Privacy Policy
BOSSROLLER PRIVACY POLICY
Privacy of your data is important part of our company. Thereby we're trying to make it easy for you to understand what we do with your personal information. This privacy policy is a summary of what data we gather, why we collect and process it and what control choices you have over your sharing. Also, we would like to inform you what legal rights you have regarding to your personal information and who to contact about the protection of those rights.
In the sense of Article 4 of the General Data Protection Regulation ("GDPR"), we are using the term "personal data."
In case you want to know how to opt-out of Web analytics check the “Objection right” section below:
Our Company
Bossroller Casino is fun based social casino. You can find us in below-mentioned address:
The Tannery, Cork street, Dublin, Ireland
Whom our privacy policy applies to?
This privacy policy applies to individuals who are visitors of Bossroller Casino Games, whichever platform you use our services from (mobile or desktop).
What personal data do we gather?
We gather personal information from you when you register an account on our platform. We collect the following data characteristics:
- Data for access, for example, email address, password;
- Data of customization, for example, name on display, avatar;
- Your preferences, for example, your subscription for our newsletter;
- Personal identification information, for example, date of birth, gender, address;
- Game progress data, for example, your quest status, level, your number of in-game currency;
- Online behavior data, for example, clicks, logins, gameplay;
- Individual payments information, for example, for buying in-game currency using our shop;
- Location data, for example, language, origin country;
- Affiliate information, for example, blogs, ads you clicked on to find us.
Why and on what legal basis we do process these data is explained in the section of What do we collect your data for?
Susceptible data
We don’t deliberately gather any sensitive data from you, like political opinions, your racial or ethnic origin, your health situation.
We cannot control what information you put into messages that you share through our website. We cannot differentiate a particularly sensitive message from any other type of message you may choose to write, while we struggle to protect any privacy implied by such a transfer. We would like to warn you such sensitive messages are not provided any additional protection.
Data from kids
We don't gather any information from kids. To play our games you must be a legal adult.
What do we collect your data for?
We only operate a user’s personal information in obedience to the pertinent and apposite data protection regulations. In other words, it means that a user’s information shall only be operated depending on his/her legal permission for us to do so. Especially when data operating is required for providing our online contractual services, or demanded by law, we are in possession of the agreement of the user, and when it is gathered for the safety of our rightfully lawful interests (h.e. analysis interest, making the best effectiveness and economic process and safety of our online product, notably with consideration to range measurement, the creation of accounts for marketing and advertisement purposes, as well as the collection of access dataset and the use of the services of third-party providers).
We consider it necessary to indicate that Art. 6 (1) (a) and Art. 7 of the GDPR serve as the lawful basis for consent, Art. 6 (1) (b) of the GDPR serves as the legal basis for processing the performance of contractual measures and the performance of services, Art. 6 (1) (c) of the GDPR serves as the legal basis for processing in order to complete our legal obligations, and Art. 6 (1) (f) of the GDPR serves as the legal basis for processing in order to protect legitimate interests.
Making enable gameplay
Without certain data our game platform cannot work. We need to be able to reliably discriminate you from other users of our webpage, by asking you to create an account, in order for you to have any significant progress in your game zone. While logging in, we compare your login credentials against data we have on file and provide your game progress and customization data.
Some elements of your progress (i.e. your display name, avatar) are made public within our game platform (e.g. to broadcast certain wins, or for in-game leaderboards). You can change your avatar and display name whenever you want.
Besides, your language and country are used to maintain you with a localization of our webpage - so we will try to serve you in your language and our in-game shop will be in your local currency.
Payments and invoices
While buying in-game currency in our in-game shop, your interplay will commonly be with third-party payment processors. In every case, if a payment has been successful, we will receive this information as a digital invoice that we keep in order to provide legal requirements, retain it in the case of legal disputes, and optimize our webpage. (lawful interest; Article 6.1.f GDPR)
Such invoices contain information about the item you purchased what processor you used to pay and how much you paid for the item. We do not keep information that could be used to make a payment on your behalf unless you have given us a certain permission to make your payment process much more simple.
Marketing facilities
(lawful interest; Article 6.1.f GDPR)
For keeping our players up to date with current events, we give our players the option of subscribing to our newsletter.
You can conveniently unsubscribe at any time, either by clicking on the unsubscribe button in our newsletters or by changing your email preferences.
Fraud prevention and safety
(lawful interest; Article 6.1.f GDPR)
For improving the protection of our website and to prevent fraud, we keep data such as your device information and IP address when you sign up in our webpage and interact with it.
Your IP address and device data information are stored and logged to allow data security judicial investigation and fraud. Your IP address information is also processed automatically by our network devices - this infrastructure is essential to support our website, but also to forbid access to IP addresses known to be used by malevolent actors.
Because of the complexity of this issue, we cannot suggest you a means to avoidance of this processing, as this would undermine its purpose (and in certain cases, an opt-out is not technically possible – for example, we cannot exempt your IP address from our network devices being processed).
If you object to this operation, then we ask you not to use our website, please.
Campaign and website optimization
(Lawful interest; Article 6.1.f GDPR)
In order to optimize our webpage and marketing campaigns, we follow information about your preferences and behavior preferences. These data are pseudonymized and kept apart from your account details. While stored on a personal basis, these data are only available to employees who need to work with these data, and they are reported on only in aggregate.
We share some of these datasets with third party trackers over the course of campaign optimization by embedding a tracking pixel on our website.
For more information on these trackers and how you can opt-out of them please refer to the Web and App Analytics section.
Is it required to share your personal data with Bossroller Casino?
There are certain data that we require from you:
Data required to fulfill our contractual obligations and the related services
Data you obviously make available: Data for personal identification (where it is applicable). Data for access management, your preferences data (opt-in or opt-out).
Data you provide by browsing our website: Data about your game progress, Network data.
Data that we are legally required to store
Data you submit by making a purchase: Personal payments details in our games.
Data required for safety
Data you provide by visiting our website: Network data, Device data
Without such personal data, we cannot supply you with our services.
Automatized decisions
We do not use your personal information for any individual automatized decision-making process that would have legal or similarly significant effects on you.
Any impacts on our game platform are limited to automatized decisions based on your personal information. For instance, we may use your purchase information (amount and periodicity) to give you automatized and customized discounts in-game.
Data storing duration
For data that we store for juridical reasons, we retain the data as long as we are legally required (up to 10 years).
We retain the data that we keep in consideration of legal disputes as long as legally allowable. This can be up to 30 years.
For logs storing network data, we delete the data at regular intervals-the exact time varies depending on configuration rules (which can prune logs according to scale, rather than a set time), whether the data was part of a snapshot that landed in a backup, and whether the logs are part of a set of logs that are regularly forwarded to a central log archive but will not exceed 2 years.
Data storing and sharing
Your personal data within Bossroller Casino
Your personal information is operated only by the people necessary for us to follow our legitimate interests, or to obey to our legal or contractual obligations.
Your personal information outside of Bossroller Casino
We share your information only where it is rightfully permissible to do so, either when it's required to fulfil agreements you may have with us (Article 6.1.b GDPR) or on basis of lawful interest (Article 6.1.f GDPR).
We only share your personal information if only you have given us permission to do so in aggregate or anonymized form (preventing the data from being connected to other data you may have received elsewhere), or with providers contractually obliged to carefully process your data.
In the following categories, we interchange data with providers:
- Content distribution and hosting providers. While these do not have direct access to our networks, they do provide network infrastructure that will inevitably use the IP address to deliver our assets.
- Payment processors. We will get invoice details from providers when you make a payment through a payment processor. Any payment details that are needed to actually make a payment on your behalf will only be done by payment providers, not us.
- Debt information. When you cancel a payment that you have made, we may share with debt collectors the information available to us so that they can contact you on our behalf.
- Providers of email marketing services. We share your display name, email address, location information, and whether you are already subscribed to our newsletter with our email marketing service providers or not, so that they can send you on-topic emails.
- Single providers of sign-on services. These are only significant if you play our games through their webpages or directly choose one-sign options, in which case our connection with them enables you to sign up to our game platform. If you change your mind about using these, typically the providers offer a way to decouple your single sign from our website on account (cancelling our access to your metadata); for more details, please refer to the provider's documentation.
- Business intelligence. We use services to help us follow through own our tracking data.
- Game developers. They create and maintain our casino games for us. Since these applications are usually autonomous and can be easily inserted in the "plug-and-play" style of our website, we just share very little details about you with these providers-your IP address, display name, device information and the amount of in-game currency that you own.
- Crash report. Our mobile games have crash reporting features. The crash reports comprise only nameless information. Nevertheless, you can decline of this in the settings of the application.
- Performance Marketing, CoBrands and Affiliates. To allow partners, brands and campaigns to evaluate their own efficiency, we add different trackers on our website. Please refer to the Web and App Analytics section of this Privacy Policy for more information.
- Address verification. Before we send prizes to a physical address, we first verify that the address is right by allowing the address verification service to be processed.
- We get data on the approximate geographical location of IP addresses from geolocation services. (We do not share any data with these providers, we are only users of this information.)
- Support ticket system. We use an external supplier to handle our support ticketing service for us. Each support ticket that you contact us through the official channels will be stored with this provider.
- Video streaming. In certain cases, we use video streaming services to show you ads. Such services record your impression of these videos.
The providers that we use are either in the European Union, in a country that is formally considered safe by the data privacy standards of the European Union or are contractually bound to treat your data with the uttermost care. We anonymize or pseudonymize your data whenever the process allows.
We do not sell the data to third parties under any circumstances.
Information about your rights
We are committed to compliance with the General Data Protection Regulation (GDPR). This gives you a number of inherent rights to your personal data.
You've got the right to ...
- request for the correction of your personal data (Article 16 GDPR);
- request limitation of the processing of your personal data (Article 18 GDPR);
- request access to your personal data (Article 15 GDPR) in a portative format (Article 20 GDPR);
- demand for the deletion of your personal data (Article 17 GDPR);
- submit a complaint with a supervisory authority (Article 77 GDPR);
- withdraw consent of your processing of data, when we do this in accordance with a lawful interest (Article 7.3 and Article 21 GDPR).
You can delete easily your data in your account settings. For all other requests, please contact us via email or either through the support widget on our website ([email protected]) If you contact us using a means other than the support widget, please understand that we may need to ask you to confirm your identity - in the end, you would not want a incidental stranger to get access to your information, and neither do we.
Please note that, it may take us up to a month to process your request. If there is any delay, we will, of course, let you know.
Additional legal information can be found in Articles 7.3, 15 – 21 and 77 of the GDPR.
Personal data accessing, correcting and erasing right
(Articles 15, 16, 17 and 20 GDPR)
You may request at any time for information as to whether or not, the conditions for such processing, and to receive a copy of your personal information. For more specification, you can request information about:
- purposes for which the data are processed;
- the categories of personal data that are processed;
- the groups of receivers with whom the data have shared;
- the meant duration of storage;
- your rights related to this data (correction, restriction, erasure, withdrawal of consent, and submission a complaint with the supervisory authority);
- source of data in cases where we have not obtained it from your direct interactions with us;
- And the essence of any automatized decision-making, including profiling, based on this data and your right to request meaningful information on the algorithms involved.
If you submit this request electronically, the information shall be provided in usually used electronic form. When you send this request a few times, might ask you for a payment to cover the administrative costs.
You also have the right to advise us to rectify any incorrect personal data.
Finally, you are entitled to ask us to delete your personal data if there are no legal grounds for us to keep it (such as legal requirements, freedom of expression, public interest or, if it is necessary as evidence in legal disputes) and one of the following reasons is:
- your personal data is no longer necessary in view of the purposes for which they have been processed or obtained;
- you want to revoke your consent on which the processing was based and there is no other justifying basis for such processing;
- your personal information has been the matter of illegal processing;
- your personal data should be deleted followed to a legal requirement.
When we erase data that we've shared with third parties, we will also contact to third parties for confirming that your data are deleted there as well.
Once we delete data that we have made public in the process of providing our services to you, we will contact, to the extent possible, any third-party providers that may have stored this information to forward your request to them.
Process restriction right regarding to personal data
(Article 18 GDPR)
You can assert your right to restrict the processing of your personal information when:
- you disprove the accuracy of your personal data during the period needed to verify the accuracy of such data;
- the processing of your personal data is unlawful, but you resist the erasure of your personal data and instead claim a processing limitation;
- when we no longer need your personal data, but for the establishment, practice or protection of legal claims you still need those personal data.
Personal data portability right
(Article 20 GDPR)
You have the right to receive personal information that you submitted to us in a structured, widely used and machine-readable format, and to transfer such data from Bossroller to another controller without obstacle.
Whenever this is technically possible, you may ask that your personal data be transferred directly to another data comptroller by Bossroller.
Right for consent revoking
(Article 7.3 and 21 GDPR)
We will only process your personal information with your consent, if the otherwise data processing is required (see section Is it required to share your personal data with Bossroller Casino?).
You can withdraw your consent at any time if you have a registered account with us by changing the settings associated with your account (or you can delete your account outright, if you prefer). If you do not have an account with us, please refer to the Web and App Analytics section for opting-out means for other data collection.
Please note that a revocation of your consent does not change the legality of the procedures performed before such revocation.
The right to lodge a complaint with your supervisory authority
(Article 77 GDPR)
When, despite our efforts to defend the privacy of your personal information, you feel that your rights have not been respected, you have the right to lodge a complaint with the national data protection authority in your country.
Dissension against the processing of your data for direct marketing
You have the option to subscribe to our newsletters when you register an account with us. You can opt out of our newsletters at any time by using the unsubscribe links provided in your account settings or in your email footers.
Web and App Analytics
In order to improve our website and applications, correct errors, optimize the website and our campaigns used to promote it, we keep pseudonymized information about the behavior of our visitors on our website and use a number of tracking services to assist us (on basis of Article 6.1.f GDPR).
These services either use device IDs (mobile) or device cookies (desktop) to allow them to match the behavioural data they gather (for instance, how large a percentage of users who visited our site had an account with us or to tell us how long the average time user spent on our site).
Data exchanged may be information about when you registered an account with us, where you came from (which banner you clicked on or on which game site you play our games), your device settings (e.g. brand, operating system), your user ID in our games, page impressions (site identifier and time) or payments you make to us..
Trackers use these data either to create approximate behavioural profiles of you (allowing them to provide better marketing targeting to users of their service) or to allow us paying users rather than impressions ("performance marketing") or to pay our campaigns by registration events.
Objection right
If you object to the use of your data pseudonymized processing, your opt-out options are:
For web, controlling of tracking to end-points by us: http://bossroller.com/
To provide the opt-out process to work, your browser will need to accept cookies.
For mobile, controlling of tracking to end-points by us, please refer to the application settings itself. We use Firebase Crashlytics (a Google product) to report errors, and you can also use the settings to opt-out feature for reporting errors.
Since you may also interact with other trackers we use on other people's websites, it is likely that opting out of the trackers on a single website will not do what you expect. To improve enabling you to opt-out of the tracking services efficiently, this section includes an overview of all trackers that we use and where you can opt-out of them.
The opt-out options of many tracking services you can also find on http://youronlinechoices.eu, which provides a central and unified opportunity for you to opt-out of different tracking services. That website can also help if you want to check the online options for other providers that we don't use.
Unless otherwise noted (be it here or on the opt-out pages of our tracking partners), cookies will need to be accepted by your browser for the opt-out process to work.
Adality
Adality is based in Germany, and it offers an opt-out on https://adality.de/privacy.html.
AdCell
AdCell is based in Germany, and it offers an opt-out on https://www.adcell.de/datenschutz (German).
AppNexus
AppNexus is based in the US, it is committed to the Privacy Shield Framework, and offers an opt-out on https://www.appnexus.com/en/company/platform-privacy-policy#choices.
AppsFlyer (for Mobile)
AppsFlyer is based in the US, it is committed to the Privacy Shield Framework, and offers an opt-out on https://www.appsflyer.com/optout.
Bing
Bing is based in the US, who is run by Microsoft, it is committed to the Privacy Shield Framework, and offers an opt-out on https://account.microsoft.com/privacy/ad-settings/signedout.
Crimtan
Crimtan is based in the UK, and it offers an opt-out on https://crimtan.com/cookie-opt-out/.
Dynamic Yield
Dynamic Yield is based in the US, it is committed to the Privacy Shield Framework, and offers an opt-out on https://www.dynamicyield.com/privacy-policy/ (in the section 'Accessing and Modifying Information and Communication Preferences').
Facebook Analytics
Facebook is based in the US, it is committed to the Privacy Shield Framework, and offers opt-out settings on https://www.facebook.com/help/568137493302217.
Flashtalking
Flashtalking is based in the US, it is committed to the standards imposed by the GDPR and offers an opt-out on http://www.flashtalking.com/privacypolicy/ (in the section 'Opting out of Interest-Based Advertising').
Google is based in the US and it is committed to the Privacy Shield Framework.
Google Ads (a/k/a Google Remarketing) and AdMob
Google offers Google Ads and AdMob opt-out instructions on https://adssettings.google.com/authenticated.
Google Analytics
Google offers Google Analytics opt-out instructions on https://tools.google.com/dlpage/gaoptout.
When it's sent to Google Analytics, your IP address is masked. For more information, see https://www.google.com/analytics/terms/.
HasOffers
HasOffers is based in the US, which is run by TUNE, it is committed to the Privacy Shield Framework, and offers opt-out instructions on https://optoutmobile.com/.
InfoOnline
InfoOnline is based in Germany, and it offers an opt-out on https://optout.ioam.de/optout.php (German).
ÖWA
ÖWA is based in Austria, and it offers an opt-out on https://optout-at.iocnt.net/ (German).
Outbrain
Outbrain is based both in the US and in the UK, has GDPR agreement articles between their US and UK branches and it offers an opt-out on https://www.outbrain.com/legal/privacy#advertising_behavioral_targeting.
Plista
Plista is based in Germany and, it offers an opt-out instruction on https://www.plista.com/about/opt-out/ (in the section 'Set opt-out').
Seznam.cz
Seznam.cz is based in the Czech Republic and, it offers an opt-out instruction on http://www.imedia.cz/ (Czech).
Simplaex
Simplaex is based in Germany and, it offers an immediate opt-out link on https://tracker.simplaex.net/v1/opt-out.
Taboola
Taboola is based in the US, it is committed to the principles of the European Interactive Digital Advertising Alliance, and it offers an opt-out instruction on https://www.taboola.com/privacy-policy#optout.
The Trade Desk
The Trade Desk is based in the US, it is committed to the Privacy Shield Framework, and it offers an opt-out instruction on http://www.adsrvr.org/opt-out.html.
TradeLab
TradeLab is based in France, and it offers an opt-out instruction on http://tradelab.com/en/privacy/ (in the section 'Should You No Longer Wish To See These Personalized Ads').
United Internet
United Internet is based in Germany, and it offers an opt-out instruction on https://www.united-internet-media.de/de/services/optin-optout/ (in the section 'Cookie-Verwaltung'; German).
Voluum
Voluum is based in Poland, which is run by Codewise, and it offers an opt-out instruction on https://voluum.com/end-user-privacy-policy/ (in the section 'Opt-out').
Security
We use the widespread SSL (Secure Socket Layer) encryption method to deliver our site safely when you visit it, along with the highest level of encryption supported by your browser.
You can tell when any single page on our website is transferred in encoded form by the closed presentation of the lock (or key) symbol in the status bar of your browser.
We also take corresponding organizational and technical safety measures to protect your data against destruction, total or partial loss, intentional or accidental manipulation or against the unauthorized access by third parties. Our security measures are continuously improved upon in accordance with technological developments.
Additional information
If you have any concerns or questions about data privacy, please contact us at [email protected]