Slotorado privacy policy and player data

By Dr. Daniel S. McGrath

Slotorado’s privacy policy explains which player records are collected, why they are used and when they may be disclosed. I focus on the consequences for registration, payments, verification and marketing. The policy should be read before personal or financial documents are uploaded.

Policy status and responsible company

The current Player Privacy Policy is version 1.0, dated August 1, 2025, and applies to Azure Lane Limitada. It names the Compliance Officer as document owner and the Director as approver. The company says personal information is handled in line with international data protection standards such as the GDPR.

Azure Lane Limitada is registered in Costa Rica under number 3-102-940408 and operates Slotorado under Anjouan licence ALSI-152312006-FI3. Infofoot Tech Ltd, incorporated in Cyprus under number HE 478900, acts as the paying and operational agent. Privacy requests go to the support team, with [email protected] listed as the official contact.

Information collected during account use

Slotorado identifies personal identification, contact details, verification records, financial information and technical information. The scope includes a name, birth date, residential address, email address and telephone number. It can also cover identity documents, proof of address and source-of-funds material supplied during KYC.

Financial records include payment-method details and the history of deposits, wagers and withdrawals, including activity conducted in C$. Technical records include the IP address, device type and browser information created during website use. The categories can connect identity, location, account behaviour and financial activity within one profile.

Processing purposes and marketing

The policy says information is used to manage accounts, provide gaming services, process transactions, pay winnings and answer support requests. It is also processed for security, KYC, fraud monitoring, anti-money laundering work and Anjouan licensing duties. These purposes explain why closing a browser or opting out of promotions does not erase operational records.

Promotional information is sent with explicit consent, and Slotorado says consent can be withdrawn at any time. The page does not specify a separate preference centre, opt-out deadline or dedicated marketing contact. A request should identify the registered email and the communication channel that must stop.

Sharing with providers and authorities

Slotorado states that it does not sell player data and shares information with trusted third parties only when necessary. Named recipients include payment services, identity-verification companies, game providers and regulatory or legal authorities. Their stated purposes include transaction processing, KYC, anti-fraud work, gameplay delivery, technical resolution and legal compliance.

The company says these third parties are bound by contractual confidentiality and security duties through data-processing agreements. A payment, game session or identity check can therefore involve organizations outside Azure Lane Limitada. The published policy does not name each individual provider or every country where processing may occur.

Security and player responsibilities

The policy lists SSL encryption for transmitted information, together with firewalls, secure servers and employee access controls. These measures address data transmission, infrastructure and internal access. The page does not promise that every security incident can be prevented.

The terms add responsibilities for password confidentiality, secure devices, avoiding public Wi-Fi and logging out on shared equipment. Two-factor authentication is recommended where available, and support staff should never request the gaming-account password. Players can reduce exposure created outside the operator’s systems through the following actions.

• Use a unique password without obvious personal details.
• Protect the email, phone number and Google account linked to login.
• Enable two-factor authentication where available.
• Avoid entering credentials through public Wi-Fi.
• Log out after using a shared device.
• Report suspected unauthorized access promptly.
• Never send passwords or recovery phrases to support.

Access, correction and deletion rights

The policy grants rights to access stored information, correct inaccurate details, request erasure and restrict processing. Deletion remains subject to legal and regulatory retention duties. Closing an account therefore does not create immediate removal of every identity or transaction record.

The page directs rights requests to support but does not state a dedicated privacy email, request-verification method or response period. A message should distinguish access, correction, deletion and restriction because each requires a different action. Slotorado may need to confirm identity before releasing personal records to prevent disclosure to another person.

Retention after account closure

The privacy page states that personal and transactional data is kept for at least five years after account closure under the cited Comoros and Anjouan AML rules. The terms add that due-diligence and transaction records remain for five years after the relationship ends or a transaction is completed, whichever is later. A closed account can therefore remain linked to preserved identity and payment records throughout that period.

After mandatory retention, the privacy policy says data will be securely deleted, while the terms also allow anonymization or archiving when a legal duty requires it. Players requesting erasure should ask which records cannot yet be removed and why. This creates a clearer distinction between closing access and deleting historical compliance material.

KYC documents and technical records

Identity and source-of-funds documents may contain a photograph, signature, address, account identifiers and evidence of income or payment ownership. Files should be supplied only through an official verification route or confirmed support channel. Another person’s card, wallet or bank account should not be used because it introduces third-party data and conflicts with Slotorado’s payment rules.

IP addresses, devices and browser details can support account security and investigation of unusual access. The terms also describe monitoring of login data, transaction patterns, multiple-country access and anonymizing tools for compliance purposes. The privacy page does not provide a cookie schedule, international-transfer list, automated-decision explanation or named complaint authority.

Preparing a privacy request

A precise request is easier to process than a general message asking for every privacy issue to be fixed. The sender should use the registered contact address, identify the account and state the exact right being exercised. Passwords, full card numbers, cryptocurrency recovery phrases and unnecessary identity copies should not be placed in ordinary email.

The message should also ask for the retention rule that prevents immediate deletion, where relevant. Dates and previous ticket references can help support locate the correct history. These details create a useful record without disclosing more information than necessary.

• Registered name and email address
• Account nickname or player ID
• Requested action
• Specific record or inaccurate field
• Relevant date range
• Preferred response channel
• Previous support reference
• Request for the reason behind retained data

My approach to privacy information

I am a Professor in the University of Calgary Department of Psychology, a Senior Research Fellow with the Alberta Gambling Research Institute and an Associate Dean. My research interests include behavioural finance, cryptocurrency, personality and behavioural addictions such as disordered gambling and gaming. That background makes transparency about financial records, monitoring and consent especially relevant.

I separate what Slotorado expressly publishes from expectations created by another privacy regime. Saying that data is handled in line with standards like the GDPR is not a detailed finding that every GDPR provision applies to every account. Where the policy omits a deadline, technology or process, I identify the gap rather than inventing an answer.