Cookie Policy

1. What this policy covers

This Cookie Policy explains how Cinoslots N.V. uses cookies, local storage, session storage, IndexedDB and similar device-based identifiers (collectively "cookies") on the cinoslots.com domain and any sub-domain. It supplements the Privacy Policy and should be read together with it. By continuing to use the platform after the cookie banner is dismissed you confirm your consent to the cookie categories you have enabled in the banner.

2. What is a cookie?

A cookie is a small text file placed on your device by your browser when you visit a website. Cookies allow the site to recognise your device on later visits, keep you logged in, remember your preferences and measure how the site is used. Cookies set by cinoslots.com are "first-party"; cookies set by another domain that we have embedded (for example a payment widget or a video player) are "third-party". Cookies that expire when you close the browser are "session cookies"; cookies that persist until a fixed date are "persistent cookies".

We also use comparable technologies — local storage and session storage in the browser, IndexedDB for offline state, and cryptographic device fingerprints — for fraud-prevention purposes. Where this policy uses the word "cookie" it refers to all of these unless we say otherwise.

3. Cookie categories we use

Strictly necessary cookies

These are required for the platform to function and cannot be turned off. They include the session identifier that keeps you logged in, the CSRF token that protects every state-changing request, the consent record that remembers your cookie choices, the device fingerprint hash used to detect account takeover, and the language and currency preference cookies. The legal basis for these cookies is performance of contract and our legitimate interest in keeping the service secure; consent is not required and they are not subject to the cookie banner.

| Cookie name | Purpose | Lifetime | |---|---|---| | cino_sid | Session identifier | Session (or 30 days if "remember me") | | cino_csrf | Cross-site request forgery token | Session | | cino_consent | Records cookie consent choice | 12 months | | cino_dev | Device fingerprint hash | 12 months | | cinoslots:displayCurrency | Display-currency preference | 12 months | | cinoslots:cookieConsent | Mirror of cino_consent in localStorage | 12 months |

Performance and analytics cookies

These cookies measure how players interact with the platform so we can fix bugs, improve performance and prioritise features. They collect data in aggregate and never identify an individual player to the analytics provider. Off by default; enabled only if you tick "Analytics" in the cookie banner or click "Accept all".

| Cookie name | Set by | Purpose | Lifetime | |---|---|---|---| | _pa_uid | First-party (Plausible-style) | Anonymous device identifier | 24 hours | | _pa_session | First-party | Session start time | 30 minutes | | _pa_funnel | First-party | A/B test bucket | 24 hours |

Marketing and personalisation cookies

These cookies allow us to show relevant promotions on partner sites, measure the effectiveness of paid campaigns and personalise the offer rail in your account. They may share a hashed user identifier with advertising platforms. Off by default; enabled only if you tick "Marketing" in the cookie banner or click "Accept all".

| Cookie name | Set by | Purpose | Lifetime | |---|---|---|---| | _aff_ref | First-party | Stores affiliate referral code | 90 days | | _aff_click | First-party | Click attribution timestamp | 90 days | | __mkt_hash | First-party | Hashed user identifier shared with ad platforms | 30 days |

Third-party widgets

Some pages embed widgets that may set their own cookies. We use these only where they materially improve the user experience and we never share personal data with the provider beyond what is required to render the widget.

• Live chat (Intercom or Zendesk) — keeps your conversation open across page navigations, expires after 7 days of inactivity.
• Payment processors — embedded only on the deposit and withdrawal pages, set short-lived cookies for fraud detection.
• Customer feedback (Hotjar or equivalent) — only loaded on a 1% sample of sessions and only with marketing consent; you can opt out at any time inside the widget.

4. Managing your cookie preferences

You can change your cookie preferences at any time by clicking the "Cookies" link in the footer or by clearing the consent record from your browser, which will re-trigger the banner. Browser settings allow you to block cookies entirely, but please be aware that blocking strictly necessary cookies will prevent login and the platform will not function. Common browser instructions:

• Chrome / Edge: Settings → Privacy and security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari (macOS): Safari → Settings → Privacy
• Safari (iOS): Settings → Safari → Block All Cookies
• Brave: Settings → Shields → Cookies

Most jurisdictions also allow you to send a Global Privacy Control (GPC) signal from your browser; we honour the GPC signal as a withdrawal of consent for marketing cookies.

5. "Do Not Track" and other signals

Browser "Do Not Track" signals are not currently honoured because there is no industry consensus on their meaning. The Global Privacy Control signal, which is mandated by California regulation, is honoured as set out in Section 4. Cinoslots does not engage in cross-context behavioural advertising as defined by the CPRA and we do not "sell" personal data.

6. Changes to this policy

We may amend this policy from time to time. Material changes will be notified through an in-product banner at least seven (7) days in advance. Immaterial changes — typos, clarifications, hyperlinks — take effect immediately.

7. Contact

Questions about cookies: [email protected]. Data Protection Officer: [email protected]. Postal: Cinoslots N.V., Heelsumstraat 51, E-Commercepark Unit 102, Willemstad, Curaçao.