1. Information We Collect
We detail all types of personal data collected: full name, email
address, date of birth, IP address, browsing data (pages visited,
time on site), social casino game preferences, platform interaction
history, virtual currency subscription data, and email
communications. We collect only data necessary to provide our
services.
2. How We Collect Your Information
We collect data through registration and contact forms, cookies and
similar technologies, analytics tools, direct interactions with
the social casino, virtual currency subscriptions, email
communication, and age verification. Some data is collected
automatically when you use the platform.
3. Purpose of Data Use
We use data to: provide access to the social casino, personalize
the gaming experience, process virtual currency subscriptions, send
promotional communications (with consent), improve our services,
comply with legal obligations, prevent fraud, and ensure platform
and user security.
4. Legal Basis for Processing
We process data based on: explicit consent (marketing, non-essential
cookies), contract performance (account, subscriptions), legitimate
interests (social casino improvement, security), and legal
obligations (tax retention, responses to authorities). You may
withdraw consent at any time.
5. Data Sharing
We share data with: payment providers for subscriptions, analytics
services (anonymized data), marketing partners (with consent), and
authorities when required by law. We ensure that data is NOT sold
to third parties. All partners are bound by confidentiality
agreements.
6. International Transfers
Data may be transferred to servers in the USA, outside the EU/EEA.
We ensure adequate protection through standard contractual clauses
approved by the European Commission and technical and organizational
security measures equivalent to GDPR requirements.
7. Data Retention
Account data: while active + 5 years after closure. Virtual
currency transaction data: 7 years (tax obligation). Marketing
data: until consent is withdrawn. Anonymized browsing data: up to
26 months. After these periods, data is deleted or anonymized.
8. Your Rights
You have the right to: access your data, rectify incorrect data,
erasure ("right to be forgotten"), restriction of processing, data
portability, objection to processing, and withdrawal of consent.
To exercise these rights, contact privacy@blue-summit-co.com. We
respond within 30 days.
9. Cookies and Similar Technologies
We use essential cookies (operation), performance cookies
(analytics), functional cookies (preferences), and marketing cookies
(advertising, with consent). For detailed information, see our
Cookie Policy.
10. Data Security
We implement SSL/TLS encryption, firewalls, role-based access
controls, regular backups, team training on data protection, and
periodic security audits. We notify authorities and users in case
of a data breach as required by law.
11. Minors
We do not intentionally collect data from anyone under 18. Age
verification is mandatory. If we discover data from minors, we will
immediately delete the account and all associated data. We
encourage parents to use parental controls.
12. Changes to Privacy Policy
This policy may be updated periodically. We will notify you of
significant changes by email or notice on the platform. The date
of the last update will always be shown at the top of this page.
Continued use after changes constitutes acceptance.
13. Contact and DPO
Data Protection Officer (DPO): privacy@blue-summit-co.com. Postal
address: Deutsche Marketing Allianz GmbH, Valentinskamp 70, 20355 Hamburg, Germany. Response time: 30 days. You have the
right to lodge a complaint with your local data protection
authority.