Privacy Policy

This privacy policy outlines how TuffPuff collects, uses, stores, and protects your personal information when you access and play our online slot game. We are committed to safeguarding your privacy and ensuring transparency about our data handling practices. By using TuffPuff, you acknowledge and agree to the terms set forth in this policy. We process your data in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and relevant Irish law.

Information We Collect

When you interact with TuffPuff, we collect various types of information to provide you with a seamless gaming experience and ensure compliance with legal requirements. The categories of data we gather include personal identification details, technical information about your device and gameplay, and financial transaction records. Personal data such as your name, email address, date of birth, and postal address may be collected during registration or account verification processes. We also collect technical data including IP addresses, browser types, operating systems, device identifiers, and gameplay statistics such as bet amounts, win records, and session durations. Payment information, including transaction history and payment method details, is processed securely through our authorised payment service providers. Additionally, we may collect communications data when you contact our customer support team or participate in promotional activities.

How We Use Your Information

The information collected through TuffPuff serves multiple purposes that are essential to operating our service responsibly and legally. We use your personal data to create and manage your gaming account, process transactions, and deliver the core functionality of our slot game. Your information enables us to verify your identity and age to comply with gambling regulations and prevent underage access. We analyse gameplay data to improve game performance, detect technical issues, and enhance user experience. Your data supports our safe gaming initiatives by allowing us to identify potentially problematic gambling patterns and implement appropriate intervention measures. We use contact information to send important service updates, respond to customer enquiries, and provide technical support. Marketing communications may be sent to you based on your consent preferences, and you maintain the right to opt out at any time. For security purposes, we monitor account activity to detect and prevent fraud, money laundering, and unauthorised access to accounts.

Data Sharing and Third Parties

TuffPuff privacy policy limits data sharing to circumstances that are necessary for service delivery, legal compliance, or protecting legitimate interests. We work with carefully selected third-party service providers who assist in operating our platform, including payment processors, identity verification services, game hosting providers, and customer support platforms. These partners are contractually bound to handle your information securely and only for specified purposes. We may share data with regulatory authorities and law enforcement agencies when required by law or to comply with gambling licensing requirements. In the event of a business transfer, merger, or acquisition, your information may be transferred to the successor entity, and you will be notified of any such changes. We do not sell your personal data to third parties for their marketing purposes. The following table summarises our primary data sharing arrangements:

Data Security and Retention

We implement robust technical and organisational measures to protect your information from unauthorised access, alteration, disclosure, or destruction. TuffPuff employs industry-standard encryption protocols for data transmission and storage, including SSL/TLS technology for all communications between your device and our servers. Access to personal data is restricted to authorised personnel who require it for their job functions, and all staff members receive regular data protection training. We maintain regular security audits and vulnerability assessments to identify and address potential risks. Our data retention practices balance operational needs, legal obligations, and your privacy rights. Account information is retained for the duration of your active relationship with TuffPuff and for a period thereafter as required by gambling regulations and financial record-keeping laws. Typically, this means we retain your data for seven years following account closure to comply with anti-money laundering regulations and potential dispute resolution needs. Marketing consent records are kept until you withdraw consent or the data becomes outdated. Technical logs and gameplay statistics may be retained in anonymised form for longer periods to support game development and system improvements. You have the right to request deletion of your data, subject to our legal obligations to retain certain records.

Your Privacy Rights

Under data protection law, you possess several rights regarding your personal information held by TuffPuff. You have the right to access the personal data we hold about you and receive a copy in a commonly used electronic format. You can request correction of inaccurate or incomplete information, and in certain circumstances, you may request deletion of your data, although legal and regulatory retention requirements may apply. You have the right to object to processing based on legitimate interests and to restrict processing in specific situations, such as when you contest the accuracy of your data. Where we rely on your consent for processing, you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. For safe gaming purposes, you can request self-exclusion or set deposit limits, and we will implement these measures promptly. You have the right to lodge a complaint with the Data Protection Commission in Ireland if you believe your data protection rights have been violated. To exercise any of these rights, contact our data protection team using the details provided in your account settings or on our website. We will respond to requests within one month, though complex requests may require additional time, and we will inform you of any extension.