Privacy Policy

This Privacy Policy explains how Slot10, accessible via slot10-uk.com (the "Service"), collects, uses, stores, and shares personal data of players and website visitors from the United Kingdom and other regions. It applies to all visitors, registered players, and users who interact with our websites and related services. By using the Service, you acknowledge that your personal data will be processed in accordance with this Privacy Policy. Effective date: 1 January 2026.

Who We Are

OBSERVE: Slot10 is the UK-facing version of the Slot10 brand, offered via slot10-uk.com. The Service is operated by Bellona N.V., a company incorporated under the laws of Curaçao.

EXPAND: For data protection purposes, Bellona N.V. is the "data controller", meaning we decide how and why your personal data is processed.

Operator / Data Controller: Bellona N.V.
Registered address: Bellona N.V., Heelsumstraat 51, E-Commerce Park, Curaçao.
Company registration number: 120860 (Curaçao commercial register).
Gambling licence: Sub-licence under Master Licence 8048/JAZ2010-010 issued by Antillephone N.V., Curaçao (online gambling licence; not a data protection licence).
UK status: The Service accepts players from the United Kingdom as a Non-Gamstop / grey-market casino and is not licensed by the UK Gambling Commission (UKGC).

DPO / Privacy Contact (REFLECT): For all privacy matters, including exercising your data protection rights, you can contact our data protection function:

Data Protection Officer (DPO) / Privacy Team: Bellona N.V. - Data Protection
Email: privacy@slot10-uk.com
Postal contact for privacy issues: Bellona N.V., Data Protection Officer, Heelsumstraat 51, E-Commerce Park, Curaçao.

For complaints specifically related to our Curaçao gambling licence, you may also contact the master licence holder at certria@gaminglicences.com (Antillephone N.V. / Curaçao Master Licence Holder, licence 8048/JAZ2010-010). This channel is for regulatory gambling complaints and is not a direct Slot10 corporate or privacy contact.

What Personal Data We Collect

OBSERVE: We collect the minimum data needed to provide and secure the Service, comply with legal obligations, and improve your experience.

Account and Identification Data

Personal identification: full name, date of birth, nationality, gender (where provided), residential address, postcode, country of residence.
Contact details: email address, mobile/telephone number, preferred language of communication.
KYC / verification data: copies or details of ID documents (passport, ID card, driving licence), proof of address (utility bills, bank statements), selfies or video verification, and information used for age and identity verification.

Technical and Usage Data

Technical identifiers: IP address, device identifiers, browser type and version, operating system, time zone setting, language preferences, and approximate geographic location derived from your IP.
Log data: login times, session duration, pages viewed, clicks, navigation paths, error logs, and interaction with customer support.

Payment and Transaction Data

Payment information: payment method type (e.g. card, e-wallet, bank transfer, cryptocurrency where available), masked card details or wallet identifiers, payment provider reference numbers (we do not store full card numbers in plain text).
Financial transactions: deposits, withdrawals, bonuses credited, winnings, account balance, applied fees, currency used, and related timestamps.

Behavioural and Gaming Data

Betting history: games played (e.g. slots, live casino), stakes placed, outcomes, win/loss records, betting patterns, frequency and duration of play.
Bonus and promotion usage: opt-ins, wagering activity, bonus abuse indicators in line with our Terms (including clauses comparable to "Deposit Rollover" and "Bonus Abuse").

Cookies and Similar Technologies

Cookies: session cookies, persistent cookies, and third-party cookies that store preferences, keep you logged in, and help us understand site usage.
Tracking technologies: web beacons, pixels, SDKs, and similar technologies for analytics, fraud detection, and marketing (where permitted by your consent choices).

REFLECT: Certain data is mandatory (e.g. identity information) to open and maintain an account in line with KYC/AML laws; if you choose not to provide such data, we may be unable to offer or continue the Service.

Legal Basis for Processing

OBSERVE: We process personal data in accordance with the UK General Data Protection Regulation ("UK GDPR") and the UK Data Protection Act 2018, as these laws apply to us when we target and serve players in the United Kingdom, even though Bellona N.V. is established in Curaçao.

Contractual Necessity

Account creation and management: Processing your registration details, login credentials, and profile data to open, maintain, and close your Slot10 account.
Provision of gambling services: Running games, recording bets, settling wagers, paying winnings, managing deposits and withdrawals, and offering customer support.
Bonus and promotion administration: Applying, tracking, and enforcing bonus terms and wagering requirements as agreed in our Terms and Conditions.

Legal Obligations

KYC/AML compliance: Verifying your identity, age, and address; performing sanctions, fraud, and affordability checks; retaining transactional data as required by applicable anti-money laundering and counter-terrorist financing regulations.
Regulatory and tax reporting: Responding to lawful requests from regulators or authorities in Curaçao or other competent jurisdictions; maintaining books and records for audit and compliance purposes.

Legitimate Interests

Service improvement and analytics: Analysing how players use Slot10 to improve usability, game offerings, and technical performance, while applying data minimisation and, where appropriate, pseudonymisation.
Fraud and abuse prevention: Detecting and preventing fraudulent payments, account takeovers, bonus abuse, match-fixing, or other misuse of the Service.
Network and information security: Ensuring the confidentiality, integrity, and availability of the Service, including intrusion detection, log analysis, and incident management.

Consent

Marketing communications: Sending email, SMS, push notifications, or on-site messages about promotions and offers from Slot10 where you have opted in, and respecting your opt-out choices at any time.
Cookies and advertising: Using non-essential cookies and similar technologies for advertising and certain analytics, based on your cookie preferences and consent captured via our cookie banner or settings.

REFLECT: Where we rely on legitimate interests, we balance our interests against your fundamental rights and freedoms via documented assessments. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Purpose of Processing

OBSERVE: We use your data for clearly defined, limited purposes aligned with UK GDPR principles.

Service Delivery and Account Management

Operating the casino: Providing access to games, processing bets, displaying balances, managing wallets, and crediting winnings.
Customer support: Handling your queries, complaints, and requests through email, live chat, or other channels, and keeping records for quality and training.

Compliance, Risk, and Responsible Gambling

Legal compliance: Meeting KYC, AML, and other regulatory requirements applicable to Bellona N.V. and its online gambling licence 8048/JAZ2010-010.
Risk management: Monitoring for unusual behaviour, bonus abuse, self-exclusion circumvention (including Non-Gamstop context), and technical risks.
Responsible gambling: Supporting tools such as limits, self-exclusion, and reality checks, and analysing data to identify potentially harmful play.

Improvement, Personalisation, and Marketing

Analytics: Aggregating and analysing data about use of Slot10 to understand performance, preferences, and trends, enabling better decision-making.
Personalisation: Tailoring content, bonuses, and recommendations based on your activity, preferences, and permitted profiling.
Marketing communications: Sending offers from Slot10 (via slot10-uk.com) based on your consent and profile, and measuring the effectiveness of campaigns.

REFLECT: We do not use your personal data for purposes that are incompatible with those described here. When we introduce a materially new purpose, we will update this Privacy Policy and, where required, seek your consent.

Disclosure & Sharing

OBSERVE: We share personal data only with trusted parties and only to the extent necessary for the purposes described above.

Operational Service Providers

Payment processors and banks: Card processors, e-wallets, bank partners, and other payment providers who process deposits, withdrawals, and chargebacks in accordance with their own regulatory obligations.
Game providers: Casino game studios and platform providers that supply game content and may receive pseudonymised or limited player data for game operation and compliance.
IT and infrastructure partners: Hosting providers, cloud services, content delivery networks, security vendors, and email/SMS gateways that support the technical operation of Slot10.

Professional and Regulatory Recipients

Regulators and authorities: Antillephone N.V. (as licence issuer 8048/JAZ2010-010), Curaçao authorities, and other competent authorities or courts when required by law or lawful order.
Professional advisers: Lawyers, auditors, consultants, and accountants subject to strict confidentiality obligations, where needed for legal advice, audits, or dispute resolution.

Affiliates and Marketing Partners

Affiliates: Third-party affiliate partners that refer players to slot10-uk.com (for example, comparison sites), to whom we may provide limited tracking data such as affiliate IDs, registration and conversion metrics.
Advertising and analytics networks: Where you have consented to non-essential cookies, we may share or allow access to pseudonymised identifiers and device data to enable measurement, attribution, and remarketing.

REFLECT: All third parties that process personal data on our behalf are bound by contracts requiring them to (i) process data only on our documented instructions, (ii) apply appropriate security, and (iii) assist us in meeting our data protection obligations. We do not sell your personal data for cash consideration.

International Transfers

OBSERVE: Because Bellona N.V. is established in Curaçao and uses global service providers, your personal data may be transferred outside the UK and the European Economic Area ("EEA").

Destinations of Transfers

Curaçao: Operational headquarters and primary data controller location for Slot10 (Bellona N.V., Heelsumstraat 51, E-Commerce Park).
EEA and other regions: EU/EEA countries and other jurisdictions where our game studios, payment partners, and technology providers are located.
United States and other third countries: For certain cloud, analytics, communication, and security services, where providers may store or access data globally.

Transfer Safeguards

Standard Contractual Clauses (SCCs): We rely on the EU Standard Contractual Clauses, as adapted and recognised under UK data protection law (including the UK International Data Transfer Addendum), to safeguard transfers from the UK and EEA to third countries lacking an adequacy decision.
Contractual and technical measures: Data minimisation, encryption in transit and at rest, access controls, and internal policies to mitigate risks associated with international transfers.
Due diligence: We assess the legal environment of destination countries and the practices of our providers to ensure that your data receives a level of protection essentially equivalent to that in the UK.

REFLECT: Where transfer mechanisms or laws change (for example, new adequacy decisions or updated SCCs), we will update our safeguards and this Privacy Policy accordingly to maintain compliance.

Data Retention

OBSERVE: We keep personal data only for as long as necessary for the purposes described in this Privacy Policy and in line with legal, regulatory, and operational requirements.

Retention Periods

Account and identification data: Typically retained for the duration of your active account and, after closure, for a period of up to 5 - 7 years (depending on regulatory requirements) to comply with AML/KYC and record-keeping obligations.
Transaction and betting data: Retained for at least 5 years after the relevant transaction or account closure, to support audits, regulatory reporting, and the defence or exercise of legal claims.
Customer support and correspondence: Retained for up to 3 - 5 years from the last interaction, depending on the nature of the communication.
Marketing data: Retained until you withdraw consent or object to marketing, after which we will keep a minimal suppression record to ensure your preferences are respected.

Deletion Criteria

End of purpose: Data is securely deleted or anonymised once it is no longer required for the purpose for which it was collected or any compatible purpose.
Legal limitation periods: We consider statutory limitation periods for potential legal claims and retain relevant data for as long as such claims could reasonably arise.
User requests: Where you request deletion and no overriding legal grounds exist for continued retention, we will erase or anonymise your data.

REFLECT: When we anonymise data, we remove personal identifiers so that it can no longer be linked to you; we may continue to use anonymised data indefinitely for analytics, risk modelling, and business intelligence.

Your Rights

OBSERVE: UK players and visitors have rights under UK GDPR and the Data Protection Act 2018. In addition, we strive to align with international good practice, including key principles found in Mexican privacy law (such as the Federal Law on Protection of Personal Data Held by Private Parties), particularly ARCO rights (Access, Rectification, Cancellation, Opposition) where relevant.

Core Data Protection Rights

Right of access: You can request confirmation of whether we process your personal data and obtain a copy of the data we hold, together with information about how it is used.
Right to rectification: You can ask us to correct inaccurate or incomplete personal data (e.g. address, contact details, identification information).
Right to erasure ("right to be forgotten" / cancellation): You may request deletion of your personal data where it is no longer needed, where you withdraw consent (and no other legal basis applies), or where processing is unlawful, subject to our retention obligations.
Right to restriction of processing: You can ask us to restrict the use of your data in certain cases (for example, while we verify accuracy or assess an objection).
Right to object: You may object to processing based on our legitimate interests, including profiling, and we will stop unless we demonstrate compelling legitimate grounds overriding your interests or the processing is needed for legal claims.
Right to data portability: You can request certain personal data in a structured, commonly used, machine-readable format, and ask us to transmit it to another controller where technically feasible.
Rights related to consent and marketing: Where processing is based on consent, you may withdraw it at any time. You can opt out of marketing communications at any time using unsubscribe links or by contacting us.

Procedures, Timeframes, and Cost

How to exercise your rights: Contact our DPO / privacy team at privacy@slot10-uk.com, clearly stating your identity, the right you wish to exercise, and any relevant details (e.g. account ID, time period).
Identity verification: We may request additional information (for example, a verified email response or limited ID evidence) to confirm your identity and protect your data from unauthorised access.
Response time: We aim to respond without undue delay and in any event within one month (30 days) of receiving a valid request. In complex cases, this may be extended by a further two months, in which case we will notify you.
Charges: We handle rights requests free of charge, unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse the request, as permitted by law.

REFLECT: While our primary legal framework is UK GDPR, players from jurisdictions such as Mexico may find that their ARCO-type rights are substantively respected through these mechanisms, even though Slot10 is operated from Curaçao and targeted at UK players.

Cookies & Tracking Technologies

OBSERVE: Cookies and similar technologies help us operate slot10-uk.com, understand how it is used, and, where permitted, tailor marketing.

Types of Cookies

Session cookies: Temporary cookies that exist only during your browser session and are deleted when you close your browser. They help with navigation, authentication, and security.
Persistent cookies: Cookies that remain on your device for a set period or until deleted, used to remember preferences, keep you logged in, and measure site performance.
Third-party cookies: Cookies set by external providers (e.g. analytics, advertising networks, affiliate tracking partners) to provide their services on or via our site.

Purposes of Cookies

Strictly necessary / functional: Essential to provide core features such as account login, session management, security controls, and payment processing.
Performance and analytics: Used to understand how users interact with Slot10, which pages are most popular, and to detect errors and improve usability.
Advertising and affiliate tracking: Used, where permitted, to deliver relevant offers, measure campaign effectiveness, and attribute traffic to affiliate partners.

Cookie Management

On-site controls: Where available, you can manage non-essential cookies via our cookie banner or cookie settings panel on slot10-uk.com, choosing which categories you accept.
Browser settings: Most browsers allow you to block or delete cookies via their settings; however, blocking essential cookies may impair the functionality of the Service.
Opt-out from online behavioural advertising: You can use industry tools (such as browser add-ons or advertising opt-out platforms) to reduce interest-based advertising, though these are third-party mechanisms outside our control.

REFLECT: We treat cookie-based identifiers as personal data where they relate to an identifiable individual and handle them in accordance with this Privacy Policy and applicable UK e-privacy rules.

Data Security

OBSERVE: We apply technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration.

Technical Measures

Encryption in transit: Data transmitted between your browser and slot10-uk.com is protected using TLS (Transport Layer Security) version 1.2 or higher, helping to prevent interception or tampering.
Encryption at rest: Sensitive data is stored using industry-standard encryption or hashing (for example, hashed passwords), with keys managed under strict access controls.
Access controls and MFA: Access to production systems and databases is restricted to authorised personnel based on role, with strong authentication measures such as multi-factor authentication where feasible.

Organisational and Procedural Measures

Policies and training: Staff with access to personal data receive training on data protection, information security, and responsible gambling, and must comply with confidentiality obligations.
Security assessments: We conduct internal reviews and work with third-party providers who implement robust security practices. Our controls are informed by recognised frameworks such as ISO 27001 and SOC 2, where applicable.
Incident response: We maintain procedures to detect, investigate, and respond to suspected personal data breaches. Where a breach triggers notification duties under UK GDPR, we will inform the relevant supervisory authority and affected individuals in line with legal requirements.

REFLECT: While no system can be guaranteed 100% secure, we continuously assess and improve our safeguards to maintain a level of security appropriate to the risk and the nature of the data we process for Slot10.

Complaints & Contacts

OBSERVE: You have the right to raise questions or complaints about how we handle your personal data.

Contacting Slot10 for Privacy Matters

Primary contact (DPO / privacy team): privacy@slot10-uk.com
Postal address: Bellona N.V., Data Protection Officer, Heelsumstraat 51, E-Commerce Park, Curaçao.

Submit your complaint: Email us with a clear description of your concern, your contact details, and any supporting evidence (e.g. screenshots, transaction IDs).
Acknowledgement: We aim to acknowledge receipt of your complaint within 5 business days.
Investigation and response: We will investigate and seek to provide a substantive response within 30 days. For complex matters, we may extend this period and will inform you of the reasons and expected timeframe.

Regulatory and External Escalation

UK supervisory authority (ICO): If you are located in the United Kingdom and are not satisfied with our response, you may lodge a complaint with the Information Commissioner's Office.
Website: https://www.ico.org.uk.
General guidance on how to complain is available on the ICO website.
Mexican data protection authority (where relevant): If you are a data subject located in Mexico and believe your rights under Mexican privacy law have been infringed, you may contact the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). See https://home.inai.org.mx for contact details.
EU supervisory authorities (if applicable): If EU data protection law applies to you in a specific context, you may have the right to lodge a complaint with an EU supervisory authority in your country of residence, place of work, or place of the alleged infringement.
Curaçao licence complaints (gambling issues): For issues specifically related to our Curaçao gambling licence 8048/JAZ2010-010, you may contact the master licence holder at certria@gaminglicences.com. Please note that this concerns gambling-licence complaints and is separate from your data protection rights.

REFLECT: We encourage you to contact us first so we can try to resolve your concern directly, but you may contact a supervisory authority at any time.

Updates

OBSERVE: We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal requirements, or technical and organisational measures.

How We Notify You

Website publication: The current version of this Privacy Policy will always be available on slot10-uk.com, including the "Last updated" date.
Email notifications: For material changes affecting your rights or the way we process your data, we will notify you by email (where feasible) using the contact address associated with your account.
On-site notices: We may display banners, pop-ups, or dashboard alerts when you log in, highlighting key changes.

Effective Date, Versioning, and Your Choices

Last updated: January 2026. This version replaces all earlier versions applicable to Slot10 on slot10-uk.com.
Advance notice: Where we make significant changes that materially affect your rights or obligations, we will, where practicable, provide at least 30 days' notice before the changes take effect.
Your options: If you do not agree with the updated Privacy Policy, you may choose to stop using the Service and request account closure and, where applicable, exercise your data protection rights (including access or deletion).

REFLECT: By continuing to use slot10-uk.com after changes come into effect, you acknowledge that your personal data will be processed in accordance with the updated Privacy Policy applicable to Slot10.