Privacy Policy & Data Protection
1. Data Controller Information
For the purposes of applicable data protection legislation in the United Kingdom, the data controller is Bosmek Entertainment Media Ltd, a private company registered in England and Wales, with its principal office situated at:
25 Finsbury Circus, London EC2M 7EE, United Kingdom
Company Enquiries Email: privacy@bosmek.com
2. Scope of this Policy
This policy applies to all visitors, registered player profiles, and users accessing https://bosmek.com and its associated subpages, interactive slot simulators, and communication channels. It explains how we gather, process, retain, and safeguard information when you interact with our platform.
3. Categories of Data We Collect
We collect only minimal information necessary to deliver free social gaming experiences:
- Player Profile Identifiers: Chosen player handle, display name, and local profile tokens stored in your browser's LocalStorage.
- Gameplay & Progression Metrics: Virtual credit balances, XP point accumulations, unlocked VIP tiers, and spin timestamps.
- Technical & Telemetry Data: IP address, device model, operating system, browser type, screen resolution, and London cluster connection latencies.
- Communication & Lead Test Data: Name, email address, inquiry subject, and inquiry details provided voluntarily via our Contact and Lead Test forms.
4. Lawful Bases for Processing
Under Article 6 of the UK GDPR, we process personal data solely on the following legal grounds:
- Legitimate Interests: To operate, monitor, and optimize the stability, security, and performance of our social gaming infrastructure.
- Explicit Consent: Where you provide consent for optional communications, lead inquiries, or functional cookie storage.
- Legal Obligation: To enforce our 18+ age verification requirement and comply with UK statutory regulations.
5. Non-Monetary Nature of Service
Bosmek.com does not process, store, or solicit debit card numbers, credit card data, bank account numbers, or cryptocurrency wallet keys. Because all gameplay is 100% free and utilizes non-monetary virtual tokens, no financial transactional records are collected.
6. Local Storage & Device Memory
Our platform utilizes client-side localStorage technology to store your player profile, session
state, XP counters, and cookie preferences directly on your physical hardware. This architectural decision
minimizes server-side profiling and gives you full control over your stored credentials.
7. Cookies & Tracking Technologies
We employ strictly necessary and performance cookies to maintain user sessions and verify age compliance. We do not engage in third-party behavioral ad tracking or sell user data to advertising syndicates. For detailed options, see our Cookie Policy.
8. Information Sharing & Third Parties
We do not sell, rent, or lease your personal information. Data may only be shared with verified service vendors under strict contractual terms:
- Cloud hosting and Content Delivery Network (CDN) providers in the UK and EEA.
- Email routing processors used to handle contact form inquiries and lead testing confirmations.
- Regulatory or law enforcement bodies when mandated by English court orders or statutory legal processes.
9. Data Security & Encryption Standards
We employ state-of-the-art security safeguards including TLS 1.3 encryption in transit, strict HTTP security headers, parameterized database inputs, and routine security audits to shield your communications from unauthorized disclosure or interception.
10. Data Retention Schedules
Contact form submissions and lead verification records are retained for a maximum duration of 180 days for administrative and auditing purposes, after which they are securely expunged. Client-side profile tokens remain on your device until you clear your browser storage or click "Exit".
11. Your Rights Under UK GDPR
As a data subject resident in the United Kingdom, you possess the following rights:
- Right of Access (Subject Access Request): The right to request copies of your personal data.
- Right to Rectification: The right to request correction of inaccurate or incomplete information.
- Right to Erasure (Right to Be Forgotten): The right to request deletion of your contact records.
- Right to Restrict or Object to Processing: The right to challenge or limit how we process your information.
- Right to Data Portability: The right to receive your data in a structured, machine-readable format.
12. Age Restrictions & Protection of Minors (18+)
Bosmek.com is strictly reserved for individuals aged 18 and older. We do not knowingly collect or solicit personal data from children or adolescents under 18 years of age. If we discover that an underage individual has submitted data, we immediately purge all associated records.
13. Changes to this Privacy Policy
We reserve the right to modify or update this Privacy Policy at any time to reflect operational, technological, or legal developments. Any revisions will be published directly on this page with an updated "Effective Date".
14. Supervisory Authority & Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection Officer at privacy@bosmek.com or write to our London office.
You also have the right to lodge a formal complaint with the UK data protection supervisory authority: Information Commissioner's Office (ICO) at https://ico.org.uk.