Slotoro Casino treats the protection and confidentiality of your private details as a top priority. This Data Protection Policy describes, in simple terms, how we obtain, handle, retain, and protect the data of players, with a emphasis on those accessing our platform from Bulgaria. The policy adheres to international data protection norms, including the General Data Protection Regulation (GDPR). Every step we take is aimed to offer you a protected gaming experience while maintaining you in command of your personal data. Slotoro Casino acts as a data controller, which means we decide why and how your data is processed. This policy encompasses all contacts with the Slotoro website, mobile apps, customer support platforms, and any related services. Transparency counts to us, so we encourage every player to read this document before accessing the platform. 1. Scope and Purpose of the Data Protection Policy Slotoro Casino’s data protection framework includes all points where we gather personal information from registered users and visitors https://slotoro.bg/legal-and-affiliates/. This comprises account registration forms, identity verification submissions, payment processing interfaces, live chat transcripts, emails, and automated logs of technical parameters during browsing sessions. We gather personal data chiefly to provide a fully functional, legally compliant, and personalized gaming experience. Without certain mandatory information, we cannot establish a contractual relationship, process payments, or meet anti-money laundering requirements. We also employ aggregated and anonymized data for statistical analysis, platform improvements, and to improve responsible gambling tools. The framework also reaches to data shared with carefully selected third-party providers who execute essential tasks like payment processing, game hosting, and customer relationship management. Each provider is bound by contracts that reflect the protections in this policy, so the same standard of care trails the data throughout its entire life. 6. Information Keeping and Erasure Policies We keep personal data for as long as necessary to accomplish the objectives it was collected for, or to satisfy statutory record-keeping rules set by gaming regulators and tax authorities. Account information remains active for the entire customer relationship, then is stored for five years after account closure. That five-year period corresponds to anti-money laundering directives and the time limit for potential legal claims. Financial transaction records are kept a minimum of seven years for tax reporting. Identity verification documents are securely deleted once the verification outcome is recorded, unless a law or a specific investigation requires us to keep them longer. Technical logs and security monitoring data are refreshed on a rolling basis, normally retained for twelve months before automatic deletion. We use automated data lifecycle tools that mark records nearing their retention limit and then trigger secure erasure. If we honor a deletion request under the right to erasure, we delete all personal data except for what we must keep for compelling reasons, such as handling legal claims or adhering to a binding regulatory order. 3. Lawful Bases for Using Player Information We handle your personal data only when we have a proper legal reason to do so. The six lawful bases we rely…