Privacy Policy

Last updated: 2026-10-27

This Privacy Policy explains what personal data Slotified collects, why, who it goes to, how long it is kept and what you can do about it. It covers slotified.com, its sign-in and support emails, the support chat and Slotified's short links on sloti.fi. It is part of our Terms and Conditions and sits alongside our KYC Policy and Responsible Gaming Policy.

1. Who we are

Slotified is operated by ONCHAIN Technologies Ltd, a limited liability company registered in the Autonomous Island of Anjouan, Union of Comoros, with company registration number 15816, registered address Hamchako, Mutsamudu, Autonomous Island of Anjouan, Union of Comoros, licensed in the State of Anjouan under the Computer Gaming Licensing Act 007 of 2005, licence No. ALSI-202411002-FI1 ("we", "us").

ONCHAIN Technologies Ltd is the controller of your personal data: we decide why and how it is used. The companies that run parts of the service for us (section 6) act on our instructions.

Privacy contact: support@slotified.com, subject "Privacy request". Every message to that address becomes a ticket that a person reads.

2. The short version

• We collect what we need to run a licensed casino: your email, your account and wallet activity, the checks the law requires, and the technical data that keeps the site secure.
• We do not sell your personal data. We measure how the site is used with Google's tags (section 7).
• Some records must be kept for years by anti-money-laundering law and our licence, even after you close your account.
• Bets and payments on a public blockchain are public and permanent. Nobody can erase them, including us.
• You can ask to see, correct, export or delete your data, and to stop marketing, at any time (section 10).

3. What we collect

Account data you give us

• Your email address (it is how you sign in: we send a one-time link, there is no password).
• Your nickname, language and account settings, including whether your profile is hidden.
• A referral or creator code, if you enter or create one.

Verification data (KYC)

When the law or our KYC Policy requires it (for example before a withdrawal, once your deposits reach a set total, or when we must check your age or identity): your name, date of birth, address, identity document, a photo of you holding it, proof of address and, where needed, the source of your funds.

Money and play

• Deposits, withdrawals and the wallet addresses and blockchain transactions behind them.
• Your balance, bets, wins, games played, rewards, races, missions and bonuses.

Technical and device data

• Your IP address, the country and network (ASN) it belongs to, and your browser's user agent.
• A device identifier: a one-way hash of stable browser and screen characteristics. It cannot be turned back into those characteristics. It is used to secure sign-in and to spot duplicate accounts and referral abuse.
• How you first reached us: the referring site, the landing page, campaign tags (utm), ad click identifiers (gclid, fbclid), a sloti.fi click identifier and any referral code in the link.

What you tell support

Your support emails and chat messages, the replies, and any files you send.

Data from others

• Our platform provider passes us what it records when you sign in and play (section 6).
• Verification providers return the result of identity and document checks.
• Public blockchains show the transactions linked to your wallet addresses.

We do not ask for sensitive data such as health, religion or political opinions. If you tell support about a gambling problem, we use that only to protect you (section 4).

4. Why we use it, and on what basis

• To run your account and the games (to perform our contract with you): sign-in, your balance, deposits, withdrawals, game sessions, rewards and the creator programme.
• To meet the law and our licence (legal obligation): age and identity checks, anti-money-laundering and counter-terrorist-financing checks, sanctions and restricted-country checks, record keeping, and answering regulators and courts.
• To keep Slotified safe and fair (our legitimate interests, and the law): detecting fraud, bots, multiple accounts, bonus and referral abuse, account takeover and attacks on the site.
• To protect players (legal obligation and your vital interests): responsible gaming limits, self-exclusion and cooling-off, and acting on signs of harm or of under-age play.
• To answer you (contract and legitimate interests): support by email and chat.
• To understand and improve Slotified (legitimate interests): which pages, games and campaigns work, counted in totals rather than tracked per person.
• To tell you about offers (your consent where the law requires it, otherwise our legitimate interests): you can say no at any time (section 10).

Where we rely on legitimate interests, we have weighed them against your rights, and you can object (section 10).

5. Automated tools

• Country checks. Some games and studios are not offered in some countries. Your IP address's country decides what you see. If you think a check got your country wrong, contact support.
• Risk signals. Automated rules flag patterns such as shared devices, linked accounts or unusual payments. A flag is reviewed by a person before any action is taken on your account.
• The support assistant. The support chat is answered first by an AI assistant that works from our help articles and, when you are signed in, can look up your own account. It cannot change your account, move money or decide a complaint, and you can ask for a person at any point; complaints and anything about safety go to a person. It may also draft replies to support emails, which a person checks and sends.

None of these makes a decision with legal or similarly significant effect on you without a person involved.

6. Who we share it with

We do not sell or rent your personal data. We share it only as follows, and each provider gets only what its job needs:

• Our casino platform provider (DeGaming), which runs player accounts, wallets, bets, rewards, sign-in and the emails it sends for them (through Amazon Web Services, in the European Union).
• Game studios, which receive what a game session needs: a player reference that does not name you, your bets in their game and, as with any website you load, your IP address.
• Identity and document verification providers, for KYC checks.
• Payment and blockchain services, to process deposits and withdrawals.
• Google, which receives what its measurement tags collect on the site (section 7).
• Cloudflare, which hosts and protects the site, runs bot checks (Turnstile), our short links on sloti.fi, our support systems and the AI model behind the support assistant.
• Proton, which hosts our support mailbox.
• Staff tools used by our team and technology partners to run the casino and its support, including alerts sent to staff (for example through Telegram) that may carry an account reference.
• Authorities: regulators, the Anjouan licensing authority, auditors, law enforcement and courts, where the law or our licence requires it, or to protect our rights or someone's safety.
• A buyer or successor of the business, bound by this policy.

Public by your choice or by design

• Your nickname, bets and wins can appear in public feeds on the site (live bets, leaderboards, races). Hide your profile in your account settings and you show as "Hidden".
• If you are a creator, your code and short link are public. Creators see totals for their links and sign-ups, never who clicked or who signed up.
• Transactions on public blockchains (such as Etherlink, where bets settle) can be seen by anyone who knows a wallet address.

7. Cookies and storage on your device

We use what the site needs to work, stay secure and credit referrals, and Google's tags to measure how the site is used.

Cookies

• Sign-in session (__Secure- session cookie from our platform): keeps you signed in. Necessary.
• Language (northstar_locale, 1 year): remembers your language. Necessary.
• Referral (northstar_referral, 30 days): remembers the creator code in the link you arrived by, so that creator is credited if you sign up.
• First visit (northstar_attribution, 30 days): how you first reached us (section 3), so we know which campaigns and creators bring players.
• Device (northstar_device, 30 days): the device identifier described in section 3, for security and abuse checks.
• Cloudflare security cookies: set by Cloudflare to tell people from bots and to block attacks. Necessary.
• Google measurement (Google Tag Manager, loaded from slotified.com through Cloudflare's Google tag gateway): runs the measurement tags we choose, such as Google Analytics, to count visits and see which pages, games and campaigns work. These tags can set Google's cookies (for example _ga, kept up to two years) and send Google your browser and visit details, including your IP address. Google's own privacy policy (policies.google.com/privacy) applies to what it receives. To opt out, block these cookies in your browser or use Google's Analytics opt-out add-on (tools.google.com/dlpage/gaoptout).

Storage in your browser

The site keeps a few things in your browser's local storage: your support chat (so it continues where you left it), what you have favourited or played recently, and small markers such as what you have already seen. They stay on your device until you clear them.

You can block or delete cookies in your browser. Without the necessary ones you cannot sign in or play.

8. Where your data goes

We operate from the Union of Comoros, our platform runs in the European Union, our providers run worldwide networks, and our team works from more than one country. Your data may therefore be processed outside the country you live in. We use providers that commit, in their data processing terms, to protect personal data and use it only on our instructions, and we keep transfers to what the service needs.

9. How long we keep it

• Account, transaction and verification records: for as long as your account is open, and afterwards for as long as anti-money-laundering law and our licence require. That is usually several years after the account closes.
• Self-exclusion records: for as long as needed to keep the exclusion working and to show that it was honoured.
• IP addresses in our sign-in records: 90 days, then removed. The country and network stay.
• Support tickets and chat records: for as long as needed to handle your request, defend or settle a complaint and meet our obligations. The raw copy of an email is removed after 90 days; its text stays on the ticket. Deleted spam goes after 30 days.
• Short-link clicks on sloti.fi: 13 months. They never hold an IP address or your exact location.
• Cookies: for the times listed in section 7.

When a period ends, we delete the data or make it anonymous.

10. Your rights

Depending on where you live (for example under the GDPR in the European Economic Area, the LGPD in Brazil, POPIA in South Africa or PIPEDA in Canada), you can:

• see the personal data we hold about you and get a copy;
• correct it if it is wrong;
• delete it, unless we must keep it (section 9);
• restrict or object to how we use it, including any use based on legitimate interests;
• take it with you in a common, machine-readable format;
• stop marketing at any time, by the link in any marketing email or by asking support;
• withdraw consent you gave, without affecting what was done before;
• ask for a person to review an automated result (section 5);
• complain to the data protection authority where you live, for example the ANPD in Brazil or the Information Regulator in South Africa. We would like the chance to put it right first.

How: email support@slotified.com from the address on your account, with the subject "Privacy request". We may ask you to confirm it is you, so that nobody else gets your data. We answer within one month, free of charge. If a request is complex or repeated, we may take up to two months more and will tell you why.

Limits: deleting your data does not delete what we must keep by law, and cannot remove anything already on a public blockchain. Closing your account or self-excluding does not by itself delete your records.

11. Security

• Everything between your device and Slotified travels encrypted (HTTPS, with browsers told to use nothing else).
• You sign in with a one-time link sent to your email: we hold no password of yours. Keep your email account secure; it is the key to your Slotified account.
• Staff tools sit behind a separate sign-in, and only people who need personal data can reach it.
• We keep only what we need, and remove IP addresses after 90 days.
• If a breach puts your data at risk, we will tell you and the authorities where the law requires it, without undue delay.

We will never ask for your wallet's recovery phrase or private keys, or for crypto to "unlock" anything. If someone does, it is not us: report it to support@slotified.com.

12. Children

Slotified is for adults only: 18 or older, or the age of majority where you live if higher. We do not knowingly collect data from anyone younger. If we learn that we have, we close the account and delete the data, unless the law requires us to keep part of it.

13. Changes to this policy

When we change this policy, we update the date at the top. If a change materially affects how we use your data, we tell signed-in players on the site or by email before it takes effect.

14. Contact

ONCHAIN Technologies Ltd, Hamchako, Mutsamudu, Autonomous Island of Anjouan, Union of Comoros

Email: support@slotified.com (subject "Privacy request")