1. Data Controller

NordicsPlay, located at Mannerheimintie 12, 00100 Helsinki, Finland, is the data controller for personal data processing described in this policy.

2. Legal Bases for Processing

We process your personal data based on:

• Consent: For marketing communications and analytics (GDPR Article 6(1)(a))
• Contract performance: To provide our social casino services (GDPR Article 6(1)(b))
• Legitimate interests: For fraud prevention and service improvement (GDPR Article 6(1)(f))

3. Data Categories We Collect

• Account information: Username, email address, age verification
• Usage data: Game activity, session duration, preferences
• Technical data: IP address, browser type, device information
• Communication data: Support requests, feedback

4. How We Use Your Data

• Provide and maintain social casino services
• Process virtual currency transactions
• Improve user experience and game features
• Provide customer support
• Send service-related communications
• Prevent fraud and ensure platform security

5. Data Retention

We retain personal data for the following periods:

• Account data: Until account deletion plus 1 year for fraud prevention
• Usage analytics: 26 months maximum
• Support communications: 3 years
• Marketing data: Until consent is withdrawn

6. Your GDPR Rights

You have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Data portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: For processing based on consent

To exercise these rights, contact us at support@nordicsplay.com

7. Data Sharing

We may share data with:

• Service providers: Cloud hosting, analytics, customer support
• Legal compliance: When required by Finnish or EU law
• Business transfers: In case of merger or acquisition

We do not sell personal data to third parties.

8. International Transfers

If we transfer data outside the EU/EEA, we ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

9. Minors

We do not knowingly collect data from minors under 18. If you believe we have collected data from a minor, please contact us immediately for removal.

10. Data Protection Officer

For data protection inquiries, contact our DPO at dpo@nordicsplay.com or write to us at Mannerheimintie 12, 00100 Helsinki, Finland.

11. Supervisory Authority

You have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu) if you believe your data protection rights have been violated.