Information you provide
An account contains your email address, nickname, date of birth, eligibility confirmations and a securely hashed password. Support requests contain the email, topic and message you submit. Your saved programme, private note, favourites and preferences remain associated with your account. Do not put sensitive information in a nickname or programme note.
Information created by play
We record fictional credit transactions, game rounds, feature progress, balance versions, free reward claims and relevant timestamps. Sessions contain security tokens, expiry and anti-forgery state. Security limits and eligibility records help prevent abuse and enforce play breaks. We do not collect card or payment details because the product has no payments.
Why we use it
We use account and game data to supply the service you request, preserve balances and features, provide account recovery and answer Support. Security records protect accounts and service integrity. Eligibility and break records enforce the access rules. Optional analytics, where enabled, depend on your choice and are separate from necessary session storage.
Cookies and your choice
The necessary session cookie supports sign-in, anti-forgery checks and safe gameplay. A confirmed break uses a browser token to help enforce your chosen duration. Cookie choices and guest cosmetic preferences may use browser storage. Optional analytics are off by default. Use Cookie settings to accept, reject or withdraw optional consent at any time.
Service providers
Hosting and transactional email providers may process information needed to operate accounts and respond to requests. Google sign-in is an optional feature only when offered; its provider handles its own sign-in process. We do not sell your personal information or turn fictional game results into advertising claims.
Optional public-page analytics
After you accept analytics, Microsoft Clarity can record masked interactions on signed-out public information and game-description pages. Keitaro receives the public page path, IP address, browser, language and referring origin to count visits. Account pages, registration, recovery, Support forms, personal programmes and gameplay are excluded. We send no account identifiers, balances, messages or URL query strings to these services. Pages opened with query strings or fragments are excluded from optional observation.
Passive traffic assessment
With the same analytics choice, Palladium receives the public path, IP address, browser and language for passive automated-traffic assessment. Its result is recorded alongside visit analytics. It does not change the page, redirect you or alter game results. Our local assessment records contain status values and public paths, expire after 48 hours and contain no raw IP address. These providers may process information internationally. You can withdraw optional consent through Cookie settings.
Security and retention
We use password hashing, protected sessions, anti-forgery checks and server-side access controls. No service can guarantee absolute security. Account data remains while needed to provide the service; session, recovery and security records expire according to their purpose. You can request access or deletion through Support and use the account deletion control.
Your choices and rights
You may ask to access or correct your information, request deletion or restriction, object where applicable, and withdraw optional analytics consent. We may need to verify an account request without asking for your password. You may complain to the UK Information Commissioner’s Office at ico.org.uk.
Children and contact
The service is for UK adults aged 18 or over. If you believe a child has used it or someone has shared information without permission, contact Support. Include only the information needed to investigate. Policy updates will carry a new date on this page.
