Privacy Policy

What this policy covers

This policy explains data use in the Royal Slots website, browser game and Android app. Royal Slots is for adults aged 18 and over. COINS are virtual and have no monetary or transferable value. For privacy requests, write to supportroyalslots@gmail.com.

Data used to run the game

• Account: Player ID, display name, account status, linked sign-in provider identifiers and guest-device credentials. Google or Facebook sign-in supplies the identity needed to recognise your account; it does not give us your password.
• Gameplay: COINS balance, spin history, progress, quests, tournament entries, bonuses and inbox messages. These records let the server settle rounds and deliver rewards consistently.
• Purchases: product, order, receipt validation and credit/refund status. Google Play handles Android payments. Web checkout is currently unavailable; when offered, the named checkout provider handles it. We do not receive card or bank details.
• Technical data: IP address, request and security logs, browser/app version and session credentials. If you enable app notifications, Firebase Cloud Messaging supplies a notification token.

The website welcome wheel stores a random visitor credential on your device so you can reopen an issued code. The server records its virtual reward, expiry and redemption status, linking it to your account only when redeemed. This credential is for the gift feature, not advertising.

Why we use this data

We use account and gameplay data to provide the game; purchase and reward records to credit COINS and prevent duplicate claims; and technical data to maintain security and investigate failures. Where applicable, these uses rely on performance of the service contract or legitimate interests in security and reliability. Optional notification and advertising processing uses consent where required. Legal obligations may require specific records to be retained.

We do not sell personal data. Technical service metrics contain aggregate counts used to operate the service.

Cookies, storage and advertising choices

Essential cookies or device storage keep your session and guest credential available. Clearing them can make an unlinked guest account inaccessible. The welcome-wheel credential restores your gift code; you can remove it by clearing site data, but this does not reset a redeemed account’s welcome-bonus eligibility.

When website advertising is enabled, Google AdSense and other third-party vendors use cookies to serve ads based on a user’s previous visits to this website or other websites. Google’s advertising cookies enable Google and its partners to serve ads based on those visits. Advertising storage and personalisation are subject to the consent choices required in your region.

You can opt out of personalised Google advertising at Google Ads Settings. You can also visit YourAdChoices to learn about participating third-party vendors and opt out of their personalised advertising. Read how Google uses information from partner sites. An opt-out may change personalisation without removing all ads.

When ads are active on this website, use the Privacy choices link to reopen the consent message. In the Android app, rewarded advertising uses Google AdMob and its consent flow; use the app’s advertising privacy options when available, and the device’s advertising settings. Website consent and app consent are separate. A completed rewarded video sends a confirmation used to grant the virtual reward.

Service providers

Service providers process data needed to deliver the service: hosting and Cloudflare for delivery/storage; Google for sign-in, Google Play Billing and Play Games, Firebase notifications and advertising; Meta if you choose Facebook Login; and the payment provider named at any available web checkout. Provider use depends on the features you actually use. Their policies apply to their own processing.

Providers may process data outside your country. Applicable transfer safeguards and legal requirements govern that processing. Data may also be disclosed where required by law.

Retention and deletion

Account and game records remain while the account exists. Successful account deletion removes the profile, linked sign-in identities, sessions, COINS balance, associated round history, inbox, progress and reward records from the active account data. Shared records are trimmed to remove this account while preserving other players’ data.

Minimal unlinked proofs that a receipt or welcome code has already been redeemed remain to prevent a second credit. They do not retain the deleted profile or a usable sign-in identity. Anonymous aggregate service/game counters are not tied back to a deleted account.

Operational and security logs, administrative audit records and backups are managed separately from active game records; erasure from the active database does not mean each historical backup or log entry disappears immediately. Access is restricted and they are not used to restore a deleted account for normal gameplay. Contact support for information about applicable retention or legally required records.

Your choices and rights

Contact support to request access, correction or deletion of your personal data. Depending on applicable law, you may also request restriction, object to processing, request portability, withdraw consent or complain to your data protection authority. Withdrawing consent does not affect the lawfulness of earlier processing. Turn off optional notifications in your device settings.

We may need to verify account ownership before fulfilling a request. Never send a password, access token, full payment card number or guest-device secret to support.

How to delete your account

In the game, open Profile → Delete account and confirm. Successful deletion is permanent and revokes sessions on all devices. If the operation reports a failure, contact support instead of assuming deletion succeeded.

If you cannot access the game, email support with the subject “Delete my account” and your Player ID if available. We verify ownership before acting on the request. Verified requests are handled within 30 days. See account deletion instructions. Deletion does not itself request a store refund; applicable store rules and statutory rights still apply.

Children, security and updates

The service is not directed at children. Contact us if you believe a child’s data has been provided. Connections use encryption and access to service data is limited to operational needs. We update this policy when our practices change and show the update date above.