Privacy Policy

This Privacy Policy explains how we collect, use, disclose, and protect personal data of visitors and players who access and use the Universal Slots online casino for the United Kingdom market via the website universallslot.com (also internally referenced as Universal Slots). It applies to all interactions with our website, games, payment services, marketing communications, and customer support channels.

We process personal data in accordance with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, and other applicable privacy and e-privacy rules, including those governing online gambling services and electronic marketing to UK residents. Please read this Privacy Policy carefully before using our services. If you do not agree with it, you should not create an account or continue using the website.

This Privacy Policy is effective from 6 November 2025 and is intended to remain valid and applicable for users accessing universallslot.com during 2025 and beyond until it is replaced or updated as described in the "Updates" section below.

Who We Are

The website universallslot.com, operating the Universal Slots brand for the United Kingdom market (internally identified as Universal Slots), is owned and operated by Mirage Corporation N.V., a company incorporated under the laws of Curaçao. Mirage Corporation N.V. holds an online gaming sublicense issued by Antillephone N.V. under license number 8048/JAZ2014-037.

For certain payment transactions and merchant services, Mirage Corporation N.V. may act together with or delegate processing activities to a group subsidiary, such as Mirage Ent. Corporation Limited, typically based in Cyprus and providing payment processing and related services. The precise registered office addresses and corporate registration numbers of these entities are not specified in the publicly available source data used for this document and will be added or updated as soon as they are formally provided by the operator. Until then, you may request confirmation of the current legal address and registration details by contacting us as set out below.

For the purposes of the UK GDPR, Mirage Corporation N.V. is the primary data controller for personal data processed in connection with the use of universallslot.com. We have appointed an internal data protection contact point (Data Protection Officer/Privacy Team):

E-mail (primary contact for privacy matters): support@universallslot.com
Website: https://universallslot.com
Postal address: To be confirmed on request; not specified in the currently available public data.

Any requests, questions, or concerns regarding this Privacy Policy or our data protection practices should be directed to our privacy contact using the email address above.

What Personal Data We Collect

When you visit and use universallslot.com as a player or website visitor, we collect and process different categories of personal data, depending on how you interact with the website, our games, and our support channels.

Identification and Contact Data

Account details: full name, username, password (stored in hashed form), date of birth, gender (if provided), and unique account identifiers.
Contact information: email address (including the primary contact used for account management and support, such as support@universallslot.com for correspondence), telephone number (if provided), and preferred language.
KYC/verification data: copies or details of identity documents (passports, ID cards, driving licences), proof of address (utility bills, bank statements), and any additional information requested to comply with anti-money laundering ("AML") and "know your customer" ("KYC") rules.

Technical and Usage Data

Device and connection data: IP address, approximate location derived from IP, device identifiers, browser type and version, operating system, screen resolution, and settings.
Log and diagnostic data: pages visited, session timestamps, referral URLs, error logs, login attempts, and security-related events (for example failed logins, account lockouts, suspicious activity flags).

Payment and Financial Data

Payment method details: limited card details (such as card type and masked PAN), wallet identifiers, and transaction tokens when you deposit or withdraw using methods including Visa/Mastercard, e-wallets (e.g. Jeton), bank transfer, or cryptocurrencies (e.g. Bitcoin, Ethereum, LTC).
Transaction history: records of deposits, withdrawals, bonuses, chargebacks, fees (such as a £30 fixed fee for certain bank transfers), and limits (e.g. applicable daily withdrawal thresholds such as £1,000/day and monthly limits aligned with approximately €15,000).
AML/financial checks: affordability assessments, source-of-funds information, and any documentation or data required to investigate and prevent fraud, money laundering, or other financial crimes.

Behavioral and Gameplay Data

Gameplay and betting data: game selections, stakes, wins and losses, bonuses used, wagering progress, and tournament participation.
Website interaction data: clicks, navigation patterns, time spent on pages, interaction with promotions, and responses to in-site messages or responsible gaming tools.
Risk and responsible gaming data: self-exclusion flags, cooling-off requests sent to support@universallslot.com, deposit limits, reality checks, and indicators of problematic gambling behaviour where such monitoring is permitted by law.

Cookies and Similar Technologies

Cookies: small text files placed on your device to remember your preferences, maintain sessions, and enhance security and performance.
Similar technologies: local storage, pixels, tags, and scripts used for analytics, fraud prevention, and marketing (where permitted and subject to your consent under applicable law).

Some of the personal data we collect is necessary for us to offer you the Universal Slots services via universallslot.com; if you do not provide such data, you may not be able to create an account, verify your identity, or use certain features.

Legal Basis for Processing

We process personal data of users and visitors of universallslot.com in accordance with the UK GDPR, relying on the following legal grounds:

Performance of a contract: We need to process your personal data to enter into and perform our contract with you, including creating and managing your account, enabling deposits and withdrawals (e.g. via Visa/Mastercard, cryptocurrencies, Jeton, and bank transfers), operating games, crediting winnings, enforcing withdrawal limits such as daily or monthly caps, and providing customer support.
Compliance with legal obligations: We are legally required to process certain data for AML and KYC purposes, to prevent fraud, to maintain accurate records of gaming and payment transactions, and to comply with laws and regulatory requirements applicable to our licensed operations in Curaçao and other relevant jurisdictions. This includes storing KYC documents, transaction history, and responsible gaming data for statutory retention periods.
Legitimate interests: We process data to protect the integrity of our services, maintain network and information security, detect and prevent fraud or abuse, respond to legal claims, improve the performance and usability of universallslot.com, and perform non-intrusive analytics on aggregated or pseudonymised data. Where we rely on legitimate interests, we carefully balance our interests against your fundamental rights and freedoms.
Consent: We use your consent as the legal basis when required by law, for example for certain types of electronic marketing communications, optional promotions, and non-essential cookies or tracking technologies. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Protection of vital interests and legal claims: In rare cases, we may process personal data to protect your vital interests or those of another person, or to establish, exercise, or defend legal claims related to the operation of Universal Slots or disputes involving players, regulators, or payment providers.

Purpose of Processing

We use personal data collected through universallslot.com for clearly defined purposes, all of which are supported by one or more of the legal bases described above.

Provision of casino services: To register and authenticate you as a player, operate your account, provide access to games and promotions, apply bonuses and wagering requirements, process deposits and withdrawals using supported payment methods, and maintain accurate balances and transaction records.
Account management and customer support: To communicate with you via email (including through support@universallslot.com) about account status, security alerts, password resets, responsible gaming requests (including 24-hour cooling-off periods), and responses to your enquiries or complaints.
Compliance and risk management: To conduct identity verification, affordability assessments, AML and KYC checks, transaction monitoring, and to investigate suspicious or potentially fraudulent activity. This includes cooperation with our licensors, regulators, banks, card schemes, and payment processors where required.
Service improvement and analytics: To analyse how players interact with the website, games, and payment flows, including success rates of different deposit methods for UK users and the performance of features, in order to improve our offering, stability, and user experience. Where possible, we use aggregated or pseudonymised data.
Marketing and personalisation: To send you tailored offers, bonuses, and promotions (subject to your marketing preferences and consent where required), to manage loyalty schemes, to segment users based on lawful criteria, and to measure the effectiveness of campaigns.
Responsible gambling: To provide and enforce responsible gaming tools, including self-exclusion, deposit limits, and cooling-off options, and to monitor for patterns of problematic gambling in line with applicable regulations and industry best practices.
Legal, regulatory, and dispute resolution: To comply with our obligations under gambling and financial laws, answer requests from regulators and law enforcement, handle disputes and chargebacks, manage complaints, and defend legal claims.

Disclosure & Sharing

We do not sell your personal data. However, in order to provide the Universal Slots services via universallslot.com and to meet our legal and contractual obligations, we share personal data with carefully selected third parties under appropriate safeguards.

Group companies and affiliates: Mirage Corporation N.V., its subsidiaries (including payment-processing entities such as Mirage Ent. Corporation Limited), and affiliated companies that support the operation of Universal Slots, subject to intra-group data protection arrangements.
Payment service providers and financial institutions: Banks, card schemes (e.g. Visa/Mastercard), e-wallet providers such as Jeton, cryptocurrency processors, and other financial intermediaries that process deposits, withdrawals, and chargebacks. These partners receive transaction-related data necessary to perform their services, including information about payment method, amount, account identifiers, and fraud-prevention signals.
Technical and infrastructure providers: Hosting providers, content delivery networks, IT service providers, game platform providers, security and anti-fraud tools, email and messaging platforms, and analytics providers who process data on our behalf and under our instructions.
Regulators, licensors, and authorities: Antillephone N.V. and other competent authorities in Curaçao or other jurisdictions overseeing our licence 8048/JAZ2014-037, tax or financial regulators, law enforcement, and courts where we are required to share data to comply with legal obligations or valid requests, or to exercise or defend legal claims.
Marketing and affiliate partners: Advertising networks, affiliation and tracking providers, and promotional partners, but only where permitted by law and in compliance with your marketing preferences and cookie choices. These partners may use pseudonymised identifiers, cookies, or similar technologies to track campaign performance.
Professional advisers and dispute resolution bodies: Lawyers, auditors, accountants, and alternative dispute resolution (ADR) providers who assist us in managing our business, ensuring compliance, and resolving complaints or disputes with players.
Corporate transactions: In the context of a merger, acquisition, restructuring, or sale of all or part of our business, personal data may be disclosed to potential buyers or investors under confidentiality obligations and, where required, subject to your rights under applicable law.

Whenever we share personal data with third parties acting as our processors, we ensure they are bound by written contracts requiring them to protect your data and process it only for the limited purposes specified by us and permitted by law.

International Transfers

Because universallslot.com is operated by Mirage Corporation N.V. in Curaçao and supported by group entities and service providers located in various countries, your personal data may be transferred to and processed in countries outside the United Kingdom, including but not limited to:

Curaçao: where Mirage Corporation N.V. is incorporated and where core gaming operations and licence supervision (under Antillephone N.V. licence 8048/JAZ2014-037) take place.
Cyprus or other EEA states: where payment-processing entities such as Mirage Ent. Corporation Limited and certain banking or payment partners may be established.
Other jurisdictions: where providers of hosting, IT, analytics, email delivery, fraud prevention, or customer support are located, including possible transfers to countries outside the UK and EEA.

Where personal data is transferred from the UK to a country that the UK government has not recognised as providing an adequate level of protection, we implement appropriate safeguards as required by the UK GDPR, which may include:

Using the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses ("SCCs") approved by the UK Information Commissioner's Office (ICO).
Ensuring that recipients are subject to robust contractual and organisational measures to protect personal data, including confidentiality obligations, access controls, and security standards aligned with ISO 27001 or similar frameworks where applicable.
Conducting transfer impact assessments to evaluate and address any material risks to the rights and freedoms of data subjects arising from the laws and practices of the destination country.

Where local laws require us to disclose data to public authorities, we seek to limit such disclosures to what is strictly necessary and proportionate and, where legally permitted, to notify affected users. You may contact us at support@universallslot.com for more information about the safeguards applied to a specific transfer.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to meet legal, regulatory, and accounting obligations, and to resolve disputes. Retention periods may vary depending on the type of data and the applicable laws in Curaçao, the United Kingdom, and other relevant jurisdictions.

Account and identification data: Core account information, KYC documentation, and identity verification records are typically retained for the duration of your active relationship with us and for a period of up to five (5) years after account closure, or longer where required by AML, KYC, or financial regulations or where necessary to address ongoing disputes or investigations.
Transaction and payment data: Deposits, withdrawals, bonuses, chargebacks, and related financial records (including data linked to payment methods such as bank transfers, cards, e-wallets, and cryptocurrencies) are kept for legal and tax purposes for up to five (5) to seven (7) years from the relevant transaction or account closure, depending on applicable retention rules.
Gameplay and behavioural data: Game logs, betting history, and usage analytics are retained while your account is active and for a limited period afterwards, generally not exceeding five (5) years after account closure, unless a longer retention period is required for security, fraud-prevention, or dispute-resolution purposes.
Marketing data: Information about your marketing preferences and communications (including consent logs) is usually stored for the period during which you receive marketing from us and for up to two (2) years after you withdraw consent or opt-out, in order to demonstrate compliance and ensure you do not receive unwanted communications.
Cookies and technical data: Cookie-related data is retained in accordance with the lifetime of each cookie (as explained in our cookie information) and is typically kept for shorter periods, unless aggregated or pseudonymised for longer-term analytics.

When the relevant retention period expires, or when the data is no longer needed for the purposes described in this Privacy Policy, we either delete or irreversibly anonymise the data, unless we are legally required or permitted to keep it longer. Where deletion is not technically feasible in backups, we ensure that the data is securely isolated and protected from further use.

Your Rights

If you are located in the United Kingdom, or otherwise protected by the UK GDPR or comparable data protection laws, you have a number of rights in relation to your personal data processed through universallslot.com. We also seek to align our practices with broader international standards, including principles under EU GDPR and Mexican privacy law (such as the Federal Law on the Protection of Personal Data Held by Private Parties), where relevant and technically feasible.

Right of access: You may request confirmation whether we process personal data about you and obtain a copy of such data, together with information about how we use it.
Right to rectification: You may ask us to correct or complete inaccurate or incomplete personal data (for example, outdated contact details or verification information).
Right to erasure ("right to be forgotten"): You may request deletion of your personal data where there is no compelling reason for us to continue processing it, subject to legal and regulatory retention duties (for example, AML or gaming-record retention requirements may oblige us to retain certain data for a minimum period).
Right to restriction of processing: You may request that we limit processing of your data in specific circumstances, such as while a complaint or accuracy challenge is being investigated.
Right to object: You may object at any time to processing based on legitimate interests, including profiling related to such interests. You have an absolute right to object to direct marketing and related profiling; we will honour such objections promptly.
Right to data portability: Where processing is based on consent or on a contract and carried out by automated means, you may request to receive your personal data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transmitted to another controller.
Right to withdraw consent: Where we rely on your consent (for example for certain marketing communications or optional cookies), you may withdraw that consent at any time, without affecting the lawfulness of processing prior to withdrawal.
Rights under Mexican law (where applicable): For users who are protected by Mexican privacy law, we aim to reflect analogous ARCO rights (access, rectification, cancellation, and opposition) to the extent consistent with our legal obligations in other jurisdictions and with technical feasibility. In case of conflict between regimes, we will apply the framework that offers stronger protection without breaching mandatory retention rules.

How to exercise your rights: You can exercise your rights by contacting us at support@universallslot.com, clearly stating your identity, the right you wish to exercise, and any relevant details. We may ask you to provide additional information to verify your identity before acting on your request.

Response time and fees: We aim to respond to all valid requests within one (1) month (30 days) of receipt, and we do not charge a fee for handling such requests. In complex cases or when we receive numerous requests, we may extend the response period by up to two further months, in which case we will inform you of the extension and the reasons. We may charge a reasonable fee or decline to act on requests that are manifestly unfounded or excessive, in line with the UK GDPR.

Cookies & Tracking Technologies

universallslot.com uses cookies and similar technologies to ensure the website functions properly, to improve performance, to secure accounts, and, where permitted, to support analytics and marketing activities. Cookies are small text files stored on your device that are read on subsequent visits.

Types of Cookies We Use

Session cookies: Temporary cookies that are deleted when you close your browser. They are used to maintain your logged-in session, enable navigation between pages, and ensure secure access to your account and games.
Persistent cookies: Cookies that remain on your device for a defined period or until you delete them. They help us remember your preferences (such as language, region, or responsible gaming settings) and may support analytics or fraud-prevention functions.
Third-party cookies: Cookies set by external service providers, such as analytics tools, affiliate tracking platforms, or advertising networks, to measure website performance, track the effectiveness of marketing campaigns, and, where permitted, deliver or optimise targeted promotions.

Purposes of Cookies

Strictly necessary cookies: Essential for the operation of universallslot.com, including enabling secure logins, transaction processing, and core game functions. These cookies cannot be switched off in our systems.
Functional cookies: Used to remember your settings and preferences, such as language and display options, to provide a more personalised experience.
Analytics cookies: Help us understand how visitors and players use the site, which pages are most popular, and how payment and registration flows perform, so that we can improve usability and service reliability.
Advertising and affiliate cookies: Used, where permitted by law and subject to your consent, to deliver, measure, and optimise marketing messages, including through affiliate partners who refer players to universallslot.com.

Cookie Management

When required by applicable law (including UK Privacy and Electronic Communications Regulations), we will request your consent before placing non-essential cookies. You can manage or disable cookies in the following ways:

By adjusting your browser settings to block or delete cookies from our site and from third parties.
By using any cookie preference tools or internal settings we may provide within your account or on the website interface, where available.

Please note that blocking certain cookies, particularly strictly necessary ones, may affect your ability to use some features of universallslot.com, including login, gameplay, and secure payment functions.

Data Security

We take the protection of personal data processed through universallslot.com very seriously and implement a combination of technical and organisational measures designed to maintain confidentiality, integrity, and availability of information.

Encryption: Data transmitted between your browser and our servers is protected using industry-standard Transport Layer Security (TLS 1.2 or higher). Sensitive data is encrypted at rest where appropriate, particularly authentication information and certain payment-related data handled by our processors.
Access controls and authentication: Access to systems containing personal data is restricted to authorised personnel and service providers on a need-to-know basis, protected by strong passwords, role-based access controls, and, where applicable, multi-factor authentication. Administrative actions are logged and monitored.
Network and application security: We use firewalls, intrusion detection and prevention systems, anti-malware tools, and security-hardened configurations to protect our infrastructure. We regularly update software and apply security patches to reduce vulnerabilities.
Monitoring, testing, and audits: We perform ongoing monitoring and periodic reviews of our security controls. Where appropriate, we conduct vulnerability assessments, penetration testing, and security audits, taking into account international standards such as ISO 27001 and SOC 2 principles where they are relevant to our service providers.
Staff training and policies: Employees and contractors with access to personal data receive training on data protection, information security, and responsible incident reporting. Internal policies and procedures govern how data is handled, accessed, stored, and destroyed.
Incident response: We maintain procedures for identifying, assessing, and responding to personal data breaches or other security incidents. Where a breach is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority in accordance with the UK GDPR and other applicable laws.

While we strive to use commercially reasonable safeguards to protect your personal data, no system can be completely secure. You also play an important role by maintaining the confidentiality of your login credentials, using strong passwords, and promptly contacting us if you suspect unauthorised access to your account.

Complaints & Contacts

If you have any questions, concerns, or complaints about how we process your personal data in connection with universallslot.com (Universal Slots), please contact us first so that we can attempt to resolve the issue directly.

How to Contact Us

Email (privacy and general support): support@universallslot.com
Website: https://universallslot.com
Contact forms: If and when available on the website, you may also use any dedicated support or feedback forms. These are not specified in the current source data but may be provided as part of the user interface.
Postal address: The mailing address of Mirage Corporation N.V. and relevant group entities is not specified in the available data used for this policy. You may request the current postal address via email, and we will provide the details or direct you to the updated policy version.

Internal Complaint Procedure

Submission: Send a detailed description of your concern or complaint (including your account ID, if any) to support@universallslot.com, marked clearly as a "Data Protection Complaint".
Acknowledgement: We will usually acknowledge receipt of your complaint within seven (7) days, confirming that it is under review.
Investigation: Our privacy team will investigate your complaint, which may involve contacting you for further information and reviewing relevant logs, communications, and system records.
Response: We will provide a substantive response within one (1) month (30 days) of receiving your complaint, or explain why more time is needed for complex cases, in which case we may extend the period in line with applicable law.
Follow-up: If you remain dissatisfied, you may escalate the matter to the appropriate supervisory authority as described below.

Escalation to Supervisory Authorities

United Kingdom: If you are located in the UK or your complaint relates to UK data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). Further information is available at https://www.ico.org.uk. You can contact the ICO via its online forms, helpline, or postal address as listed on its website.
European Union / EEA: If your complaint falls under EU GDPR jurisdiction, you may lodge a complaint with the data protection authority in the EU/EEA member state of your habitual residence, place of work, or place of the alleged infringement.
Mexico: Where Mexican privacy law is applicable, individuals may have the right to bring concerns before the relevant Mexican data protection authority (currently the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales - INAI). Further details on INAI's procedures and contact information are available on its official website.

We encourage you to contact us first before approaching a supervisory authority, so that we have the opportunity to address your concerns directly and promptly.

Updates

We may update or modify this Privacy Policy from time to time, for example to reflect changes in our services, new legal or regulatory requirements, or updates to our technical and organisational measures. Any revised version will apply to the use of universallslot.com (including the Universal Slots localisation) from the date it is published or, where required, from a later effective date notified to you.

Notification methods: When we make material changes, we will seek to notify you in advance by one or more of the following means: email to the address associated with your account, prominent banners or notices on the website, and/or messages in your account dashboard.
Advance notice: For significant changes that materially affect your rights or the way we process your personal data (for example, changes to purposes of processing, categories of recipients, or international transfer mechanisms), we will endeavour to provide at least thirty (30) days' advance notice before the changes take effect, unless immediate changes are required by law or for security reasons.
Your options: If you do not agree with the updated Privacy Policy, you may choose to stop using our services and request account closure. Continuing to use universallslot.com after the effective date of the updated policy will normally indicate your acknowledgement of the changes, without prejudice to any rights you may have under applicable law.
Version control: We will indicate the date of the most recent update at the end of this document. Where feasible, we may also maintain a brief changelog summarising key modifications (for example, new categories of data processing, new third-party recipients, or changes in retention periods).

Last updated: November 2025