Slotorado privacy policy and data handling

By Daniel McGrath

Slotorado handles the personal data of Canadian players with care and a clear purpose. This policy explains what is gathered, why it is kept, who may see it and the choices each player holds. The platform has processed data under a Curaçao licence since 2026.

The purpose of this policy

Data protection works best when a player can see the reasoning behind each practice, not just the rules. This policy covers everyone who visits the site or holds an account, from a first page view to account closure. Using the platform means these practices are understood and accepted.

Personal data here is any detail that can identify a player alone or in combination with other details. That spans a name and email, a payment record and a device signature. Aggregated figures that point to no single person sit outside this definition.

Categories of data gathered

Information arrives in two streams: what a player enters and what the systems log during use. The first covers registration and payments, while the second covers technical and gameplay signals. Both are needed to run accounts, move money and keep the platform safe.

The categories held and where each originates:

The reasons behind processing

Each purpose behind data use ties back to running a licensed casino responsibly. Nothing is gathered without a reason linked to accounts, payments, safety or a legal duty. Where consent is the basis, a player can withdraw it whenever they choose.

The main grounds on which data is processed:

• Creating and running an account in a chosen currency, such as C$
• Handling deposits and withdrawals and confirming payment ownership
• Meeting KYC, anti-money-laundering and licence obligations
• Spotting fraud, duplicate accounts and prohibited conduct
• Applying responsible gambling limits and self-exclusion requests
• Sending service notices and, with consent, promotions

Legal grounds explained

Processing relies on a defined basis rather than a blanket permission, and different data uses can sit on different grounds. Contract covers what is needed to run the account, while legal obligation covers KYC and financial record-keeping. Consent covers marketing, and legitimate interest covers security and fraud prevention.

Where consent is the ground, it is asked for clearly and can be withdrawn without affecting service messages. Where a legal duty applies, data can be held even after a request to delete it. A player can ask which ground supports a particular use at any time.

Cookies and similar tools

Cookies place small pieces of information on a device to help the site work and to measure its use. Some are essential for login and security, while others handle preferences, analytics or tailored offers. A consent banner lets each visitor accept or refuse the non-essential ones.

How the common cookie types are applied:

Who may receive the data

Data stays inside Slotorado unless a clear operational or legal need calls for sharing it. Any partner that receives it is bound by contract to use it only for the agreed task. Personal data is never sold.

The parties that may handle data and the reason each does:

• Payment processors, to settle deposits and withdrawals
• Identity and KYC providers, to verify accounts
• Game studios, to run titles and record results
• Security and fraud services, to protect the platform
• Regulators and authorities, where the licence or law requires it

Some partners operate outside Canada, so data can cross borders while being processed. Those transfers depend on safeguards that hold the recipient to comparable protection. A player may ask which categories of partner handle their data at any time.

How long records are held

Data is retained only while its purpose lasts or a legal duty requires it. Records tied to money and verification usually carry a fixed period after an account closes. Once no purpose or obligation remains, data is deleted or anonymised.

Typical retention by category:

Protecting the data held

Slotorado applies technical and organisational measures to shield personal data from loss or misuse. Traffic is encrypted, staff access is limited to those who need it, and systems watch for unusual activity. No safeguard is perfect, so players share the task by guarding their own login details.

Actions a player can take to keep an account secure:

• Set a strong, unique password
• Keep credentials private and never share the account
• Sign out on shared or public devices
• Treat messages asking for login details with suspicion
• Report anything unusual to support quickly

The rights each player can use

Data protection gives players defined rights over the information held about them. These are exercised through support, which confirms identity before acting on any request. Most requests are answered within the timeframe set by the applicable rules.

The rights available and what each permits:

• Access: receive a copy of the personal data held
• Correction: fix details that are wrong or outdated
• Deletion: have data erased where no duty requires keeping it
• Restriction: limit how certain data is used
• Portability: obtain data in a reusable format
• Objection: refuse processing based on consent or legitimate interest

Certain rights are bounded by legal duties, such as records that AML rules require. Where a request cannot be met fully, the reason is set out in the reply. A player unhappy with the outcome can take the matter further.

Choices about marketing

Promotional messages reach a player only where consent has been given. That consent can be withdrawn at any time through account settings or an unsubscribe link. Turning marketing off leaves essential service messages untouched.

Anyone who self-excludes or asks to stop promotions is taken off marketing lists. Service notices, such as security alerts and payment confirmations, still arrive. These are needed to run the account and cannot be switched off.

Reaching Slotorado about your data

Questions, requests and complaints about personal data go to the support team. Live chat and email are the routes to a data request, and identity is verified before anything is released. Keeping a note of the request helps follow its progress.

An unresolved data concern can be escalated through the process tied to the Curaçao licence. A player may also raise the matter with the data protection authority in their region. Clear records of correspondence make any review quicker.

Revisions to this policy

The policy can change to reflect new features, partners or legal duties. A material update is posted on the site, and the dated version on Slotorado is the one that applies. Continued use after a change signals acceptance of the revision.