Privacy Policy

Welcome to drop-boss.uk, the official website for the "Drop the Boss" slot game. This Privacy Policy outlines how Mirror Imago Gaming Limited ("we", "us", or "our"), the developer and operator of drop-boss.uk, collects, uses, stores, and protects your personal data.

We understand that you are entrusting us with not only your personal information but also your financial details. We are committed to maintaining your trust by being transparent about our data practices and ensuring the highest standards of data protection and compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant gambling regulations.

This policy is designed to be clear and understandable, demonstrating our commitment to your privacy and our adherence to the principles of Experience, Expertise, Authoritativeness, and Trustworthiness (E-E-A-T) expected for high-risk online services like ours.

1. Who We Are

We are the Data Controller responsible for processing your personal data in connection with your use of the drop-boss.uk website and the "Drop the Boss" game.

2. What Personal Data We Collect

We collect various types of personal data to provide our services, ensure compliance, and enhance your experience. This data may include:

• Account Registration Data: When you create an account, we collect your name, email address, date of birth, postal address, telephone number, username, and password. This is essential for setting up and managing your account.
• Identity Verification Data (KYC): To comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations, we may request copies of government-issued identification (e.g., passport, driving licence) and proof of address (e.g., utility bill).
• Financial Data: When you make deposits or withdrawals, we collect payment method details (e.g., card number, expiry date, bank account details – though sensitive card data is handled by PCI DSS compliant payment processors, we may store masked card numbers), transaction history, and deposit/withdrawal records.
• Gameplay Data: We collect information about your interaction with the "Drop the Boss" game, including bets placed, winnings, losses, game history, game preferences, feature usage (e.g., collection of "Mega Caps", entries into the "K-Hole", landing in "Bonus Zones" like "Chump Tower" or "White House Award" areas), and activation of game modes like "ANTE BET" or "CHAOS MODE".
• Technical Data: We automatically collect data about your device and connection, including your IP address, device type, operating system, browser type, network provider, unique device identifiers, and timestamps of your access.
• Usage Data: We collect information about how you interact with our website and game, such as pages visited, features used, and time spent on certain sections. This includes data collected via cookies and analytics tools.
• Communication Data: Records of your interactions with our customer support team via live chat, email, or telephone.
• Responsible Gambling Data: Information related to any responsible gambling measures you implement (e.g., self-exclusion requests, deposit limits, session limits) and data derived from monitoring your gambling patterns to identify potential problematic behaviour.

3. How We Use Your Data and Our Legal Basis

We use your personal data for specific purposes, always ensuring we have a valid legal basis under UK GDPR:

4. How We Share Your Data

We may share your personal data with the following categories of recipients:

• Game Providers: Your data may be shared with the game developer, Mirror Imago Gaming Limited, and the game engine provider, Fortune Engine, to ensure the smooth operation and integrity of "Drop the Boss".
• Payment Processors: To facilitate deposits and withdrawals, we share necessary financial data with trusted payment service providers, banks, and e-wallet providers, all of whom are PCI DSS compliant.
• Identity Verification Services: Third-party providers assist us in conducting KYC and AML checks to verify your identity and age.
• Regulatory and Law Enforcement Bodies: We are legally obliged to share data with the UK Gambling Commission, other licensing authorities, tax authorities, and law enforcement agencies when required by law or to protect our legal rights.
• IT Service Providers: We use third-party providers for website hosting, security, IT infrastructure, and software maintenance.
• Analytics Providers: As detailed below, we share pseudonymised or anonymised data with web analytics services.
• Affiliate Partners: If you have arrived at our site via an affiliate partner, we may share pseudonymised data to track the referral and administer our affiliate programs.
• Responsible Gambling Organisations: In certain circumstances, and always with appropriate legal basis or your explicit consent, we may share data with organisations dedicated to preventing and treating gambling harm.
• Professional Advisors: Such as lawyers, accountants, and auditors, when necessary for legal, financial, or compliance purposes.

We ensure that all third parties we share data with are contractually bound to protect your data in accordance with UK GDPR and our privacy standards.

5. International Data Transfers

Mirror Imago Gaming Limited is based in the United Kingdom, and we primarily process your data within the UK and the European Economic Area (EEA), where data protection standards are deemed adequate.

For any other international transfers outside the UK/EEA, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK government or other legally recognised mechanisms.

6. Data Security

We implement robust technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption: We use SSL/TLS encryption for all data transmitted between your device and our servers. Sensitive data may also be encrypted at rest.
• Access Controls: Strict access controls and authentication mechanisms are in place to limit access to your personal data to authorised personnel only.
• Regular Audits: We conduct regular security audits and vulnerability assessments to identify and address potential weaknesses.
• Employee Training: Our staff receive regular training on data protection and security best practices.
• PCI DSS Compliance: For payment processing, we adhere to the Payment Card Industry Data Security Standard (PCI DSS) to ensure the secure handling of your financial information.

While we strive to protect your personal data, no system can guarantee 100% security. We encourage you to use strong, unique passwords and keep them confidential.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

• Account Data: We generally retain your account data for the duration of your active account and for a period of up to five (5) years thereafter, as required by UK gambling and AML regulations.
• Transaction Data: Financial transaction records are typically retained for seven (7) years to comply with tax and financial reporting obligations.
• Responsible Gambling Data: Information related to self-exclusion or problem gambling may be retained for longer periods to ensure continued player protection.
• Marketing Consent: We retain your marketing consent until you withdraw it.

Upon expiry of the retention period, your personal data will be securely deleted or anonymised.

8. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section. We may need to verify your identity before fulfilling your request.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (e.g., pixels, web beacons) on drop-boss.uk to enhance your user experience, analyse website performance, and for marketing purposes.

What are Cookies?

Cookies are small text files placed on your device by websites that you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

How We Use Them:

• Strictly Necessary Cookies: Essential for the website to function, enabling core functionalities like security, network management, and accessibility. These cannot be switched off.
• Performance/Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously. This includes Yandex.Metrica, which helps us gather insights into user behaviour on drop-boss.uk.
• Functionality Cookies: Enable the website to provide enhanced functionality and personalisation (e.g., remembering your preferences).
• Targeting/Advertising Cookies: Used to deliver advertisements more relevant to you and your interests, and to track the effectiveness of advertising campaigns. This includes cookies used for our affiliate programs to track successful referrals.

Affiliate Program Transparency:

We may participate in casino affiliate programs. When you click on an affiliate link on our site that leads to an external casino, a cookie may be placed on your device to track your referral. This allows the affiliate program to attribute your activity to our site. This process involves sharing pseudonymised data (e.g., a unique ID) with the affiliate partner to confirm a successful referral. This is done with your consent for non-essential cookies.

Managing Cookies:

You can manage your cookie preferences at any time through our cookie consent tool, which appears when you first visit our site. You can also adjust your browser settings to refuse some or all cookies. However, disabling strictly necessary cookies may impact the functionality of the website.

10. Responsible Gambling

Mirror Imago Gaming Limited is deeply committed to promoting responsible gambling and protecting our players from potential harm. While "Drop the Boss" features unique thematic elements, we take our responsibilities seriously.

Player Protection:

We utilise your gameplay and account data to monitor patterns that might indicate problematic gambling behaviour. This processing is based on our legal obligation to protect vulnerable players and our legitimate interest in fostering a safe gaming environment.

Responsible Gambling Tools:

We provide tools to help you manage your gambling, including:

• Deposit Limits: Set limits on how much you can deposit over a specific period.
• Self-Exclusion: Temporarily or permanently exclude yourself from playing on our site.
• Session Reminders: Receive notifications about how long you have been playing.

Support Organisations:

If you are concerned about your gambling or that of someone you know, please contact the following independent organisations for support:

11. Children's Privacy

Our services are strictly for individuals aged 18 years or older. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will take steps to delete that information and close the associated account.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. Any changes will be posted on this page with a revised "Effective Date". We encourage you to review this policy periodically. For significant changes, we will notify you via email or a prominent notice on our website.

13. Contact Us

If you have any questions about this Privacy Policy, our data practices, or if you wish to exercise any of your data protection rights, please contact our privacy team: