Personal data means any information that identifies or could identify a user.

The following categories may be collected:

• Identity and contact details such as name, date of birth, address, email, and phone number
• Account and verification records including KYC documents, source of funds information, and account settings
• Payment and transaction information for deposits, withdrawals, chargebacks, and tax records
• Gameplay and betting history, responsible gambling interactions, and self-exclusion status
• Device, log, and usage information including IP address, browser details, geolocation, and cookie identifiers
• Communications and preferences such as support messages and marketing choices

Why this information is collected and used:

• To create and manage accounts and provide services
• To verify age and identity, meet anti-money laundering duties, and prevent fraud
• To process payments, withdrawals, and resolve transaction issues
• To deliver customer support and manage complaints or disputes
• To support safer gambling tools, self-exclusion, and risk monitoring
• To maintain websites and apps, improve performance, and ensure security
• To meet legal, regulatory, audit, and reporting requirements

Protection measures:

• Encryption in transit and at rest, access controls, and multi-factor authentication
• Network monitoring, anti-fraud controls, and secure logging
• Data minimisation and pseudonymisation where appropriate
• Staff vetting, confidentiality undertakings, and training
• Supplier due diligence and data processing agreements
• Backups, resilience testing, and incident response procedures

Retention and deletion:

• Data is kept for the life of the account and thereafter for the periods required by law, usually 5 to 7 years after closure for AML, tax, regulatory, and dispute purposes
• When retention ends, data is securely erased or anonymised

User rights under UK GDPR and the Data Protection Act 2018:

• Access a copy of personal data and receive information about processing
• Request correction, deletion, restriction, or portability of data
• Object to certain processing and withdraw consent at any time
• Lodge a complaint with the Information Commissioner’s Office
• Exercise rights via account settings or by contacting support through the website

Compliance: UK GDPR, the Data Protection Act 2018, PECR, and relevant UK Gambling Commission Licence Conditions and Codes of Practice.

Personal data is processed lawfully, fairly, and transparently for the following purposes:

• Account creation, verification, and service delivery (contract)
• Deposits, withdrawals, chargebacks, and payment reconciliation (contract and legal obligation)
• Age and identity checks, sanctions screening, and anti-money laundering compliance (legal obligation)
• Security, fraud prevention, risk management, and integrity of games and betting (legitimate interests and legal obligation)
• Customer support, complaint handling, and dispute resolution (contract)
• Personalisation, product improvement, analytics, and statistics using aggregated or pseudonymised information where possible (legitimate interests)
• Marketing communications and cookies based on consent or applicable soft opt-in rules, with the ability to opt out at any time
• Compliance with Gambling Commission requirements, court orders, and other legal duties
• Limited profiling to detect fraud and support safer gambling; a user may request human review where required by law

Users can access and update account information through profile settings. For broader data requests, a rights request can be made through the support channels on the website. Identity verification may be required. Responses are provided within one month, extendable where the request is complex. Deletion requests are honoured where permitted, noting that certain records must be retained to meet legal and regulatory requirements.

Corrections and deletions:

• Incorrect or incomplete data can be rectified upon request
• Deletion applies when data is no longer necessary, consent is withdrawn and no other basis applies, or processing is unlawful
• Some data must be kept for AML, gambling regulation, and financial reporting

By using Kaboomslots, the user consents to security checks and the processing of payment data by payment service providers for verification and transaction purposes, subject to their own privacy notices.

The services are intended for persons aged 18 or over. Age is verified using documents and electronic checks as part of identity verification. The operator cannot confirm age without suitable documentation.

If a minor is found to have created an account, the account is closed and personal information is deleted or restricted, save for what must be retained to comply with law and protect the integrity of investigations. A parent or guardian may request deletion of a minor’s information through the support channels on the website.

Personal data may be processed outside the United Kingdom where technology vendors, payments partners, verification providers, or support teams operate. Use of the website constitutes consent to such processing, subject to appropriate safeguards.

Safeguards include adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, and contractual confidentiality, security, and audit obligations. Partners are vetted and bound to protect information. Copies of key transfer safeguards can be requested, subject to redactions for security and confidentiality.

This disclaimer may limit or clarify the scope or effects of certain rules in this policy to the extent permitted by law. Where any term conflicts with applicable legislation or directions of the UK Gambling Commission, those requirements prevail. This policy does not create rights beyond those granted by law or contract.

The disclaimer applies once the user accepts the policy by signature during onboarding, affirmative acceptance, or by accession through continued use of the services. The document may be updated; significant changes will be signposted on the website.

Cookies are small files placed on a device to store settings and recognise a browser. They help the website function and improve services. Cookies are used for statistics, behaviour analysis, personalisation, and site improvement. Non-essential cookies are retained for up to 1 year unless deleted sooner by the user.

Categories include strictly necessary, performance, functional, and advertising cookies. Users can manage preferences via the on-site consent tool and through browser settings. Disabling certain cookies may affect the availability or quality of some features.

By using Kaboomslots, the user confirms full acceptance of this Privacy Policy. The current version published on the website prevails over earlier versions. Continued access after an update indicates acceptance of any changes. Users who do not agree should stop using the services and adjust available privacy settings.

Personal data may be shared with third parties where required by law, to resolve disputes, to perform agreements, or based on user consent. Typical recipients include payment processors, identity and AML providers, fraud and security vendors, hosting and platform providers, analytics services, marketing partners where consented, customer support tools, regulators, law enforcement, and dispute resolution bodies.

Third parties may act as processors or independent controllers and have their own privacy policies. A list or categories of recipients is maintained on the website; if not listed, information about the purpose and scope of disclosure will be provided where required. Providing information for these purposes constitutes consent to such sharing, subject to applicable legal bases.

The website may include links to third-party websites or services that are not operated by the operator. Those websites have their own privacy policies and practices. Responsibility for how external sites collect, use, or disclose information rests with those providers. Users should review the privacy notices of any external websites they visit.