A clear account of your information.

Purpose and legal basis.

Account details, requested preferences and game records are used to deliver the service under the Terms, on the basis of performance of a contract. An account and synchronised play cannot be provided without the corresponding information.

Security records, adult declarations, voluntary breaks and support correspondence serve legitimate interests in protecting accounts, preventing misuse, maintaining an adult service and resolving requests. Information is limited to those purposes. Legal obligation applies where handling a data-protection request requires compliance with law. Accepting this notice is not marketing consent.

The public latest-wins feed shows a game title and a fictional chip amount from a completed account round. It excludes account names, email addresses, account identifiers and private round details.

Accounts, declarations and private links.

Registration records a name, email address, creation time and an Argon2id password hash. Passwords are not stored in plain text. Sign-in tokens are hashed and sessions expire after fourteen days. Account security displays approximate device names and recent activity, and offers password and session controls.

One-time email links expire after 60 minutes and recovery links after 30 minutes. Their tokens are hashed; queued link contents are encrypted until delivery. When transactional email is connected, the provider receives the recipient address and message. These messages contain no marketing.

Registration records the UK-residency and 18+ declarations, acceptance of the current Terms and its date. Guests make an adult/UK declaration before playable guest access; it is remembered for 30 days. These are self-declarations rather than identity or location verification. These flows do not request a date of birth or identity document. Break records are stored separately.

Game continuity and saved choices.

Slot records include the shared wallet, credit activity, round identifiers and results, bonus progress and requested preferences. They allow continuity and help prevent the same interrupted request being charged twice. Preview demonstrations do not create account rounds or use your balance.

Account-linked features can hold favourites, ordered next-up choices, up to twelve recent game visits with times, portrait and frame choices, room preferences, atlas marks, up to six private shelves, comfort settings and a three-world plan with its purposes. Compatible earlier mode records or saved rounds may also remain linked to an account. Private shelves and atlas marks are excluded from public collection links. Device favourites are imported only when you request that action.

A guest slot visit is associated with a random identifier, without an email or account. The server retains its balance, rounds, feature progress and most recent 120 credit-activity entries for seven days. Expired guest visits are removed when new guest sessions are created. Requested local guest favourites and compatible browser saves remain on the device.

Optional public collections.

Publishing a collection creates a public link for your chosen title, up to twelve games, avatar and frame. It does not publish your account name, email, balance, recent visits or game records. Anyone with the link can view the published information.

Unpublishing closes that link immediately. Publishing later creates a new link. Shared pages are excluded from the sitemap and request no indexing. Other people may already have saved copies, which are outside our control. The underlying profile and collection records remain with your account.

Support conversations and notifications.

A support request records the reply email, topic, message, reference, date, status and follow-up messages. It is linked to the account when signed in. Account requests can be read only by that account; a guest request uses a private browser receipt lasting 90 days. The reference by itself does not grant access.

The report-preparation tool only formats text on the page. Copy places that text on your clipboard; a separate support-form action is required to submit it. Avoid passwords, private sign-in links, payment information, identity documents and unrelated sensitive details.

Notification queues retain the request reference, destination, delivery state and retry count. Notifications contain the reference rather than the request body. Saving a request does not establish that an external email was delivered.

Browser storage, serving systems and security.

Essential cookies maintain sign-in, protect requests, remember the guest declaration and enable access to private guest support threads. The Cookies page describes their purpose and duration. Fonts and assets are served by this site. No payment service or advertising network is connected. The Google tag loads with optional storage denied. Public-page measurement starts only after your consent.

Serving systems may log requested addresses, times, browser details and IP addresses for operation and security. Short-lived hashed rate-limit keys protect requests. Application error records contain a random reference, route template, status and time rather than request contents; they are capped at 1,000 entries and 30 days.

Administrator audit records retain an account ID, action and target reference for 180 days; deleting an account removes its actor association. Password hashing and request/access controls reduce risk. Absolute security cannot be guaranteed.

Retention, downloads and deletion.

Account and game records remain while the account is active. Password-protected privacy controls offer a download or permanent deletion. Deletion removes linked sessions, progress, chips, saved collections and account-linked support messages. A record containing only the deleted account number and deletion date remains for 90 days to prevent accidental restoration. Browser-only records and a chosen browser break are separate.

Support requests stay open while being handled. Closed ordinary requests remain for 180 days; closed privacy requests for one year to document their handling. Account deletion also removes its linked requests. Guest support receipts expire after 90 days, and successful notification-queue entries are removed after 30 days. Pending or failed notifications remain with the request for review.

Guest visits expire after seven days. Adult declarations expire after 30 days unless extended by a longer browser break. Relevant account/game operations remove expired sessions, rate-limit keys and guest visits; retention jobs handle expired support, security-link and deletion records. Private recovery backups must be limited to 30 days, and erased accounts must not be reactivated after restoration.

Your information choices and rights.

Depending on the circumstances, you can request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Oilchemists does not send marketing email or make solely automated decisions with legal or similarly significant effects about you.

Contact Player Care even if you cannot sign in. Requests are normally answered within one month. If proportionate identity checks, clarification or a lawful extension are needed, the reason will be explained. The optional download tool does not limit an access request.

You can raise a concern with the Information Commissioner’s Office independently; you do not need to contact Oilchemists first.

Choose the right control.

Account privacy controls handle account records. Storage preferences handle requested device-only choices. Contact is available when a request is broader than either tool or when you cannot access the account.

Optional Google Analytics.

Google LLC provides optional Analytics. The tag remains present with optional storage denied before a choice and after withdrawal; limited cookieless consent signals may be sent. We send the public page title and its path after consent; account pages, private support threads, recovery links, game results, credit balances and email addresses are excluded. Google may process Analytics data outside the United Kingdom under its own privacy terms and transfer safeguards.

You can decline Analytics or withdraw your consent in Storage choices. Declining does not affect games, accounts or Player Care.

Use your privacy controls.

Download your account records or delete your account. You can also send a privacy request, including without signing in.

You may complain to the Information Commissioner’s Office. You do not have to contact us first.