Privacy policy

What is the privacy policy?

The privacy policy serves as a comprehensive guide informing Users and Guests, who are individuals, about the procedures involved in obtaining, processing, and safeguarding their personal data. It outlines the principles and objectives behind collecting personal data, all of which adhere to relevant legal regulations.

Personal Data Inspector

The administrator has designated a Personal Data Protection Officer accessible via written communication, typically through traditional mail. This officer is available to address inquiries concerning the protection of personal data, including queries about the processing of User’s/Guest’s personal data and the scope of the Privacy Policy.

Purposes and grounds for processing personal data

Aligned with the nature of its operations, the Administrator processes Users’/Guests’ personal data for various purposes, always adhering to legal requirements. The data processing activities are associated with the following categories:

Use of the Platform

The Administrator processes the data of all entities utilizing the Platform, which may include IP addresses or other identifiers, along with information gathered through cookies or similar technologies, for one or more of the following purposes:

Offering electronic services related to providing Users/Guests with content available on the Platform, including managing contact forms [legal basis for processing – processing is necessary to fulfill the contract (Article 6(1)(b) of the GDPR)].
Managing purchases made through the Platform [legal basis for processing – processing is necessary to fulfill the contract (Article 6(1)(b) of the GDPR)].
Analytical and statistical purposes [legal basis for processing – legitimate interest of the Administrator (Article 6(1)(f) of the GDPR)], which involves analyzing Users’ and Guests’ behavior, activity, and preferences to enhance the quality and suitability of the functionalities and services provided.
Fulfilling statutory obligations incumbent on the Administrator, particularly arising from tax and accounting regulations [legal basis for processing – legal obligation (Article 6(1)(c) of the GDPR)].
Handling complaints [legal basis for processing – processing is necessary to perform the contract (Article 6(1)(b) of the GDPR)].
Marketing activities of the Administrator and other entities, particularly related to behavioral advertising [legal basis for processing – legitimate interest of the Administrator (Article 6(1)(f) of the GDPR)], which involves adjusting the displayed advertising content.
Possible determination and pursuit of claims or defense against such claims [legal basis for processing – legitimate interest of the Administrator (Article 6(1)(f) of the GDPR)], which involves protecting the Administrator’s rights.

Each User/Guest’s activity on the Platform, along with their personal data, is logged in system logs. These logs constitute a dedicated computer system designed to chronologically record events and activities related to the IT system used for service provision by the Administrator. The information collected in these logs is processed in conjunction with the services provided by the Administrator, primarily for technical purposes. Specifically, this means that the data may be temporarily stored and processed to ensure the security and proper functioning of IT systems. This includes activities such as making backup copies, testing changes in IT systems, detecting irregularities, or protecting against abuse or attacks.

For Users utilizing the game via Facebook (through the Facebook Connect function), Facebook Inc. furnishes One Night Casino Slots with certain information including Facebook ID, avatar, email address, gender, location, and a list of friends. This information is provided based on Facebook’s terms of use.

Additionally, when visiting profiles of One Night Casino Slots on social media platforms (e.g., Facebook), data on user activity on these profiles may be collected by One Night Casino Slots. Users/Guests are subject to the privacy policy and approved regulations of the respective social networking site when using such platforms.

When a User/Guest downloads, utilizes, or engages with one of the games developed by One Night Casino Slots, basic data about the User/Guest and their activities on the account may be collected and processed by One Night Casino Slots for general gaming purposes. This data includes the user’s email address, date of birth, user name for identification purposes, avatars, account status of in-game items, IP address, and the country where the User/Guest is located (determined based on the IP address).

Furthermore, regarding in-game resource purchases, One Night Casino Slots may collect and process information about the platform/device used and purchases made with real currency, including transaction dates, currencies, transaction values, and the nature of the transaction.

One Night Casino Slots collaborates with third-party entities to facilitate the downloading and use of games by Users/Guests. One Night Casino Slots has no control over these entities, each of which maintains its own privacy policy. Below are the links to the privacy policies of the relevant entities:

Platform cookies

The administrator primarily utilizes cookies to deliver electronically provided services to the User/Guest and enhance the quality of these services. In pursuit of this objective, the Administrator and other entities offering analytical and statistical services utilize cookies to store or access information already stored on the User’s/Guest’s telecommunications end device (e.g., phone, tablet). Cookies employed for this purpose include:

cookies containing data inputted by the User/Guest (session ID) for the duration of the session (user input cookies);
authentication cookies utilized for services requiring authentication during the session (authentication cookies);
cookies employed to uphold security measures, such as fraud detection in the realm of authentication (user-centric security cookies);
multimedia player session cookies (e.g., flash player cookies), lasting for the duration of the session (multimedia player session cookies);
persistent cookies utilized to tailor the User/Guest interface for the session’s duration or slightly longer (user interface customization cookies);
cookies employed to monitor website traffic, such as data analytics, inclusive of Google Analytics cookies.

These files are utilized by Google to analyze the User/Guest’s interactions with the Platform, generating statistics and reports on its functionality. Google does not utilize the gathered data to personally identify a specific User/Guest, nor does it amalgamate this information to enable identification.

The period of storage of Users / Visitors’ data

In compliance with applicable legal provisions, we retain the personal data of Users/Guests for the duration necessary to accomplish the intended purpose. Subsequently, the personal data of Users/Guests are permanently deleted or securely destroyed.

When One Night Casino Slots no longer requires processing Users/Guests’ personal data aside from storage purposes (e.g., retaining order details for potential legal claims), we additionally secure the data through pseudonymization. This process involves encrypting personal data or a collection thereof in a manner that renders them unreadable without an additional key. Consequently, such information becomes entirely inaccessible to unauthorized individuals.

The personal data of the User/Guest will be processed by the Administrator for the duration required to fulfill the purposes outlined in the section “Purposes and grounds for processing personal data,” such as until the service is completed for the User/Guest. Following this period, the data will be retained until any potential claims expire or until the obligations for data storage prescribed by legal regulations are fulfilled.

User / Guest rights related to his personal data?

The data subjects / users have the following rights:

The individual has the right to request information about the processing of personal data, entitling them to receive details regarding the purposes and legal basis for processing, the extent of data held, entities to whom personal data are disclosed, and the planned date of their deletion.
Additionally, the individual holds the right to obtain a copy of the processed data concerning them, enabling them to receive a copy of their data upon request.
Furthermore, individuals have the right to request the deletion of data that is no longer necessary to achieve the purposes for which it was collected.
The individual holds the right to rectify their personal data, allowing them to request the correction of any inconsistencies or errors in the data being processed. Additionally, they may request supplementation or updates if the data is incomplete or has changed.
Moreover, individuals have the right to data portability, enabling them to receive the data provided by them in a computer-readable format, to the extent that the data is processed in connection with a concluded contract or consent. They may also request the transfer of this data to another entity, subject to technical feasibility on the part of both the Administrator and the receiving entity.
The right to data portability allows individuals to request their personal data, processed in connection with a concluded contract or consent, to be provided in a computer-readable format. They may also request that this data be transmitted to another entity, provided both the Administrator and the recipient have the necessary technical capabilities.
Additionally, individuals have the right to limit processing, which entails the Administrator ceasing operations on their personal data, except for those operations consented to by the data subject and necessary storage in accordance with retention rules. This limitation remains in place until the reasons for restricting data processing, such as a decision by the supervisory authority authorizing further processing, are resolved.
The right to object allows individuals to oppose the processing of their personal data based on the Administrator’s legitimate interests, such as for analytical or statistical purposes or for property protection reasons. Any objection should include a justification and will be evaluated by the Administrator.

When submitting a request, it is advisable to provide specific details, including:

Identity of the requester;
The rights the requester wishes to exercise;
The purposes of processing to which the request pertains (e.g., marketing purposes, analytical purposes, etc.).

If the Administrator encounters difficulty in determining the content of the request or identifying the person submitting it based on the provided information, additional details may be requested from the User / Guest.

The Administrator will respond to the request promptly, within one month of its receipt. Should circumstances require an extension of this timeframe, the User / Guest will be notified of the reasons for the delay.

The response will be sent to the email address from which the application was submitted. In cases where applications are sent via postal mail, the response will be sent via registered mail to the address provided by the User / Guest. However, if the correspondence indicates a preference for receiving a response via email, please provide the relevant email address.

The right to withdraw consent

If the Administrator is processing your personal data based on the consent provided by you as a User/Guest, you have the right to withdraw this consent at any time at your discretion.

The Administrator clarifies that if they are processing your personal data based on your consent, withdrawing it does not retroactively render the previous processing of personal data unlawful. This implies that the Administrator retains the right to process your personal data until the withdrawal of consent, and such withdrawal does not impact the lawfulness of the ongoing processing.

Right to file a complaint

Should the User/Guest suspect that their personal data is being processed in violation of applicable legal regulations, they reserve the right to lodge a complaint with the President of the Personal Data Protection Office.

Transfer of personal data to third countries and international organizations:

The personal data of the User/Guest is not transferred to third countries, i.e., outside the European Economic Area (EEA), or to international organizations.

Changes to the Privacy Policy

For issues not addressed in this Privacy Policy, the regulations stipulated in the GDPR and the Personal Data Protection Act shall govern.

Questions and contact

Should the User/Guest wish to reach out to the Personal Data Protection Inspector designated by the Administrator, they can do so via written correspondence sent by email. The inspector is available to address inquiries, especially those concerning the processing of the User/Guest’s personal data.