Privacy Policy

Last updated: 07 May 2026

Definitions and Terminology

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below.

Personal Data means any information relating to an identified or identifiable natural person, including information provided during account registration, interaction with the Website, communication with support, or technical usage of the platform, where such information may directly or indirectly identify a User.

Company, "we", "us", or "our" refers to NEURALWAVES INTERACTIVE LTD, a company incorporated in England and Wales, acting as the data controller in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.

User means any individual who accesses, visits, or uses the Website, whether registered or not, including those who engage with entertainment game features or acquire WaveCoins for use within the platform.

Account means a personal user account created on the Website which enables access to enhanced functionality, including participation in entertainment features, tracking of activity, and storage of WaveCoins balances.

Website means the online platform operated by the Company at https://ryeandbutter.com/ through which Users access entertainment games, account features, support services, and related digital content.

WaveCoins means digital units made available to Users exclusively for entertainment gameplay within the Website. WaveCoins are not money, are not electronic money, do not represent prepaid value, have no real-world value or monetary equivalent, cannot be withdrawn or exchanged, and automatically expire twelve (12) months after allocation or purchase.

Gameplay Data means information generated as a result of a User's interaction with entertainment games and features available on the Website.

Technical and Device Data means information automatically collected when a User accesses or uses the Website, including IP address, browser type, device identifiers, operating system, access timestamps, and basic log information.

1. Introduction

The Company acknowledges the importance of protecting the privacy and personal data of individuals who access and use its online entertainment platform. The Company is committed to ensuring that Personal Data is processed in a lawful, fair, and transparent manner and that appropriate technical and organisational measures are implemented to protect its confidentiality, integrity, and security.

This Privacy Policy describes how Personal Data is collected, used, disclosed, and retained in connection with the Website operated by the Company. The Website offers a free-to-play social casino experience, providing Entertainment Games that simulate casino-style mechanics through the use of internal digital units known as WaveCoins. WaveCoins operate within a closed-loop system and have no function outside the Website. The platform does not provide gambling services, does not involve betting or wagering, does not enable withdrawals or cash-out, and does not offer any prizes, rewards, or outcomes of monetary value or money's worth.

NEURALWAVES INTERACTIVE LTD is a company incorporated and operating under the laws of England and Wales. For the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018, the Company acts as the data controller and determines the purposes and means of processing Personal Data collected via the Website and related communication channels.

This Privacy Policy applies to all Users of the Website, whether registered or unregistered, and covers the processing of Personal Data in connection with account registration, participation in Entertainment Games, acquisition and use of WaveCoins for in-platform entertainment purposes, technical interaction with the Website, and communications with the Company's support function.

2. Categories of Personal Data We Collect

The Company collects and processes only the Personal Data that is necessary for the operation of the Website and the provision of Entertainment Games. The scope of data collection is limited to what is required to ensure functionality, user access, and platform integrity, and does not extend to financial or identity verification purposes.

Identification and Account Data

Information provided directly by a User when creating an Account, including a username, email address, and login credentials. The Company does not request or collect official identification documents or financial identity information. The data collected is used solely to enable account access and basic platform functionality.

Age Declaration Data

Confirmation provided by the User that they meet the minimum age requirement of eighteen (18) years. The Company relies on self-declaration and does not carry out identity verification or request documentary proof of age. Age confirmation is used exclusively to restrict access to the entertainment service and is not used for regulatory or verification purposes.

Gameplay and Digital Units Data

Information generated through a User's interaction with Entertainment Games and related features, including session activity, progression, virtual balances of WaveCoins, allocation, usage, expiration, and in-game actions. This data is used solely to operate and maintain the internal game environment.

Purchase and Transaction Reference Data

Limited transaction-related information such as references, timestamps, amounts, and payment status, which is required to enable the allocation of WaveCoins and maintain accurate internal records. The Company does not store full payment card details or sensitive authentication data, as such information is processed directly by third-party payment providers.

Support and Communication Data

Information submitted by Users when contacting the Company, including contact details, message content, and correspondence history. This data is used to respond to inquiries, resolve issues, and maintain service quality.

Technical and Device Data

Information automatically collected when the Website is accessed, including IP address, browser type, device identifiers, operating system, access timestamps, and system logs. This data is processed to ensure platform security, detect and prevent misuse, maintain system performance, and diagnose technical issues. It is not used for behavioural advertising, tracking, or commercial profiling.

The Company does not knowingly collect Personal Data from individuals under the age of eighteen (18). The Company does not collect or process special category data, biometric data, or precise location data, and does not use Personal Data for automated decision-making or profiling activities.

3. Purposes of Processing Personal Data

The Company processes Personal Data only for specific, explicit, and legitimate purposes that are directly related to the operation of the Website and the provision of Entertainment Games. Personal Data is used to enable Users to access and use the Website, create and manage Accounts, participate in entertainment features, and obtain and use WaveCoins within the platform.

Personal Data is further processed to support the purchase, allocation, use, and expiration of WaveCoins as digital units used solely for in-platform entertainment purposes. The Company also processes Personal Data to ensure the security, stability, and proper functioning of the Website, including monitoring system performance, detecting and preventing misuse, and maintaining the integrity of the platform.

In addition, Personal Data is used to enforce age restrictions and to ensure that access to the Website is limited to individuals who have confirmed that they are at least eighteen (18) years old. The Company may also process Personal Data to respond to user inquiries, provide support services, and handle complaints or requests submitted through the Website.

Where required, Personal Data may be processed to comply with applicable legal, regulatory, or statutory obligations.

The Company does not process Personal Data for the purpose of providing gambling services, facilitating betting or wagering, offering financial returns, or enabling any activity involving money or money's worth. Personal Data is not used for behavioural advertising, commercial profiling, automated decision-making, or any form of financial or identity verification.

4. Data Retention

The Company retains Personal Data only for the period necessary to fulfil the purposes for which it was collected, to operate the Website and provide Entertainment Games, and to comply with applicable legal, regulatory, and record-keeping requirements. Retention periods are limited to what is appropriate for the operation of a non-financial, entertainment-only service.

WaveCoins allocated or acquired within the Website expire automatically twelve (12) months after allocation or purchase. Following expiration, any associated balances are removed or made inaccessible within the platform.

Support and communication data is retained for a period not exceeding six (6) years from the date of the last interaction, unless a longer retention period is required under applicable law or for the resolution of disputes.

At the end of the applicable retention period, Personal Data is securely deleted, anonymised, or otherwise permanently rendered inaccessible using appropriate technical and organisational measures.

The Company does not retain Personal Data for ongoing monitoring, profiling, or financial assessment purposes.

5. Legal Basis for Processing Personal Data

The Company processes Personal Data only where a lawful basis exists under the UK General Data Protection Regulation and the Data Protection Act 2018. Such processing is necessary to operate the Website, provide access to Entertainment Games, manage Accounts, and enable the use of WaveCoins within the platform.

Processing may also be based on the Company's legitimate interests, including maintaining platform security, preventing misuse, enforcing platform rules, and ensuring the proper functioning of the Website. In certain cases, Personal Data is processed to comply with legal and regulatory obligations. Where applicable, the Company may rely on User consent, which may be withdrawn at any time.

6. Data Subject Rights

Users have rights in relation to their Personal Data under applicable data protection laws. These rights include access to Personal Data, correction of inaccurate or incomplete information, deletion of data, restriction or objection to processing, and data portability where applicable.

Users also have the right to lodge a complaint with the Information Commissioner's Office.

Requests to exercise these rights may be submitted using the contact details provided in this Privacy Policy, and will be handled in accordance with applicable legal requirements.

7. Disclosure of Personal Data

The Company may disclose Personal Data only in limited and clearly defined circumstances where such disclosure is necessary for the operation of the Website or required by law. Personal Data may be shared with trusted third-party service providers that support the technical infrastructure, security, and administration of the platform. Where payments are processed, limited transaction-related information may be shared with payment service providers strictly to enable transaction completion and confirmation.

Personal Data may also be disclosed to professional advisers where this is necessary for legal, compliance, or operational purposes, as well as to competent authorities where disclosure is required or permitted under applicable law.

The Company does not sell, rent, or otherwise use Personal Data for commercial exploitation. Personal Data is not shared for advertising, behavioural targeting, profiling, or any marketing-related purposes.

8. International Data Transfers

In the course of operating the Website, Personal Data may be transferred to and processed in jurisdictions outside the United Kingdom where this is necessary for service delivery. Where such transfers take place to countries that are not subject to an adequacy decision, the Company implements appropriate safeguards to ensure an equivalent level of data protection.

Such safeguards may include the use of Standard Contractual Clauses or other recognised legal mechanisms in accordance with the UK General Data Protection Regulation.

9. Security and Data Protection Measures

The Company applies appropriate technical and organisational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include, among others, the use of secure hosting environments, encrypted communication channels, controlled access to systems, and internal procedures governing the handling and confidentiality of data.

The Company maintains internal processes for identifying, assessing, and managing potential Personal Data breaches. Where a breach is likely to result in a risk to the rights and freedoms of individuals, the Company will take appropriate action, including notification to the Information Commissioner's Office and, where required, to affected individuals in accordance with applicable law.

10. Cookies and Technical Tools

The Website uses cookies and similar technologies solely for operational purposes, ensuring the proper and secure functioning of the platform. These tools help with session management, system security, and preventing misuse. The Company does not use cookies or similar technologies for advertising, behavioural analysis, profiling, or marketing.

The following categories of cookies may be used:

Essential Cookies: These are crucial for the functioning of the Website, enabling key features such as page navigation, access to secure areas, and preventing fraudulent activities.

Analytics and Performance Cookies: These cookies collect limited aggregated and non-identifiable information regarding Website performance and technical usage, solely for the purpose of maintaining, improving, and securing the Website. They are not used for advertising, profiling, or behavioural targeting.

Functional Cookies: These allow the Website to remember user preferences and settings, like language or region, to provide a more personalised experience.

Security and Fraud Prevention Cookies: These cookies help detect suspicious activities, assist with authentication, and safeguard the Website from unauthorized access.

Users have the option to manage or disable cookies through their browser settings. However, please note that restricting certain cookies may affect the Website's functionality, potentially limiting access to some features or services.

11. Changes to Privacy Policy

The Company reserves the right to amend this Privacy Policy from time to time to reflect changes in its practices, legal requirements, or operational needs. Any updated version will be made available on the Website and will include a revised "last updated" date.

Where required by applicable law, the Company will take reasonable steps to inform users of material changes. Continued use of the Website following the publication of an updated Privacy Policy indicates acceptance of the revised terms.

Contact Details

For any questions regarding this Privacy Policy or Personal Data, please contact:

Company name: NEURALWAVES INTERACTIVE LTD

Address: International House, 307 Cotton Exchange, Old Hall Street, Liverpool, United Kingdom, L3 9LQ

Email: support@ryeandbutter.com