Privacy Policy

1. Data controller

The controller of your personal data is Nightdrive Interactive Ltd, registered in England & Wales, United Kingdom under company number 14827365, registered office Neon House, 42 Ashfield Way, London, EC1V 2NX, United Kingdom. For any privacy question or request, write to [email protected].

2. The short version

We do not process payments, so we never see card details or bank information. We do not sell your data, we do not build advertising profiles, and we do not share your details with data brokers. An account with us consists of a username, an email address, a hashed password and a virtual coin balance.

3. What we collect

Information you give us

• Account details — username, email address and a password. The password is never stored in readable form; we keep only a salted scrypt hash of it, which cannot be reversed.
• Age confirmation — the fact that you confirmed being 18 or over, stored in your browser and recorded when you register.
• Messages — anything you choose to send us by email, including the address you send it from.

Information created as you play

• Coin activity — your current virtual coin balance, your welcome award and the time of each daily bonus claim, so the 24-hour cooldown works.
• Session data — a signed cookie identifying your logged-in session. See our Cookie Policy.

Information collected automatically

• Server logs — our web server records requested URLs, timestamps, HTTP status, referrer, browser user agent and IP address. These logs help us keep the site running and secure.

We do not knowingly collect data from anyone under 18. If we discover that we have, we delete it.

4. Why we use it, and our legal basis

• To run your account and coin balance — necessary to perform the agreement you enter into when you register (UK GDPR Art. 6(1)(b)).
• To keep the site secure and prevent abuse — our legitimate interest in protecting the service and other players (Art. 6(1)(f)).
• To restrict access to adults — our legitimate interest in operating an age-appropriate service responsibly (Art. 6(1)(f)).
• To answer your messages — our legitimate interest in responding to enquiries (Art. 6(1)(f)).
• To meet legal obligations — where a law requires us to keep or disclose information (Art. 6(1)(c)).

We do not use your data for automated decision-making that produces legal effects, and we do not run behavioural advertising.

5. Who we share it with

We do not sell or rent personal data. We share it only where necessary:

• Hosting and infrastructure providers who run the servers on which topfunslots.com operates, acting on our instructions.
• Game studios whose free demos are embedded on the site. When a game frame loads, your browser connects directly to the studio's servers, so those servers see your IP address and browser details. That connection is governed by the studio's own privacy notice, not ours; we pass them no account information about you.
• Authorities or advisers where we are legally required to disclose information, or need to establish or defend legal claims.

6. International transfers

Our infrastructure providers may process data outside the United Kingdom. Where that happens we rely on appropriate safeguards, such as UK adequacy regulations or the International Data Transfer Agreement / Addendum with Standard Contractual Clauses.

7. How long we keep it

• Account data — for as long as your account exists. Delete your account and we remove it, along with the coin balance and bonus history.
• Dormant accounts — we may close and delete accounts that have not been used for 24 months.
• Server logs — typically kept for a short rolling period for security and diagnostics, then rotated away.
• Email correspondence — kept only as long as needed to resolve your enquiry and keep a record of it.

8. Your rights

Under UK data protection law you may ask us to:

• confirm what personal data we hold about you and give you a copy;
• correct anything inaccurate or incomplete;
• delete your data, where we have no overriding reason to keep it;
• restrict how we use it, or object to processing based on legitimate interests;
• provide your data in a portable format, where processing is based on contract or consent;
• withdraw consent where consent is the basis we relied on.

Email [email protected] and we will respond within one month. Exercising these rights costs nothing. If you are unhappy with our response you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the supervisory authority where you live.

9. How we protect your data

• the site is served over HTTPS, so traffic is encrypted in transit;
• passwords are stored as salted scrypt hashes, never as plain text;
• session cookies are HTTP-only, restricted to HTTPS and signed with a server-side key, so they cannot be forged or read by scripts;
• access to the database is limited to the application account on the server.

No system is perfectly secure. Please use a password unique to this site and tell us if you suspect a problem.

10. Changes to this policy

We will post any updated version on this page and refresh the “Last updated” date. Significant changes affecting registered players will also be announced on the site.

11. Contact us

Nightdrive Interactive Ltd
Neon House, 42 Ashfield Way, London, EC1V 2NX, United Kingdom
[email protected]