Introduction
Welcome to the privacy policy of Windmill Slots, a premium social casino platform that provides free entertainment to users in the Netherlands and beyond. Windmill Slots is owned and operated by windmillslots BV, located at Herengracht 124, 1015 BT Amsterdam. windmillslots BV is owned and operated by Centro Armonia S. We attach great importance to protecting your privacy and the secure processing of your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable laws and regulations.
This document has been prepared to inform you fully and transparently about what data we collect, why we collect it, how long we retain it, with whom we share it, and what rights you have regarding your personal data. Because Windmill Slots operates exclusively as a social casino ? where no real money can be deposited, won, or withdrawn ? we do not process financial transaction data in the sense of payment card numbers or bank account information for gambling. Nevertheless, we do collect certain data that is necessary for the operation of our platform, improving the user experience, and complying with our legal obligations.
By using windmillslots.com, creating an account, playing our free casino games, or contacting our customer support, you acknowledge that you have read and understood this privacy policy. If you do not agree to the processing of your data as described in this policy, we ask that you do not use our services. We reserve the right to update this privacy policy periodically; changes will be published on this page with an updated date.
1. Data Collection
Centro Armonia S collects data in various ways when you interact with the Windmill Slots platform. Collection takes place when you visit our website, register an account, log in to your profile, participate in games, communicate with other players via social features, contact our support, or use optional membership services. We distinguish between data you actively provide to us, data that is automatically collected during your use of the platform, and data we receive from third parties.
When you register for a free account on our social casino, we ask you to provide certain basic information. This typically includes your email address, a username of your choice, a password, and confirmation that you are at least eighteen years old. Depending on the registration method you choose, we may receive additional data, for example when you sign up via a social network integration. In that case, we may receive your public profile information from the relevant service, such as your display name and profile photo, only to the extent you have given permission for this to that service.
Automatically Collected Data
Each visit to windmillslots.com automatically records certain technical data through our servers and analytics systems. This includes your IP address, the type and version of your web browser, your operating system, the device you use, the date and time of your visit, the pages you view, the duration of your session, the referring website or source through which you reached our platform, and any error messages that occur while loading pages or games. This data is collected to ensure the technical operation of our social casino, detect security incidents, and optimize our services.
Data During Gameplay
While playing free casino games on Windmill Slots, we collect game-related data that is essential for the operation of our entertainment platform. This includes your game progress, virtual coin balance, scores achieved, leaderboard positions, badges and achievements earned, participation in events and challenges, preferences regarding games, and settings you have configured. All of this data relates exclusively to fictional, virtual elements within our social casino and has no financial value in the real world.
Communication Data
When you contact us via email, contact forms, or other communication channels, we collect and retain the content of your messages, the subject of your inquiry, your contact details, and any attachments you provide. We use this data solely to handle your request, provide support, and improve our services. Correspondence may be retained for quality control and as evidence of the handling of your request.
2. Personal Data
Personal data means any information relating to an identified or identifiable natural person. Centro Armonia S processes the following categories of personal data in the context of operating Windmill Slots as a social casino platform. We process only data that is necessary, relevant, and limited to what is needed for the purposes for which it is collected.
Identification and Account Data
The primary category of personal data we process concerns your account information. This includes your email address, which we use for account verification, password recovery, and important service messages; your username or display name, which may be visible to other players on leaderboards and in social features; your password, which is stored exclusively in encrypted form and can never be viewed in readable text by our staff; and the date of your registration and last login. If you purchase an optional paid membership, we process additional data needed for billing, such as your name and billing address, through our payment processor.
Demographic and Profile Data
On a voluntary basis, you may provide additional profile data, such as a profile photo, a short biography, your preferred language, or other personalization settings. This data is used solely to personalize your experience on our free casino platform and to identify you within our social community. We never collect sensitive personal data such as health information, political beliefs, religious beliefs, or ethnic origin, unless you voluntarily share this in public communication on the platform, for which you are yourself responsible.
Age Verification
Windmill Slots is accessible exclusively to persons aged eighteen and older. Upon registration, we ask you to confirm that you meet this age requirement. In certain cases, we may take additional verification measures, such as requesting a copy of a valid identity document, if we have reasonable grounds to suspect that a user is under eighteen. Such documents are processed solely for age verification and are securely deleted after successful verification or after account rejection, unless legal retention obligations require otherwise.
Legal Basis
We process your personal data on various legal bases in accordance with the GDPR. Performance of the contract between you and Centro Armonia S forms the basis for processing that is necessary to provide you access to our social casino, manage your account, and deliver the services you request. Your consent forms the basis for processing that requires explicit consent, such as sending marketing communications or placing non-essential cookies. Legitimate interest is the basis for certain processing that is necessary for the security of our platform, fraud prevention, and improving our services, provided your interests do not outweigh ours. Legal obligation is the basis when we must retain or disclose data under applicable legislation.
3. Usage Data
Usage data includes information about how you use our social casino platform, including your interactions with games, features, content, and other users. This data is primarily collected automatically and forms an essential part of our insight into how we can improve Windmill Slots and provide an optimal entertainment experience for our Dutch and international users.
Session and Navigation Data
During each session on windmillslots.com, we record which pages you visit, in what order you view these pages, how long you stay on each page, which links you click, which games you open and play, and when you end your session. We also record whether you access our website via a desktop computer, tablet, or mobile device, as well as the screen resolution and orientation of your device, so we can optimize the display and performance of our fun casino for different devices.
Game Statistics
For each social casino game you play, we collect detailed game statistics. This includes the number of rounds played, the duration of your play sessions, your virtual bets and wins, bonus rounds achieved, in-game jackpots achieved ? which are exclusively virtual and have no monetary value ? and your overall progress within the game. This data is used to personalize your gaming experience, award daily bonuses and rewards, update leaderboard rankings, and develop new content and features that align with the preferences of our player community.
Social Interaction Data
Windmill Slots offers social features that allow players to interact with each other, such as leaderboards, friend lists, sharing achievements, and participation in community events. When you use these features, we collect data about your interactions, including the players you communicate with, shared achievements, and participation in events. We monitor public communication on the platform to detect inappropriate behavior and enforce our community guidelines, so Windmill Slots remains a safe and enjoyable environment for all users.
Preferences and Settings
We retain your personal preferences and settings, such as your chosen language, notification preferences, privacy settings, responsible gaming limits you have set ? including session limits and account pausing ? and your preference for certain game categories. This data enables us to personalize your experience and respect your choices regarding responsible use of our free casino.
4. Cookies
Cookies are small text files placed on your device when you visit a website. Windmill Slots uses cookies and similar technologies, such as local storage in your browser and session tokens, to ensure the operation of our social casino platform, remember your preferences, and improve our services. In this chapter, we explain what types of cookies we use and how you can manage your cookie preferences.
Strictly Necessary Cookies
Strictly necessary cookies are essential for the operation of windmillslots.com and cannot be disabled without affecting platform functionality. These cookies include session cookies that keep you logged in during your visit, security cookies that provide protection against unauthorized access and misuse, and cookies that remember your cookie preferences. Without these cookies, you cannot use the core functionalities of our social casino, including logging in to your account and playing games.
Functional Cookies
Functional cookies enable us to remember your preferences and settings, so you do not have to make the same choices again on your next visit. This includes remembering your language preference, display settings, volume settings for game sounds, and your recently played games. These cookies improve your user experience but are not strictly necessary for the basic functionality of the platform.
Analytics Cookies
We use analytics cookies to understand how visitors use our website, which pages are most popular, where users may encounter problems, and how we can improve the overall performance of our platform. These cookies collect aggregated and anonymized information and help us make data-driven decisions about the development of new features and games. For detailed information about our analytics practices, we refer you to the Analytics chapter in this privacy policy and to our separate cookie policy.
Managing Cookie Preferences
On your first visit to windmillslots.com, you are informed about our use of cookies via a cookie banner. You can accept cookies or close the banner. Additionally, you can manage cookies through your web browser settings, where you can delete existing cookies and block or restrict the placement of new cookies. Please note that disabling certain cookies may limit the functionality of our social casino. For comprehensive information about all cookies we use, including their name, purpose, and retention period, we refer you to our cookie policy.
5. Analytics
To continuously improve Windmill Slots as a social casino platform, we use analytics tools and statistical analysis techniques. These tools help us gain insight into user behavior, the performance of our website and games, and the effectiveness of our content and features. We strive to anonymize or pseudonymize analytics data as much as possible and process this data solely for the purposes described in this chapter.
Web Analytics
We use web analytics services to measure and analyze traffic on windmillslots.com. These services collect information about the number of visitors, unique visitors, page views, bounce rates, average session duration, geographic origin of visitors at country or region level, and the technical specifications of the devices and browsers used. Visitor IP addresses are typically anonymized before being processed by analytics services, to protect your privacy. The collected data is used solely to identify trends, improve the user experience, and detect and resolve technical problems.
Game Analytics
Within our free casino platform, we collect detailed game analytics to ensure the quality and entertainment level of our games. This includes data about which games are most popular, average play times per game, bonus round completion rates, technical performance such as load times and frame rates, and user feedback collected via surveys or ratings. This information enables our development team to optimize existing games, fix bugs, and create new titles that align with the preferences of our player community.
A/B Testing
In some cases, we conduct A/B tests where different versions of pages, features, or game interfaces are shown to different user groups. The results of these tests help us determine which versions provide the best user experience. Participation in A/B tests is based on random assignment and does not affect your access to core platform functionalities. Data collected during A/B tests is analyzed in aggregate and is not used to create individual user profiles for commercial purposes outside of product improvement.
Your Choices Regarding Analytics
Where legally required and technically feasible, we offer you the option to opt out of non-essential analytics tracking. You can do this via the cookie settings on our website, via opt-out mechanisms provided by analytics service providers, or by contacting us at support@windmillslots.com. Please note that opting out of analytics tracking does not affect the collection of strictly necessary operational data required for the operation of our social casino.
6. Communication
Centro Armonia S communicates with Windmill Slots users through various channels for different purposes. In this chapter, we describe what types of communication you may receive from us, on what legal basis this communication takes place, and how you can manage your communication preferences.
Service Notifications
We send service notifications that are necessary for the operation of your account and our services. This includes confirmation emails upon registration, emails to verify your email address, password recovery notifications, security alerts for unusual login activity, notifications about changes to our terms of use or this privacy policy, and confirmations of optional membership purchases. These service notifications are sent on the basis of performance of our contract with you and cannot be disabled while you have an active account, as they are essential for the security and management of your account.
Marketing Communication
With your explicit consent, we may send you marketing and promotional communication about new games, events, special offers for virtual coins, membership benefits, and other news related to Windmill Slots. This communication may take place via email, push notifications, or in-app messages. We never send marketing communication about real-money gambling, as our platform operates exclusively as a social casino. You can withdraw your consent for marketing communication at any time by clicking the unsubscribe link in our emails, adjusting your notification preferences in your account settings, or contacting us at support@windmillslots.com.
Customer Support
When you contact us for support, we communicate with you via your chosen channel ? typically email ? to handle your question or complaint. We retain a record of this correspondence to ensure the quality of our customer support, support staff training, and as a reference for any follow-up questions. Our customer support is available in Dutch and English and strives to respond to all requests within reasonable timeframes.
Community Communication
Within our social casino platform, you may receive communication from other players via social features, such as friend requests, congratulations on achievements earned, and invitations to community events. This communication takes place within the platform and falls under our community guidelines. We do not actively monitor such communication, but provide report and block features so you can report inappropriate behavior. We recommend that you do not share personal contact details in public communication on the platform.
7. Data Security
The security of your personal data is the highest priority for Centro Armonia S. We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction, alteration, or disclosure. Although no system is completely infallible, we strive to maintain the highest achievable security standards for our social casino platform.
Technical Measures
All communication between your browser and windmillslots.com is secured with TLS encryption (Transport Layer Security), so data transmitted over the internet cannot be intercepted by unauthorized parties. Passwords are stored using strong one-way hashing algorithms with salt, so they cannot be recovered in readable form. Our servers are protected by firewalls, intrusion detection systems, and regular security updates. Access to production systems is limited to authorized personnel and is logged and monitored. We regularly conduct security audits and vulnerability scans to identify and remediate potential weaknesses.
Organizational Measures
Within Centro Armonia S, we maintain strict internal policies regarding data protection. Only employees who need data for the performance of their duties have access to personal data, and they are bound by confidentiality obligations. We provide regular training to our staff on data protection and information security. When selecting third parties that process data on our behalf, we assess their security practices and enter into processor agreements that comply with GDPR requirements.
Incident Response
In the unlikely event of a data breach ? a security incident in which personal data is lost, destroyed, altered, or disclosed without authorization ? we have established an incident response procedure. We will immediately investigate the breach, assess the impact, and take appropriate measures to prevent further harm. If the breach is likely to pose a risk to your rights and freedoms, we will inform you without undue delay and, if required, notify the supervisory authority within the statutory period of 72 hours. We document all data breaches and the measures taken in our internal incident register.
Your Responsibility
We recommend that you choose a strong, unique password for your Windmill Slots account and do not share it with others. Always log out when using a shared or public device. Notify us immediately at support@windmillslots.com if you suspect your account has been compromised or if you notice unauthorized activity. Although we take extensive measures to protect your data, you also bear responsibility for the security of your login credentials.
8. User Rights
As a data subject, you have a range of rights regarding your personal data under the General Data Protection Regulation. Centro Armonia S fully respects these rights and has established procedures to handle your requests within the statutory timeframes. In this chapter, we describe each of your rights and how you can exercise them.
Right of Access
You have the right to request access to the personal data we process about you. Upon your request, we will inform you about the categories of personal data we process, the purposes of processing, the categories of recipients to whom your data has been or will be disclosed, the intended retention period, the existence of automated decision-making including profiling, and the source of the data if it was not collected directly from you. We will provide a copy of the relevant personal data, unless this would harm the rights and freedoms of others.
Right to Rectification
If you believe that the personal data we process about you is inaccurate or incomplete, you have the right to request rectification. You can update much of your account data yourself via your profile settings on windmillslots.com. For data you cannot change yourself, you can submit a rectification request via support@windmillslots.com. We will handle your request as promptly as possible and inform you of the measures taken.
Right to Erasure
Under certain circumstances, you have the right to request erasure of your personal data, also known as the "right to be forgotten." This right applies when the data is no longer necessary for the purposes for which it was collected, when you withdraw your consent and no other legal basis for processing exists, when you object to processing and there are no overriding legitimate grounds, when the data has been unlawfully processed, or when erasure is required to comply with a legal obligation. We may retain certain data if we have a legal retention obligation or if the data is needed for the establishment, exercise, or defense of legal claims.
Right to Restriction
You have the right to request restriction of the processing of your personal data in specific situations: when you contest the accuracy of the data, for the period needed to verify accuracy; when processing is unlawful but you do not wish the data to be erased; when we no longer need the data but you need it for a legal claim; or when you have objected to processing pending assessment of whether our legitimate grounds outweigh your interests.
Right to Data Portability
When processing is based on your consent or on performance of a contract and processing is carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit this data to another controller, to the extent technically feasible. This right does not apply to processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
Right to Object
You have the right to object at any time to the processing of your personal data that is based on legitimate interest, including profiling based on legitimate interest. We will cease processing unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or when processing is necessary for the establishment, exercise, or defense of legal claims. You always have the right to object to processing for direct marketing purposes; in that case, we will no longer process your data for such purposes.
Withdrawal of Consent
When the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can withdraw your consent via your account settings, via the unsubscribe link in our emails, or by contacting us at support@windmillslots.com.
Complaint to the Supervisory Authority
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Autoriteit Persoonsgegevens (AP), the Dutch supervisory authority for data protection. However, we ask that you contact us first so we have the opportunity to address your concern. You can reach the AP at autoriteitpersoonsgegevens.nl.
9. Data Retention
Centro Armonia S does not retain your personal data longer than necessary for the purposes for which it was collected, unless a longer retention period is legally required or permitted. In this chapter, we describe the retention periods we apply for different categories of data and the criteria we use to determine these periods.
Account Data
While your Windmill Slots account is active, we retain your account data to provide you access to our social casino platform and maintain your game progress, virtual coin balance, and social connections. If you close your account or if your account is terminated due to violation of our terms of use, we will delete or anonymize your personal data within thirty days of closure, unless a longer retention period is legally required. Anonymization means that all identifying elements are removed, so the remaining data can no longer be linked to you.
Communication Data
Correspondence with our customer support is retained for a maximum of three years after the last interaction, unless the correspondence is relevant to an ongoing dispute or legal proceeding, in which case the data is retained until the dispute is resolved. Marketing communication preferences are updated and retained while your account is active or until you unsubscribe from marketing communication.
Technical and Analytics Data
Server log files and technical data are typically retained for a maximum of twelve months, after which they are deleted or anonymized. Anonymized analytics data may be retained for a longer period for statistical and trend analysis purposes, as it is no longer considered personal data. Cookie data is retained in accordance with the periods described in our cookie policy.
Financial Data
If you purchase an optional paid membership, we retain the associated billing data for the legally required period for tax and accounting purposes, which in Italy is typically ten years. This data is processed solely for billing and compliance purposes and not for marketing or other secondary purposes.
Retention Criteria
When determining the appropriate retention period for each category of data, we consider the nature and sensitivity of the data, the purpose of processing, the potential risks of unauthorized access or disclosure, applicable legal requirements, and our legitimate interests. We periodically review the data we retain and delete or anonymize data that is no longer needed for any legitimate purpose.
10. International Transfer
Centro Armonia S is established in Italy and operates Windmill Slots from within the European Union. Although our platform primarily targets users in the Netherlands, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), particularly when we use service providers or infrastructure that operate globally. In this chapter, we explain under what conditions such transfers take place and what safeguards we implement to protect your data.
Transfer Within the EEA
When your data is processed within the EEA, you enjoy the full protection offered by the GDPR. All member states of the European Union, including Italy where Centro Armonia S is established, and the Netherlands where a significant portion of our users are located, apply the same data protection standards. Transfers within the EEA require no additional safeguards, as all EEA countries are treated as a single entity regarding data protection.
Transfer Outside the EEA
In some cases, we may engage service providers that process data in countries outside the EEA, such as the United States, for hosting, analytics, customer support, or technical assistance. When such transfers take place, we ensure an adequate level of protection by applying one or more of the following mechanisms: an adequacy decision by the European Commission deeming the relevant country safe; Standard Contractual Clauses (SCCs) approved by the European Commission; Binding Corporate Rules for multinational corporate groups; or, in exceptional cases, your explicit consent after adequate information about the risks of the transfer.
Safeguards
For each international transfer, we conduct a Transfer Impact Assessment (TIA) to assess the risks to your data and implement appropriate additional measures if needed. This may include encrypting data during transfer and storage, limiting the categories of data transferred to what is strictly necessary, and contractually obligating recipients to implement appropriate security measures. Upon request, we can provide you with more information about the specific safeguards we apply for international transfers relating to your data.
Cloud Infrastructure
Our technical infrastructure uses cloud services that may store and process data on servers in various geographic regions. Where possible, we configure our systems so that data of European users is primarily processed and stored within the EEA. We carefully select our cloud providers based on their compliance with international data protection standards and their ability to provide the safeguards we require for international transfers.
11. Third Parties
Centro Armonia S does not share your personal data with third parties for their own marketing purposes. We never sell your data to advertising networks, data brokers, or other commercial parties. In limited and specific circumstances, we may share your data with the categories of third parties described in this chapter, solely for the purposes stated herein and under the safeguards required by the GDPR.
Service Providers
We engage trusted third parties to provide certain services on our behalf, such as web hosting and server management, email delivery, analytics services, customer support tools, payment processing for optional memberships, and technical support for our social casino platform. These service providers have access only to the personal data necessary for the performance of their specific service and are contractually obligated to treat your data confidentially, implement appropriate security measures, and not use the data for purposes other than those for which they were engaged.
Social Integrations
If you choose to link your Windmill Slots account to a social network or external platform, certain data may be shared with that service in accordance with your settings on the relevant platform and our privacy policy. We recommend that you read the privacy policy of each external platform you link to your account, as we have no control over data processing by these third parties.
Legal Obligations
We may disclose your personal data when we are legally required to do so, for example in response to a valid court order, subpoena, or request from a competent government authority or regulator. We may also share data when we believe in good faith that disclosure is necessary to protect our rights, ensure your safety or the safety of others, investigate fraud, or respond to a government request.
Business Transfers
In the event of a merger, acquisition, reorganization, sale of business assets, or other business transaction involving Centro Armonia S, your personal data may be transferred to the new owner or entity. In such cases, we will inform you in advance about the transfer and the implications for your data, and we will ensure that the receiving party commits to compliance with this privacy policy or provides an equivalent level of protection.
Aggregated Data
We may share aggregated, anonymized statistics with partners, researchers, or the public, for example about the total number of active players, the most popular games, or general usage trends on our social casino platform. This data contains no information that can personally identify you and is not considered personal data under the GDPR.
12. Children's Privacy
Windmill Slots is intended exclusively for persons aged eighteen and older. We do not knowingly collect personal data from persons under eighteen and do not target our marketing and advertising policy at minors. Our social casino platform contains content and functionalities designed for adult entertainment and is not suitable for children or young people under eighteen.
Age Restriction
Upon registration, we ask all users to confirm that they are at least eighteen years old. This age confirmation is a mandatory condition for creating an account and using our services. We implement technical and organizational measures to prevent minors from accessing our platform, including age verification upon registration and monitoring of suspicious account activity that may indicate use by a minor.
Discovery of Minors
If we discover or have reasonable grounds to suspect that a user is under eighteen, we will immediately take action. This includes suspending or terminating the relevant account, deleting all associated personal data, and informing the user that the platform is accessible exclusively to adults. If we suspect that a parent or guardian should be informed, we will take appropriate steps in accordance with applicable legislation.
Parental Responsibility
We recommend that parents and guardians actively supervise their children's online activities and use parental control tools available through operating systems, browsers, and internet providers. If you as a parent or guardian believe your child has provided us with personal data without your consent, we ask that you contact us immediately at support@windmillslots.com so we can take appropriate measures to delete the data and prevent further access.
International Regulations
Although our platform primarily targets users in the Netherlands and the European Union, we recognize that international regulations regarding children's privacy, such as the Children's Online Privacy Protection Act (COPPA) in the United States, may impose additional requirements. We strive to comply with all applicable legislation regarding the protection of minors, regardless of their geographic location, by consistently applying our strict 18-plus policy and not collecting or processing data from minors.
13. Contact Details
If you have questions, comments, or requests regarding this privacy policy or the processing of your personal data by Centro Armonia S, we are available via the contact details below. We strive to respond to all privacy-related requests within thirty days, in accordance with the timeframe prescribed by the GDPR. In complex cases, we may extend this period by up to two months, informing you within the first thirty days about the extension and the reasons for it.
Data Controller
The data controller for your personal data in the context of Windmill Slots is:
- windmillslots BV
- Herengracht 124
- 1015 BT Amsterdam
- Email: support@windmillslots.com
Please clearly indicate in your correspondence that your request relates to privacy or data protection, so we can forward your request to the appropriate department and handle it as promptly as possible.
Data Protection Officer
Centro Armonia S has appointed a Data Protection Officer (DPO) who oversees compliance with this privacy policy and the GDPR. You can reach the DPO via the same email address support@windmillslots.com with the subject line "DPO ? Privacy Request." The DPO is your point of contact for all questions about the processing of your personal data and can advise you on exercising your rights.
Related Documents
This privacy policy should be read in conjunction with our other policy documents, including our cookie policy, terms of use, and our page on responsible play. Together, these documents form the legal framework for your use of windmillslots.com as a social casino platform.
Privacy Contact Form
You can also use the form below to submit a privacy-related request. Describe your request in as much detail as possible so we can assist you adequately.