstad, Curaçao (full street address and postal code not specified; details can be provided upon justified request for legal or regulatory purposes).
Registration number: Not specified in public materials as of January 2026.
Gaming licence: Curaçao eGaming sub-licence 8048/JAZ2023-014 issued via Antillephone N.V., status indicated as active as of early 2025. This licence relates to gambling regulation and does not replace data protection rights under UK or other privacy laws.
Operational profile: Hybrid fiat/crypto online casino accessed globally, including by UK players via the Slotbon localisation on slotbonwin.com.

Group and Partners

Head office: Willemstad, Curaçao.
Regional presence: Payment processing activities may be carried out by an affiliated or subsidiary entity located in Cyprus (exact corporate name and address not specified; we will provide up-to-date details when they become finalised and legally required).
Regulatory jurisdictions: Curaçao (licensing), UK market (without local UKGC licence), and other international markets in line with the licence terms.

Data Protection Contact

Primary contact for privacy matters (DPO / privacy team): support@slotbonwin.com (please include "Privacy" or "Data protection" in the subject line).
Website: https://slotbonwin.com
Postal contact (for formal correspondence): Data Protection Officer, Slotbon N.V., Willemstad, Curaçao.

Reflect: Slotbon N.V. remains the primary point of contact for all questions about how your data is used on Slotbon, including for UK residents and other international players.

What Personal Data We Collect

Observe: We only collect data needed to operate the Website, comply with law and improve our services. We do not sell your personal data.

Expand: We collect data in several categories. Some data is provided directly by you, some is generated automatically when you use our services, and some is obtained from third parties (for example, payment intermediaries or verification providers).

Identity and Contact Data

Account identifiers: username, password (stored in hashed form), unique account ID.
Personal details: full name, date of birth, gender (if provided), nationality, preferred language.
Contact details: email address (for Slotbon typically the email used with slotbonwin.com), telephone number, country of residence, address and postcode where required by KYC/AML rules.
Verification data: copies or details of identity documents (passport, ID card, driving licence), proof of address (utility bills, bank statements) and any additional information you upload to verify your identity, age or source of funds.

Technical and Usage Data

Technical identifiers: IP address, device identifiers, browser type and version, operating system, time zone settings, language settings, and similar information.
Log data: login timestamps, session duration, pages viewed, clicks, scrolling and navigation behaviour, referral URLs, and crash or error reports.
Device and network data: information about your internet service provider, approximate location derived from IP (city/region level), device model, and connection performance metrics.

Gameplay and Behavioural Data

Betting and transaction history: game sessions, game type, stakes, wins and losses, bonuses used, jackpots, timestamps, and frequency of play.
Risk and behaviour profiles: responsible gambling indicators (for example, rapid play, chasing losses, unusual patterns), self-exclusion status, limits set and changes to limits.
Website interaction: responses to promotions, clicks on banners, opened emails, and participation in tournaments or loyalty schemes.

Payment and Financial Data

Fiat payments: partial payment card details (tokenised or truncated card numbers, card type, issuing country), transaction identifiers, deposit and withdrawal amounts, bank account or IBAN where bank transfer is used.
Crypto payments: wallet addresses (sender and receiving wallets), transaction hashes, currency type (e.g., BTC, ETH, USDT, LTC), approximate equivalent value at time of transaction, and any fraud or compliance flags raised.
Billing and AML data: information obtained to comply with anti-money laundering (AML), counter-terrorist financing (CTF) and fraud prevention rules, including source-of-funds or source-of-wealth documents when required.

Communications and Support Data

Support interactions: emails sent to support@slotbonwin.com, live chat logs (if available), complaint submissions, and internal notes relating to your requests.
Preferences: your marketing and communication preferences, opt-in/opt-out records, and any consents given or withdrawn.

Cookies and Similar Technologies

Cookies: small text files stored on your device to recognise you and remember your settings.
Tracking technologies: web beacons, pixels, tags, SDKs, and similar technologies used for analytics, security and advertising (where permitted).

Reflect: We do not knowingly collect data from persons under 18 or under the minimum legal gambling age in their jurisdiction. If we become aware that we have collected data from a minor, we will take reasonable steps to delete it and close any related account.

Legal Basis for Processing

Observe: For UK players and other affected users, we must identify a lawful basis under data protection laws (primarily UK GDPR and DPA 2018, and where applicable EU GDPR and Mexican privacy law) before using your data.

Expand: Depending on the context, we rely on different legal grounds. We carefully assess which basis is appropriate and avoid relying on consent where the processing is necessary for core services or legal obligations.

Contractual Necessity

Purpose: To create, manage and operate your player account, enable deposits and withdrawals, allow you to place bets and play games, process winnings, and provide customer support.
Legal basis: Processing is necessary for the performance of a contract with you (or to take steps at your request before entering into a contract).
Examples: Verifying your age to open an account, adjusting your account balance after a win, or responding to your account-related queries.

Legal Obligations

Purpose: To meet our obligations under applicable laws, regulations, licence conditions and regulatory guidance, including AML/CTF requirements, fraud and crime prevention, tax reporting, responsible gambling measures and record-keeping.
Legal basis: Processing is necessary for compliance with a legal obligation to which we are subject (for example, under Curaçao AML rules and data retention requirements, and, where applicable, under UK or EU law).
Examples: Keeping transaction records for a set period, carrying out identity checks, or providing information to competent authorities when we are legally required to do so.

Legitimate Interests

Purpose: To run, improve and protect our business and the Website; to prevent abuse, fraud and cheating; to perform analytics and statistics; and to personalise aspects of the user experience.
Legal basis: Processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests.
Examples: Using device and behavioural data to detect multiple-account abuse, monitoring gameplay patterns to protect the platform, and conducting aggregated analytics to understand how Slotbon is used.

Consent

Purpose: To send you certain types of marketing communications (for example, email newsletters to UK residents where required by UK GDPR and the Privacy and Electronic Communications Regulations ("PECR")), to use non-essential cookies, and to process some categories of optional data you provide.
Legal basis: Processing is based on your explicit, informed consent, which you can withdraw at any time without affecting the lawfulness of processing prior to withdrawal.
Examples: Opting in to receive bonus offers by email or SMS, consenting to advertising cookies, or agreeing to participate in certain surveys.

Vital Interests and Legal Claims

Vital interests: In rare situations, we may process data to protect your vital interests or those of another person (for example, cooperating with emergency services if we believe there is an imminent risk of serious harm).
Legal claims: We may process data where necessary to establish, exercise or defend legal claims, including in dispute resolution or litigation.

Reflect: For users in Mexico, we also align our processing with the principles and legal bases set out in the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations, ensuring lawfulness, consent (where applicable), information, quality, purpose limitation, loyalty, proportionality and accountability.

Purpose of Processing

Observe: You should understand why we process each category of data. We avoid using your data for purposes that are incompatible with the reasons for which it was collected.

Expand: The main purposes for processing your personal data are:

Provision and Management of Casino Services

Account creation and management: registering and maintaining your Slotbon account on slotbonwin.com, verifying your identity and eligibility, and providing secure access.
Gameplay operations: facilitating wagers, settlements, bonuses, tournaments, loyalty schemes and other game-related features.
Customer support: handling your enquiries, complaints, technical issues and responsible gambling requests (including self-exclusion and cooling-off periods).

Payments, Risk and Compliance

Deposits and withdrawals: processing payments via crypto, Visa/Mastercard, bank transfer and other approved methods, and resolving payment issues.
Compliance checks: performing KYC, AML/CTF and sanctions screening checks in line with our licence and applicable law.
Fraud and security: monitoring and investigating suspect transactions, multiple-account setups, chargebacks, card testing, or unusual crypto activity.

Personalisation, Analytics and Marketing

Service improvement: analysing how players use the Website to improve usability, game offering, performance and stability.
Personalised content: tailoring promotions, recommendations and interface elements based on your preferences and gameplay, where permitted under applicable law.
Marketing communications: sending offers and information you have chosen to receive, and measuring campaign effectiveness (subject to your right to opt out and, where required, prior consent).

Legal, Regulatory and Business Purposes

Regulatory reporting: responding to lawful requests from regulators, law enforcement or tax authorities.
Dispute resolution: managing complaints, chargebacks, legal claims or regulatory investigations.
Business continuity: conducting audits, managing risk, and planning or implementing corporate transactions (for example, restructuring or transfer of business).

Reflect: Where we intend to use your data for any new purpose that is not compatible with the purposes described above, we will inform you in advance and, where required, seek your consent.

Disclosure & Sharing

Observe: We share your data only where necessary, using appropriate safeguards and written contracts with our service providers.

Expand: We may disclose your personal data to the following categories of recipients, always subject to confidentiality and data protection obligations.

Service Providers and Business Partners

Payment processors: banks, card schemes (such as Visa/Mastercard), crypto payment gateways and bank transfer providers that process deposits and withdrawals. This may include entities located in Cyprus or other jurisdictions.
Verification and AML partners: third-party providers that assist with identity verification, age checks, sanctions and politically exposed person (PEP) screening, fraud detection and responsible gambling assessments.
IT and infrastructure providers: hosting companies, cloud services, content delivery networks and security providers that help us operate the Website securely and reliably.
Analytics and performance tools: providers who help us understand how users interact with Slotbon and improve our services, using aggregated and, where possible, pseudonymised data.
Marketing and affiliate partners: partners who promote Slotbon on their websites or platforms, and advertising networks that display our ads, but only to the extent permitted by applicable law and your consent or preferences.

Group Companies and Corporate Transactions

Group entities: current or future subsidiaries or affiliates (for example, payment entities in Cyprus) that support our operations, subject to intra-group data processing arrangements.
Corporate events: if Slotbon N.V. is involved in a merger, acquisition, asset sale, restructuring or similar transaction, your data may be shared with prospective or actual buyers or partners, under strict confidentiality commitments.

Authorities and Regulators

Regulators and law enforcement: regulators in Curaçao (for example, Antillephone N.V. and competent authorities) and, where applicable, competent authorities in other jurisdictions (including the UK and EU) when we are legally required or permitted to provide information.
Courts and legal advisers: external legal counsel, auditors and other professional advisers, as needed to protect our rights, respond to legal claims or comply with court orders.

With Your Consent or at Your Request

Advertising cookies and networks: where you consent to advertising cookies, we may share limited identifiers with advertising partners to measure and improve our campaigns.
Other disclosures at your request: for example, where you explicitly ask us to share information with a third party, such as another operator, a payment provider or a dispute resolution body.

Reflect: We do not sell your personal data to third parties for their own independent marketing. Any sharing is restricted to the purposes set out in this Privacy Policy or as otherwise notified to you.

International Transfers

Observe: Slotbon N.V. is based in Curaçao and uses partners in multiple countries. This necessarily involves transferring personal data across borders.

Expand: Where data protection laws in your country (for example, the UK GDPR, EU GDPR or Mexican law) restrict international transfers, we take appropriate steps to ensure that your data remains protected.

Where Your Data May Be Transferred

Curaçao: operational headquarters of Slotbon N.V. and core hosting or back-office systems.
Cyprus: likely location of certain payment processing and financial partners affiliated with Slotbon N.V.
United Kingdom and European Economic Area (EEA): locations of some of our players, partners and service providers, including analytics, security and cloud providers.
Other countries: carefully selected third-party providers (for example, email delivery or specialised verification services) that may be located outside the UK/EEA, such as in the United States or other jurisdictions.

Safeguards for International Transfers

Standard Contractual Clauses (SCCs): where required, we use the European Commission's SCCs, together with the UK International Data Transfer Addendum or the UK International Data Transfer Agreement, for transfers from the UK/EEA to countries without an adequacy decision.
Intra-group arrangements: internal data transfer agreements within the Slotbon group, ensuring consistent protections across jurisdictions.
Technical and organisational measures: encryption, access controls, minimisation and pseudonymisation, combined with contractual obligations on recipients to protect your data.
Legal and risk assessments: where appropriate, we conduct transfer impact assessments to evaluate whether additional safeguards are needed.

Reflect: Where local laws in the destination country could affect your rights, we implement additional safeguards where feasible. If you would like further information on the mechanisms we use for international transfers, you can contact us using the details in the "Complaints & Contacts" section.

Data Retention

Observe: We must not keep personal data longer than necessary for the purposes for which it was collected or as required by law.

Expand: We apply written retention schedules that reflect regulatory obligations (including AML/CTF rules) and business needs. After the relevant period expires, we delete or irreversibly anonymise the data.

Retention Periods by Category

Account and identity data: generally kept for the duration of your active account and for up to 5 years after account closure, to respond to disputes, comply with AML and other legal obligations and maintain accurate records.
Transaction and payment data: normally retained for at least 5 years and up to 10 years from the date of the transaction, depending on applicable financial and AML regulations.
Gameplay and behavioural data: retained for as long as your account is active and then for up to 5 years after closure, for dispute resolution, fraud detection and regulatory reporting.
Customer support and communications: stored for up to 5 years after the last interaction, unless a longer period is needed for legal claims.
Marketing data: kept until you withdraw consent or object to marketing, and typically no longer than 3 years after your last active interaction with us.
Cookies and similar technologies: stored for the lifetime indicated in our cookie management tool; non-essential cookies are typically kept for no more than 13 months.

Deletion and Anonymisation

Deletion: when data is no longer needed and we are not legally required to retain it, we securely delete or destroy it.
Anonymisation: in some cases, we anonymise data so that it no longer identifies you (for example, aggregated statistics). We may use such anonymised data indefinitely.
Exceptions: if there is an ongoing dispute, investigation or legal claim, we may retain relevant data until the matter is fully resolved.

Reflect: If you request deletion of your data, we will take your request into account but may need to retain certain information for the periods described above where we have overriding legal obligations.

Your Rights

Observe: Data protection laws give you specific rights over your personal data. These rights may vary depending on your place of residence, but we aim to handle all requests fairly and transparently.

Expand: For UK residents, your rights mainly arise under the UK GDPR and DPA 2018. For residents of the EEA, similar rights exist under the EU GDPR. For residents of Mexico, we take into account the ARCO rights (Access, Rectification, Cancellation and Opposition) under the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations.

Core Data Protection Rights

Right of access: you can request confirmation of whether we process your personal data and receive a copy of the data, along with information about our processing.
Right to rectification: you can ask us to correct inaccurate data and complete incomplete data held about you.
Right to erasure ("right to be forgotten" / cancellation): you can ask us to delete your personal data where there is no valid reason for us to keep it (for example, when it is no longer needed for the purposes described or where you have withdrawn consent and there is no other legal basis).
Right to restrict processing: you can ask us to limit the processing of your data in certain circumstances, such as when you contest its accuracy or object to processing.
Right to data portability: you can request that we provide certain data to you or to a third party in a structured, commonly used and machine-readable format, where the processing is based on consent or contract and carried out by automated means.
Right to object: you can object at any time to processing based on legitimate interests, including profiling, and we will stop unless we have compelling legitimate grounds that override your interests or the processing is needed for legal claims.
Right to object to marketing: you can object at any time to the use of your data for direct marketing purposes (including profiling for marketing). If you do so, we will stop sending you marketing messages.
Rights related to automated decision-making: where we use automated systems (for example, for fraud detection or risk assessment) that significantly affect you, you may have the right to obtain human review, express your point of view and contest the decision.

Consent-Related Rights

Withdrawal of consent: where we rely on your consent (for example, for marketing or certain cookies), you can withdraw it at any time using the unsubscribe link in our emails, the cookie management tool, your account settings or by contacting us.
Effect of withdrawal: withdrawal does not affect the lawfulness of processing carried out before the withdrawal, but we will stop the relevant processing going forward.

How to Exercise Your Rights

Contact channel: you can submit requests by emailing support@slotbonwin.com or via any dedicated privacy or support form on slotbonwin.com.
Verification: we may ask you for additional information to confirm your identity, particularly before disclosing sensitive data or processing deletion/portability requests.
Response time: we aim to respond within 30 days of receiving your request. For complex or multiple requests, this period may be extended by up to a further 60 days, in which case we will inform you of the extension and reasons.
Fees: we do not normally charge a fee for handling your request. However, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded or excessive, in line with applicable law.

Reflect: If you are located in Mexico, we will manage your requests in line with the ARCO framework under LFPDPPP, and if you are located in the EEA or UK, in line with EU/UK GDPR respectively. You also have the right to lodge a complaint with your local data protection authority as explained in the "Complaints & Contacts" section.

Cookies & Tracking Technologies

Observe: Slotbon uses cookies and similar technologies on slotbonwin.com, including the Slotbon localisation, to ensure the Website functions correctly and to improve your experience.

Expand: Some cookies are strictly necessary and do not require your consent. Others (such as analytics or advertising cookies) are optional and used only with your consent where required by PECR, UK GDPR or other applicable laws.

Types of Cookies We Use

Strictly necessary (session) cookies: essential for the operation of the Website and to provide services you request, such as logging in, maintaining your session, enabling payment processing, and ensuring security. These cookies are usually deleted when you close your browser.
Functional (persistent) cookies: used to remember your preferences and settings (for example, language, region, cookie choices) across sessions, to provide a more convenient experience.
Analytics and performance cookies: help us understand how visitors use the Website, which pages are most popular, and where we can improve. Data is typically aggregated and anonymised where possible.
Advertising and targeting cookies: used, where permitted, to measure and optimise our marketing campaigns and to show you relevant adverts on our partners' websites. These cookies may be set by third-party advertising networks.

Managing Cookies and Tracking

Cookie banner: when you first visit slotbonwin.com, we present a cookie banner or preference tool allowing you to accept all, reject non-essential cookies, or customise your choices.
Browser settings: you can configure your browser to block or delete cookies. However, blocking strictly necessary cookies may impact the functionality of the Website and prevent you from using some features (including logging into your account).
Changing preferences: you can update your cookie settings at any time using the cookie management tool available on the Website (where implemented) or by adjusting your browser settings.

Reflect: For more detailed, up-to-date information about the specific cookies used on slotbonwin.com, including their lifetimes and providers, please refer to our cookie notices or tools available on the Website.

Data Security

Observe: Protecting your personal data is a core responsibility. We apply technical and organisational measures designed to maintain the confidentiality, integrity and availability of your data.

Expand: Security is implemented across our infrastructure, from how we store data to how our staff access systems. We regularly review and update our measures in light of technological developments and emerging threats.

Technical Security Measures

Encryption in transit: data transmitted between your browser and slotbonwin.com is protected using TLS 1.2 or higher (HTTPS) where supported.
Encryption at rest: sensitive data is stored using industry-standard encryption and hashing mechanisms, with keys and secrets managed securely.
Access controls: access to systems and data is restricted on a need-to-know basis, using authentication mechanisms such as strong passwords, multi-factor authentication for privileged accounts and role-based access controls.
Network and infrastructure security: firewalls, intrusion detection or prevention systems and segmentation are used to limit and monitor access to critical systems.

Organisational and Procedural Measures

Security governance: we maintain security policies, procedures and standards that set out responsibilities and expected behaviour for staff and contractors.
Staff training: personnel with access to personal data receive training on data protection, confidentiality and security practices, with periodic refreshers.
Vendor management: we assess and contractually require our service providers to implement appropriate security controls and to notify us promptly of any incidents affecting data they process on our behalf.
Incident response: we maintain incident response procedures to detect, assess and respond to suspected personal data breaches, and to notify affected individuals and authorities where required by law.

Reflect: While Slotbon N.V. is not publicly represented as being certified under standards such as ISO 27001 or SOC 2 as of January 2026, we aim to align our security controls with recognised industry best practices and continuously improve our security posture.

Complaints & Contacts

Observe: You have the right to raise questions or complaints about how we handle your personal data.

Expand: We encourage you to contact us first so we can attempt to resolve any concerns directly. You also have the right to lodge a complaint with a supervisory authority.

How to Contact Us

Email (primary channel): support@slotbonwin.com (please include "Privacy complaint" or "Data protection query" in the subject line).
Postal address: Data Protection Officer, Slotbon N.V., Willemstad, Curaçao.
Website contact: where available, you may use any dedicated contact or complaint forms accessible via your account area or the support section of slotbonwin.com.

Complaint Handling Procedure

Step 1 - Acknowledgement: we will normally acknowledge receipt of your complaint or request within 7 days.
Step 2 - Investigation: we will investigate your issue, which may involve reviewing logs, contacting relevant teams and, where appropriate, asking you for additional information.
Step 3 - Response: we aim to provide a substantive response within 30 days. If your complaint is complex or involves multiple jurisdictions, this period may be extended; we will inform you of any extension and reasons.
Step 4 - Further steps: if you are not satisfied with our response, you have the right to escalate your complaint to a supervisory authority or seek other remedies.

Supervisory Authorities

United Kingdom: If you are in the UK, you can contact the Information Commissioner's Office (ICO). Details are available on the ICO website (including up-to-date telephone numbers and postal addresses).
European Economic Area (EEA): If EU GDPR applies to you, you may contact the data protection authority in the EEA country of your habitual residence, place of work or place of the alleged infringement.
Mexico: If you are in Mexico, you may lodge a complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) in relation to your ARCO rights under LFPDPPP.

Reflect: You can exercise your rights and submit complaints directly to us or to a supervisory authority at any time. However, we strongly recommend contacting us first so that we have an opportunity to address your concerns in a timely and effective manner.

Updates

Observe: We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or data processing practices.

Expand: When we make material changes affecting your rights or how we process your data, we will provide clear notice and, where required, seek your consent again.

How We Notify You of Changes

Website notices: we may display banners, pop-up notices or messages in your account area on slotbonwin.com, including within the Slotbon version, to highlight important updates.
Email notifications: where appropriate, we will email you using the address associated with your account to inform you of material changes.
Advance notice: for significant changes that materially affect your rights or obligations, we will use reasonable efforts to provide at least 30 days' notice before the changes take effect, unless immediate changes are required by law or to address urgent security or compliance issues.

Versioning and Effective Date

Last updated: January 2026.
Version control: we may assign a version number or date to each update so that you can easily see when the Privacy Policy was last revised.
Your options: if you do not agree with an updated version, you should stop using the Website and may request account closure. Continued use of slotbonwin.com after the effective date of an updated Privacy Policy will be treated as acceptance of the updated terms, to the extent permitted by applicable law.

Reflect: We encourage you to review this Privacy Policy periodically so that you remain informed about how Slotbon N.V. protects your personal data when you use the Slotbon version of our services on slotbonwin.com.