Mad Slots Privacy
Table of contents
This page explains how Mad Slots, as a UK-facing online casino, handles personal data. As an operator licensed by the UK Gambling Commission, Mad Slots processes data under UK GDPR and the Data Protection Act 2018, overseen by the Information Commissioner's Office. The summary below is informational and covers the typical handling of player data by a UK-licensed operator.
📋 What data is collected
The casino collects the information needed to open and run an account and meet regulatory duties. This includes registration details such as name, date of birth, email and address; payment information for deposits and withdrawals; identity documents for verification; and usage data including login times, device details and gameplay activity. Cookies and similar technologies record site preferences and session information.
🔍 How data is used
Collected data supports account management, processing of deposits and withdrawals, fraud prevention and compliance with licensing and anti-money-laundering obligations. Identity data satisfies the verification checks required under UK Gambling Commission rules, and usage data helps detect problem-gambling indicators that licensed sites must monitor. Each use is tied to a lawful basis under UK GDPR — contractual necessity, legal obligation, or consent for marketing. Declining marketing does not affect access to games or the cashier.
🤝 Data sharing and third parties
The operator shares data only where necessary: with payment processors to complete transactions, with game providers to deliver content, and with regulatory authorities where reporting is required under licence conditions. Data is not sold to unrelated third parties. Any processors handling data on the operator's behalf are bound by confidentiality and data-protection obligations, and the data shared is limited to what each processor needs to perform its function rather than the full account record.
🍪 Cookies and tracking
The site uses session cookies to keep players logged in, analytics cookies to understand usage, and preference cookies to remember settings. A cookie banner records the player's choices on first visit, and those preferences can be changed at any time. Analytics and marketing cookies require consent, while strictly necessary cookies are used to deliver the service and do not.
🛡️ Your rights
Under UK GDPR, players have the right to access their data, request correction, request erasure, restrict or object to certain processing, and request data portability. These rights are not absolute where they conflict with legal duties: an erasure request cannot override retention obligations under anti-money-laundering and licensing rules. Once that period ends, the data is deleted. Players can also withdraw marketing consent and lodge a complaint with the Information Commissioner's Office.
🔒 Data security
The platform applies SSL encryption to protect data in transit and follows PCI DSS standards for payment handling. Internal access controls limit who can view personal data. While no system is completely immune to risk, these measures reflect standard practice for a UK-licensed operator, and payment data in particular is handled to the PCI DSS framework that governs card storage across the industry. Limiting the data the casino itself retains reduces the exposure in the event of an incident, since much of the sensitive payment detail is held by the processors rather than the operator.
🎧 Contact and complaints
Players can raise data questions or requests with the Mad Slots support team via live chat or email. Where a concern is not resolved, UK players have the right to contact the Information Commissioner's Office as the supervisory authority, which can investigate complaints independently of the operator.
📊 Conclusion
Mad Slots handles personal data under UK GDPR and its UK Gambling Commission licence, with encryption, access controls and clear player rights. Questions about data can be directed to the support team at any time, and players retain the full set of UK GDPR rights over their account information, including access, correction and erasure subject to the operator's legal retention duties.