Privacy policy

Last updated: 10 October 2026

Who we are

Slottomat (www.slottomat.com, the “Website”) is operated by Affcool LTD, a company registered in Malta under company number C 95222, with its registered address at 152, Office No. 9, Triq in-Naxxar, San Gwann SGN 9030, Malta (“we”, “us”). We are the data controller for the personal data described in this policy. You can reach us at [email protected] or at the address above.

This policy explains what personal data the Website processes, why, on which legal basis under the General Data Protection Regulation (EU) 2016/679 (“GDPR”), who receives it, how long it is kept and what your rights are. It covers this Website only, not the websites of casinos, game providers or other third parties that we link to.

What we do not do

You do not need an account to use Slottomat, and you cannot create one. We do not run a newsletter, we do not have a comment section, we do not ask for your name, and we do not ask your browser for your precise location. We do not sell or rent personal data, and we do not use advertising or profiling cookies.

Personal data we process

1. Technical data when you visit

When you open a page, your browser sends us technical data: your IP address, the date and time, the page requested, the referring page and your browser’s user agent. We use it to deliver the page, to keep the Website secure and to find errors.

  • Server logs: our web server records these data in access logs, which are deleted automatically after about two weeks (14 daily log files).
  • Abuse protection: to stop automated abuse, we count requests per IP address for some functions; these counters expire after a few minutes, or after 24 hours for the daily demo limit.
  • Demo launches: each time you start a free demo, we record the game, the time, your IP address and your browser’s user agent, so that we can stop automated mass launches (every launch costs us money). The IP address and user agent are removed after 30 days.
  • Cloudflare: the Website is delivered through Cloudflare, which protects it against attacks and bots and caches pages. Cloudflare processes these connection data on our behalf and may run a short security check in your browser (see our Cookie Policy).
  • Legal basis: our legitimate interest in delivering a secure, working website (Art. 6(1)(f) GDPR).

2. Your country

Cloudflare tells our server which country a request comes from, based on the IP address. We use only the country (not your exact location) to show offers that are available where you are, to hide offers that are not, and to show a notice instead of a game when the provider does not allow that game in your country. The country is kept only in your temporary session (at most two hours) and is not stored permanently. If Cloudflare sends no country, the country is treated as unknown; we do not look it up anywhere else.

  • Legal basis: our legitimate interest in showing only content that is lawful and available in your country (Art. 6(1)(f) GDPR).

3. Cookies and data stored in your browser

Some small pieces of data are stored in your own browser: your cookie choice, your confirmation that you are 18 or older, a security session (which expires after two hours), your favourite games, the games you played recently and your game-launcher progress (your star ratings, achievements, XP, play counts and daily challenge). These stay in your browser, with two exceptions. To show your favourites or recently played games, the page sends their game IDs to our server, which returns their names and pictures; the IDs are part of the requested address, so they appear in the server access logs for about two weeks, and are not stored anywhere else. If you create a save code, your launcher progress is uploaded (section 7). The full list, with durations, is in our Cookie Policy.

  • Legal basis: storage that is strictly necessary for a function you use (Art. 5(3) of the ePrivacy Directive and Art. 6(1)(f) GDPR).

4. Google Analytics (only if you accept)

Only if you click “Accept” in our cookie banner, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to measure how the Website is used: pages viewed, approximate region, device and browser type, screen orientation, when a free demo starts, fails or is not available, and clicks on links to other websites, including casino offers (which partner, and from which page). Google Analytics is used for statistics only: on our pages, Google’s advertising storage and ad personalisation signals stay switched off (“denied”), also after you accept. If you click “Decline”, or make no choice, Google Analytics is not loaded at all.

  • Legal basis: your consent (Art. 6(1)(a) GDPR).
  • Withdrawing consent: use the “Cookie settings” link at the bottom of every page. It deletes the analytics cookies and shows the banner again; withdrawing does not affect processing before it.
  • Retention: Google Analytics keeps user- and event-level data for no longer than 14 months (aggregated reports contain no personal data); the analytics cookies expire after up to two years unless you delete them earlier.
  • More information: Google Privacy Policy.

5. Emails you send us

If you email us, we use your email address, any name you give and the content of your message only to answer you and to keep a record of the conversation.

  • Legal basis: our legitimate interest in answering you (Art. 6(1)(f) GDPR).
  • Retention: up to six months after our last exchange, unless a longer period is required by law.

6. Free demo games and links to other websites

Free demo games are supplied by SlotsLaunch and the game providers and run in a frame on our pages. Our pages prepare a connection to SlotsLaunch in advance so that a demo starts quickly; this connection shows your IP address to SlotsLaunch. When you start a demo, the game is loaded from their servers, which receive your IP address and may set their own cookies under their own privacy policies.

Links to casinos (currently Stake and Hype.Bet) are affiliate links: they contain our partner code so that the casino knows the visit came from Slottomat, and we may receive a commission. We do not pass any personal data to the casino; what the casino does after you arrive is governed by its own privacy policy.

7. Rating a game and save codes

If you rate a game, we store your rating together with your IP address, your browser’s user agent and a random voter ID (also kept in the slottomat_voter cookie), so that each person’s vote counts once and ratings cannot be manipulated. The IP address and user agent are removed after two days; the rating and the random voter ID are kept for as long as the game’s rating is shown. If you create a save code in the game launcher, we store your launcher progress (favourites, recently played games, achievements, XP, play counts and daily challenge) under a hashed form of that code, so that you can load it on another device. We do not link it to your name, email or IP address. It is kept until you ask us to delete it: email us the code.

  • Legal basis: our legitimate interest in fair ratings and in providing the function you asked for (Art. 6(1)(f) GDPR).

Who receives your data

  • Hosting and delivery: our server provider and Cloudflare, Inc., which process data on our behalf as processors.
  • Google Ireland Limited: only if you accept analytics.
  • SlotsLaunch and the game providers: your IP address when our pages connect to them and when you start a demo (see section 6); they act under their own privacy policies.
  • Authorities: only where the law requires it, or to establish, exercise or defend legal claims.

Transfers outside the EEA

Cloudflare and, if you accept analytics, Google may process data in the United States. These transfers are covered by the EU–US Data Privacy Framework, under which Cloudflare, Inc. and Google LLC are certified, and by the European Commission’s Standard Contractual Clauses.

Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on our legitimate interest. Where processing is based on your consent, you can withdraw it at any time. To use any of these rights, email [email protected]. Because we do not identify visitors, we may need details (for example the date, time and your IP address) to find data about you.

You also have the right to complain to a data protection authority. In Malta this is the Office of the Information and Data Protection Commissioner, Floor 2, Airways House, Triq Il-Kbira, Tas-Sliema SLM 1549, Malta ([email protected]). You can also contact the authority in your own EU/EEA country.

Security

The Website is served over encrypted connections (HTTPS) and our server accepts web traffic only through Cloudflare. No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures to protect the data we process.

Age

Slottomat is for adults aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has sent us personal data, please contact us and we will delete it.

Changes to this policy

If our processing changes, we will update this page and the date at the top.

Contact

Affcool LTD, 152, Office No. 9, Triq in-Naxxar, San Gwann SGN 9030, Malta · [email protected]