Privacy Notice

Last updated: October 12, 2026

1. Introduction

Just Slots Operations Limited, a company incorporated under the laws of Malta with company registration number C106852 and registered office at 37, Gladjoli Street, San Gwann, SGN 1372, Malta (“Just Slots Operations”, “we”, “us” or “our”), is committed to protecting the privacy and personal data of individuals who interact with us.

This Privacy Notice explains how we collect, use, store, disclose and otherwise process personal data in connection with:

  • our website and any related online services;
  • business enquiries and communications;
  • our relationships with customers, suppliers, partners and other business contacts;
  • events, marketing and newsletters;
  • recruitment and career applications; and
  • visits to our premises.

Just Slots Operations operates under a licence issued by the Malta Gaming Authority (“MGA”). This Privacy Notice is prepared in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), the Data Protection Act (Chapter 586 of the Laws of Malta), and other applicable data-protection and electronic-communications laws.

2. Scope and player data

Just Slots Operations operates on a B2B basis and does not offer gaming services directly to players.

Accordingly, Just Slots Operations does not intentionally collect or process:

  • player registration or account information;
  • player identity-verification or KYC documentation;
  • player payment or transaction information;
  • player deposits, withdrawals, wagering or gameplay information;
  • player self-exclusion, responsible-gaming or affordability information; or
  • player communications with a B2C gaming operator.

Where an individual accesses gaming services through a gaming operator, platform operator, casino, or other customer of Just Slots Operations, that entity is ordinarily responsible for the processing of the individual’s player data and for providing the relevant privacy information.

If Just Slots Operations receives player-related information incidentally, for example through a technical-support ticket, security investigation, complaint, regulatory query, or other exceptional operational matter, it will process that information only to the extent necessary for the relevant purpose and in accordance with applicable law and the applicable contractual arrangements.

3. Who is the controller?

For the processing activities described in this Privacy Notice, the controller is:

Just Slots Operations Limited

37, Gladjoli Street, San Gwann, SGN 1372, Malta

Company registration number: C106852

Email: legal@just-slots.com

Just Slots Operations has appointed a Data Protection Officer, who can be contacted at:

Data Protection Officer

Email: legal@just-slots.com

4. Personal data we process

The personal data we process will depend on the nature of your relationship and interactions with us. We may process the following categories.

  • Contact and identification data: Name, surname, job title, employer, business address, email address, telephone number and professional profile details
  • Business relationship data: Contractual details, correspondence, meeting notes, commercial communications, account-management records and service-related requests
  • Website and technical data: IP address, browser type, operating system, device information, language settings, access date and time, pages viewed, referring URLs and website logs
  • Marketing data: Communication preferences, subscription status, event attendance, interaction with communications and, where applicable, cookie-based analytics data
  • Recruitment data: CV, employment history, qualifications, contact details, references, interview notes and other information submitted as part of an application
  • Visitor and security data: Visitor logs, access-control records and CCTV footage, where CCTV is used at our premises
  • Compliance and legal data: Information necessary to meet legal, regulatory, audit, corporate-governance, dispute-resolution, fraud-prevention or security obligations

Please do not provide special-category personal data, such as health data, biometric data, political opinions, trade-union membership, religious beliefs or criminal-conviction data, unless it is necessary and we have specifically requested it or there is another lawful basis for the processing.

5. Why we use personal data

We process personal data only where a lawful basis applies. The purposes for which we may process personal data are set out below.

  • Responding to enquiries and communicating with you. Categories of data: Contact, business relationship and correspondence data. Lawful basis: Legitimate interests in communicating with business contacts and responding to enquiries; or steps taken at your request before entering into a contract
  • Providing, administering and supporting B2B services. Categories of data: Contact, business relationship, technical and service-related data. Lawful basis: Performance of a contract; or legitimate interests in managing our commercial relationships and services
  • Managing customer, supplier and partner relationships. Categories of data: Contact, business, billing, correspondence and contract data. Lawful basis: Performance of a contract; compliance with legal obligations; and legitimate interests in operating and developing our business
  • Maintaining website functionality and security. Categories of data: Technical, log and cookie data. Lawful basis: Legitimate interests in securing, administering and improving our website; and, where required, consent for non-essential cookies
  • Analysing and improving our website and services. Categories of data: Technical, usage, marketing and cookie data. Lawful basis: Consent where required for analytics or marketing cookies; otherwise legitimate interests in understanding and improving our services
  • Sending marketing communications. Categories of data: Contact, marketing-preference and engagement data. Lawful basis: Consent where required by law; otherwise legitimate interests in promoting relevant B2B services, subject to your right to object
  • Running events and publishing event material. Categories of data: Contact, attendance, photo, video and audio data. Lawful basis: Consent where required; or legitimate interests in documenting and promoting our business activities, subject to appropriate safeguards
  • Recruitment and talent management. Categories of data: Recruitment data. Lawful basis: Steps taken at your request before entering into a contract; legitimate interests in recruitment; consent where applicable; and legal obligations where relevant
  • Protecting our premises, systems and assets. Categories of data: Visitor, access-control, CCTV, technical and security data. Lawful basis: Legitimate interests in maintaining the security of our people, systems, confidential information and property
  • Meeting legal and regulatory obligations. Categories of data: Compliance, business, security and correspondence data. Lawful basis: Compliance with a legal obligation; establishment, exercise or defence of legal claims; and legitimate interests in regulatory compliance and corporate governance
  • Managing disputes, investigations and legal claims. Categories of data: Relevant business, technical, correspondence, security and compliance data. Lawful basis: Legitimate interests; compliance with legal obligations; and establishment, exercise or defence of legal claims

Where we rely on legitimate interests, we assess that the relevant processing is necessary and proportionate and that your interests and fundamental rights do not override those interests. You may object to processing based on legitimate interests in the circumstances described below.

6. Cookies and similar technologies

We use cookies and similar technologies on our website. Cookies are small text files that may be stored on your device when you visit a website.

We may use the following categories of cookies:

  • Strictly necessary cookies: required for website functionality, security, load balancing, session management and recording your cookie preferences.
  • Functional cookies: enable enhanced features and remember choices you make.
  • Analytics cookies: help us understand how visitors use our website and improve its performance.
  • Marketing cookies: may be used to measure campaigns or display more relevant content or advertising.

Non-essential cookies, including analytics and marketing cookies, will be deployed only where required consent has been obtained through our cookie-consent mechanism. You may withdraw or amend your consent at any time through the Cookie Settings control in the website footer.

You may also manage cookies through your browser settings. Disabling cookies may affect the availability or functionality of certain parts of our website.

7. Marketing communications

Where permitted by applicable law, we may send B2B marketing communications regarding our services, products, events and other relevant business updates.

You may opt out of marketing communications at any time by:

  • using the unsubscribe link included in our marketing emails; or
  • contacting us at legal@just-slots.com

An opt-out from marketing will not affect service, contractual, administrative, legal or regulatory communications that we need to send to you.

8. Recipients of personal data

We may disclose personal data to the following categories of recipients where necessary and lawful:

  • companies within the group that Just Slots Operations belongs to, where applicable;
  • professional advisers, including legal advisers, auditors, accountants, insurers and consultants;
  • technology, hosting, cloud-storage, cybersecurity, CRM, communications, analytics and website-service providers;
  • payment, banking and accounting providers, where applicable in relation to B2B commercial arrangements;
  • recruitment and HR service providers;
  • competent regulators, public authorities, law-enforcement bodies, courts or tribunals, including the MGA where disclosure is required or appropriate;
  • prospective purchasers, investors, funders or their advisers in connection with a corporate transaction, subject to appropriate confidentiality safeguards; and
  • other third parties where required by law or where necessary to establish, exercise or defend legal claims.

Where third parties process personal data on our behalf, we require them to process it only in accordance with our documented instructions and under appropriate contractual data-protection safeguards.

9. International transfers

We may transfer personal data to recipients located outside the European Economic Area (“EEA”) or the United Kingdom, or its Crown Dependencies, where necessary to use service providers, group resources or professional advisers.

Where personal data are transferred to a country that is not subject to an adequacy decision, we will implement appropriate safeguards, which may include the European Commission’s Standard Contractual Clauses and, where necessary, supplementary technical and organisational measures.

You may request further information about relevant transfer safeguards by contacting us at legal@just-slots.com.

10. Retention of personal data

We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, tax, regulatory, contractual, security and record-keeping requirements.

The retention period will depend on the type of data and the context of processing. In general:

  • Business and contractual records: Retained for the duration of the relationship and thereafter for the applicable limitation, tax, accounting and regulatory periods
  • Enquiries and general correspondence: Retained for as long as necessary to respond to and manage the enquiry, and thereafter where needed for record-keeping or legal purposes
  • Marketing data: Retained until you withdraw consent, object, unsubscribe, or the data are no longer needed for marketing purposes
  • Recruitment data: Retained for the duration of the recruitment process and for a limited period thereafter, unless a longer period is justified or you consent to retention for future roles
  • Website logs and security data: Retained for a limited period appropriate to security, troubleshooting, auditing and legal requirements
  • CCTV footage: Retained for a limited period, normally no longer than necessary for security purposes, unless required for an investigation, incident or legal claim

At the end of the relevant retention period, we will securely delete, anonymise or otherwise dispose of the personal data, unless a longer retention period is required or permitted by law.

11. Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include access controls, authentication measures, encryption where appropriate, network and system security, logging, staff confidentiality obligations, internal policies, supplier due diligence, incident-management procedures and periodic review of security controls.

No method of transmission over the internet or method of electronic storage is completely secure. While we take reasonable and appropriate measures to protect personal data, we cannot guarantee absolute security.

12. Your rights

Subject to the conditions and limitations set out in applicable law, you may have the right to:

  • request access to the personal data we hold about you;
  • request correction of inaccurate or incomplete personal data;
  • request erasure of your personal data;
  • request restriction of processing in certain circumstances;
  • object to processing based on our legitimate interests, including processing for direct-marketing purposes;
  • receive personal data that you have provided to us in a structured, commonly used and machine-readable format, and request its transfer to another controller where technically feasible;
  • withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal; and
  • lodge a complaint with the competent supervisory authority.

To exercise any of your rights, please contact us at legal@just-slots.com. We may request information necessary to verify your identity before responding to a request.

We will generally respond within one month of receiving a request. Where permitted by law, this period may be extended by up to two further months where a request is complex or numerous. We will notify you if an extension applies.

13. Right to complain

If you consider that our processing of your personal data infringes applicable data-protection law, you may lodge a complaint with the Maltese supervisory authority:

Information and Data Protection Commissioner

Floor 2, Airways House, Triq Il - Kbira, Tas-Sliema SLM 1549

Website: https://idpc.org.mt/

You may also have the right to lodge a complaint with the supervisory authority in the EEA Member State of your habitual residence, place of work or place of the alleged infringement.

14. Automated decision-making

Just Slots Operations does not use personal data for decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you, within the meaning of Article 22 GDPR.

15. Third-party websites

Our website may contain links to third-party websites, platforms or services. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy notice of each third-party website or service that you visit or use.

16. Changes to this notice

We may update this Privacy Notice from time to time to reflect changes in our processing practices, legal obligations, services or technical arrangements.

The updated version will be made available on our website, together with its effective date. Where required by law, we will provide additional notice of material changes.

17. Contact us

If you have questions about this Privacy Notice or our processing of personal data, please contact:

Just Slots Operations Limited

37, Gladjoli Street, San Gwann, SGN 1372, Malta

Company registration number: C106852

Email: legal@just-slots.com

Data Protection Officer: legal@just-slots.com