Privacy Policy

Last updated: June 9, 2026

This Privacy Policy describes how RocketBox Social Casino ("we", "our", or "Platform"), operated by NovaPlay Digital Lda. at rocketboxdesigngame.com and intended for audiences in Portugal, collects, uses, stores, and protects personal data of its users. By accessing or using our services, you confirm that you have read and understood this policy. We are committed to processing your data in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese legislation.

1. Data Controller

The data controller responsible for your personal information is NovaPlay Digital Lda., operating RocketBox Social Casino under license P-VD-26.03-13AG. For any privacy-related enquiries, contact us at contacto@rocketboxdesigngame.com.

2. Personal Data We Collect

We may collect the following categories of information when you use our platform:

Identification data: name, email address, and nickname chosen during registration or newsletter subscription.
Technical data: IP address, browser type, operating system, device used, pages visited, and time spent on the site.
Usage data: game history, scores, game preferences, and interactions with social features.
Communication data: content of messages sent through contact forms or other channels.
Cookie data: information collected through cookies as described in our Cookie Policy.

We do not intentionally collect data from anyone under 18. If we become aware that we have collected data from a minor, we will delete that information immediately.

3. How We Use Your Data

We use collected data for the following legitimate purposes:

Providing, maintaining, and improving entertainment services on the platform.
Managing your user account, including authentication and access recovery.
Sending communications about updates, new games, and newsletters (only with your consent).
Analysing usage patterns to optimise user experience and develop new content.
Responding to contact requests, technical support, and privacy enquiries.
Complying with legal and regulatory obligations in Portugal and the European Union.
Preventing fraud, abuse, and illegal activity on the platform.

4. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds under the GDPR: performance of a contract (account services), legitimate interests (security and platform improvement), consent (newsletters and optional marketing), and legal obligation (regulatory compliance). You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Storage and Security

Your personal data is stored on secure servers located within the European Union or in countries with an adequate level of protection recognised by the European Commission. We implement appropriate technical and organisational measures, including SSL/TLS encryption, restricted access controls, security monitoring, and periodic reviews of our data protection practices.

We retain your data only for as long as necessary to fulfil the purposes described in this policy or as required by law. Data from inactive accounts for more than 24 months may be anonymised or deleted after prior notification.

6. Data Retention

Account data is retained while your account remains active. Contact form submissions are kept for up to 24 months. Analytics data is aggregated and anonymised after 13 months. Subscription billing records, where applicable, are retained for the period required by Portuguese tax and accounting law.

7. Sharing with Third Parties

We do not sell your personal data to third parties. We may share limited information with trusted service providers who assist in operating the platform (web hosting, statistical analysis, email delivery), always under confidentiality agreements and GDPR-compliant data processing agreements. We may also disclose data when required by competent authorities or to protect our legal rights.

8. Your Rights

Under the GDPR, as a data subject you have the right to:

Access: request a copy of the personal data we hold about you.
Rectification: correct inaccurate or incomplete data.
Erasure: request deletion of your data ("right to be forgotten").
Restriction: limit processing of your data in certain circumstances.
Portability: receive your data in a structured, machine-readable format.
Objection: object to processing based on legitimate interests or direct marketing.
Withdraw consent: withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact contacto@rocketboxdesigngame.com. We will respond within 30 days. You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD) at www.cnpd.pt.

9. International Transfers

If data must be transferred outside the European Economic Area, we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or adequacy certifications for the destination country.

10. Virtual Currency and Subscriptions

If you purchase an optional virtual currency subscription, we process payment-related data through secure third-party payment processors. Virtual coins have no real-world value and cannot be exchanged for money. Subscription records are processed solely to deliver fictional in-game currency and manage your account preferences within RocketBox Social Casino.

11. Marketing Communications

We send promotional emails and newsletters only with your explicit consent. Each message includes an unsubscribe link. You may opt out at any time through the link or by contacting us directly. Opting out of marketing does not affect essential service communications related to your account or legal notices.

12. Children's Privacy

RocketBox Social Casino is strictly for adults aged 18 and over. We do not knowingly collect personal data from minors. Parents and guardians who believe a minor has provided data should contact us immediately so we can take appropriate action, including account termination and data deletion.

13. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on users. Leaderboard rankings and game recommendations are based on gameplay activity within the platform and do not affect your rights outside the social casino environment.

14. Changes to This Policy

We reserve the right to update this Privacy Policy periodically. Significant changes will be communicated through a prominent notice on the site or by email where applicable. The date of the last update is shown at the top of this page.

15. Contact

For privacy and data protection questions, contact us: