Privacy and Cookie Policy

Introduction & Scope

Flow State Social Entertainment NZ Ltd. operates Play The Flow as a strictly free-to-play social casino environment. We respect your privacy and are committed to protecting your personal data in accordance with the New Zealand Privacy Act 2020. This comprehensive policy details precisely how we collect, store, and utilize your information when you visit the Cascade Sanctuary, ensuring transparency and control over your digital footprint.

By accessing our games, including the Cascade Reels and Vortex Wheel, you entrust us with certain non-identifiable and identifiable data necessary to run our virtual economy and maintain your Zen Milestones. We pledge to handle this data with the utmost care, prioritizing your anonymity and security over aggressive data-harvesting practices commonly found elsewhere.

Data Collection Protocols

When you enter the Sanctuary, we collect information vital to delivering a seamless social casino experience. This includes account creation data (display name, email address, secure password hash) if you choose to upgrade from a guest account. For guest players, we utilize local storage to track your virtual Aura Drops balance, ensuring uninterrupted play without requiring explicit personal details.

We automatically log device metrics, browser types, and IP addresses for security and anti-fraud purposes. Our systems record gameplay telemetry—such as bet amounts, session duration, and feature interactions (like the Fluid Combo Meter)—solely to refine game mechanics, balance virtual payouts, and ensure fair play across all social features.

Cookie Usage & Consent

Our platform employs specific digital markers (cookies) to sustain the Flow. Strictly necessary cookies are deployed immediately upon entry; these maintain your guest session, save your Aura Drops balance across reloads, and enforce our 18+ age gate constraints. Without these, the core social casino mechanics would fail to operate correctly.

We also utilize analytical cookies to understand how players navigate the Sanctuary. These track aggregated, anonymized metrics detailing which locations (like The Source Spring or Golden Cascade Terrace) are most popular. You hold the right to decline non-essential cookies via your browser settings, though doing so may disrupt your seamless navigation through the timeline of Flow Community Milestones.

Third-Party Integrations

Play The Flow is a closed ecosystem. We do not sell, trade, or otherwise externalize your personal data to third-party marketing agencies. We integrate exclusively with certified infrastructure partners required to host our static assets, deliver email support responses, and maintain server stability. These entities are legally bound by strict data processing agreements aligned with New Zealand privacy standards, ensuring your information is never leveraged outside the context of our social casino.

We provide outgoing links to Responsible Gaming resources, such as GamCare and BeGambleAware. Navigating to these external platforms subjects you to their respective privacy policies, and we encourage you to review their documentation upon entry.

Data Retention Policies

Your data remains within the Sanctuary only as long as you actively participate in the Flow. Guest account data stored in your local browser remains until cleared by the user. For registered, upgraded accounts, we retain profile data and gameplay history (including milestone achievements and Aura Drop ledger) as long as the account is active. If an account remains entirely dormant for 24 months, our automated systems securely purge identifiable information, leaving only anonymized statistical ghosts used for global RTP calculations.

Your Privacy Rights (NZ Focus)

Under the New Zealand Privacy Act 2020, you command specific rights regarding your personal information. You may request a comprehensive copy of all data Flow State Social Entertainment holds regarding your profile. You maintain the right to correct any inaccuracies, restrict certain processing activities, and request complete erasure of your account (the "Right to be Forgotten"). To execute any of these rights, contact our privacy officers via the Reach Out section.

Security Measures

The tranquility of our platform relies on robust digital walls. We enforce end-to-end TLS encryption on all data transfers, ensuring your interactions with the Cascade Reels and Vortex Wheel remain intercepted. Our databases are shielded behind enterprise-grade firewalls and subject to routine vulnerability audits. While absolute security is impossible in any digital realm, our dedication to the Zen architecture ensures your data is protected against unauthorized breaches.

Policy Updates

The flow of technology and legislation is continuous. We reserve the right to refine this Privacy and Cookie Policy to reflect new regulatory requirements or changes to our social casino mechanics. Significant adjustments will be communicated explicitly via an in-game toast notification or an email dispatch for registered users. Your continued engagement with Play The Flow following such updates signifies your acceptance of the evolved terms.