Privacy Policy

1. Introduction

Vikingrush Oy ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our social casino services, in compliance with the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act.

2. Data Controller

3. Information We Collect

3.1 Information You Provide

• Account Information: Name, email address, age verification status
• Contact Information: Information submitted through contact forms
• Communication Data: Messages and correspondence with our support team

3.2 Automatically Collected Information

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent, click patterns, game interactions
• Cookies and Tracking: As described in our Cookie Policy

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: For marketing communications, analytics, and optional features (GDPR Art. 6(1)(a))
• Legitimate Interest: For service improvement, security, and essential operations (GDPR Art. 6(1)(f))
• Legal Obligation: For age verification and compliance with Finnish gambling regulations (GDPR Art. 6(1)(c))
• Contract Performance: For providing requested services and support (GDPR Art. 6(1)(b))

5. How We Use Your Information

• Provide and maintain our social casino services
• Verify age and legal eligibility (18+ requirement for Finland)
• Process contact form submissions and provide customer support
• Improve our services through analytics (with your consent)
• Ensure platform security and prevent fraud
• Comply with legal obligations and regulatory requirements
• Send service-related communications

6. Data Sharing and Third Parties

We do not sell your personal data. We may share information with:

• Service Providers: Analytics services, hosting providers (only with your consent for non-essential services)
• Legal Requirements: When required by law, court orders, or regulatory authorities
• Business Transfers: In case of merger, acquisition, or sale of business assets

Consent-Based Loading: Non-essential third-party services (analytics, marketing) are loaded only after you provide explicit consent through our cookie preferences.

7. Data Retention

• Account Data: Retained while your account is active, plus 3 years for legal compliance
• Contact Inquiries: Retained for 2 years to provide ongoing support
• Technical Logs: Retained for 12 months for security and service improvement
• Marketing Data: Retained until consent is withdrawn

8. Your Privacy Rights (GDPR)

Under GDPR, you have the following rights:

• Access (Art. 15): Request a copy of your personal data
• Rectification (Art. 16): Correct inaccurate or incomplete data
• Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
• Restriction (Art. 18): Limit how we process your data
• Data Portability (Art. 20): Receive your data in a machine-readable format
• Object (Art. 21): Object to processing based on legitimate interest
• Withdraw Consent: Withdraw consent for consent-based processing at any time

To exercise your rights, contact us at privacy@vikingrush.com. We will respond within 30 days.

9. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. Our approach:

• Strictly Necessary Cookies: Always enabled for core functionality
• Analytics Cookies: Loaded only with your explicit consent
• Marketing Cookies: Loaded only with your explicit consent

Learn more in our detailed Cookie Policy and manage your preferences through our cookie settings.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Incident response procedures

11. International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or Standard Contractual Clauses.

12. Children's Privacy

Our services are not intended for individuals under 18 years old. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us immediately at privacy@vikingrush.com.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes through our website or email communications. The updated policy will include the revision date.

14. Supervisory Authority

If you have concerns about our data processing practices, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman:

15. Contact Information

For privacy-related questions, to exercise your rights, or to contact our Data Protection Officer: