LEGAL REFERENCE

How we keep your account safe

Your data and payment information are the foundation of every session you run on heroslot. We encrypt your personal details, transaction history and gameplay records with industry-standard protocols...

Data EncryptionPayment SecurityAccount PrivacyRegional Compliance
heroslot How we keep your account safe

Privacy Policy — What We Collect and Why

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

PLAYER SUPPORT

Questions About Your Privacy

Team online

Contact Support

Reach our privacy team via live chat or email to request account data, clarify what we store, or file a data subject access request for your records.

Modify Your Settings

Log into your heroslot account, navigate to Settings > Privacy, and control which marketing communications and optional data sharing features are active.

Report a Breach

If you suspect unauthorised access or a data incident affecting your account, contact support immediately with your username and the details of what you observed.

WHY VISITORS TRUST US

Why This Privacy Policy Matters to You

Encryption Standard

All personal data and payment records move across TLS 1.2+ encrypted channels, meaning your DANA, OVO, GoPay and QRIS details are protected from interception during every transaction.

Audit Trail

We maintain timestamped logs of account access, deposit and withdrawal activity, and login events so you can review your own activity and dispute any unfamiliar transactions.

Data Minimisation

We collect only the personal information needed to run your account, process payments and comply with local regulations in supported regions — nothing redundant or speculative.

Third-Party Isolation

Payment processors (DANA, OVO, GoPay, QRIS providers) and identity verifiers receive only the data required to complete their specific service; we do not hand over your full profile.

Retention Limits

We retain account data for the duration of your membership plus a defined period for regulatory and dispute purposes, after which eligible records are securely deleted or anonymised.

Policy Updates

When we update this policy, we notify you via email and in-app message. Changes to core privacy practices require your affirmative consent before they take effect on your account.

SIDE BY SIDE

How Our Privacy Approach Aligns

01

Payment Data Security

DANA, OVO, GoPay and QRIS identifiers are stored separately from your account profile and accessed only during transaction processing.

02

Gameplay Records

Your session history, bet amounts and payout activity are logged purely for account verification and fraud prevention, not sold or shared.

03

Geographic Scope

This policy applies across heroslot's service area; where local Indonesian or regional law requires additional disclosures, we post those separately.

04

Right to Access

You can request a copy of all personal data we hold by contacting support; we aim to deliver it within 30 days in a portable, readable format.

05

Breach Notification

If we detect unauthorised access to account data, we notify affected users and support teams without undue delay, and report to relevant authorities where required.

06

Cookie & Tracking Use

Session cookies track your lobby navigation and live table activity to remember your preferences; analytics cookies help us spot usage patterns and technical faults.

07

Cross-Border Transfers

Your data may move between our regional servers to maintain service reliability; we apply the same encryption and access controls regardless of server location.

What You Control About Your Privacy

Email Preferences

Toggle promotional emails, account alerts and weekly lobby updates directly in your Settings panel; you'll always receive transactional emails for deposits, withdrawals and account changes.

Device & Login History

View all devices currently logged into your account and revoke access from any browser or mobile phone that isn't yours with a single tap.

Transaction Privacy

Your DANA, OVO, GoPay and QRIS payment history is visible only to you and our payment team; friends and other users cannot see your deposit or withdrawal amounts.

Data Download Request

Request a full export of your account data, gameplay records and communications history; we compile and send it to your registered email in standard formats.

Account Deletion Timeline

When you close your heroslot account, we flag it immediately and purge personal data after a defined retention window, keeping only anonymised gameplay stats for research.

Third-Party Blocking

Opt out of optional data-sharing arrangements with sportsbook and live casino partners; your core account remains fully functional and your privacy settings stay enforced.

Common Privacy Questions

Payment details are sent to the relevant processor (DANA, OVO, GoPay or QRIS partner) only to complete your withdrawal. We store a transaction reference but not your full wallet credentials. Your account shows only the last four digits for security.

Our systems log your session activity to detect fraud and unusual patterns, but individual hand-by-hand or spin-by-spin data is held by the game provider (Pragmatic, Evolution, PG Soft, etc.). We see summaries only.

No. We never sell your personal information to advertisers or data brokers. Partner companies (payment processors, identity verifiers, compliance auditors) receive only what they need to serve you, under strict contracts.

Contact support to initiate account closure. We immediately disable login, flag your profile, and begin data deletion. Anonymised transaction records are retained per local law, but personal identifiers are removed after 180 days.

Log into Settings and review your Device & Login History. You'll see every login location and timestamp. If you spot unfamiliar activity, change your password immediately and alert support with specific dates and IP addresses.

Yes. Session cookies remember your lobby preferences and game history during your visit. Analytics cookies help us spot technical issues and usage trends. You can disable non-essential cookies in your browser; your account will still work.

You can request access to your data, correct inaccuracies, object to certain processing, and ask for deletion where local law permits. File requests via support; we respond within 30 days or explain any delays in writing.