Data Protection & Privacy

Information Gathering

Amusnet Limited, operating the online platform accessible at amazoniaslot.com and licensed by a recognised gaming authority under a valid gaming licence, is committed to the lawful, fair, and transparent processing of personal data in accordance with applicable data protection legislation.

The following categories of personal data are collected and processed in connection with the provision of services offered through this platform:

• Identity Data: Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents submitted for the purposes of identity verification and compliance with regulatory obligations.
• Contact Data: Electronic mail address, postal address, and telephone number, as provided during the account registration process or in the course of subsequent correspondence.
• Financial Data: Payment instrument details, transaction records, deposit and withdrawal histories, and bank account information collected for the facilitation of financial transactions and the prevention of fraudulent activity.
• Technical Data: Internet Protocol (IP) addresses, browser type and version, device identifiers, operating system information, session durations, and access timestamps collected automatically through cookies and analogous tracking technologies.
• Usage Data: Records of platform interactions, gaming activity, wagering history, preferences, and behavioural patterns observed during the use of the service.
• Compliance Data: Information gathered in fulfilment of anti-money laundering (AML) obligations, responsible gambling assessments, know-your-customer (KYC) procedures, and other regulatory requirements imposed by the licensing authority.
• Communications Data: Records of electronic correspondence, support queries, complaints, and other communications exchanged between the data subject and the operator.

Personal data is collected directly from data subjects at the point of registration, through ongoing use of the platform, or via automated means during interaction with the website. Data may also be obtained from third-party verification service providers where such collection is necessary for the fulfilment of legal and regulatory obligations.

Data Usage

Personal data collected by Amusnet Limited is processed exclusively for specified, explicit, and legitimate purposes. The processing of personal data is carried out on the basis of one or more lawful grounds as recognised under applicable data protection law, including the performance of a contract, compliance with legal obligations, legitimate interests pursued by the operator, or the freely given consent of the data subject where required.

The purposes for which personal data is processed are as follows:

• Account Administration: The establishment, management, maintenance, and termination of user accounts is conducted through the processing of identity and contact data, as necessary for the performance of the contractual relationship between the operator and the data subject.
• Service Provision: Usage and technical data are processed to ensure the proper functioning of the platform, to facilitate access to gaming products and services, and to deliver a consistent and technically stable user experience.
• Financial Transaction Processing: Financial data is processed to execute deposits, withdrawals, and other monetary transactions, and to maintain accurate records thereof in accordance with applicable accounting and regulatory requirements.
• Regulatory Compliance: Personal data is processed as required for the fulfilment of obligations imposed by the relevant gaming authority, including but not limited to age verification, identity verification, anti-money laundering controls, and responsible gambling measures.
• Fraud Prevention and Security: Technical and identity data are processed for the detection, investigation, and prevention of fraudulent activity, unauthorised access, and other unlawful conduct that may affect the operator, its users, or third parties.
• Responsible Gambling: Usage data and compliance data are processed to monitor gaming behaviour, identify indicators of problematic gambling, and fulfil the operator's obligations with respect to player protection as mandated by the licensing authority.
• Customer Support: Communications data is processed to respond to enquiries, resolve disputes, and address complaints submitted by data subjects.
• Legal Obligations: Personal data may be disclosed to competent authorities, regulatory bodies, or law enforcement agencies where such disclosure is required by applicable law or by a lawful order issued by a court or regulatory authority of competent jurisdiction.
• Service Improvement: Aggregated and, where appropriate, anonymised usage data may be analysed for the purpose of enhancing the quality, safety, and functionality of the services offered through the platform.

Personal data shall not be processed for purposes incompatible with those for which it was originally collected, nor shall it be sold, rented, or otherwise transferred to third parties for commercial purposes unrelated to the provision of the services described herein.

Data Protection

Amusnet Limited has implemented a comprehensive framework of technical and organisational measures designed to ensure an appropriate level of security with respect to the personal data processed in connection with the operation of this platform. Such measures are reviewed and updated on a periodic basis to reflect advancements in information security practice and to address emerging risks.

The following technical and organisational safeguards are maintained:

• Encryption: All personal data transmitted between data subjects and the platform is protected by means of industry-standard Transport Layer Security (TLS) encryption protocols. Sensitive data held in storage is subject to encryption at rest where technically practicable and proportionate to the risk involved.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Role-based access controls are applied to all internal systems, and access privileges are subject to regular review and revocation upon change of role or cessation of employment.
• Authentication Mechanisms: Multi-factor authentication and secure password policies are enforced for personnel with access to systems containing personal data, in order to prevent unauthorised access.
• Network Security: Firewalls, intrusion detection systems, and network monitoring tools are deployed to protect the integrity and confidentiality of data held on the operator's systems against external threats and unauthorised intrusion.
• Data Minimisation: Only such personal data as is strictly necessary for the purposes specified in this policy is collected and retained. Personal data is not held for periods exceeding those required for the fulfilment of the relevant processing purpose or the satisfaction of applicable retention obligations.
• Staff Training: All personnel engaged in the processing of personal data are required to undergo regular training in data protection principles and information security practices. Contractual obligations of confidentiality are imposed upon all employees and third-party processors.
• Third-Party Processor Management: Where personal data is processed by third-party service providers on behalf of the operator, such processing is governed by written data processing agreements that impose obligations of security and confidentiality consistent with applicable data protection law.
• Incident Response: Procedures are maintained for the identification, assessment, containment, and notification of personal data breaches. In the event of a breach likely to result in a risk to the rights and freedoms of data subjects, notification shall be made to the relevant supervisory authority and, where required, to affected individuals within the timeframes prescribed by applicable law.
• Data Retention and Deletion: Personal data is retained only for the period necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with established procedures.

Your Rights

Data subjects whose personal data is processed by Amusnet Limited are entitled to exercise a number of rights in relation to such processing, as conferred by applicable data protection legislation. The exercise of these rights is subject to certain conditions and limitations as prescribed by law, including limitations applicable where processing is required for the fulfilment of legal obligations or the pursuit of legitimate regulatory purposes.

The following rights are available to data subjects:

• Right of Access: Data subjects are entitled to request confirmation as to whether personal data concerning them is being processed, and, where such processing is taking place, to obtain a copy of the personal data held together with information regarding the purposes, categories, and recipients of such processing.
• Right to Rectification: Data subjects are entitled to request the correction of inaccurate personal data and the completion of incomplete personal data held by the operator, without undue delay upon the submission of a valid request.
• Right to Erasure: Data subjects may request the deletion of their personal data where the data is no longer necessary for the purposes for which it was collected, where consent upon which processing was based has been withdrawn, or where processing is determined to be unlawful, subject to any overriding legal retention obligations to which the operator is subject.
• Right to Restriction of