What we collect
When you register, we store your email, screen name, password hash, date of birth, UK residence confirmation and policy acceptance. We also store your virtual-credit balance, round records, reward claims, selected games and account-break status. Passwords are stored as salted hashes, not readable text.
Why we use it
Account information lets us authenticate you, confirm your email, check age eligibility and keep the service consistent. Game records keep your credit balance accurate and make interrupted requests recoverable. Necessary security processing protects accounts and the service. With your consent, Google Analytics measures visits to public pages. Advertising remains disabled.
Messages and recovery
The Support form stores your reply email, topic, message, reference and delivery status. Do not include passwords, payment information or identity documents. Email-confirmation and password-reset links are short-lived and single-use. Brevo delivers transactional messages. ImprovMX forwards incoming support email to the monitored support inbox. These providers receive the addressing and message information needed to deliver your email.
Storage and access
Account records are held outside the public web directory, with access limited to operating and maintaining the service. We do not sell personal information. If you accept analytics, Google receives public page-view information, a browser identifier, device and browser details, and your IP address as part of the connection. We do not send account IDs, emails, form contents, game balances, or URL query strings to Analytics. Google may process this information outside the UK. See Google’s Privacy Policy. Withdraw permission through Cookie Preferences; future collection stops and Analytics cookies are removed from this browser. Our hosting and email processors may process information in countries outside the UK. Applicable data-protection safeguards govern those transfers. Contact us for information about your data and its processing.
Retention
We retain account and credit-activity records while an account is active so its balance and history remain consistent. Support requests are intended to be retained for no longer than 12 months unless a specific dispute or legal duty requires longer. Sessions expire after seven days; reset links expire after 30 minutes. Expired security records and local mail captures should be removed through the documented maintenance command.
Your choices and rights
You can manage saved games, change cookie choices and take a break directly on the site. You may request access, correction, deletion or restriction of your personal data, and exercise other applicable data-protection rights, through Support or guestcare@el-jacalito.com. We may ask for proportionate information to verify that a request concerns your account.
Concerns
Please contact us first if you have a concern about information handling. UK residents can also contact the Information Commissioner’s Office at ico.org.uk.