Privacy Policy

This Privacy Policy explains how the Super Slots brand, in connection with its Super Slots profile operated via supirslots.com (the "Site"), collects, uses, discloses and protects your personal data. It applies to all visitors to the Site and to all players who create or use an account, including users located in the United Kingdom, the European Economic Area (EEA), Mexico and other regions. By using the Site, you acknowledge that your personal data will be processed in accordance with this Privacy Policy. Effective date: 1 January 2026.

Who We Are

The Site supirslots.com, including the Super Slots profile of the Super Slots brand, is operated by an online gaming operator incorporated outside the United Kingdom and subject primarily to the laws of Panama. The operator holds a gaming licence issued under the oversight of the Gaming Control Board of Panama (Junta de Control de Juegos). Some related brands within the same management group also operate under a master licence issued in Curaçao (Master Licence 5536/JAZ), but Super Slots specifically refers to the Panama jurisdiction for its operations.

Based on the information currently available to us for the Super Slots profile:

Legal entity name: The operator's precise corporate name and full registered address are not publicly disclosed in the materials available to UK players. For the purposes of this Policy, it is referred to as the "Operator".
Registered / legal address: The Operator is established in Panama. No detailed street address or company registration number is disclosed in the available data.
Group relationships: The Operator is part of a wider management group often referred to as the Chico Poker Network and operates sister brands including BetOnline.ag and SportsBetting.ag.
UK status: The Operator does not hold a UK Gambling Commission licence (licence number: NONE) and operates in the UK as a grey-market offshore operator. UK players are therefore not protected by the UK Gambling Commission, GamStop or IBAS in relation to gambling services on this Site.

Data Protection Contact: The Operator has not publicly designated a named Data Protection Officer (DPO). Privacy and data protection queries are handled by the Operator's data protection or compliance team. You can contact the Operator regarding privacy matters using the communication channels made available on supirslots.com from time to time (for example, any "Contact Us" form, live chat or designated email address for privacy or support). Where required by applicable law, the Operator will provide its full corporate details and a specific contact point in response to a verified data rights request.

What Personal Data We Collect

We collect and process a range of personal data when you visit or use supirslots.com and the Super Slots profile. The exact data collected depends on how you interact with the Site, your device settings and your choices.

Identity and Contact Data

Account data: Full name, username, password or other authentication credentials, date of birth (to verify that you are over 18), country of residence and preferred language.
Contact details: Email address, postal address (where requested), and any telephone number you choose to provide. Some of these fields may be optional, but certain details are required for account verification and payments.
Verification data: Copies of identity documents (e.g. passport, ID card, driving licence), proof of address (e.g. utility bills, bank statements), and other KYC (Know Your Customer) or AML (Anti-Money Laundering) documentation you submit.

Technical and Usage Data

Technical identifiers: IP address, device identifiers, browser type and version, operating system, time zone settings, language preferences, approximate location derived from IP and similar metadata.
Log data: Login and logout timestamps, session duration, pages viewed, referral URLs, error logs, and other interaction logs generated by your use of the Site.
Device and connection data: Information about your device hardware, network connection and performance metrics used to maintain security and service quality.

Payment and Financial Data

Transaction data: Deposits, withdrawals, bonuses, chargebacks, payment history and related timestamps.
Method details: Limited details about your chosen payment methods (e.g. card type, masked card number, e-wallet provider, cryptocurrency wallet identifiers) processed through payment partners. Full card data is typically processed and stored by secure payment processors, not directly by the Operator.
Fraud prevention data: Information obtained from payment processors, banks or risk tools (e.g. risk scores, flags or alerts) used to detect unauthorised or fraudulent activity.

Behavioural and Profile Data

Gaming history: Game sessions, bets placed, wins and losses, stakes, preferences, time spent and other in-game behaviour.
Account behaviour: Login frequency, device switching, self-exclusion preferences (if any), responsible gambling limits set within the Site, and response to safer-gambling tools.
Marketing and engagement data: Email open rates, click-through data, responses to promotions, and your communication preferences.

Cookies and Similar Technologies

Cookie identifiers: Unique identifiers stored on your browser or device to recognise you and maintain your session.
Tracking technologies: Web beacons, pixels, tags, SDKs and similar technologies to measure performance, understand usage patterns and deliver relevant content or advertising (where permitted by law and your consent).

We do not knowingly collect or process personal data of individuals under the age of 18. If we become aware that we have inadvertently collected such data, we will take reasonable steps to delete it.

Legal Basis for Processing

Because the Super Slots profile on supirslots.com is accessible to users in multiple jurisdictions, including the UK, EEA and Mexico, our processing of personal data is based on several legal grounds. For UK and EEA residents, we primarily rely on the lawful bases set out in the UK General Data Protection Regulation ("UK GDPR"), the EU GDPR (where applicable) and the UK Data Protection Act 2018. For Mexican residents, we take into account the Federal Law on Protection of Personal Data Held by Private Parties and its regulations.

Performance of a contract: We process personal data when it is necessary to:
- Set up and manage your gaming account;
- Provide access to games, betting services and promotions;
- Process deposits, withdrawals and bonuses;
- Provide customer support and handle account-related queries.
Compliance with legal obligations: We process personal data where necessary to comply with applicable laws and regulatory requirements, including:
- KYC and AML requirements under Panama law and, where applicable, other financial regulations;
- Record-keeping and reporting obligations (for example in relation to anti-fraud, taxation or financial audits);
- Obligations to respond to lawful requests from regulators, law enforcement or courts.
Legitimate interests: We process personal data where it is necessary for our legitimate interests, provided that these are not overridden by your rights and interests. These include:
- Ensuring the security and integrity of the Site and our systems;
- Preventing, detecting and investigating fraud, misuse, money laundering or other illegal activities;
- Improving and optimising our services, website performance and user experience;
- Profiling limited aspects of your activity to manage risk, enforce terms and offer relevant content.
Consent: In specific cases, we rely on your consent, for example:
- Sending marketing emails or SMS messages not covered by soft opt-in rules;
- Using certain non-essential cookies or tracking technologies for analytics or advertising;
- Sharing data with certain third parties for advertising purposes where required by law.
You may withdraw your consent at any time as described in the "Your Rights" and "Cookies & Tracking Technologies" sections.
Protection of vital interests and legal claims: In rare circumstances, we may process data to protect your vital interests or those of others, or to establish, exercise or defend legal claims.

Purpose of Processing

We use your personal data only for specified, explicit and legitimate purposes and do not process it in ways that are incompatible with those purposes. The main purposes for which your data is processed in connection with supirslots.com and the Super Slots profile include:

Provision of casino and betting services: To create and manage your account, verify your age and identity, provide access to games, process bets, settle outcomes, credit winnings and manage bonuses and promotions.
Account administration and customer support: To communicate with you about your account, respond to your queries or complaints, provide technical assistance, and notify you about changes to our services, terms or this Privacy Policy.
Risk management, security and fraud prevention: To monitor transactions and gameplay for suspicious patterns, detect and prevent fraud, misuse and money laundering, enforce our rules, and protect the integrity and security of the Site.
Regulatory and legal compliance: To meet our obligations under applicable laws and regulations, including those relating to AML, responsible gambling, financial reporting and record-keeping.
Service improvement and analytics: To analyse usage patterns, performance and behaviour on the Site, perform statistical analysis, improve game offerings, optimise the user interface and develop new features.
Marketing and promotions (where permitted): To send you promotional communications about games, offers and bonuses that may be of interest to you, to personalise marketing content, and to measure the effectiveness of marketing campaigns, subject to your consent and local legal requirements.
Responsible gambling: To help you manage your gambling activity, including processing self-imposed limits, monitoring patterns that may indicate harmful play, and offering tools and information to promote safer gambling.

Disclosure & Sharing

We treat personal data as confidential but may disclose it to carefully selected third parties where this is necessary for the purposes set out in this Privacy Policy, where required by law, or where you have given your consent. We do not sell your personal data.

Payment partners and financial institutions: We share relevant data with banks, payment processors, e-wallet providers, card schemes and cryptocurrency payment service providers in order to process deposits, withdrawals, refunds, chargebacks and fraud checks.
Technical and service providers: We use third-party vendors to host the Site, provide IT infrastructure, security, data storage, email delivery, analytics, customer support tools and similar services. These providers only process your data on our instructions and under data processing agreements.
Associated and group companies: Where necessary, we may share data with other entities within the broader Chico Poker Network management group (for example, in relation to risk management, compliance, or shared infrastructure), while ensuring appropriate safeguards and internal access controls.
Regulators, authorities and dispute bodies: We may disclose personal data to gambling regulators (such as the Junta de Control de Juegos in Panama), financial regulators, tax authorities or law enforcement agencies when legally required or permitted. For UK players, please note that, in relation to gambling regulation, there is no UK Gambling Commission oversight or IBAS dispute resolution for this Site.
Professional advisers: We may disclose data to lawyers, auditors, accountants, and other professional advisers where necessary to obtain advice or protect our legal rights.
Advertising and analytics partners: With your consent where required by law, we may share limited pseudonymous or aggregated data with third-party advertising networks and analytics providers to deliver or measure advertising and to understand how users interact with the Site.
Business transfers: In the event of a merger, acquisition, reorganisation, insolvency or other corporate transaction involving the Operator, personal data may be transferred to one or more third parties as part of that transaction, subject to appropriate safeguards.

Whenever we share personal data with third parties, we require them to handle it securely, use it only for the agreed purposes and comply with applicable data protection laws.

International Transfers

Because the Operator is established outside the UK and EEA, and because our technical infrastructure and service providers may be located in multiple countries, your personal data may be transferred to and processed in jurisdictions that do not provide the same level of data protection as your home country.

Primary processing locations: Your data may be processed in Panama, where the Operator is primarily licensed and operates its gaming business. Processing may also occur in other countries where our hosting, support and payment providers are located, including the United States and potentially Curaçao for certain group infrastructure.
Transfers from the UK / EEA: If you are located in the UK or EEA, your personal data may be transferred from the UK/EEA to countries that the UK government or European Commission have not recognised as providing an adequate level of protection. In such cases, we take steps designed to ensure that your data remains appropriately protected.
Safeguards used: Where required by UK or EU law, we implement appropriate safeguards for international transfers, which may include:
- Standard contractual clauses approved by the European Commission or UK authorities;
- Technical measures such as encryption and pseudonymisation;
- Internal policies and access controls that limit who can access your data and for what purposes.
Mexican residents: For users in Mexico, transfers of personal data abroad are carried out in accordance with the Federal Law on Protection of Personal Data Held by Private Parties and its regulations. Where required, we enter into arrangements with foreign service providers that reflect the principles of that law.

By using the Site, you understand that your personal data may be transferred internationally as described above. Where local law requires your explicit consent to such transfers, we will seek it through appropriate notices or consent mechanisms.

Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements. Retention periods may vary depending on the category of data and the jurisdiction whose laws apply.

Account and identity data: Core account information and identity verification documents (such as ID copies and proof of address) are generally retained for the duration of your account and for a period of up to five (5) years after account closure, or longer if required by AML, anti-fraud or other legal obligations.
Transaction and gaming history: Records of deposits, withdrawals, bets, wins and losses, and related logs are typically kept for at least five (5) years from the date of the relevant transaction, or longer if needed for accounting, auditing, regulatory or legal purposes.
Marketing data: Data used for marketing purposes (such as email preferences and engagement metrics) is retained while you remain subscribed to marketing communications and for a short period thereafter to document your opt-out or consent withdrawal.
Technical logs and security data: Server logs, security alerts and fraud-related information are generally retained for shorter periods necessary for security and troubleshooting, unless they form part of an investigation or legal file that must be kept longer.
Mexican ARCO-related data: Where Mexican data protection law applies, records relating to the exercise of ARCO rights (Access, Rectification, Cancellation, Opposition) may be kept for the periods required by that law to demonstrate compliance.

When personal data is no longer needed for the purposes described in this Privacy Policy and no longer required by applicable law, we will take reasonable steps to delete or anonymise it. If deletion is not technically feasible in certain systems, we will restrict processing and securely store the data until deletion is possible.

Your Rights

Depending on where you live and subject to certain legal conditions and exceptions, you have a range of rights in relation to your personal data. For users in the UK and EEA, these rights arise primarily under the UK GDPR, EU GDPR and the UK Data Protection Act 2018. For users in Mexico, similar rights exist under the Federal Law on Protection of Personal Data Held by Private Parties and its regulations (the ARCO rights).

Core Data Protection Rights

Right of access: You can request confirmation as to whether we process your personal data and, if so, obtain a copy of that data together with information about how we use it.
Right to rectification: You can ask us to correct inaccurate personal data and to complete incomplete data. This includes updating contact information or correcting mistakes in your account details.
Right to erasure ("right to be forgotten" / cancellation): You can request that we delete your personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected or where you have withdrawn consent. Legal and regulatory obligations (such as AML retention requirements) may limit our ability to fully erase some data immediately.
Right to restriction of processing: You can ask us to restrict the processing of your data in certain situations, such as when you contest its accuracy or object to our use of it, while we assess your request.
Right to object: You can object at any time to the processing of your personal data based on our legitimate interests, including profiling related to those interests. We will stop processing unless we have compelling legitimate grounds that override your interests and rights or we need the data for legal claims.
Right to data portability: In certain cases, you can request that we provide you with personal data you have supplied to us in a structured, commonly used and machine-readable format, or that we transmit it to another controller where technically feasible.
Right to withdraw consent: Where our processing is based on your consent (for example, certain marketing or cookies), you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.

Mexican ARCO Rights and Alignment

ARCO rights: If Mexican data protection law applies to you, you have the rights of Access, Rectification, Cancellation and Opposition (ARCO). These broadly mirror the rights described above but are specifically grounded in Mexican legislation.
Privacy notice obligations: This Privacy Policy is intended to operate as a privacy notice consistent with Mexican standards, informing you about the existence and characteristics of the processing of your data and the mechanisms for exercising your rights.

How to Exercise Your Rights

Submitting a request: To exercise any of your rights, please contact us using the communication tools made available on supirslots.com (for example, a "Contact Us" form, account messaging system or support channel). Clearly state that your request concerns "data protection" or "privacy" and specify which right you wish to exercise.
Verification: We may ask you for information or documentation to verify your identity and ensure that we do not disclose personal data to someone who is not entitled to receive it.
Response times: We aim to respond to your request within one month (30 days) of receipt. Where requests are particularly complex or numerous, we may extend this period in line with applicable law, and we will inform you of any extension and the reasons for it.
Fees: We generally handle rights requests free of charge. However, if a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act, as permitted by law.

In addition to contacting us, you have the right to lodge a complaint with a competent data protection authority, as described in the "Complaints & Contacts" section.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies on supirslots.com to provide, secure and improve our services, and to personalise content and, where permitted, advertising. Cookies are small text files that are stored on your device when you visit the Site.

Types of Cookies We Use

Session cookies: Temporary cookies that are stored only while your browser session is active and are deleted when you close your browser. They help us maintain your logged-in session and ensure basic site functionality.
Persistent cookies: Cookies that remain on your device for a longer period or until you delete them. They allow us to remember your preferences (such as language or region) and recognise you when you return.
First-party cookies: Cookies set directly by supirslots.com to operate the Site, provide core features and remember your settings.
Third-party cookies: Cookies set by service providers and partners (for example, analytics or advertising providers) to help us measure site usage, improve performance and, where permitted, deliver relevant advertisements.

Purposes of Cookies

Strictly necessary and functional: These cookies are essential for the operation of the Site, enabling navigation, secure login, payment processing and other core features. They also remember your choices (such as language) to enhance usability.
Analytics and performance: These cookies collect information about how visitors use the Site (for example, pages visited and error messages). We use this information in aggregate form to improve functionality, user experience and game performance.
Advertising and marketing: Where permitted by law and subject to your consent, these cookies and similar technologies may be used to deliver targeted advertising, track marketing campaign performance and personalise promotional content.

Managing Cookies

Browser controls: Most web browsers allow you to view, manage and delete cookies, and to configure settings to block or limit certain types of cookies. Please refer to your browser's help section for detailed instructions.
Site-level settings: Where available, we may provide on-site tools (such as banners or preference centres) that allow you to accept or decline non-essential cookies and adjust your preferences at any time.
Impact of disabling cookies: If you block or delete certain cookies, some features of the Site, including secure login, session continuity and personalised content, may not function correctly.

For users in the UK and EEA, we will seek consent for non-essential cookies and similar technologies in line with applicable laws, including the Privacy and Electronic Communications Regulations (PECR) and the UK GDPR.

Data Security

We take the security of your personal data seriously and implement technical and organisational measures designed to protect it against unauthorised access, loss, misuse, alteration or destruction. While no system can guarantee absolute security, we aim to align our practices with recognised industry standards.

Encryption in transit: Where supported by your browser and device, data transmitted between your device and supirslots.com is protected using transport layer security (TLS), typically TLS 1.2 or higher, to reduce the risk of interception.
Encryption and protection at rest: We use a combination of encryption, access controls and segregation of environments to protect stored data, particularly sensitive data such as authentication details and financial information handled by payment partners.
Access controls: Access to personal data is restricted to authorised personnel and service providers who require it for legitimate business purposes, and is governed by role-based access controls, confidentiality obligations and internal policies.
Authentication safeguards: We employ measures to protect accounts from unauthorised access, which may include strong password requirements, session management controls and, where offered and chosen by you, additional authentication factors.
Monitoring and audits: Systems and infrastructure are monitored for unusual activity, potential vulnerabilities and incidents. We periodically review our security controls and may conduct internal or third-party assessments to evaluate their effectiveness.
Staff awareness and training: Personnel with access to personal data receive guidance or training on data protection, confidentiality and security obligations as part of their role.
Incident response: We maintain processes to detect, investigate and respond to suspected personal data breaches. Where a breach of security leads to a high risk to your rights and freedoms, and applicable law requires us to do so, we will notify you and the relevant supervisory authority without undue delay.

Although the Operator is not certified under specific information security standards (such as ISO 27001 or SOC 2) in the information available to UK players, our objective is to implement measures consistent with good industry practice for online gaming and payment environments.

Complaints & Contacts

If you have questions, concerns or complaints about how your personal data is handled in connection with supirslots.com and the Super Slots profile, you have several options.

Contacting the Operator

Initial contact: Please contact us using the communication tools provided on supirslots.com, such as any "Contact Us" form, help centre, live chat or other support channels available to you when logged in. Clearly indicate that your enquiry relates to "privacy" or "data protection".
Information to include: Provide your account username (but not your password), contact details, a clear description of your concern or request, and any relevant supporting information.
Response time: We aim to acknowledge and address privacy-related complaints or queries within 30 days of receipt, in line with applicable data protection standards. More complex issues may require additional time, in which case we will inform you accordingly.

Escalation to Data Protection Authorities

United Kingdom: If you are located in the UK and are not satisfied with our response, you can lodge a complaint with the Information Commissioner's Office (ICO):
- Website: https://ico.org.uk
- Telephone (UK): +44 303 123 1113
European Union / EEA: If you are in the EEA, you may lodge a complaint with your local data protection authority. Contact details are generally available on the website of the European Data Protection Board (EDPB).
Mexico: If you are in Mexico, you may lodge a complaint or request guidance from the National Institute for Transparency, Access to Information and Personal Data Protection (INAI):
- Website: https://home.inai.org.mx

Please note that while the gaming operations of the Operator are overseen in Panama by the Gaming Control Board of Panama (Junta de Control de Juegos), effective consumer dispute resolution for UK players in relation to gambling outcomes is limited, and this regulator is not a dedicated data protection authority. For privacy-related matters, you should prioritise the data protection authorities listed above.

Updates

We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal obligations, technological developments or business operations relating to supirslots.com and the Super Slots profile. The version posted on the Site will always indicate the date of the latest update.

Last updated: January 2026 (Version 4.0).
Notification of changes:
- For material changes that significantly affect how your personal data is processed, we will endeavour to provide prominent notice, which may include email notifications, in-account messages, or banners on the Site.
- Where required by law or where changes are substantial, we will give you at least 30 days' notice before the new terms take effect, unless immediate changes are necessary for legal or security reasons.
Your choices:
- If you do not agree with an updated version of this Privacy Policy, you may choose to stop using the Site and, where applicable, request account closure.
- Continued use of the Site after the effective date of an updated version will be taken as your acknowledgment of the changes, to the extent permitted by applicable law.
Change log (material changes):
- Version 4.0 (January 2026): Enhanced explanations of international transfers, strengthened description of user rights for UK, EEA and Mexican residents, clarified complaints and supervisory authority contacts, and updated data retention guidance.

We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data in connection with supirslots.com and the Super Slots profile.