Privacy Policy at Spinsup Casino
This Privacy Policy explains what personal data we collect when you play at Spinsup Casino, why we collect it, who we share it with and the rights you hold over it. By registering an account on our platform you accept the practices described below.
What Data We Collect
We collect the following categories of personal data when you register, verify, deposit or play on our platform:
- Identity data: full name, date of birth, email address, phone number, residential address.
- Verification documents: government-issued ID, proof of address and proof of payment method, collected during KYC checks before your first withdrawal.
- Transaction data: deposits, withdrawals, wagering records, payment method details and wallet addresses for crypto transfers.
- Technical data: IP address, device identifiers, browser type, operating system and approximate location derived from your IP.
- Gameplay behaviour: bets placed, games played, session duration, win and loss history and bonus usage.
- Marketing preferences: your communication opt-ins, preferred channels and promotional history.
How We Use Your Data
We process your personal data to create and administer your account, run KYC identity verification before your first withdrawal, and process deposits and withdrawals. We also use gameplay and transaction data to detect fraud and bonus abuse, to monitor responsible-gambling indicators such as chase patterns and session length, and to meet legal obligations under our Curaçao licence OGL/2023/174/0082.
Where you have given consent, we use your email address and phone number to send promotions such as our Friday reload bonus and cashback offers. You can withdraw that consent at any time through your account settings or by contacting [email protected].
Our Legal Bases
Contract: we process your data to perform the agreement between you and us, covering account creation, gameplay and payouts.
Legal obligation: we retain identity and transaction records because our licence and anti-money-laundering rules require verification, reporting and record keeping.
Legitimate interest: we process technical and behavioural data to prevent fraud, secure our platform and keep gambling fair for all players.
Consent: marketing communications and non-essential cookies run only on your explicit, freely given consent, which you can withdraw at any time.
How Long We Keep It
We keep each category of data only as long as necessary for the purpose it serves. Transaction and KYC records are held for a minimum of 5 years after account closure to satisfy regulatory requirements. Identity documents are deleted within 30 days after verification is complete unless the law requires longer retention.
Marketing data is stored until you withdraw consent or ask us to delete it. Anonymised, aggregated statistics may be retained indefinitely because they no longer identify you.
| Data category | Retention period |
|---|---|
| KYC and identity documents | 5 years after account closure |
| Transaction records | 5 years after account closure |
| Gameplay history | 5 years after account closure |
| Marketing preferences | Until consent is withdrawn |
| Account data (active account) | Life of the account |
Who We Share Data With
- Payment processors handling your deposits and withdrawals, including card schemes, e-wallet providers and crypto payment gateways.
- KYC and AML verification providers who confirm your identity and screen transactions.
- The Curaçao licensing authority and other regulators when we are legally obliged to report.
- Game providers and platform hosts who receive your player identifier to deliver game sessions.
- Analytics and IT-security services that help us improve performance and block attacks.
Frequently asked questions
How do I request a copy of my data?
Email [email protected] with your request. We verify your identity and send the data within 30 days.
Can I have my account and data deleted?
Yes, you can request erasure. KYC and transaction records are kept for 5 years after closure where the law requires it, but everything else is deleted.
Do you use my data for marketing without asking?
No. Promotional emails and SMS are sent only with your consent, which you can withdraw at any time in your account settings.