Privacy Policy
Last updated: 4 October 2026
This Privacy Policy explains what information Vegas On Web ("Vegas On Web", "we", "us") collects when you play our social casino slot game, how we use and share it, how long we keep it, and the choices and rights you have. It covers every place the game runs (together, the "Game"):
- the public website vegasonweb.com;
- the Facebook canvas app, played inside Facebook;
- Facebook Instant Games, played inside Facebook and Messenger and hosted by Meta.
By using the Game you agree to this policy. If you do not agree, please do not use the Game.
Vegas On Web is a free-to-play social casino game for adults (18+). It does not offer real-money gambling, and coins and other virtual items have no cash value.
1. Information we collect
What we receive depends on how you sign in. You can link more than one sign-in method to the same account (see account linking).
Information from Google (website)
When you choose "Sign in with Google" on vegasonweb.com, Google asks for your permission and then shares
the basic profile scopes openid, email and profile. We receive:
- your Google account ID;
- your name (full name, first name and last name);
- your email address and whether Google has verified it;
- your profile picture link and your language setting (locale).
We never receive your Google password. Sign-in uses Google's authorization-code flow with PKCE: during sign-in, a one-time security value is kept in your browser's session storage and is discarded when sign-in ends.
Information from Facebook (website and Facebook canvas)
When you sign in with Facebook, and only with your permission, Facebook shares with us:
- your app-scoped Facebook user ID, your name and your profile picture (your public profile);
- your email address, if you allow it;
- the list of your Facebook friends who also play the Game, if you grant the friends permission.
We do not receive your Facebook password. We do not request your birthday, gender, location, posts or messages.
Information from Facebook Instant Games
When you play in Facebook Instant Games, Meta shares a game-scoped player ID. Where Meta allows it, Meta also shares a signed, app-scoped Facebook ID, so that if you already play Vegas On Web on Facebook you keep the same account. Instant Games follow Meta's "Zero Permissions" model: Meta does not share your name or profile picture. You get a default name such as "Player 1234", which you can change.
Account linking
If Google tells us your email address is verified, and exactly one existing Vegas On Web account has that email address, we link the Google sign-in to that account. This lets a Facebook player sign in with Google and keep their coins and progress. If Google says an email address is not verified, we do not store it on your account. An account can have several linked sign-ins (for example Google and Facebook).
Information you give us
- your display name, the name other players see, if you set or change it;
- what you send us when you contact support or ask us to delete your data.
Information created when you play
- game progress and activity: coin balance, level and experience, spins, wins, bonuses, achievements, collections, machines, settings and preferences;
- social activity inside the Game: gifts and messages sent to and received from other players, invitations and lent machines;
- purchase records: the product, amount, currency, status and the transaction ID of purchases. Payments are processed by Meta (Facebook); we never receive or store your card or bank details;
- sign-in sessions: you can be signed in on up to 5 devices or browsers at once.
Technical information
- IP address, browser type and version, device type, language, referring page or campaign, and log data such as errors, load times and timestamps;
- usage events recorded by Google Analytics on the website and the Facebook canvas (see section 6);
- cookies and similar browser storage (see section 6).
2. How we use information
| Purpose | Information used | Legal basis (where applicable) |
|---|---|---|
| Create and run your account, keep you signed in, save your progress, show your display name and picture to other players | Google, Facebook or Instant Games profile data, game data | Performing our contract with you |
| Link sign-in methods to one account so you keep your progress | Google account ID and verified email, Facebook and Instant Games IDs | Performing our contract with you |
| Social features: friends leaderboards, gifts, invitations, lending machines | Friends who play, game data | Contract; your consent to the friends permission |
| Process and verify purchases, prevent fraud, handle refunds and disputes | Purchase records, Facebook or Instant Games player ID | Contract; legal obligations; legitimate interests |
| Game notifications and reminders on Facebook (for example your daily bonus) | Facebook user ID, game data | Legitimate interests; you can turn them off |
| Keep the Game secure, fix errors, prevent cheating and abuse | Technical information, game data | Legitimate interests; legal obligations |
| Understand how the Game is played and improve it (Google Analytics) | Usage events, online identifier, technical information | Your consent in the EU/EEA, UK and Switzerland; legitimate interests elsewhere (you can turn it off) |
| Answer support requests | What you send us, account data | Contract; legitimate interests |
We do not sell your personal information. We do not use advertising cookies, we do not personalise ads, and we do not use your information for advertising profiles on other services. We do not make decisions with legal or similarly significant effects about you solely by automated means. Game outcomes are generated by our game server for entertainment.
3. Who we share information with
- Other players see your display name, profile picture (if you have one), level and the game activity the Game shows (for example leaderboards, gifts and shared machines).
- Meta (Facebook), which provides Facebook sign-in, the Facebook canvas app, Facebook Instant Games, notifications and payment processing, under Meta's own terms and privacy policy.
- Google, which provides Sign in with Google and Google Analytics, under Google's own terms and privacy policy.
- Service providers that host and operate the Game for us under contract and only on our instructions: cloud hosting and databases, and Cloudflare (content delivery and media storage).
- Authorities or others when required by law, to enforce our Terms, or to protect the rights, safety and property of our players, us or others.
- A successor if the Game or our business is sold, merged or transferred; we will tell you before your information becomes subject to a different privacy policy.
4. How long we keep information
We keep your account and game data while your account is active. If you delete your account (see section 5), we delete or irreversibly anonymise your personal information, including every linked sign-in. We keep purchase records, in a form no longer linked to your identity, for as long as tax, accounting and other laws require. Server logs are kept for a limited period for security and troubleshooting. Google Analytics cookies last up to 2 years.
5. Your choices and rights
- Delete your account: in the Game, open Settings and choose "Delete my account". You can also delete through Facebook or by emailing us. Every method gives you a confirmation code you can check on our data deletion page.
- Analytics cookies: turn them on or off at any time in the Game under Settings > "Analytics cookies", or with the "Cookie settings" link in the Game's footer.
- Remove the Game from Google at myaccount.google.com > Security > Third-party apps & services; this stops Google sharing new information with us.
- Remove the Game from Facebook at any time under Settings & privacy > Settings > Apps and websites; this stops Facebook sharing new information with us.
- Notifications: turn off Game notifications in your Facebook notification settings.
- Display name: change your name on your Google or Facebook account, or, in Facebook Instant Games, under Me > Profile > Change name.
- Access, correction and portability: ask us for a copy of your information or to correct it.
- Withdraw consent where we rely on it, and object to processing based on legitimate interests.
Depending on where you live, you may have these rights under laws such as India's Digital Personal Data Protection Act, 2023, the EU and UK General Data Protection Regulation, or US state privacy laws such as the California Consumer Privacy Act. We do not sell or "share" personal information for cross-context behavioural advertising as those terms are defined in US state laws. To exercise a right, contact us (section 11); we answer within the time the applicable law requires and may need to verify that the account is yours. You can also complain to your local data protection authority.
6. Cookies, analytics and browser storage
The Game uses a small amount of browser storage that it needs to work, and Google Analytics cookies only as described below. We do not use advertising cookies.
| Name or item | Type | Purpose | How long |
|---|---|---|---|
| Access token | Local storage (necessary) | Keeps you signed in. Signing out ends that session. | Until you sign out or the session ends |
| Settings | Local storage (necessary) | Remembers music, sound effects, spin sound and bet lines. | Until you clear it |
| Tutorial and tips | Local storage (necessary) | Remembers which tutorial steps and tips you have seen. | Until you clear it |
| Google sign-in security values | Session storage (necessary) | A one-time "state" value and PKCE code verifier that protect Sign in with Google. | Only during sign-in |
_ga, _ga_<container-id> | Cookies (analytics) | Google Analytics: distinguish visitors and sessions. | Up to 2 years |
Google Analytics
Google Analytics 4 runs on the website and the Facebook canvas app. It records page views and gameplay and usage events, for example spins, bonuses, interest in the store and completed purchases, settings changes, errors and load times, together with an online identifier. We use Google Consent Mode:
- in the EU/EEA, the UK and Switzerland, analytics cookies are off by default and are only set if you allow them;
- everywhere else, analytics cookies are on by default and you can turn them off.
You can change your choice at any time in the Game under Settings > "Analytics cookies", or with the "Cookie settings" link in the Game's footer. Google Analytics is not used for advertising or ad personalisation.
Cookies set by others
Google's and Facebook's sign-in tools, Facebook payments and Facebook Instant Games (hosted by Meta) set their own cookies under their own policies. You can clear or block cookies and storage in your browser; the Game may not work properly without the necessary items.
7. Children
The Game is intended for adults aged 18 or older (or the age of majority where you live, if higher) and is not directed at children. We do not knowingly collect information from anyone under 18. If you believe a minor has used the Game, contact us and we will delete the account.
8. Security
We protect information with measures appropriate to the risk, including encrypted connections (HTTPS), access controls, verification of signed requests from Facebook, and PKCE for Sign in with Google. No system is perfectly secure, so we cannot guarantee absolute security.
9. International transfers
We and our service providers may process information in India and in other countries, including the United States and the European Union. When we transfer personal information across borders, we use the safeguards the applicable law requires.
10. Changes to this policy
We may update this policy. We will change the "Last updated" date above and, for material changes, tell you in the Game before they apply.
11. Contact us
Questions, requests and complaints about privacy (including our grievance officer under India's Digital
Personal Data Protection Act, 2023):
Email: contact@vegasonweb.com
Operator: Ceegees Software Solutions Private Limited, 1st Floor, 87, 27th Main Rd, opp. HSR Police Station, 1st Sector, HSR Layout, Bengaluru, Karnataka 560102, India