Slotorado privacy policy
This policy explains how Slotorado handles the personal data of players across Canada. It covers what is collected, why it is held, who can see it and the rights each player keeps. The platform has run under a Curaçao licence since 2026 and processes data in line with that framework.
What this policy covers
The policy applies to every visitor and account holder who uses the Slotorado website and cashier. It sets out the handling of data from the first page view through registration, play and account closure. Using the platform signals that these practices are understood and accepted.
Personal data here means any detail that can identify a player, directly or in combination. That ranges from a name and email to a device fingerprint and a payment record. Anonymous, aggregated figures that cannot point to one person fall outside the definition.
Information that is collected
Data reaches Slotorado in two ways: what a player provides and what the systems record automatically. The first group covers registration and payment details, while the second covers technical and behavioural signals. Both are needed to run accounts, process money and keep the platform secure.
The categories held and where each one comes from:
| Category | Examples | Source |
|---|---|---|
| Identity | Name, date of birth, ID document | Provided by the player |
| Contact | Email, phone, address | Provided by the player |
| Financial | Payment method, transaction history | Player and payment provider |
| Account | Username, currency, login records | Created during use |
| Technical | IP address, device, browser | Collected automatically |
| Gameplay | Wagers, sessions, bonus activity | Collected automatically |
Why the data is used
Each piece of data serves a defined purpose tied to running a licensed casino. Nothing is collected without a reason connected to accounts, payments, safety or legal duties. Where consent is the basis, it can be withdrawn at any time.
The main purposes behind processing:
- Opening and managing an account in a chosen currency, such as C$
- Processing deposits and withdrawals and confirming payment ownership
- Meeting KYC, anti-money-laundering and licence obligations
- Detecting fraud, multiple accounts and prohibited conduct
- Applying responsible gambling limits and self-exclusion requests
- Sending service messages and, with consent, promotional offers
Cookies and tracking
Cookies and similar tools store small pieces of information on a device to help the site function. Some are essential for login and security, while others measure use or tailor offers. A consent banner lets each visitor accept or refuse the non-essential ones.
How the common cookie types are used on the platform:
| Cookie type | Role | Consent needed |
|---|---|---|
| Essential | Login, security, cashier | No |
| Preference | Language and display settings | No |
| Analytics | Traffic and usage measurement | Yes |
| Marketing | Tailored offers and retargeting | Yes |
Who the data is shared with
Data stays within Slotorado except where a clear operational or legal need calls for sharing. Partners that receive it are bound by contracts limiting use to the agreed purpose. Personal data is never sold to third parties.
The parties that may receive data and the reason:
- Payment processors, to move deposits and withdrawals
- Identity and KYC providers, to verify accounts
- Game studios, to run titles and record results
- Fraud and security services, to protect the platform
- Regulators and authorities, where the licence or law requires it
Some of these partners operate outside Canada, so data can cross borders during processing. Such transfers rely on safeguards that hold the recipient to comparable protection standards. A player can ask which categories of partner handle their data at any time.
How long data is kept
Data is held only as long as its purpose lasts or a legal duty requires. Account records tied to money and verification often carry a fixed retention period after closure. Once no purpose or obligation remains, the data is deleted or anonymised.
A view of typical retention periods by category:
| Category | Kept for |
|---|---|
| Verification records | A set period after account closure, per licence rules |
| Transaction history | Held to meet financial and AML obligations |
| Marketing consent | Until consent is withdrawn |
| Technical logs | A short window for security review |
| Support messages | While needed to resolve and audit a case |
Keeping data secure
Slotorado applies technical and organisational measures to guard personal data against loss or misuse. Connections are encrypted, access is limited to staff who need it, and systems are monitored for unusual activity. No method is flawless, so players share responsibility by protecting their own login details.
Steps a player can take to keep an account secure:
- Choose a strong, unique password
- Keep login details private and never share an account
- Sign out on shared or public devices
- Watch for phishing messages that imitate the operator
- Report anything suspicious to support without delay
The rights each player holds
Data protection gives players a set of rights over the information held about them. These can be used by contacting support, which verifies identity before acting on a request. Most requests are answered within the period set by the applicable rules.
The rights available and what each one allows:
- Access: obtain a copy of the personal data held
- Correction: fix details that are wrong or out of date
- Deletion: ask for data to be erased where no duty requires it
- Restriction: limit how certain data is processed
- Portability: receive data in a reusable format
- Objection: refuse processing based on consent or legitimate interest
Some rights are limited by legal duties, such as records that AML rules require to be kept. Where a request cannot be met in full, the reason is explained in the reply. A player who is unhappy with a response can escalate the matter further.
Marketing choices
Promotional messages are sent only where a player has agreed to receive them. Consent can be withdrawn at any time through the account settings or an unsubscribe link. Turning off marketing does not affect essential service messages about an account.
Anyone who has set a self-exclusion or asked to stop promotions is removed from marketing lists. Service notices, such as security alerts and payment confirmations, still reach the account. These messages are necessary to run the account and cannot be switched off.
Contacting Slotorado about data
Questions, requests and complaints about personal data go to the support team. Live chat and email are the routes to reach a data request, and identity is checked before any data is released. Keeping a record of the request helps track its progress.
If a data concern stays unresolved, it can be escalated under the process tied to the Curaçao licence. Players may also raise a matter with the relevant data protection authority in their region. Clear records of correspondence make any review quicker to handle.
Changes to this policy
The policy can change to reflect new features, partners or legal requirements. A material update is announced on the site, and the dated version published on Slotorado is the one in force. Continued use after a change signals acceptance of the revised terms.
Frequently asked questions
Is personal data ever sold?
No, data is shared only for defined operational or legal reasons and never sold to third parties.
Can a player request a copy of their data?
Yes, an access request can be made through support after identity is confirmed.
Why is identity verification data kept after closure?
Verification and transaction records are retained for a set period to meet licence and anti-money-laundering rules.
Can data leave Canada during processing?
Yes, some partners operate abroad, and transfers rely on safeguards that maintain comparable protection.
How is marketing consent withdrawn?
Consent can be turned off through account settings or the unsubscribe link in any promotional message.
Which cookies can be refused?
Analytics and marketing cookies can be declined, while essential and preference cookies keep the site working.
What secures the account against others?
Encryption and limited staff access protect data, and a strong private password protects the account itself.
Where can an unresolved data complaint go?
It can be escalated under the Curaçao licence process or to the data protection authority in the player’s region.