Elmst Limited – MGA Licensed Casino Operator
Elmst Limited is committed to protecting your privacy and personal data. As a Malta-based iGaming company regulated by the Malta Gaming Authority (MGA) and operating under the authority of one of the industry’s most respected licensing bodies, we uphold the highest standards of data protection, transparency, and compliance.
This Privacy Policy outlines how Elmst Limited collects, uses, stores, and safeguards your personal data when you use any of our online casino platforms, including but not limited to Slotsquad, Slotpony, Sugarino, Richmoose, Reblz, Spinsweet, and Slotmojo.
By using our services, you confirm that you understand and accept the terms of this Privacy Policy.
Who We Are
Elmst Limited is a licensed iGaming operator with its headquarters in Malta. We are registered and regulated by the Malta Gaming Authority (MGA) and manage a portfolio of modern online casino brands tailored for international audiences, particularly within the European Union.
We are fully committed to operating secure casino sites that offer responsible entertainment in full alignment with regulatory requirements.
Scope of the Policy
This Privacy Policy applies to all users who access our services via any Elmst Limited casino brand. It applies to both registered users and visitors and governs how we process personal data collected through:
- Account registration and verification
- Gameplay and user behavior
- Customer support and communication
- Use of cookies and similar technologies
- Promotional campaigns and bonus offers
- Payment processing and withdrawals
This policy also explains your rights under applicable laws, including the General Data Protection Regulation (GDPR).
What Personal Data We Collect
Depending on how you interact with our platforms, we may collect the following types of personal information:
| Category | Examples |
|---|---|
| Identity Data | Full name, date of birth, nationality, ID documents |
| Contact Information | Email address, phone number, billing and residential address |
| Account Information | Username, encrypted password, preferences, bonus and game history |
| Financial Data | Deposit and withdrawal records, payment method, currency used |
| Technical Data | IP address, browser type, device data, access logs |
| Behavioral Data | Game activity, bonus participation, responsible gambling settings |
| Communications | Customer support messages, email exchanges, complaint records |
This information is either collected directly from you or automatically via cookies, analytics tools, or third-party integrations.
Purpose and Legal Basis for Processing
Elmst Limited processes your personal data for specific, lawful purposes. We ensure that all processing is based on a valid legal ground under GDPR, which may include:
- Contractual obligations – to provide the services you request
- Legal obligations – to comply with AML (Anti-Money Laundering) and KYC (Know Your Customer) laws
- Legitimate interests – to protect our business from fraud, improve services, and ensure platform security
- User consent – for sending marketing materials or using optional cookies
We use your data to:
- Verify your identity and eligibility to play
- Process transactions and ensure timely payments
- Offer promotional and loyalty-based incentives
- Detect and prevent fraud or abuse
- Comply with legal and licensing obligations
- Provide customer support
- Monitor gaming patterns to promote responsible gambling
- Customize your experience and improve platform performance
Cookies and Tracking Technologies
Elmst Limited uses cookies and related tracking technologies to improve your user experience and deliver personalized content. These technologies allow us to collect data about your device, behavior, and preferences.
| Cookie Type | Purpose |
|---|---|
| Essential Cookies | Required for platform functionality and security |
| Performance Cookies | Help us understand site usage and identify technical issues |
| Functional Cookies | Remember user preferences and personalize the experience |
| Marketing Cookies | Deliver relevant advertisements and promotions based on user activity |
You can manage your cookie preferences via your browser settings. Disabling certain cookies may affect your user experience.
Sharing Your Data with Third Parties
We do not sell your personal information to third parties. However, we may share your data with trusted partners who help us provide our services, including:
- Payment processors – to handle deposits and withdrawals securely
- Verification providers – for identity checks and compliance
- Gaming software providers – to deliver game content and functionality
- Marketing platforms – where you have given consent to receive promotional messages
- Customer support platforms – for communication and ticket handling
- Legal authorities and regulators – where disclosure is required by law or under MGA license conditions
All third-party data processors are contractually bound to comply with GDPR and protect your data accordingly.
International Data Transfers
If your data is processed outside the European Economic Area (EEA), Elmst Limited ensures appropriate safeguards are in place to maintain GDPR-compliant protection. This includes the use of Standard Contractual Clauses (SCCs) and secure processing frameworks.
How Long We Keep Your Data
We retain your data only for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, accounting, and regulatory requirements.
- Account data is kept for a minimum of five years after account closure, in line with anti-money laundering legislation.
- Marketing data is kept until you opt out or withdraw consent.
- Technical logs and communication records may be stored for a limited period based on operational needs.
Data that is no longer required is securely deleted or anonymized.
Security Measures
Elmst Limited employs strong technical and organizational security measures to protect your data. These include:
- SSL encryption for all data transmissions
- Firewalls and intrusion detection systems
- Two-factor authentication for user accounts
- Regular security audits and risk assessments
- Role-based access controls to limit data exposure internally
We monitor and update our infrastructure regularly to stay ahead of evolving security threats.
Your Rights Under GDPR
As an EU-based player, you have the following rights under the General Data Protection Regulation:
- Right of access – Request a copy of the personal data we hold about you
- Right to rectification – Correct inaccurate or incomplete data
- Right to erasure – Request deletion of your data, subject to legal limitations
- Right to restrict processing – Limit how your data is used
- Right to object – Withdraw consent or object to certain processing activities
- Right to data portability – Receive your data in a structured, machine-readable format
- Right to complain – Lodge a complaint with a data protection authority
To exercise your rights, please contact us at [email protected].
Responsible Gambling and Data Monitoring
Elmst Limited is committed to promoting responsible gambling. We use behavioral data and activity logs to identify potential signs of problematic gambling. Our tools and processes include:
- Deposit limits
- Loss and wager limits
- Time-out features
- Self-exclusion options
- Real-time monitoring of gameplay
This data helps us intervene when necessary and offer appropriate support resources to our players.
Changes to This Policy
We may revise this Privacy Policy periodically to reflect changes in legislation or operational practices. Any updates will be published on our websites, and the “last updated” date at the top will be amended accordingly.
We encourage users to review the Privacy Policy regularly to stay informed of how their data is handled.